last executing test programs: 6m3.560060867s ago: executing program 3 (id=2142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty=0x2000000}, "001863718e9bf703"}}}}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000014001000900000101000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 6m2.627948484s ago: executing program 3 (id=2157): socket$kcm(0xa, 0x5, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, 0x0, 0x0, 0x5000000) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8c08, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5c2, &(0x7f0000000e00)="$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") removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', '{&:[\x00'}) 6m1.77467279s ago: executing program 3 (id=2172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x13b1da23e40bac61, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 6m1.75092073s ago: executing program 3 (id=2173): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x6, 0x1, 0x4, 0x80, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x70, &(0x7f0000000700)=""/112, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x9, 0x80000000}, 0x10, 0x27181, r1, 0x6, &(0x7f0000000400)=[0x1], &(0x7f0000000780)=[{0x1, 0x5, 0xe, 0x2}, {0x2, 0x5, 0xb, 0x8}, {0x4, 0x3, 0x4, 0x8}, {0x2, 0x3, 0xd, 0x1}, {0x1, 0x3, 0x5, 0x7}, {0x3, 0x1, 0xe, 0x8}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r1, 0x2, 0x1, 0x100, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r1}, 0x20) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r4, r2, 0x24, 0x1, r1, @void, @value=r5, @void, @void, r3}, 0x20) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) sendmsg$inet6(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 6m1.708449481s ago: executing program 3 (id=2174): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)={0x54780, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) rseq(0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000880), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, r1, 0x7) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) 6m1.389090413s ago: executing program 3 (id=2177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0xe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x2000000000c8, 0x0, 0x5, 0x0, 0x0, 0xb, 0x0, 0x20, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032900fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 5m46.288060936s ago: executing program 32 (id=2177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0xe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x2000000000c8, 0x0, 0x5, 0x0, 0x0, 0xb, 0x0, 0x20, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032900fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 5m42.523178414s ago: executing program 2 (id=2361): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, 0x0, 0x0, 0x5000000) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8c08, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5c2, &(0x7f0000000e00)="$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") removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', '{&:[\x00'}) 5m41.66962781s ago: executing program 2 (id=2371): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000090000000900000000a0000000600000003000006040000000e00000006000b0004000000ff7f00000f00000081000000100000030000000f00000002000000090000000000000804000000000000000700000dcc57be4104000000030000000300000001000000080000000500000009000000040000000f000000020000000e000000050000000b000000006130303061003000000000000000000000000000000088560047"], &(0x7f0000000680)=""/217, 0xb2, 0xd9, 0x1, 0x8, 0x10000, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e138407, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='vegas\x00', 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) iopl(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x13b1da23e40bac61, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r2}, 0x0, &(0x7f00000013c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x18, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 5m41.61785237s ago: executing program 2 (id=2372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r2], 0x1000f) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) close(r3) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r7, 0x40085503, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8000000000000000}, 0x18) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000300)={0x4, 0x0, '\x00', 0x0, &(0x7f00000002c0)}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000019002000fe800000000000000000000000000000ac1e000100000000000000000000000000000000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x144}}, 0x0) (async) fdatasync(r8) 5m41.586616141s ago: executing program 2 (id=2373): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r1, 0x25, 0x17, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) tee(r0, r0, 0xffffffff80000001, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x5ac, 0x0, r2, 0x2, '\x00', 0x0, r3, 0x3, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00cf0000e1ffff060000ec7e000000fcff0f00", @ANYRES32=r2, @ANYBLOB="fbffffff00"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000010000000300"/28], 0x50) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r7 = socket(0x10, 0x80002, 0x0) waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300290a000000030000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e0cc45703e6bb3e1c9b48f39e96c41094706e7ac92b3727fa3ce2c6623bf1e123f5faa753393a33980e50e425cd8a45d96e"], 0x44}}, 0x0) 5m41.507212842s ago: executing program 2 (id=2376): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x6, 0x1, 0x4, 0x80, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x70, &(0x7f0000000700)=""/112, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x9, 0x80000000}, 0x10, 0x27181, r2, 0x6, &(0x7f0000000400)=[0x1], &(0x7f0000000780)=[{0x1, 0x5, 0xe, 0x2}, {0x2, 0x5, 0xb, 0x8}, {0x4, 0x3, 0x4, 0x8}, {0x2, 0x3, 0xd, 0x1}, {0x1, 0x3, 0x5, 0x7}, {0x3, 0x1, 0xe, 0x8}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r2, 0x2, 0x1, 0x100, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r2}, 0x20) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r5, r3, 0x24, 0x1, r2, @void, @value=r6, @void, @void, r4}, 0x20) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) sendmsg$inet6(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100013072abd700000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000403000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000100002000000000feffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x144}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="6800000010001ffffcffffeb0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001024000040001280080001007369740034000280060008000d00000006000d0003000000080014000900000008000200ffffffff0800140000080000060011004e22000008000a00", @ANYRES32], 0x68}}, 0x400c0c0) 5m37.988504497s ago: executing program 2 (id=2417): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x6, 0x1, 0x4, 0x80, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x70, &(0x7f0000000700)=""/112, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x9, 0x80000000}, 0x10, 0x27181, r1, 0x6, &(0x7f0000000400)=[0x1], &(0x7f0000000780)=[{0x1, 0x5, 0xe, 0x2}, {0x2, 0x5, 0xb, 0x8}, {0x4, 0x3, 0x4, 0x8}, {0x2, 0x3, 0xd, 0x1}, {0x1, 0x3, 0x5, 0x7}, {0x3, 0x1, 0xe, 0x8}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r1, 0x2, 0x1, 0x100, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r1}, 0x20) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r4, r2, 0x24, 0x1, r1, @void, @value=r5, @void, @void, r3}, 0x20) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) sendmsg$inet6(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0x40) socket$netlink(0x10, 0x3, 0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="6800000010001ffffcffffeb0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001024000040001280080001007369740034000280060008000d00000006000d0003000000080014000900000008000200ffffffff0800140000080000060011004e22000008000a00", @ANYRES32], 0x68}}, 0x400c0c0) 5m37.944223188s ago: executing program 33 (id=2417): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x6, 0x1, 0x4, 0x80, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x70, &(0x7f0000000700)=""/112, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x9, 0x80000000}, 0x10, 0x27181, r1, 0x6, &(0x7f0000000400)=[0x1], &(0x7f0000000780)=[{0x1, 0x5, 0xe, 0x2}, {0x2, 0x5, 0xb, 0x8}, {0x4, 0x3, 0x4, 0x8}, {0x2, 0x3, 0xd, 0x1}, {0x1, 0x3, 0x5, 0x7}, {0x3, 0x1, 0xe, 0x8}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r1, 0x2, 0x1, 0x100, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r1}, 0x20) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r4, r2, 0x24, 0x1, r1, @void, @value=r5, @void, @void, r3}, 0x20) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) sendmsg$inet6(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0x40) socket$netlink(0x10, 0x3, 0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="6800000010001ffffcffffeb0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001024000040001280080001007369740034000280060008000d00000006000d0003000000080014000900000008000200ffffffff0800140000080000060011004e22000008000a00", @ANYRES32], 0x68}}, 0x400c0c0) 1.617244378s ago: executing program 5 (id=7117): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080)=0x24, 0x4) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 1.616827068s ago: executing program 5 (id=7118): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x6, 0x1, 0x4, 0x80, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x70, &(0x7f0000000700)=""/112, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x9, 0x80000000}, 0x10, 0x27181, r2, 0x6, &(0x7f0000000400)=[0x1], &(0x7f0000000780)=[{0x1, 0x5, 0xe, 0x2}, {0x2, 0x5, 0xb, 0x8}, {0x4, 0x3, 0x4, 0x8}, {0x2, 0x3, 0xd, 0x1}, {0x1, 0x3, 0x5, 0x7}, {0x3, 0x1, 0xe, 0x8}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r2, 0x2, 0x1, 0x100, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r2}, 0x20) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r5, r3, 0x24, 0x1, r2, @void, @value=r6, @void, @void, r4}, 0x20) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) sendmsg$inet6(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100013072abd700000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000403000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000100002000000000feffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"/237, @ANYRES32=0x0, @ANYBLOB="02000000"], 0x144}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="6800000010001ffffcffffeb0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001024000040001280080001007369740034000280060008000d00000006000d0003000000080014000900000008000200ffffffff0800140000080000060011004e22000008000a00", @ANYRES32], 0x68}}, 0x400c0c0) 1.494074549s ago: executing program 5 (id=7125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r1, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x81, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5aa, &(0x7f0000001940)="$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") mkdir(&(0x7f00000001c0)='.\x00', 0x10c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff1811", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x840000000002, 0x3, 0xff) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) sendmmsg$inet(r8, &(0x7f0000006980)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="30000000000f00000000000007000000891f89ac1414bbac14149aac1414aae0000000001414bbac1414bbac1414aa00"], 0x30}}], 0x1, 0x40) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") 1.084019392s ago: executing program 4 (id=7144): creat(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(r0, &(0x7f0000000080)='.\x00', 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000010000000155128e45cf80c60b66418b77ace0800d6f47b762cc6132d0e000000000000000000"], 0x48) unshare(0x2a020480) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000400)=[{r3, 0x2c0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f6000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='mm_collapse_huge_page\x00', r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$notify(r1, 0x402, 0x0) 834.271204ms ago: executing program 4 (id=7146): ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) r0 = accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000001100)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000001200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002380)={0x17bf, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0xb, 0x10, &(0x7f0000001280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@alu={0x7, 0x0, 0x3, 0x2, 0x8, 0x100, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001300)='GPL\x00', 0x7, 0x1000, &(0x7f0000001340)=""/4096, 0x41000, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002340)={0x2, 0x8, 0x6, 0x3}, 0x10, r1, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000023c0)=[{0x0, 0x1, 0x5, 0x4}, {0x2, 0x1, 0xb, 0x6}], 0x10, 0x9, @void, @value}, 0x94) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f00000024c0)={0x67}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002600)={&(0x7f0000002500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@const={0xf, 0x0, 0x0, 0xa, 0x2}, @ptr={0x2, 0x0, 0x0, 0x2, 0x3}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @ptr={0xe}, @const={0xd, 0x0, 0x0, 0xa, 0x2}, @enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x8}]}]}}, 0x0, 0x6a, 0x0, 0x1, 0x0, 0x10000, @value}, 0x28) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000002640), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004081) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000002780)=0x8e, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x7, 0x100010, 0xffffffffffffffff, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000027c0)='./file0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000002840)={0xa, 0x4e24, 0xc, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) execveat(0xffffffffffffffff, &(0x7f00000028c0)='./file0\x00', &(0x7f0000002a80)={[&(0x7f0000002900)='/proc/self/net/pfkey\x00', &(0x7f0000002940)='/dev/ptmx\x00', &(0x7f0000002980)='GPL\x00', &(0x7f00000029c0)='],#*-\x00', &(0x7f0000002a00)='\x00', &(0x7f0000002a40)=',:#}\x00']}, &(0x7f0000002c40)={[&(0x7f0000002ac0)='GPL\x00', &(0x7f0000002b00)='syztnl2\x00', &(0x7f0000002b40)='\x00', &(0x7f0000002b80)='syztnl2\x00', &(0x7f0000002bc0)='\x00', &(0x7f0000002c00)=')\\*%}/)\a)@\\#\x00']}, 0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002c80)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000002cc0)={'veth0_to_bridge\x00', {0x2, 0x4e20, @local}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fallocate(r3, 0x8, 0xff, 0x5) 833.547474ms ago: executing program 4 (id=7148): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x4) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync_file_range(0xffffffffffffffff, 0xffff, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r4, 0x0, 0x8}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0xffffffff, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000300010f"], 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xbe69ae51be7b2c52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) 652.763345ms ago: executing program 0 (id=7154): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x200001}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014"], 0x104}}, 0x40000) 633.837075ms ago: executing program 5 (id=7155): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x7, 0x12) r2 = socket$packet(0x11, 0x2, 0x300) io_setup(0x81, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 572.965926ms ago: executing program 0 (id=7156): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) 508.049636ms ago: executing program 0 (id=7158): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0x8}, 0x18) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0xffffffff, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000300010f"], 0x8) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xbe69ae51be7b2c52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 504.427766ms ago: executing program 1 (id=7159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)='F', 0x1}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000180)='%-5lx \x00'}, 0x1e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000780)="1aeed115554793685c649e6a0905c0d9fc28a354a7646ec2612da59362fd25f2bf1d259e327822c197832057ceb626ed71875d9af8451021a2087e8edd50f8651e8d9f700b019466dc6f61e014d101435736e52e10cd715507b1cda16a53a05b80ec0edd56d8c661b84100f17f8b8b32c5ccc7180c94d4e7a640af71745e0b7a13b9593822a159089427f27e1b1cfd3cc6cd066d34a5f3b886242082e624ac6919e8a7fe3045d3cd03d223eddd91b040acc40846251da9f963f13f7fb52bf1e7e6eb68ee19cb54", 0xc7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x7232b1b0}, 0x18) r8 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000e53889bc6f895c4f6b6541ba0e640eb6c54ed05e942fedcd24769c08796ae8d37557b644b7216b55abb04c5be6e90746ab1084580ff57618dce471005c797e4e632fe4ed723395cf1cf223533f94e40e02cfbbcfddeac800d24408adb71f571139d3774e37b780fd91d31b49c23c05", @ANYRESDEC, @ANYBLOB="0000000000715188a0314aaf3d07c832eb27a600000000000000000000004c44f6f6053df21c616e2b723d4c581be1c81a60d385f6cbf4dd2c05770cdb19a755928be1ee59df18b66250ead65033429460e13d4d232b6a62131bb6f2b1e237db4cd6406d4d6951dcc718f605b2000000004df5ec74e72a6ff63d96d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000008000"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r9}, 0x10) 472.497467ms ago: executing program 4 (id=7161): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00d9410ae7c748e3cf66b9a323410100010000000000ddcd000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e1\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 452.997407ms ago: executing program 1 (id=7162): creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(r0, &(0x7f0000000080)='.\x00', 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000010000000155128e45cf80c60b66418b77ace0800d6f47b762cc6132d0e000000000000000000"], 0x48) unshare(0x2a020480) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000400)=[{r3, 0x2c0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f6000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='mm_collapse_huge_page\x00', r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$notify(r1, 0x402, 0x0) 388.914177ms ago: executing program 6 (id=7163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x2e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x2, &(0x7f0000000900)=r6, 0x4) flock(0xffffffffffffffff, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x1) flock(r8, 0x2) dup3(r8, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 372.016708ms ago: executing program 1 (id=7164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r0) 319.206948ms ago: executing program 1 (id=7165): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000000)="489a198f5ceca5eddaa68b6eba4c71ba85459c9d8c13829a7356d87dcaa38cba52a56905de6433c874e0516160af95f8127209f9f13a1b26b1c498045b26b0d60a503205971862bf9abab3f5ebbc82d4e6e11fd74fdf51e2bf01b54654db7b1310d2a8d753aeaa58328ce2ea327773d64bf6cc6f01d4a96fb90180ad6ce28f0af9", &(0x7f00000002c0)=""/50}, 0x20) 277.765218ms ago: executing program 0 (id=7166): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x200001}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014"], 0x104}}, 0x40000) 275.466268ms ago: executing program 5 (id=7167): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 223.172469ms ago: executing program 6 (id=7168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) 220.799229ms ago: executing program 4 (id=7169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x200}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) unshare(0x2c040000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) close(r4) 212.520428ms ago: executing program 6 (id=7170): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0x8}, 0x18) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0xffffffff, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000300010f"], 0x8) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xbe69ae51be7b2c52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) 206.869968ms ago: executing program 1 (id=7171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r0) 158.980699ms ago: executing program 5 (id=7172): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x4) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync_file_range(0xffffffffffffffff, 0xffff, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r4, 0x0, 0x8}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0xffffffff, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000300010f"], 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xbe69ae51be7b2c52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) 134.785439ms ago: executing program 0 (id=7173): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x6, 0x1, 0x4, 0x80, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x70, &(0x7f0000000700)=""/112, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x9, 0x80000000}, 0x10, 0x27181, r2, 0x6, &(0x7f0000000400)=[0x1], &(0x7f0000000780)=[{0x1, 0x5, 0xe, 0x2}, {0x2, 0x5, 0xb, 0x8}, {0x4, 0x3, 0x4, 0x8}, {0x2, 0x3, 0xd, 0x1}, {0x1, 0x3, 0x5, 0x7}, {0x3, 0x1, 0xe, 0x8}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r2, 0x2, 0x1, 0x100, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r2}, 0x20) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r5, r3, 0x24, 0x1, r2, @void, @value=r6, @void, @void, r4}, 0x20) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) sendmsg$inet6(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100013072abd700000000000ffffffff000000000000000000000000ac1e000100000000000000000000000000000403000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000100002000000000feffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x144}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="6800000010001ffffcffffeb0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000001024000040001280080001007369740034000280060008000d00000006000d0003000000080014000900000008000200ffffffff0800140000080000060011004e22000008000a00", @ANYRES32], 0x68}}, 0x400c0c0) 109.036569ms ago: executing program 6 (id=7174): creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(r0, &(0x7f0000000080)='.\x00', 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000010000000155128e45cf80c60b66418b77ace0800d6f47b762cc6132d0e000000000000000000"], 0x48) unshare(0x2a020480) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000400)=[{r3, 0x2c0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f6000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='mm_collapse_huge_page\x00', r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$notify(r1, 0x402, 0x0) 98.06664ms ago: executing program 1 (id=7175): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000800000000000000000000000231e665c1030a3636bdc7f95f7e0f7ed1c9cb8df42627ea14663bc37c2371a894cb1fba0be61af7409b4e7fcd36a286000d81fcea97eb127780eec750ac0ffe10089e6a5bf69160029a635337f5d0432f92ac18a1532581b53abebdff92008a2340dffb6db9eb160c3f9259185c13983"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x10000002}, 0x18) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x4070bd28, 0x0, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 74.87075ms ago: executing program 4 (id=7176): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0x8}, 0x18) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0xffffffff, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000300010f"], 0x8) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xbe69ae51be7b2c52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 29.89463ms ago: executing program 6 (id=7177): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 7.3669ms ago: executing program 0 (id=7178): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x80, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x800}, 0x100040, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x8) (async) syz_open_procfs(0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) (async) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r2 = dup(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000d28334133b160ab40d51f526e832009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xc5bf) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x8, 0x32e]}}]}]}, 0x54}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_MCE_KILL_GET(0x22) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (rerun: 64) r8 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r9 = dup(r8) getpid() (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xe501, 0x3, 0x230, 0x0, 0xa, 0x1000000, 0x0, 0x0, 0x198, 0x230, 0x230, 0x198, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xffffffff, 'ip6_vti0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x6e, 0x0, 0x24}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@multicast2, @rand_addr, 0x0, 0xffffffff, 'vxcan1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x1d}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x5, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x589b, 0x6, 0x0, 'syz1\x00', 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) (async, rerun: 32) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='netlink_extack\x00', r10}, 0xb) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 6 (id=7179): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000100fdffffff0000000002350000", @ANYRES32, @ANYBLOB="14000300766574683000fe00"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): to FAT (entry 0x00000100) [ 580.332143][T22187] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 580.341525][T22187] syz.4.6224: attempt to access beyond end of device [ 580.341525][T22187] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 580.355219][T22187] syz.4.6224: attempt to access beyond end of device [ 580.355219][T22187] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 580.581681][T22202] loop4: detected capacity change from 0 to 1024 [ 580.589966][T22202] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 580.611174][T22202] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 580.619423][T22202] System zones: 0-1, 3-36 [ 580.624031][T22202] EXT4-fs (loop4): orphan cleanup on readonly fs [ 580.633223][T22202] EXT4-fs (loop4): 1 orphan inode deleted [ 580.639679][T22202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 580.887001][T22229] loop6: detected capacity change from 0 to 164 [ 580.898812][T22231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.907508][T22231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.907925][T20896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.936761][T22233] loop1: detected capacity change from 0 to 128 [ 580.945916][T22233] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 580.953817][T22233] FAT-fs (loop1): Filesystem has been set read-only [ 580.960585][T22233] syz.1.6245: attempt to access beyond end of device [ 580.960585][T22233] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 580.974570][T22233] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 580.982430][T22233] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 580.990557][T22233] syz.1.6245: attempt to access beyond end of device [ 580.990557][T22233] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 581.004019][T22233] syz.1.6245: attempt to access beyond end of device [ 581.004019][T22233] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 581.143100][T22242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.151622][T22242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.181268][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6247'. [ 581.190222][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6247'. [ 581.397416][T20616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.611975][T22250] loop6: detected capacity change from 0 to 1024 [ 581.619711][T22250] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 581.631685][T22250] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 581.642137][T22250] System zones: 0-1, 3-36 [ 581.646838][T22250] EXT4-fs (loop6): orphan cleanup on readonly fs [ 581.660488][T22250] EXT4-fs (loop6): 1 orphan inode deleted [ 581.673013][T22250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 581.757783][T22253] lo speed is unknown, defaulting to 1000 [ 581.808907][T22253] chnl_net:caif_netlink_parms(): no params data found [ 581.845461][T22253] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.852770][T22253] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.860015][T22253] bridge_slave_0: entered allmulticast mode [ 581.866663][T22253] bridge_slave_0: entered promiscuous mode [ 581.877393][ T1758] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.890187][T22253] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.897362][T22253] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.905758][T22253] bridge_slave_1: entered allmulticast mode [ 581.914118][T22253] bridge_slave_1: entered promiscuous mode [ 581.931604][T22253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.941681][ T1758] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.953772][T22253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.984988][T22253] team0: Port device team_slave_0 added [ 581.999028][ T1758] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.012102][T22253] team0: Port device team_slave_1 added [ 582.033322][T22253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.040399][T22253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.066423][T22253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.079666][T22253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.086674][T22253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.112752][T22253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.128613][ T1758] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.161540][T22253] hsr_slave_0: entered promiscuous mode [ 582.167866][T22253] hsr_slave_1: entered promiscuous mode [ 582.174164][T22253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.181890][T22253] Cannot create hsr debugfs directory [ 582.224350][ T1758] bridge_slave_1: left allmulticast mode [ 582.230152][ T1758] bridge_slave_1: left promiscuous mode [ 582.235884][ T1758] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.243759][ T1758] bridge_slave_0: left allmulticast mode [ 582.249447][ T1758] bridge_slave_0: left promiscuous mode [ 582.255128][ T1758] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.343482][ T1758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.369389][ T1758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.392636][ T1758] bond0 (unregistering): Released all slaves [ 582.412577][ T1758] bond1 (unregistering): Released all slaves [ 582.419366][T22287] siw: device registration error -23 [ 582.423245][ T1758] bond2 (unregistering): Released all slaves [ 582.435695][ T1758] bond3 (unregistering): Released all slaves [ 582.444762][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.446079][ T1758] bond4 (unregistering): Released all slaves [ 582.464133][ T1758] bond5 (unregistering): Released all slaves [ 582.473645][ T1758] bond6 (unregistering): Released all slaves [ 582.483215][ T1758] bond7 (unregistering): Released all slaves [ 582.492328][ T1758] bond8 (unregistering): Released all slaves [ 582.509537][T22287] IPv6: sit1: Disabled Multicast RS [ 582.528837][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6262'. [ 582.537844][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6262'. [ 582.563360][ T1758] hsr_slave_0: left promiscuous mode [ 582.572245][ T1758] hsr_slave_1: left promiscuous mode [ 582.584874][ T1758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.592582][ T1758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.605774][T22296] loop4: detected capacity change from 0 to 164 [ 582.622151][ T1758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.623732][T22297] siw: device registration error -23 [ 582.629660][ T1758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.644684][ T1758] veth1_macvtap: left promiscuous mode [ 582.650304][ T1758] veth0_macvtap: left promiscuous mode [ 582.655933][ T1758] veth1_vlan: left promiscuous mode [ 582.661489][ T1758] veth0_vlan: left promiscuous mode [ 582.749248][T22297] IPv6: sit1: Disabled Multicast RS [ 582.881330][T22305] loop5: detected capacity change from 0 to 128 [ 582.931918][T22305] syz.5.6267: attempt to access beyond end of device [ 582.931918][T22305] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 582.976926][T22311] loop5: detected capacity change from 0 to 512 [ 582.984023][T22311] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 582.986905][T22253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 582.994300][T22311] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 583.007914][T22311] syz.5.6269: attempt to access beyond end of device [ 583.007914][T22311] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 583.010257][T22253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 583.021206][T22311] EXT4-fs (loop5): couldn't read superblock of external journal [ 583.037807][T22253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 583.046906][T22253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 583.141243][T22317] siw: device registration error -23 [ 583.152475][T22317] IPv6: sit1: Disabled Multicast RS [ 583.168499][T22253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.210254][T22253] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.220442][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.227595][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.247414][T21263] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.254571][T21263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.301320][T22324] rdma_op ffff888117d3e180 conn xmit_rdma 0000000000000000 [ 583.319690][T22253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.390599][T22253] veth0_vlan: entered promiscuous mode [ 583.401337][T22253] veth1_vlan: entered promiscuous mode [ 583.416211][T22334] loop1: detected capacity change from 0 to 512 [ 583.472606][T22334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.485341][T22334] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 583.506012][T22253] veth0_macvtap: entered promiscuous mode [ 583.543873][T22253] veth1_macvtap: entered promiscuous mode [ 583.584950][T22343] loop6: detected capacity change from 0 to 128 [ 583.594619][T22253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.605155][T22253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.615014][T22253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.625570][T22253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.635471][T22253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.645952][T22253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.655814][T22253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.666349][T22253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.733272][T22253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.767588][T22253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.778242][T22253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.788144][T22253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.798928][T22253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.808768][T22253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.819254][T22253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.829190][T22253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.839742][T22253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.922999][T22253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.955731][T22253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.964686][T22253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.973501][T22253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.982292][T22253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.154089][ T30] kauditd_printk_skb: 1063 callbacks suppressed [ 584.154106][ T30] audit: type=1326 audit(1741751091.106:27026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.4.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b18ba4127 code=0x7ffc0000 [ 584.189718][T22369] loop6: detected capacity change from 0 to 164 [ 584.215429][T22370] rdma_op ffff8881209a5980 conn xmit_rdma 0000000000000000 [ 584.222971][ T30] audit: type=1326 audit(1741751091.156:27027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.4.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b18b49359 code=0x7ffc0000 [ 584.246837][ T30] audit: type=1326 audit(1741751091.156:27028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.4.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b18ba4127 code=0x7ffc0000 [ 584.270462][ T30] audit: type=1326 audit(1741751091.156:27029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.4.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b18b49359 code=0x7ffc0000 [ 584.293979][ T30] audit: type=1326 audit(1741751091.156:27030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.4.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 584.317698][ T30] audit: type=1326 audit(1741751091.156:27031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.4.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b18ba4127 code=0x7ffc0000 [ 584.341355][ T30] audit: type=1326 audit(1741751091.156:27032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.4.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b18b49359 code=0x7ffc0000 [ 584.364935][ T30] audit: type=1326 audit(1741751091.156:27033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.4.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 584.388556][ T30] audit: type=1326 audit(1741751091.166:27034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.4.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b18ba4127 code=0x7ffc0000 [ 584.412254][ T30] audit: type=1326 audit(1741751091.166:27035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22340 comm="syz.4.6276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b18b49359 code=0x7ffc0000 [ 584.469664][T22372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6287'. [ 584.542496][T22374] loop4: detected capacity change from 0 to 512 [ 584.563575][T22374] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 584.572593][T22374] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 584.583529][T22374] syz.4.6289: attempt to access beyond end of device [ 584.583529][T22374] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 584.601601][T22374] EXT4-fs (loop4): couldn't read superblock of external journal [ 584.850864][T20896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.868872][T22389] FAULT_INJECTION: forcing a failure. [ 584.868872][T22389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.882133][T22389] CPU: 0 UID: 0 PID: 22389 Comm: syz.1.6294 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 584.882159][T22389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 584.882172][T22389] Call Trace: [ 584.882193][T22389] [ 584.882202][T22389] dump_stack_lvl+0xf2/0x150 [ 584.882234][T22389] dump_stack+0x15/0x1a [ 584.882255][T22389] should_fail_ex+0x24a/0x260 [ 584.882292][T22389] should_fail+0xb/0x10 [ 584.882353][T22389] should_fail_usercopy+0x1a/0x20 [ 584.882409][T22389] _copy_from_user+0x1c/0xa0 [ 584.882433][T22389] memdup_user+0x64/0xc0 [ 584.882464][T22389] strndup_user+0x68/0xa0 [ 584.882568][T22389] __se_sys_mount+0x4e/0x2d0 [ 584.882667][T22389] ? fput+0x1c4/0x200 [ 584.882743][T22389] ? ksys_write+0x176/0x1b0 [ 584.882777][T22389] __x64_sys_mount+0x67/0x80 [ 584.882812][T22389] x64_sys_call+0x2c84/0x2dc0 [ 584.882995][T22389] do_syscall_64+0xc9/0x1c0 [ 584.883035][T22389] ? clear_bhb_loop+0x55/0xb0 [ 584.883068][T22389] ? clear_bhb_loop+0x55/0xb0 [ 584.883101][T22389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.883242][T22389] RIP: 0033:0x7f492228d169 [ 584.883257][T22389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.883275][T22389] RSP: 002b:00007f49208f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 584.883293][T22389] RAX: ffffffffffffffda RBX: 00007f49224a5fa0 RCX: 00007f492228d169 [ 584.883305][T22389] RDX: 00004000000002c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 584.883320][T22389] RBP: 00007f49208f1090 R08: 0000400000000400 R09: 0000000000000000 [ 584.883335][T22389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.883349][T22389] R13: 0000000000000000 R14: 00007f49224a5fa0 R15: 00007fffd32c2bb8 [ 584.883405][T22389] [ 585.258512][T22408] loop4: detected capacity change from 0 to 128 [ 585.345434][T22408] syz.4.6303: attempt to access beyond end of device [ 585.345434][T22408] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 585.441293][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6313'. [ 585.450310][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6313'. [ 585.463386][T22432] loop4: detected capacity change from 0 to 512 [ 585.475929][T22432] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 585.484815][T22432] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 585.495222][T22432] syz.4.6314: attempt to access beyond end of device [ 585.495222][T22432] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 585.508193][T22432] EXT4-fs (loop4): couldn't read superblock of external journal [ 585.590730][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6316'. [ 585.599788][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6316'. [ 585.656623][T22447] loop4: detected capacity change from 0 to 128 [ 585.706760][T22447] syz.4.6321: attempt to access beyond end of device [ 585.706760][T22447] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 585.817088][T22455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6325'. [ 585.826159][T22455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6325'. [ 585.931783][T22462] loop1: detected capacity change from 0 to 512 [ 585.939215][T22462] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 585.947611][T22462] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 585.956447][T22462] syz.1.6328: attempt to access beyond end of device [ 585.956447][T22462] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 585.969488][T22462] EXT4-fs (loop1): couldn't read superblock of external journal [ 586.021635][T22471] loop1: detected capacity change from 0 to 128 [ 586.077107][T22471] syz.1.6332: attempt to access beyond end of device [ 586.077107][T22471] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 586.125045][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6336'. [ 586.134027][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6336'. [ 586.235621][T22492] loop5: detected capacity change from 0 to 512 [ 586.242719][T22492] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 586.251682][T22492] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 586.261005][T22492] syz.5.6341: attempt to access beyond end of device [ 586.261005][T22492] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 586.274355][T22492] EXT4-fs (loop5): couldn't read superblock of external journal [ 586.442996][T22503] loop6: detected capacity change from 0 to 1024 [ 586.459796][T22504] loop4: detected capacity change from 0 to 512 [ 586.475916][T22503] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 586.509221][T22504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.522046][T22504] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 586.556945][T22503] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 586.592426][T22503] System zones: 0-1, 3-36 [ 586.597429][T22503] EXT4-fs (loop6): orphan cleanup on readonly fs [ 586.607660][T22503] EXT4-fs (loop6): 1 orphan inode deleted [ 586.615518][T22503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 586.719596][T22513] loop5: detected capacity change from 0 to 128 [ 586.852567][T22513] syz.5.6347: attempt to access beyond end of device [ 586.852567][T22513] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 586.986803][T22515] siw: device registration error -23 [ 587.000801][T22515] IPv6: sit1: Disabled Multicast RS [ 587.133853][T22519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6350'. [ 587.142990][T22519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6350'. [ 587.364919][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.484341][T22527] loop1: detected capacity change from 0 to 512 [ 587.531920][T22527] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 587.548439][T22527] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 587.581790][T22527] syz.1.6353: attempt to access beyond end of device [ 587.581790][T22527] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 587.627472][T22527] EXT4-fs (loop1): couldn't read superblock of external journal [ 587.871423][T22539] loop6: detected capacity change from 0 to 128 [ 587.915026][T22543] IPv6: sit1: Disabled Multicast RS [ 588.038049][T22539] syz.6.6358: attempt to access beyond end of device [ 588.038049][T22539] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 588.074612][T22549] siw: device registration error -23 [ 588.102024][T22549] IPv6: sit1: Disabled Multicast RS [ 588.207381][T20616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.497090][T22575] loop6: detected capacity change from 0 to 128 [ 588.515192][T22573] IPv6: sit1: Disabled Multicast RS [ 588.554093][T22575] syz.6.6373: attempt to access beyond end of device [ 588.554093][T22575] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 588.619416][T22579] loop4: detected capacity change from 0 to 512 [ 588.626299][T22579] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 588.634925][T22579] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 588.645265][T22579] EXT4-fs (loop4): couldn't read superblock of external journal [ 588.657456][T22581] IPv6: sit1: Disabled Multicast RS [ 588.850660][T22600] IPv6: sit1: Disabled Multicast RS [ 588.872488][T22602] loop1: detected capacity change from 0 to 512 [ 588.893708][T22602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.906464][T22602] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 588.929754][T20896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.083410][T22622] loop6: detected capacity change from 0 to 1024 [ 589.092182][T22622] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 589.103536][T22622] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 589.113455][T22622] System zones: 0-1, 3-36 [ 589.119461][T22622] EXT4-fs (loop6): orphan cleanup on readonly fs [ 589.119631][T22630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.134664][T22622] EXT4-fs (loop6): 1 orphan inode deleted [ 589.135070][T22630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.149734][T22622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 589.496209][ T30] kauditd_printk_skb: 1192 callbacks suppressed [ 589.496227][ T30] audit: type=1326 audit(1741751096.446:28228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.5.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 589.530056][ T30] audit: type=1326 audit(1741751096.486:28229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.5.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 589.553935][ T30] audit: type=1326 audit(1741751096.486:28230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.5.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 589.577791][ T30] audit: type=1326 audit(1741751096.486:28231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.5.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 589.601429][ T30] audit: type=1326 audit(1741751096.486:28232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.5.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 589.625191][ T30] audit: type=1326 audit(1741751096.486:28233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.5.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 589.649086][ T30] audit: type=1326 audit(1741751096.486:28234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.5.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 589.672798][ T30] audit: type=1326 audit(1741751096.486:28235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.5.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 589.696801][ T30] audit: type=1326 audit(1741751096.486:28236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.5.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 589.720526][ T30] audit: type=1326 audit(1741751096.486:28237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz.5.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 589.860320][T22641] IPv6: sit1: Disabled Multicast RS [ 589.899474][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.996220][T22645] loop4: detected capacity change from 0 to 1024 [ 590.003704][T22645] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 590.017682][T22645] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 590.025940][T22645] System zones: 0-1, 3-36 [ 590.030835][T22645] EXT4-fs (loop4): orphan cleanup on readonly fs [ 590.048324][T22645] EXT4-fs (loop4): 1 orphan inode deleted [ 590.055744][T22645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 590.289974][T22666] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 590.350799][T22668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.359974][T22668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.540603][T22670] lo speed is unknown, defaulting to 1000 [ 590.829288][T20616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.287573][T22697] loop6: detected capacity change from 0 to 1024 [ 593.302250][T22697] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 593.451815][T22697] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 593.495759][T22697] System zones: 0-1, 3-36 [ 593.524336][T22697] EXT4-fs (loop6): orphan cleanup on readonly fs [ 593.570904][T22697] EXT4-fs (loop6): 1 orphan inode deleted [ 593.609345][T22697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 593.698776][T22714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.717368][T22714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.883418][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.948025][T22730] __nla_validate_parse: 2 callbacks suppressed [ 593.948045][T22730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6433'. [ 594.039969][T22731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=22731 comm=syz.1.6433 [ 594.244928][T22737] loop6: detected capacity change from 0 to 1024 [ 594.252093][T22737] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 594.273703][T22737] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 594.281872][T22737] System zones: 0-1, 3-36 [ 594.286898][T22737] EXT4-fs (loop6): orphan cleanup on readonly fs [ 594.295136][T22737] EXT4-fs (loop6): 1 orphan inode deleted [ 594.301402][T22737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 594.502864][ T30] kauditd_printk_skb: 432 callbacks suppressed [ 594.502882][ T30] audit: type=1326 audit(1741751101.456:28670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.4.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b18ba4127 code=0x7ffc0000 [ 594.536331][ T30] audit: type=1326 audit(1741751101.486:28671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.4.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b18b49359 code=0x7ffc0000 [ 594.560112][ T30] audit: type=1326 audit(1741751101.486:28672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.4.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b18ba4127 code=0x7ffc0000 [ 594.583742][ T30] audit: type=1326 audit(1741751101.486:28673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.4.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b18b49359 code=0x7ffc0000 [ 594.607394][ T30] audit: type=1326 audit(1741751101.486:28674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.4.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 594.631709][ T30] audit: type=1326 audit(1741751101.586:28675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.4.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b18ba4127 code=0x7ffc0000 [ 594.655286][ T30] audit: type=1326 audit(1741751101.586:28676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.4.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b18b49359 code=0x7ffc0000 [ 594.678956][ T30] audit: type=1326 audit(1741751101.586:28677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.4.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 594.714427][ T30] audit: type=1326 audit(1741751101.656:28678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.4.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b18ba4127 code=0x7ffc0000 [ 594.737989][ T30] audit: type=1326 audit(1741751101.656:28679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22724 comm="syz.4.6430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b18b49359 code=0x7ffc0000 [ 594.838251][T22758] rdma_op ffff888118238d80 conn xmit_rdma 0000000000000000 [ 594.862779][T22761] loop1: detected capacity change from 0 to 128 [ 594.932195][T22761] bio_check_eod: 1 callbacks suppressed [ 594.932214][T22761] syz.1.6444: attempt to access beyond end of device [ 594.932214][T22761] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 594.979600][T22761] syz.1.6444: attempt to access beyond end of device [ 594.979600][T22761] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 594.996083][T22761] syz.1.6444: attempt to access beyond end of device [ 594.996083][T22761] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 595.011120][T22761] syz.1.6444: attempt to access beyond end of device [ 595.011120][T22761] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 595.047994][T22761] syz.1.6444: attempt to access beyond end of device [ 595.047994][T22761] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 595.062243][T22761] syz.1.6444: attempt to access beyond end of device [ 595.062243][T22761] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 595.063871][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.075987][T22761] syz.1.6444: attempt to access beyond end of device [ 595.075987][T22761] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 595.109382][T22765] loop5: detected capacity change from 0 to 8192 [ 595.128305][T22774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.136881][T22774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.145029][T22761] syz.1.6444: attempt to access beyond end of device [ 595.145029][T22761] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 595.161286][T22761] syz.1.6444: attempt to access beyond end of device [ 595.161286][T22761] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 595.175197][T22761] syz.1.6444: attempt to access beyond end of device [ 595.175197][T22761] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 595.279274][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6452'. [ 595.288200][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6452'. [ 595.308578][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6451'. [ 595.317495][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6451'. [ 595.946641][T22789] loop1: detected capacity change from 0 to 1024 [ 595.953755][T22789] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 595.964667][T22789] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 595.972980][T22789] System zones: 0-1, 3-36 [ 595.977447][T22789] EXT4-fs (loop1): orphan cleanup on readonly fs [ 595.986058][T22789] EXT4-fs (loop1): 1 orphan inode deleted [ 595.992853][T22789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 596.120331][T22798] rdma_op ffff88811a105180 conn xmit_rdma 0000000000000000 [ 596.145764][T22801] loop5: detected capacity change from 0 to 512 [ 596.155641][T22801] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 596.164159][T22801] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 596.173965][T22801] EXT4-fs (loop5): couldn't read superblock of external journal [ 596.222846][T22805] loop4: detected capacity change from 0 to 1024 [ 596.230902][T22805] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 596.245313][T22805] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 596.255278][T22805] System zones: 0-1, 3-36 [ 596.261112][T22805] EXT4-fs (loop4): orphan cleanup on readonly fs [ 596.270050][T22805] EXT4-fs (loop4): 1 orphan inode deleted [ 596.283780][T22805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 596.524115][T22819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.532749][T22819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.717746][T22823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6469'. [ 596.728557][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6468'. [ 596.737780][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6468'. [ 596.784569][T20896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.801236][T22825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=22825 comm=syz.0.6469 [ 596.873352][T22833] IPv6: sit1: Disabled Multicast RS [ 597.054750][T20616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.899429][T22884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.955640][T22884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.135123][T22888] IPv6: sit1: Disabled Multicast RS [ 598.247012][T22897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6498'. [ 598.256059][T22897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6498'. [ 599.463887][T22926] loop6: detected capacity change from 0 to 1024 [ 599.482067][T22926] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 599.506180][T22926] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 599.525894][T22926] System zones: 0-1, 3-36 [ 599.530501][T22926] EXT4-fs (loop6): orphan cleanup on readonly fs [ 599.540830][T22926] EXT4-fs (loop6): 1 orphan inode deleted [ 599.567404][T22926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 599.594729][T22929] IPv6: sit1: Disabled Multicast RS [ 599.621810][T22933] loop1: detected capacity change from 0 to 128 [ 599.632151][T22933] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 599.640100][T22933] FAT-fs (loop1): Filesystem has been set read-only [ 599.658952][T22933] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 599.666806][T22933] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 599.683116][ T30] kauditd_printk_skb: 397 callbacks suppressed [ 599.683133][ T30] audit: type=1326 audit(1741751106.636:29077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22935 comm="syz.5.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 599.714262][ T30] audit: type=1326 audit(1741751106.636:29078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22935 comm="syz.5.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 599.738115][ T30] audit: type=1326 audit(1741751106.636:29079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22935 comm="syz.5.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 599.761729][ T30] audit: type=1326 audit(1741751106.636:29080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22935 comm="syz.5.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 599.785704][ T30] audit: type=1326 audit(1741751106.636:29081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22935 comm="syz.5.6512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 599.884050][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6515'. [ 599.893129][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6515'. [ 599.914852][ T30] audit: type=1326 audit(1741751106.856:29082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22941 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 599.938560][ T30] audit: type=1326 audit(1741751106.856:29083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22941 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 599.962306][ T30] audit: type=1326 audit(1741751106.856:29084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22941 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 599.985838][ T30] audit: type=1326 audit(1741751106.856:29085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22941 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 600.011046][ T30] audit: type=1326 audit(1741751106.856:29086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22941 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 600.104548][T22957] loop1: detected capacity change from 0 to 512 [ 600.304055][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.731724][T22964] loop4: detected capacity change from 0 to 128 [ 600.906642][T22964] bio_check_eod: 18194 callbacks suppressed [ 600.906725][T22964] syz.4.6522: attempt to access beyond end of device [ 600.906725][T22964] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 601.000403][T22957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.012995][T22957] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 601.016192][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881155b2600: rx timeout, send abort [ 601.031632][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881155b2600: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 601.092882][T22968] rdma_op ffff888114870580 conn xmit_rdma 0000000000000000 [ 601.260995][T22974] IPv6: sit1: Disabled Multicast RS [ 601.325722][T22985] FAULT_INJECTION: forcing a failure. [ 601.325722][T22985] name failslab, interval 1, probability 0, space 0, times 0 [ 601.339126][T22985] CPU: 1 UID: 0 PID: 22985 Comm: syz.4.6530 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 601.339152][T22985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 601.339169][T22985] Call Trace: [ 601.339176][T22985] [ 601.339183][T22985] dump_stack_lvl+0xf2/0x150 [ 601.339213][T22985] dump_stack+0x15/0x1a [ 601.339234][T22985] should_fail_ex+0x24a/0x260 [ 601.339267][T22985] should_failslab+0x8f/0xb0 [ 601.339369][T22985] kmem_cache_alloc_node_noprof+0x59/0x320 [ 601.339392][T22985] ? __alloc_skb+0x10b/0x310 [ 601.339420][T22985] __alloc_skb+0x10b/0x310 [ 601.339452][T22985] netlink_alloc_large_skb+0xad/0xe0 [ 601.339548][T22985] netlink_sendmsg+0x3b4/0x6e0 [ 601.339665][T22985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.339731][T22985] __sock_sendmsg+0x140/0x180 [ 601.339794][T22985] ____sys_sendmsg+0x326/0x4b0 [ 601.339864][T22985] __sys_sendmsg+0x19d/0x230 [ 601.339909][T22985] __x64_sys_sendmsg+0x46/0x50 [ 601.339938][T22985] x64_sys_call+0x2734/0x2dc0 [ 601.339964][T22985] do_syscall_64+0xc9/0x1c0 [ 601.340071][T22985] ? clear_bhb_loop+0x55/0xb0 [ 601.340168][T22985] ? clear_bhb_loop+0x55/0xb0 [ 601.340200][T22985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.340294][T22985] RIP: 0033:0x7f0b18bad169 [ 601.340312][T22985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.340347][T22985] RSP: 002b:00007f0b17217038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.340366][T22985] RAX: ffffffffffffffda RBX: 00007f0b18dc5fa0 RCX: 00007f0b18bad169 [ 601.340378][T22985] RDX: 0000000010000000 RSI: 0000400000000080 RDI: 0000000000000007 [ 601.340391][T22985] RBP: 00007f0b17217090 R08: 0000000000000000 R09: 0000000000000000 [ 601.340406][T22985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.340420][T22985] R13: 0000000000000000 R14: 00007f0b18dc5fa0 R15: 00007ffe49518a78 [ 601.340449][T22985] [ 601.546631][T22987] loop6: detected capacity change from 0 to 1024 [ 601.604700][T22987] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 601.636471][T22987] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 601.645075][T20896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.668494][T22987] System zones: 0-1, 3-36 [ 601.673154][T22987] EXT4-fs (loop6): orphan cleanup on readonly fs [ 601.699819][T22987] EXT4-fs (loop6): 1 orphan inode deleted [ 601.721555][T22987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 601.778206][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6532'. [ 601.787282][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6532'. [ 601.878696][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6536'. [ 601.887616][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6536'. [ 602.161341][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.218065][T23008] rdma_op ffff888114870580 conn xmit_rdma 0000000000000000 [ 602.321881][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6539'. [ 602.330849][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6539'. [ 602.344407][T23012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6540'. [ 602.353441][T23012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6540'. [ 602.615756][T23022] IPv6: sit1: Disabled Multicast RS [ 602.693198][T23026] loop4: detected capacity change from 0 to 1024 [ 602.700760][T23026] EXT4-fs: Ignoring removed orlov option [ 602.706516][T23026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 602.713232][T23026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 602.720130][T23026] ext4: Unknown parameter 'subj_type' [ 602.757356][T23037] rdma_op ffff88810459d980 conn xmit_rdma 0000000000000000 [ 603.518277][T23062] erspan1: entered promiscuous mode [ 603.825185][T23083] FAULT_INJECTION: forcing a failure. [ 603.825185][T23083] name failslab, interval 1, probability 0, space 0, times 0 [ 603.837877][T23083] CPU: 1 UID: 0 PID: 23083 Comm: syz.0.6567 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 603.837907][T23083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 603.837923][T23083] Call Trace: [ 603.837932][T23083] [ 603.837941][T23083] dump_stack_lvl+0xf2/0x150 [ 603.838051][T23083] dump_stack+0x15/0x1a [ 603.838077][T23083] should_fail_ex+0x24a/0x260 [ 603.838115][T23083] should_failslab+0x8f/0xb0 [ 603.838183][T23083] kmem_cache_alloc_noprof+0x52/0x320 [ 603.838209][T23083] ? audit_log_start+0x34c/0x6b0 [ 603.838247][T23083] audit_log_start+0x34c/0x6b0 [ 603.838359][T23083] audit_seccomp+0x4b/0x130 [ 603.838478][T23083] __seccomp_filter+0x6fa/0x1180 [ 603.838503][T23083] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 603.838612][T23083] ? vfs_write+0x644/0x920 [ 603.838644][T23083] __secure_computing+0x9f/0x1c0 [ 603.838706][T23083] syscall_trace_enter+0xd1/0x1f0 [ 603.838737][T23083] do_syscall_64+0xaa/0x1c0 [ 603.838772][T23083] ? clear_bhb_loop+0x55/0xb0 [ 603.838854][T23083] ? clear_bhb_loop+0x55/0xb0 [ 603.838944][T23083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.838976][T23083] RIP: 0033:0x7f5a5d62d169 [ 603.838991][T23083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.839009][T23083] RSP: 002b:00007f5a5bc97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 603.839027][T23083] RAX: ffffffffffffffda RBX: 00007f5a5d845fa0 RCX: 00007f5a5d62d169 [ 603.839060][T23083] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 603.839075][T23083] RBP: 00007f5a5bc97090 R08: 0000000000000000 R09: 0000000000000000 [ 603.839089][T23083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.839150][T23083] R13: 0000000000000000 R14: 00007f5a5d845fa0 R15: 00007fffec1c5748 [ 603.839168][T23083] [ 604.320392][T23103] loop1: detected capacity change from 0 to 512 [ 604.341047][T23103] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 604.357047][T23103] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 604.390024][T23103] syz.1.6576: attempt to access beyond end of device [ 604.390024][T23103] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 604.422030][T23103] EXT4-fs (loop1): couldn't read superblock of external journal [ 605.181441][T23150] __nla_validate_parse: 4 callbacks suppressed [ 605.181465][T23150] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6593'. [ 605.260367][T23152] loop6: detected capacity change from 0 to 512 [ 605.267460][T23152] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 605.280886][T23152] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 605.290366][T23152] syz.6.6594: attempt to access beyond end of device [ 605.290366][T23152] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 605.304747][T23152] EXT4-fs (loop6): couldn't read superblock of external journal [ 605.409717][T23154] loop4: detected capacity change from 0 to 128 [ 605.474955][T23154] syz.4.6595: attempt to access beyond end of device [ 605.474955][T23154] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 605.548023][T23154] syz.4.6595: attempt to access beyond end of device [ 605.548023][T23154] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 605.563367][T23154] syz.4.6595: attempt to access beyond end of device [ 605.563367][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 605.576808][T23154] syz.4.6595: attempt to access beyond end of device [ 605.576808][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 605.591416][T23154] syz.4.6595: attempt to access beyond end of device [ 605.591416][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 605.605746][T23154] syz.4.6595: attempt to access beyond end of device [ 605.605746][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 605.618977][T23154] syz.4.6595: attempt to access beyond end of device [ 605.618977][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 605.723720][T23159] FAULT_INJECTION: forcing a failure. [ 605.723720][T23159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.737021][T23159] CPU: 1 UID: 0 PID: 23159 Comm: syz.6.6597 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 605.737106][T23159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 605.737121][T23159] Call Trace: [ 605.737129][T23159] [ 605.737138][T23159] dump_stack_lvl+0xf2/0x150 [ 605.737199][T23159] dump_stack+0x15/0x1a [ 605.737223][T23159] should_fail_ex+0x24a/0x260 [ 605.737255][T23159] should_fail+0xb/0x10 [ 605.737283][T23159] should_fail_usercopy+0x1a/0x20 [ 605.737386][T23159] _copy_from_user+0x1c/0xa0 [ 605.737411][T23159] copy_msghdr_from_user+0x54/0x2a0 [ 605.737445][T23159] ? __fget_files+0x17c/0x1c0 [ 605.737522][T23159] __sys_sendmsg+0x13e/0x230 [ 605.737592][T23159] __x64_sys_sendmsg+0x46/0x50 [ 605.737685][T23159] x64_sys_call+0x2734/0x2dc0 [ 605.737712][T23159] do_syscall_64+0xc9/0x1c0 [ 605.737852][T23159] ? clear_bhb_loop+0x55/0xb0 [ 605.737879][T23159] ? clear_bhb_loop+0x55/0xb0 [ 605.737906][T23159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.737938][T23159] RIP: 0033:0x7f76cee4d169 [ 605.737956][T23159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.737984][T23159] RSP: 002b:00007f76cd4b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.738006][T23159] RAX: ffffffffffffffda RBX: 00007f76cf065fa0 RCX: 00007f76cee4d169 [ 605.738019][T23159] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000004 [ 605.738031][T23159] RBP: 00007f76cd4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 605.738042][T23159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.738061][T23159] R13: 0000000000000000 R14: 00007f76cf065fa0 R15: 00007ffc6583cd38 [ 605.738078][T23159] [ 605.915647][T23154] bio_check_eod: 2528 callbacks suppressed [ 605.915665][T23154] syz.4.6595: attempt to access beyond end of device [ 605.915665][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 605.970205][T23154] syz.4.6595: attempt to access beyond end of device [ 605.970205][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 605.985058][T23154] syz.4.6595: attempt to access beyond end of device [ 605.985058][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 605.998736][T23154] syz.4.6595: attempt to access beyond end of device [ 605.998736][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 606.039978][T23154] syz.4.6595: attempt to access beyond end of device [ 606.039978][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 606.060583][T23165] loop6: detected capacity change from 0 to 256 [ 606.067412][T23154] syz.4.6595: attempt to access beyond end of device [ 606.067412][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 606.084110][T23165] syz.6.6600: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 606.098738][T23165] CPU: 1 UID: 0 PID: 23165 Comm: syz.6.6600 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 606.098764][T23165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 606.098777][T23165] Call Trace: [ 606.098784][T23165] [ 606.098793][T23165] dump_stack_lvl+0xf2/0x150 [ 606.098820][T23165] dump_stack+0x15/0x1a [ 606.098904][T23165] warn_alloc+0x145/0x1b0 [ 606.098937][T23165] ? __schedule+0x75b/0x990 [ 606.098958][T23165] ? __vmalloc_node_range_noprof+0x88/0xe70 [ 606.098991][T23165] __vmalloc_node_range_noprof+0xaa/0xe70 [ 606.099037][T23165] ? __pfx_futex_wake_mark+0x10/0x10 [ 606.099070][T23165] ? __rcu_read_unlock+0x4e/0x70 [ 606.099118][T23165] ? avc_has_perm_noaudit+0x1cc/0x210 [ 606.099144][T23165] ? should_fail_ex+0x31/0x260 [ 606.099235][T23165] ? xskq_create+0x36/0xd0 [ 606.099266][T23165] ? should_failslab+0x8f/0xb0 [ 606.099297][T23165] vmalloc_user_noprof+0x59/0x70 [ 606.099331][T23165] ? xskq_create+0x79/0xd0 [ 606.099387][T23165] xskq_create+0x79/0xd0 [ 606.099424][T23165] xsk_init_queue+0x82/0xd0 [ 606.099495][T23165] xsk_setsockopt+0x409/0x520 [ 606.099534][T23165] ? __pfx_xsk_setsockopt+0x10/0x10 [ 606.099572][T23165] __sys_setsockopt+0x187/0x200 [ 606.099598][T23165] __x64_sys_setsockopt+0x66/0x80 [ 606.099625][T23165] x64_sys_call+0x282e/0x2dc0 [ 606.099843][T23165] do_syscall_64+0xc9/0x1c0 [ 606.099881][T23165] ? clear_bhb_loop+0x55/0xb0 [ 606.099913][T23165] ? clear_bhb_loop+0x55/0xb0 [ 606.099948][T23165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.100045][T23165] RIP: 0033:0x7f76cee4d169 [ 606.100063][T23165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.100085][T23165] RSP: 002b:00007f76cd4b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 606.100103][T23165] RAX: ffffffffffffffda RBX: 00007f76cf065fa0 RCX: 00007f76cee4d169 [ 606.100115][T23165] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 606.100127][T23165] RBP: 00007f76ceece2a0 R08: 0000000000000004 R09: 0000000000000000 [ 606.100139][T23165] R10: 0000400000000900 R11: 0000000000000246 R12: 0000000000000000 [ 606.100156][T23165] R13: 0000000000000000 R14: 00007f76cf065fa0 R15: 00007ffc6583cd38 [ 606.100177][T23165] [ 606.100185][T23165] Mem-Info: [ 606.228621][T23154] syz.4.6595: attempt to access beyond end of device [ 606.228621][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 606.229110][T23165] active_anon:10199 inactive_anon:3 isolated_anon:0 [ 606.229110][T23165] active_file:21008 inactive_file:2355 isolated_file:0 [ 606.229110][T23165] unevictable:1 dirty:220 writeback:0 [ 606.229110][T23165] slab_reclaimable:3149 slab_unreclaimable:15354 [ 606.229110][T23165] mapped:28814 shmem:371 pagetables:1032 [ 606.229110][T23165] sec_pagetables:0 bounce:0 [ 606.229110][T23165] kernel_misc_reclaimable:0 [ 606.229110][T23165] free:1885828 free_pcp:3652 free_cma:0 [ 606.236232][T23154] syz.4.6595: attempt to access beyond end of device [ 606.236232][T23154] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 606.238301][T23165] Node 0 active_anon:40796kB inactive_anon:12kB active_file:84032kB inactive_file:9420kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:115256kB dirty:880kB writeback:0kB shmem:1484kB writeback_tmp:0kB kernel_stack:3152kB pagetables:4128kB sec_pagetables:0kB all_unreclaimable? no [ 606.312426][ T30] kauditd_printk_skb: 517 callbacks suppressed [ 606.312446][ T30] audit: type=1400 audit(1741751113.266:29602): avc: denied { write } for pid=23164 comm="syz.6.6600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 606.314416][T23165] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.480483][T23165] lowmem_reserve[]: 0 2885 7863 7863 [ 606.485962][T23165] Node 0 DMA32 free:2950832kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954364kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 606.514615][T23165] lowmem_reserve[]: 0 0 4978 4978 [ 606.519435][ T30] audit: type=1400 audit(1741751113.466:29603): avc: denied { read } for pid=23164 comm="syz.6.6600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 606.519763][T23165] Node 0 Normal free:4576656kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:40680kB inactive_anon:12kB active_file:84032kB inactive_file:9420kB unevictable:4kB writepending:880kB present:5242880kB managed:5098208kB mlocked:4kB bounce:0kB free_pcp:11048kB local_pcp:1220kB free_cma:0kB [ 606.569716][T23165] lowmem_reserve[]: 0 0 0 0 [ 606.574277][T23165] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 606.587094][T23165] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950832kB [ 606.603142][T23165] Node 0 Normal: 1278*4kB (UME) 456*8kB (UME) 247*16kB (UME) 952*32kB (UME) 1182*64kB (UME) 518*128kB (UME) 472*256kB (UME) 285*512kB (UME) 124*1024kB (UME) 68*2048kB (UME) 942*4096kB (UM) = 4576552kB [ 606.624483][T23165] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 606.633809][T23165] 23739 total pagecache pages [ 606.638552][T23165] 5 pages in swap cache [ 606.642704][T23165] Free swap = 124548kB [ 606.646900][T23165] Total swap = 124996kB [ 606.651059][T23165] 2097051 pages RAM [ 606.654856][T23165] 0 pages HighMem/MovableOnly [ 606.659557][T23165] 80068 pages reserved [ 606.756615][T23177] rdma_op ffff888114870980 conn xmit_rdma 0000000000000000 [ 606.815135][ T30] audit: type=1326 audit(1741751113.766:29604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23180 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 606.839431][ T30] audit: type=1326 audit(1741751113.766:29605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23180 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 606.863164][ T30] audit: type=1326 audit(1741751113.766:29606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23180 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 606.887230][ T30] audit: type=1326 audit(1741751113.766:29607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23180 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 606.910978][ T30] audit: type=1326 audit(1741751113.766:29608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23180 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 606.934850][ T30] audit: type=1326 audit(1741751113.766:29609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23180 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 606.958512][ T30] audit: type=1326 audit(1741751113.766:29610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23180 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 606.982123][ T30] audit: type=1326 audit(1741751113.766:29611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23180 comm="syz.0.6606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 607.083511][T23185] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6608'. [ 607.092546][T23185] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6608'. [ 607.131491][T23189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.139981][T23189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.569342][T23195] siw: device registration error -23 [ 607.577041][T23195] IPv6: sit1: Disabled Multicast RS [ 607.684452][T23199] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.6614'. [ 607.822455][T23199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6614'. [ 608.072884][T23210] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6619'. [ 608.083006][T23210] netem: invalid attributes len -18 [ 608.088248][T23210] netem: change failed [ 608.135936][T23212] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6620'. [ 608.145089][T23212] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6620'. [ 608.452507][T23222] IPv6: sit1: Disabled Multicast RS [ 608.552902][T23226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.570200][T23226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.685300][T23234] rdma_op ffff888114872180 conn xmit_rdma 0000000000000000 [ 608.762995][T23237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6632'. [ 608.771980][T23237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6632'. [ 609.225763][T23247] siw: device registration error -23 [ 609.233779][T23247] IPv6: sit1: Disabled Multicast RS [ 609.464999][T23264] rdma_op ffff888114871d80 conn xmit_rdma 0000000000000000 [ 609.606612][T23272] siw: device registration error -23 [ 609.614532][T23272] IPv6: sit1: Disabled Multicast RS [ 609.835107][T23277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.843564][T23277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.072580][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888119175a00: rx timeout, send abort [ 610.080949][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888119175a00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 610.286841][T23291] rdma_op ffff88810459f580 conn xmit_rdma 0000000000000000 [ 610.306440][T23295] __nla_validate_parse: 4 callbacks suppressed [ 610.306454][T23295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6658'. [ 610.321830][T23295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6658'. [ 610.450520][T23303] loop5: detected capacity change from 0 to 128 [ 610.460077][T23303] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 610.468048][T23303] FAT-fs (loop5): Filesystem has been set read-only [ 610.474729][T23303] syz.5.6661: attempt to access beyond end of device [ 610.474729][T23303] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 610.488596][T23303] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 610.496413][T23303] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 610.504539][T23303] syz.5.6661: attempt to access beyond end of device [ 610.504539][T23303] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 610.522862][T23300] loop4: detected capacity change from 0 to 164 [ 610.593778][T23310] loop1: detected capacity change from 0 to 128 [ 610.693034][T23317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6664'. [ 610.702132][T23317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6664'. [ 610.770069][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888119175600: rx timeout, send abort [ 610.778581][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888119175600: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 610.814277][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6669'. [ 610.823440][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6669'. [ 610.846672][T23327] rdma_op ffff888114873180 conn xmit_rdma 0000000000000000 [ 610.891430][T23332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6672'. [ 611.003487][T23333] loop1: detected capacity change from 0 to 2048 [ 611.079485][T23333] Alternate GPT is invalid, using primary GPT. [ 611.085893][T23333] loop1: p1 p2 p3 [ 611.279795][T23336] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6673'. [ 611.291584][T23336] IPv6: sit1: Disabled Multicast RS [ 611.320668][ T30] kauditd_printk_skb: 1043 callbacks suppressed [ 611.320683][ T30] audit: type=1326 audit(1741751118.276:30655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23328 comm="syz.0.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a5d624127 code=0x7ffc0000 [ 611.350981][ T30] audit: type=1326 audit(1741751118.286:30656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23328 comm="syz.0.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a5d5c9359 code=0x7ffc0000 [ 611.374566][ T30] audit: type=1326 audit(1741751118.286:30657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23328 comm="syz.0.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 611.398446][ T30] audit: type=1326 audit(1741751118.306:30658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23328 comm="syz.0.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a5d624127 code=0x7ffc0000 [ 611.422189][ T30] audit: type=1326 audit(1741751118.306:30659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23328 comm="syz.0.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a5d5c9359 code=0x7ffc0000 [ 611.445893][ T30] audit: type=1326 audit(1741751118.306:30660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23328 comm="syz.0.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 611.469915][ T30] audit: type=1326 audit(1741751118.326:30661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23328 comm="syz.0.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a5d624127 code=0x7ffc0000 [ 611.493479][ T30] audit: type=1326 audit(1741751118.326:30662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23328 comm="syz.0.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a5d5c9359 code=0x7ffc0000 [ 611.516975][ T30] audit: type=1326 audit(1741751118.326:30663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23328 comm="syz.0.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f5a5d62d169 code=0x7ffc0000 [ 611.540774][ T30] audit: type=1326 audit(1741751118.346:30664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23328 comm="syz.0.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a5d624127 code=0x7ffc0000 [ 611.546147][T23344] loop4: detected capacity change from 0 to 128 [ 611.645379][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6679'. [ 611.648064][T23344] bio_check_eod: 2 callbacks suppressed [ 611.648082][T23344] syz.4.6677: attempt to access beyond end of device [ 611.648082][T23344] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 611.654347][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6679'. [ 611.712267][T23351] loop6: detected capacity change from 0 to 256 [ 611.781775][T23358] loop4: detected capacity change from 0 to 512 [ 611.788962][T23358] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 611.797429][T23358] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 611.808115][T23358] syz.4.6683: attempt to access beyond end of device [ 611.808115][T23358] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 611.824445][T23358] EXT4-fs (loop4): couldn't read superblock of external journal [ 611.849298][T23362] loop1: detected capacity change from 0 to 128 [ 611.860163][T23362] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 611.868107][T23362] FAT-fs (loop1): Filesystem has been set read-only [ 611.897363][T23362] syz.1.6684: attempt to access beyond end of device [ 611.897363][T23362] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 611.917524][T23362] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 611.925470][T23362] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 611.939932][T23362] syz.1.6684: attempt to access beyond end of device [ 611.939932][T23362] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 611.960257][T23362] syz.1.6684: attempt to access beyond end of device [ 611.960257][T23362] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 612.467674][T23387] loop5: detected capacity change from 0 to 128 [ 612.523094][T23387] syz.5.6693: attempt to access beyond end of device [ 612.523094][T23387] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 612.582875][T23392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.595092][T23392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.807707][T23404] IPv6: sit1: Disabled Multicast RS [ 613.383091][T23415] loop6: detected capacity change from 0 to 128 [ 613.419652][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881191f8600: rx timeout, send abort [ 613.428118][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881191f8600: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 613.446040][T23415] syz.6.6705: attempt to access beyond end of device [ 613.446040][T23415] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 613.489554][T23420] rdma_op ffff888114870180 conn xmit_rdma 0000000000000000 [ 613.712049][T23437] loop5: detected capacity change from 0 to 512 [ 613.719040][T23437] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 613.727543][T23437] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 613.736757][T23437] syz.5.6713: attempt to access beyond end of device [ 613.736757][T23437] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 613.750551][T23437] EXT4-fs (loop5): couldn't read superblock of external journal [ 613.782869][T23439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.791828][T23439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.901454][T23417] syz.4.6706 uses obsolete (PF_INET,SOCK_PACKET) [ 614.492640][T23456] rdma_op ffff88810459d980 conn xmit_rdma 0000000000000000 [ 614.565940][T23464] loop1: detected capacity change from 0 to 512 [ 614.574382][T23464] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 614.596695][T23464] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 614.629587][T23464] syz.1.6725: attempt to access beyond end of device [ 614.629587][T23464] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 614.646599][T23464] EXT4-fs (loop1): couldn't read superblock of external journal [ 614.852578][T23486] loop6: detected capacity change from 0 to 128 [ 614.920388][T23486] syz.6.6734: attempt to access beyond end of device [ 614.920388][T23486] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 615.023827][T23492] rdma_op ffff88810459d980 conn xmit_rdma 0000000000000000 [ 615.120541][T23498] siw: device registration error -23 [ 615.128161][T23498] IPv6: sit1: Disabled Multicast RS [ 615.229075][T23506] loop6: detected capacity change from 0 to 128 [ 615.324625][T23512] loop6: detected capacity change from 0 to 128 [ 615.330403][T23513] __nla_validate_parse: 13 callbacks suppressed [ 615.330422][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6744'. [ 615.346143][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6744'. [ 615.435655][T23515] IPv6: sit1: Disabled Multicast RS [ 615.653590][T23531] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6753'. [ 615.663051][T23531] x_tables: duplicate entry at hook 3 [ 615.669993][T23531] x_tables: duplicate underflow at hook 1 [ 615.684445][T23531] lo speed is unknown, defaulting to 1000 [ 615.756123][T23535] loop1: detected capacity change from 0 to 128 [ 615.768657][T23537] loop6: detected capacity change from 0 to 128 [ 615.776666][T23535] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 615.791676][T23535] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 615.828326][ T3381] IPVS: starting estimator thread 0... [ 615.853018][T20896] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 615.928451][T23540] IPVS: using max 1968 ests per chain, 98400 per kthread [ 616.586433][T23579] loop4: detected capacity change from 0 to 128 [ 616.821511][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6774'. [ 616.830636][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6774'. [ 616.841247][ T30] kauditd_printk_skb: 400 callbacks suppressed [ 616.841261][ T30] audit: type=1326 audit(1741751123.796:31065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz.6.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 616.871275][ T30] audit: type=1326 audit(1741751123.796:31066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz.6.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 616.895049][ T30] audit: type=1326 audit(1741751123.796:31067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz.6.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 616.918818][ T30] audit: type=1326 audit(1741751123.796:31068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz.6.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 616.942568][ T30] audit: type=1326 audit(1741751123.796:31069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz.6.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 617.100408][T23596] loop5: detected capacity change from 0 to 512 [ 617.135495][T23596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.148232][T23596] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 617.594420][ T30] audit: type=1326 audit(1741751124.546:31070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23600 comm="syz.4.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 617.618167][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881155b0a00: rx timeout, send abort [ 617.626601][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881155b0a00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 617.766339][T23609] loop6: detected capacity change from 0 to 512 [ 617.775684][ T30] audit: type=1326 audit(1741751124.596:31071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23600 comm="syz.4.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 617.799571][ T30] audit: type=1326 audit(1741751124.596:31072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23600 comm="syz.4.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 617.823243][ T30] audit: type=1326 audit(1741751124.596:31073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23600 comm="syz.4.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 617.847047][ T30] audit: type=1326 audit(1741751124.596:31074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23600 comm="syz.4.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 617.899962][T23609] EXT4-fs error (device loop6): ext4_quota_enable:7101: comm syz.6.6780: inode #33554432: comm syz.6.6780: iget: illegal inode # [ 617.915084][T23609] EXT4-fs error (device loop6): ext4_quota_enable:7104: comm syz.6.6780: Bad quota inode: 33554432, type: 2 [ 617.947081][T23609] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 617.965918][T23609] EXT4-fs (loop6): mount failed [ 617.997642][T23610] loop4: detected capacity change from 0 to 164 [ 618.062147][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881155b0c00: rx timeout, send abort [ 618.070596][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881155b0c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 618.110922][T23617] loop1: detected capacity change from 0 to 128 [ 618.168294][T23617] bio_check_eod: 3 callbacks suppressed [ 618.168316][T23617] syz.1.6781: attempt to access beyond end of device [ 618.168316][T23617] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 618.696601][T23634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6789'. [ 618.705704][T23634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6789'. [ 618.807569][T23641] loop4: detected capacity change from 0 to 1024 [ 618.814811][T23641] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 618.835953][T23641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 618.844276][T23641] System zones: 0-1, 3-36 [ 618.848924][T23641] EXT4-fs (loop4): orphan cleanup on readonly fs [ 618.856961][T23641] EXT4-fs (loop4): 1 orphan inode deleted [ 618.869212][T23641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 618.928597][T19369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.950373][T23646] loop5: detected capacity change from 0 to 128 [ 618.973738][T23646] syz.5.6793: attempt to access beyond end of device [ 618.973738][T23646] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 619.009402][T23648] loop5: detected capacity change from 0 to 128 [ 619.036912][T23648] syz.5.6794: attempt to access beyond end of device [ 619.036912][T23648] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 619.057928][T23648] syz.5.6794: attempt to access beyond end of device [ 619.057928][T23648] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 619.072306][T23648] syz.5.6794: attempt to access beyond end of device [ 619.072306][T23648] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 619.085631][T23648] syz.5.6794: attempt to access beyond end of device [ 619.085631][T23648] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 619.099135][T23648] syz.5.6794: attempt to access beyond end of device [ 619.099135][T23648] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 619.112541][T23648] syz.5.6794: attempt to access beyond end of device [ 619.112541][T23648] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 619.126099][T23648] syz.5.6794: attempt to access beyond end of device [ 619.126099][T23648] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 619.139581][T23648] syz.5.6794: attempt to access beyond end of device [ 619.139581][T23648] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 619.615032][T23656] vlan2: entered promiscuous mode [ 619.620269][T23656] vlan2: entered allmulticast mode [ 619.625472][T23656] hsr_slave_1: entered allmulticast mode [ 619.657595][T20616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.699137][T23661] loop4: detected capacity change from 0 to 512 [ 619.724704][T23661] EXT4-fs error (device loop4): ext4_quota_enable:7101: comm syz.4.6798: inode #33554432: comm syz.4.6798: iget: illegal inode # [ 619.748745][T23661] EXT4-fs error (device loop4): ext4_quota_enable:7104: comm syz.4.6798: Bad quota inode: 33554432, type: 2 [ 619.786871][T23661] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 619.816128][T23661] EXT4-fs (loop4): mount failed [ 619.863152][T23666] loop1: detected capacity change from 0 to 164 [ 619.925522][T23678] loop4: detected capacity change from 0 to 256 [ 619.931838][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881155b0a00: rx timeout, send abort [ 619.940267][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881155b0a00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 619.974987][T23678] warn_alloc: 1 callbacks suppressed [ 619.975004][T23678] syz.4.6803: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 619.994992][T23678] CPU: 1 UID: 0 PID: 23678 Comm: syz.4.6803 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 619.995077][T23678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 619.995164][T23678] Call Trace: [ 619.995177][T23678] [ 619.995186][T23678] dump_stack_lvl+0xf2/0x150 [ 619.995216][T23678] dump_stack+0x15/0x1a [ 619.995237][T23678] warn_alloc+0x145/0x1b0 [ 619.995265][T23678] ? __schedule+0x75b/0x990 [ 619.995342][T23678] ? __vmalloc_node_range_noprof+0x88/0xe70 [ 619.995384][T23678] __vmalloc_node_range_noprof+0xaa/0xe70 [ 619.995421][T23678] ? __pfx_futex_wake_mark+0x10/0x10 [ 619.995524][T23678] ? __rcu_read_unlock+0x4e/0x70 [ 619.995552][T23678] ? avc_has_perm_noaudit+0x1cc/0x210 [ 619.995575][T23678] ? xskq_create+0x36/0xd0 [ 619.995607][T23678] vmalloc_user_noprof+0x59/0x70 [ 619.995637][T23678] ? xskq_create+0x79/0xd0 [ 619.995867][T23678] xskq_create+0x79/0xd0 [ 619.995909][T23678] xsk_init_queue+0x82/0xd0 [ 619.995944][T23678] xsk_setsockopt+0x409/0x520 [ 619.996000][T23678] ? __pfx_xsk_setsockopt+0x10/0x10 [ 619.996040][T23678] __sys_setsockopt+0x187/0x200 [ 619.996072][T23678] __x64_sys_setsockopt+0x66/0x80 [ 619.996097][T23678] x64_sys_call+0x282e/0x2dc0 [ 619.996164][T23678] do_syscall_64+0xc9/0x1c0 [ 619.996196][T23678] ? clear_bhb_loop+0x55/0xb0 [ 619.996243][T23678] ? clear_bhb_loop+0x55/0xb0 [ 619.996278][T23678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.996387][T23678] RIP: 0033:0x7f0b18bad169 [ 619.996403][T23678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.996421][T23678] RSP: 002b:00007f0b17217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 619.996441][T23678] RAX: ffffffffffffffda RBX: 00007f0b18dc5fa0 RCX: 00007f0b18bad169 [ 619.996504][T23678] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 619.996520][T23678] RBP: 00007f0b18c2e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 619.996533][T23678] R10: 0000400000000900 R11: 0000000000000246 R12: 0000000000000000 [ 619.996545][T23678] R13: 0000000000000000 R14: 00007f0b18dc5fa0 R15: 00007ffe49518a78 [ 619.996564][T23678] [ 619.996572][T23678] Mem-Info: [ 620.214978][T23678] active_anon:12814 inactive_anon:3 isolated_anon:0 [ 620.214978][T23678] active_file:20979 inactive_file:2369 isolated_file:0 [ 620.214978][T23678] unevictable:1 dirty:378 writeback:0 [ 620.214978][T23678] slab_reclaimable:3150 slab_unreclaimable:15384 [ 620.214978][T23678] mapped:32186 shmem:2958 pagetables:1054 [ 620.214978][T23678] sec_pagetables:0 bounce:0 [ 620.214978][T23678] kernel_misc_reclaimable:0 [ 620.214978][T23678] free:1864384 free_pcp:22416 free_cma:0 [ 620.260085][T23678] Node 0 active_anon:51256kB inactive_anon:12kB active_file:83916kB inactive_file:9476kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:128744kB dirty:1512kB writeback:0kB shmem:11832kB writeback_tmp:0kB kernel_stack:3280kB pagetables:4216kB sec_pagetables:0kB all_unreclaimable? no [ 620.288209][T23678] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 620.315166][T23678] lowmem_reserve[]: 0 2885 7863 7863 [ 620.320572][T23678] Node 0 DMA32 free:2950832kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954364kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 620.349224][T23678] lowmem_reserve[]: 0 0 4978 4978 [ 620.354500][T23678] Node 0 Normal free:4493548kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:46036kB inactive_anon:12kB active_file:83916kB inactive_file:9476kB unevictable:4kB writepending:1512kB present:5242880kB managed:5098208kB mlocked:4kB bounce:0kB free_pcp:89608kB local_pcp:41696kB free_cma:0kB [ 620.381835][T23689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6807'. [ 620.384862][T23678] lowmem_reserve[]: 0 0 0 0 [ 620.393751][T23689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6807'. [ 620.398300][T23678] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 620.420060][T23678] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950832kB [ 620.436334][T23678] Node 0 Normal: 1218*4kB (UME) 478*8kB (UME) 527*16kB (UME) 1039*32kB (UME) 1199*64kB (UME) 501*128kB (UME) 424*256kB (UME) 246*512kB (UME) 100*1024kB (UE) 60*2048kB (UE) 940*4096kB (UM) = 4501256kB [ 620.456188][T23678] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 620.465505][T23678] 23730 total pagecache pages [ 620.470187][T23678] 5 pages in swap cache [ 620.474413][T23678] Free swap = 124808kB [ 620.478772][T23678] Total swap = 124996kB [ 620.482929][T23678] 2097051 pages RAM [ 620.486727][T23678] 0 pages HighMem/MovableOnly [ 620.491500][T23678] 80068 pages reserved [ 620.576902][T23698] siw: device registration error -23 [ 620.585154][T23698] IPv6: sit1: Disabled Multicast RS [ 620.653527][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6813'. [ 620.700592][T23705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6815'. [ 620.721695][T23705] IPv6: sit1: Disabled Multicast RS [ 621.073372][T23728] loop6: detected capacity change from 0 to 1024 [ 621.080966][T23728] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 621.092483][T23728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 621.100614][T23728] System zones: 0-1, 3-36 [ 621.105217][T23728] EXT4-fs (loop6): orphan cleanup on readonly fs [ 621.113186][T23728] EXT4-fs (loop6): 1 orphan inode deleted [ 621.119484][T23728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 621.187992][T23729] loop1: detected capacity change from 0 to 164 [ 621.411904][T23739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6828'. [ 621.423408][T23739] IPv6: sit1: Disabled Multicast RS [ 621.534761][T23747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6832'. [ 621.723678][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6836'. [ 621.732924][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6836'. [ 621.910900][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.932200][ T30] kauditd_printk_skb: 344 callbacks suppressed [ 621.932217][ T30] audit: type=1326 audit(1741751128.886:31419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23759 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 621.962347][ T30] audit: type=1326 audit(1741751128.886:31420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23759 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 621.986138][ T30] audit: type=1326 audit(1741751128.926:31421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23759 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 621.986174][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811915d600: rx timeout, send abort [ 621.986404][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811915d600: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 622.009807][ T30] audit: type=1326 audit(1741751128.926:31422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23759 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 622.056072][ T30] audit: type=1326 audit(1741751128.926:31423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23759 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 622.079750][ T30] audit: type=1326 audit(1741751128.926:31424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23759 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 622.086770][T23762] loop5: detected capacity change from 0 to 128 [ 622.103506][ T30] audit: type=1326 audit(1741751128.926:31425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23759 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 622.134202][ T30] audit: type=1326 audit(1741751129.086:31426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23759 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 622.137041][T23762] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 622.157957][ T30] audit: type=1326 audit(1741751129.086:31427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23759 comm="syz.6.6838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 622.165730][T23762] FAT-fs (loop5): Filesystem has been set read-only [ 622.168542][T23762] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 622.203892][T23762] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 622.244133][ T30] audit: type=1326 audit(1741751129.196:31428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23766 comm="syz.6.6841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 622.383605][T23778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.392308][T23778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.626078][T23784] loop4: detected capacity change from 0 to 128 [ 622.635457][T23784] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 622.643411][T23784] FAT-fs (loop4): Filesystem has been set read-only [ 622.650876][T23784] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 622.658746][T23784] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 623.180728][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6855'. [ 623.237537][T23797] loop5: detected capacity change from 0 to 1024 [ 623.257691][T23797] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 623.272020][T23797] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 623.306377][T23797] System zones: 0-1, 3-36 [ 623.311997][T23797] EXT4-fs (loop5): orphan cleanup on readonly fs [ 623.340333][T23797] EXT4-fs (loop5): 1 orphan inode deleted [ 623.348748][T23797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 623.659292][T23827] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 623.774405][T23832] loop1: detected capacity change from 0 to 2048 [ 623.809547][T23832] Alternate GPT is invalid, using primary GPT. [ 623.815928][T23832] loop1: p1 p2 p3 [ 624.017694][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8881155b0c00: rx timeout, send abort [ 624.026032][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881155b0c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 624.043309][T19369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.063786][T23846] loop4: detected capacity change from 0 to 128 [ 624.125370][T23846] bio_check_eod: 25373 callbacks suppressed [ 624.125443][T23846] syz.4.6875: attempt to access beyond end of device [ 624.125443][T23846] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 624.165369][T23853] rdma_op ffff888110eecd80 conn xmit_rdma 0000000000000000 [ 624.471928][T23867] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 624.548162][T23872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6884'. [ 624.591725][T23872] loop1: detected capacity change from 0 to 1024 [ 624.600109][T23872] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 624.621432][T23872] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 624.629668][T23872] System zones: 0-1, 3-36 [ 624.634238][T23872] EXT4-fs (loop1): orphan cleanup on readonly fs [ 624.641885][T23872] EXT4-fs (loop1): 1 orphan inode deleted [ 624.648314][T23872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.795851][T23885] rdma_op ffff888110eecd80 conn xmit_rdma 0000000000000000 [ 624.919037][T23893] IPv6: sit1: Disabled Multicast RS [ 625.036174][T23897] loop5: detected capacity change from 0 to 512 [ 625.091883][T23897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.104513][T23897] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 625.452430][T23911] loop6: detected capacity change from 0 to 128 [ 625.505676][T20896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.834985][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811954be00: rx timeout, send abort [ 625.843430][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811954be00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 625.970082][T23925] rdma_op ffff888110eec180 conn xmit_rdma 0000000000000000 [ 625.993414][T23927] loop6: detected capacity change from 0 to 128 [ 626.024596][T23927] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 626.032513][T23927] FAT-fs (loop6): Filesystem has been set read-only [ 626.051282][T23923] loop4: detected capacity change from 0 to 164 [ 626.070584][T23927] syz.6.6905: attempt to access beyond end of device [ 626.070584][T23927] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 626.122277][T23927] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 626.130326][T23927] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 626.157189][T23927] syz.6.6905: attempt to access beyond end of device [ 626.157189][T23927] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 626.192473][T23927] syz.6.6905: attempt to access beyond end of device [ 626.192473][T23927] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 626.243743][T23940] loop1: detected capacity change from 0 to 1024 [ 626.258721][T23940] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 626.279074][T23940] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 626.297470][T23940] System zones: 0-1, 3-36 [ 626.305154][T23940] EXT4-fs (loop1): orphan cleanup on readonly fs [ 626.312887][T23940] EXT4-fs (loop1): 1 orphan inode deleted [ 626.320729][T23940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 626.471450][T23954] rdma_op ffff888114872580 conn xmit_rdma 0000000000000000 [ 626.615479][T19369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.769627][T23964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 626.858319][T23972] siw: device registration error -23 [ 626.864636][T23972] __nla_validate_parse: 1 callbacks suppressed [ 626.864651][T23972] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6924'. [ 626.881870][T23972] IPv6: sit1: Disabled Multicast RS [ 626.941156][ T30] kauditd_printk_skb: 442 callbacks suppressed [ 626.941171][ T30] audit: type=1326 audit(1741751133.896:31871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23958 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc1d054127 code=0x7ffc0000 [ 626.970954][ T30] audit: type=1326 audit(1741751133.896:31872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23958 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc1cff9359 code=0x7ffc0000 [ 626.994568][ T30] audit: type=1326 audit(1741751133.896:31873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23958 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 627.020149][ T30] audit: type=1326 audit(1741751133.976:31874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23958 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc1d054127 code=0x7ffc0000 [ 627.044005][ T30] audit: type=1326 audit(1741751133.976:31875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23958 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc1cff9359 code=0x7ffc0000 [ 627.067595][ T30] audit: type=1326 audit(1741751133.976:31876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23958 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 627.093085][ T30] audit: type=1326 audit(1741751133.976:31877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23958 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc1d054127 code=0x7ffc0000 [ 627.116701][ T30] audit: type=1326 audit(1741751133.976:31878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23958 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc1cff9359 code=0x7ffc0000 [ 627.140606][ T30] audit: type=1326 audit(1741751133.976:31879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23958 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 627.164224][ T30] audit: type=1326 audit(1741751133.976:31880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23958 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc1d054127 code=0x7ffc0000 [ 627.190206][T20896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.378932][T23989] loop1: detected capacity change from 0 to 128 [ 627.389922][T23989] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 627.397888][T23989] FAT-fs (loop1): Filesystem has been set read-only [ 627.405002][T23989] syz.1.6932: attempt to access beyond end of device [ 627.405002][T23989] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 627.422030][T23989] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 627.429977][T23989] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 627.439680][T23989] syz.1.6932: attempt to access beyond end of device [ 627.439680][T23989] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 627.453740][T23989] syz.1.6932: attempt to access beyond end of device [ 627.453740][T23989] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 627.474988][T23991] siw: device registration error -23 [ 627.481724][T23991] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6933'. [ 627.500414][T23991] IPv6: sit1: Disabled Multicast RS [ 627.635597][T24004] loop1: detected capacity change from 0 to 1024 [ 627.643201][T24004] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 627.654935][T24004] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 627.657048][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881155bb000: rx timeout, send abort [ 627.666742][T24004] System zones: 0-1, 3-36 [ 627.671410][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881155bb000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 627.687053][T24004] EXT4-fs (loop1): orphan cleanup on readonly fs [ 627.713552][T24008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6939'. [ 627.725175][T24004] EXT4-fs (loop1): 1 orphan inode deleted [ 627.734563][T24004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 627.759084][T24006] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 627.796031][T24006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6939'. [ 627.809312][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6944'. [ 627.818238][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6944'. [ 627.911885][T24023] loop4: detected capacity change from 0 to 128 [ 627.922058][T24025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.930680][T24025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.950375][T24023] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 627.958434][T24023] FAT-fs (loop4): Filesystem has been set read-only [ 627.965196][T24023] syz.4.6946: attempt to access beyond end of device [ 627.965196][T24023] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 627.967398][T24027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.979146][T24023] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 627.995236][T24023] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 628.000874][T24027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.003658][T24023] syz.4.6946: attempt to access beyond end of device [ 628.003658][T24023] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 628.026511][T24023] syz.4.6946: attempt to access beyond end of device [ 628.026511][T24023] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 628.158957][T24034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6951'. [ 628.170370][T24034] IPv6: sit1: Disabled Multicast RS [ 628.473511][T20896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.509633][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6955'. [ 628.518666][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6955'. [ 628.770913][T24047] siw: device registration error -23 [ 628.783281][T24047] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6957'. [ 628.794809][T24047] IPv6: sit1: Disabled Multicast RS [ 628.807725][T24051] lo speed is unknown, defaulting to 1000 [ 629.475894][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8881191f8400: rx timeout, send abort [ 629.484361][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881191f8400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 630.877872][T24117] loop5: detected capacity change from 0 to 1024 [ 630.886733][T24117] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 630.900449][T24117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 630.909823][T24117] System zones: 0-1, 3-36 [ 630.914532][T24117] EXT4-fs (loop5): orphan cleanup on readonly fs [ 630.923636][T24117] EXT4-fs (loop5): 1 orphan inode deleted [ 630.932527][T24117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 631.115868][T24134] loop6: detected capacity change from 0 to 128 [ 631.459698][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119130200: rx timeout, send abort [ 631.468120][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888119130200: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 631.510241][T24147] loop4: detected capacity change from 0 to 512 [ 631.516882][T24147] EXT4-fs: Ignoring removed nobh option [ 631.532453][T24147] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #16: comm +}[@: corrupted inode contents [ 631.544492][T24147] EXT4-fs (loop4): Remounting filesystem read-only [ 631.551342][T24147] EXT4-fs (loop4): 1 truncate cleaned up [ 631.557454][T24147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.570172][ T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 631.570215][T24147] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 631.580869][ T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 631.588777][T24147] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.598302][ T51] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 631.683405][T19369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.718068][T24160] loop4: detected capacity change from 0 to 128 [ 631.934275][T24182] siw: device registration error -23 [ 631.940433][T24182] __nla_validate_parse: 8 callbacks suppressed [ 631.940452][T24182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7010'. [ 631.959441][T24182] IPv6: sit1: Disabled Multicast RS [ 632.028140][ T30] kauditd_printk_skb: 382 callbacks suppressed [ 632.028159][ T30] audit: type=1326 audit(1741751138.976:32257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.5.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 632.060190][ T30] audit: type=1326 audit(1741751138.976:32258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.5.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 632.084182][ T30] audit: type=1326 audit(1741751138.976:32259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.5.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 632.107984][ T30] audit: type=1326 audit(1741751138.976:32260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.5.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 632.131797][ T30] audit: type=1326 audit(1741751138.976:32261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.5.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 632.155513][ T30] audit: type=1326 audit(1741751138.976:32262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.5.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 632.179166][ T30] audit: type=1326 audit(1741751138.976:32263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.5.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 632.203095][ T30] audit: type=1326 audit(1741751138.976:32264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.5.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 632.226889][ T30] audit: type=1326 audit(1741751138.976:32265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.5.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 632.250585][ T30] audit: type=1326 audit(1741751138.976:32266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.5.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d05d169 code=0x7ffc0000 [ 632.304182][T24195] rdma_op ffff88810d5c9d80 conn xmit_rdma 0000000000000000 [ 632.599131][T24218] siw: device registration error -23 [ 632.605011][T24218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7024'. [ 632.616911][T24218] IPv6: sit1: Disabled Multicast RS [ 633.100380][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881191f8400: rx timeout, send abort [ 633.109103][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881191f8400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 633.342952][T24228] loop4: detected capacity change from 0 to 128 [ 633.764202][T24242] loop6: detected capacity change from 0 to 512 [ 633.793280][T24242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.805858][T24242] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 633.860283][T24246] loop5: detected capacity change from 0 to 256 [ 633.884895][T24246] warn_alloc: 2 callbacks suppressed [ 633.884910][T24246] syz.5.7035: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 633.905063][T24246] CPU: 0 UID: 0 PID: 24246 Comm: syz.5.7035 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 633.905099][T24246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 633.905113][T24246] Call Trace: [ 633.905180][T24246] [ 633.905190][T24246] dump_stack_lvl+0xf2/0x150 [ 633.905225][T24246] dump_stack+0x15/0x1a [ 633.905247][T24246] warn_alloc+0x145/0x1b0 [ 633.905273][T24246] ? __schedule+0x75b/0x990 [ 633.905297][T24246] ? __vmalloc_node_range_noprof+0x88/0xe70 [ 633.905378][T24246] __vmalloc_node_range_noprof+0xaa/0xe70 [ 633.905413][T24246] ? __pfx_futex_wake_mark+0x10/0x10 [ 633.905446][T24246] ? __rcu_read_unlock+0x4e/0x70 [ 633.905468][T24246] ? avc_has_perm_noaudit+0x1cc/0x210 [ 633.905534][T24246] ? should_fail_ex+0x31/0x260 [ 633.905570][T24246] ? xskq_create+0x36/0xd0 [ 633.905609][T24246] ? should_failslab+0x8f/0xb0 [ 633.905683][T24246] vmalloc_user_noprof+0x59/0x70 [ 633.905718][T24246] ? xskq_create+0x79/0xd0 [ 633.905761][T24246] xskq_create+0x79/0xd0 [ 633.905800][T24246] xsk_init_queue+0x82/0xd0 [ 633.905916][T24246] xsk_setsockopt+0x409/0x520 [ 633.905955][T24246] ? __pfx_xsk_setsockopt+0x10/0x10 [ 633.905992][T24246] __sys_setsockopt+0x187/0x200 [ 633.906019][T24246] __x64_sys_setsockopt+0x66/0x80 [ 633.906126][T24246] x64_sys_call+0x282e/0x2dc0 [ 633.906163][T24246] do_syscall_64+0xc9/0x1c0 [ 633.906206][T24246] ? clear_bhb_loop+0x55/0xb0 [ 633.906315][T24246] ? clear_bhb_loop+0x55/0xb0 [ 633.906344][T24246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.906414][T24246] RIP: 0033:0x7efc1d05d169 [ 633.906429][T24246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.906521][T24246] RSP: 002b:00007efc1b6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 633.906539][T24246] RAX: ffffffffffffffda RBX: 00007efc1d275fa0 RCX: 00007efc1d05d169 [ 633.906551][T24246] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 633.906563][T24246] RBP: 00007efc1d0de2a0 R08: 0000000000000004 R09: 0000000000000000 [ 633.906574][T24246] R10: 0000400000000900 R11: 0000000000000246 R12: 0000000000000000 [ 633.906610][T24246] R13: 0000000000000000 R14: 00007efc1d275fa0 R15: 00007ffe390955f8 [ 633.906628][T24246] [ 633.906635][T24246] Mem-Info: [ 634.134514][T24246] active_anon:16496 inactive_anon:3 isolated_anon:0 [ 634.134514][T24246] active_file:20977 inactive_file:2362 isolated_file:0 [ 634.134514][T24246] unevictable:0 dirty:292 writeback:0 [ 634.134514][T24246] slab_reclaimable:3150 slab_unreclaimable:15356 [ 634.134514][T24246] mapped:28807 shmem:423 pagetables:1037 [ 634.134514][T24246] sec_pagetables:0 bounce:0 [ 634.134514][T24246] kernel_misc_reclaimable:0 [ 634.134514][T24246] free:1867889 free_pcp:15299 free_cma:0 [ 634.179522][T24246] Node 0 active_anon:66448kB inactive_anon:12kB active_file:83908kB inactive_file:9448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115228kB dirty:1168kB writeback:0kB shmem:1692kB writeback_tmp:0kB kernel_stack:3200kB pagetables:4148kB sec_pagetables:0kB all_unreclaimable? no [ 634.207518][T24246] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.234459][T24246] lowmem_reserve[]: 0 2885 7863 7863 [ 634.239900][T24246] Node 0 DMA32 free:2950832kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954364kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 634.268602][T24246] lowmem_reserve[]: 0 0 4978 4978 [ 634.273732][T24246] Node 0 Normal free:4503392kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:67376kB inactive_anon:12kB active_file:83908kB inactive_file:9448kB unevictable:0kB writepending:1168kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:58416kB local_pcp:1212kB free_cma:0kB [ 634.303957][T24246] lowmem_reserve[]: 0 0 0 0 [ 634.308540][T24246] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 634.321447][T24246] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950832kB [ 634.337672][T24246] Node 0 Normal: 290*4kB (UE) 9*8kB (UM) 22*16kB (UE) 462*32kB (UME) 705*64kB (UME) 547*128kB (UME) 513*256kB (UME) 296*512kB (UME) 113*1024kB (UME) 60*2048kB (UE) 940*4096kB (UM) = 4503216kB [ 634.356860][T24246] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 634.366202][T24246] 23770 total pagecache pages [ 634.370905][T24246] 5 pages in swap cache [ 634.375099][T24246] Free swap = 124808kB [ 634.379287][T24246] Total swap = 124996kB [ 634.383556][T24246] 2097051 pages RAM [ 634.387409][T24246] 0 pages HighMem/MovableOnly [ 634.392118][T24246] 80068 pages reserved [ 634.546564][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.627010][T24263] loop6: detected capacity change from 0 to 1024 [ 634.634339][T24263] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 634.653143][T24263] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 634.661545][T24263] System zones: 0-1, 3-36 [ 634.666062][T24263] EXT4-fs (loop6): orphan cleanup on readonly fs [ 634.673809][T24263] EXT4-fs (loop6): 1 orphan inode deleted [ 634.681613][T24263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 634.767107][T24283] loop4: detected capacity change from 0 to 128 [ 634.793754][T24283] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 634.801682][T24283] FAT-fs (loop4): Filesystem has been set read-only [ 634.808477][T24283] syz.4.7049: attempt to access beyond end of device [ 634.808477][T24283] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 634.825587][T24283] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 634.833701][T24283] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 634.854083][T24283] syz.4.7049: attempt to access beyond end of device [ 634.854083][T24283] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 634.868121][T24283] syz.4.7049: attempt to access beyond end of device [ 634.868121][T24283] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 635.017492][T24306] rdma_op ffff888114872180 conn xmit_rdma 0000000000000000 [ 635.211515][T24321] loop4: detected capacity change from 0 to 256 [ 635.286303][T24324] lo speed is unknown, defaulting to 1000 [ 635.417379][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.488522][T24332] loop6: detected capacity change from 0 to 128 [ 635.537740][T24332] syz.6.7068: attempt to access beyond end of device [ 635.537740][T24332] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 635.703899][T24349] rdma_op ffff88810d5cad80 conn xmit_rdma 0000000000000000 [ 635.824429][T24358] loop6: detected capacity change from 0 to 1024 [ 635.834627][T24358] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 635.850989][T24358] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 635.859847][T24358] System zones: 0-1, 3-36 [ 635.864763][T24358] EXT4-fs (loop6): orphan cleanup on readonly fs [ 635.876120][T24358] EXT4-fs (loop6): 1 orphan inode deleted [ 635.884303][T24358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.085584][T24381] rdma_op ffff888114872980 conn xmit_rdma 0000000000000000 [ 636.495375][T24422] lo speed is unknown, defaulting to 1000 [ 636.647916][T20441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.741826][T24448] siw: device registration error -23 [ 636.748072][T24448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7118'. [ 636.759504][T24448] IPv6: sit1: Disabled Multicast RS [ 636.793801][T24453] siw: device registration error -23 [ 636.817856][T24453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7121'. [ 636.830992][T24453] IPv6: sit1: Disabled Multicast RS [ 637.158905][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7143'. [ 637.167822][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7143'. [ 637.183504][ T30] kauditd_printk_skb: 1481 callbacks suppressed [ 637.183521][ T30] audit: type=1326 audit(1741751144.136:33748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.6.7143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 637.213404][ T30] audit: type=1326 audit(1741751144.136:33749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.6.7143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 637.237919][ T30] audit: type=1326 audit(1741751144.136:33750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.6.7143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 637.261485][ T30] audit: type=1326 audit(1741751144.136:33751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.6.7143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 637.271492][T24506] loop6: detected capacity change from 0 to 128 [ 637.285358][ T30] audit: type=1326 audit(1741751144.136:33752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.6.7143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 637.315352][ T30] audit: type=1326 audit(1741751144.136:33753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.6.7143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 637.338956][ T30] audit: type=1326 audit(1741751144.136:33754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.6.7143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cee4d169 code=0x7ffc0000 [ 637.362725][ T30] audit: type=1326 audit(1741751144.216:33755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 637.386342][ T30] audit: type=1326 audit(1741751144.216:33756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 637.391530][T24506] syz.6.7145: attempt to access beyond end of device [ 637.391530][T24506] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 637.409918][ T30] audit: type=1326 audit(1741751144.216:33757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24502 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b18bad169 code=0x7ffc0000 [ 637.677731][T24527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7154'. [ 637.686786][T24527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7154'. [ 637.917820][T24544] loop6: detected capacity change from 0 to 256 [ 638.070366][T24554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7166'. [ 638.079502][T24554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7166'. [ 638.248489][T24570] siw: device registration error -23 [ 638.255697][T24573] lo speed is unknown, defaulting to 1000 [ 638.267237][T24570] IPv6: sit1: Disabled Multicast RS [ 638.323442][T24583] ================================================================== [ 638.331565][T24583] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 638.339325][T24583] [ 638.341658][T24583] write to 0xffff8881146c4f10 of 8 bytes by task 24581 on cpu 1: [ 638.349387][T24583] mas_wr_store_entry+0x1222/0x23f0 [ 638.354627][T24583] mas_store_prealloc+0x6bf/0x960 [ 638.359765][T24583] commit_merge+0x441/0x740 [ 638.364299][T24583] vma_expand+0x211/0x360 [ 638.368747][T24583] vma_merge_new_range+0x2da/0x340 [ 638.373976][T24583] mmap_region+0x7e0/0x1620 [ 638.378493][T24583] do_mmap+0x98a/0xc30 [ 638.382591][T24583] vm_mmap_pgoff+0x16d/0x2d0 [ 638.387208][T24583] ksys_mmap_pgoff+0xd0/0x330 [ 638.391915][T24583] x64_sys_call+0x1940/0x2dc0 [ 638.396617][T24583] do_syscall_64+0xc9/0x1c0 [ 638.401147][T24583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.407061][T24583] [ 638.409386][T24583] read to 0xffff8881146c4f10 of 8 bytes by task 24583 on cpu 0: [ 638.417021][T24583] mtree_range_walk+0x1b4/0x460 [ 638.421892][T24583] mas_walk+0x16e/0x320 [ 638.426063][T24583] lock_vma_under_rcu+0x95/0x270 [ 638.431010][T24583] exc_page_fault+0x150/0x650 [ 638.435702][T24583] asm_exc_page_fault+0x26/0x30 [ 638.440570][T24583] [ 638.442892][T24583] value changed: 0x00007f5a5bc55fff -> 0x00007f5a5bc34fff [ 638.450003][T24583] [ 638.452328][T24583] Reported by Kernel Concurrency Sanitizer on: [ 638.458485][T24583] CPU: 0 UID: 0 PID: 24583 Comm: syz.0.7178 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 638.469255][T24583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 638.479324][T24583] ==================================================================