last executing test programs: 1m38.231324915s ago: executing program 1 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7f}, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="075a1c28e008", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b583d719c1a8e8a1b4bd056d6f81e000200d384921e3b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) shutdown(0xffffffffffffffff, 0x0) 1m37.307381911s ago: executing program 1 (id=214): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0xd2c}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10, 0x4}, {0x0, 0x470a, 0x0, 0x8000000, 0x0, 0xffffffff}, {}, {0x2, 0x0, 0x0, 0x0, 0x3, 0x6}, {}, {}, {0x0, 0x2, 0x2, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x8, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x101}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3, 0x3}, {}, {0x0, 0xffffffff}, {0x4, 0x0, 0x0, 0x8510}, {0xffff, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0xfffffffd, 0xfffffffc, 0x4}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xd, 0x0, 0x1000, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0x8000000, 0x4}, {}, {0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0xffffffff, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000, 0x0, 0x2}, {0xfffffffc, 0x0, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x4}, {0x0, 0x0, 0x0, 0x3}, {0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000, 0x0, 0x40000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {0x2}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7030000000000007b01210000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007010000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x3e8, 0x300, 0x300, 0x1f0, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 1m35.939373319s ago: executing program 1 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg(r2, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {0x0}], 0x2, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) 1m35.91853059s ago: executing program 1 (id=226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x8, 0x6, 0xe, 0x7, 0x0, 0xf0dd, 0x10c05, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0xc257}, 0x10b251, 0xf188, 0x6, 0x0, 0xffffffffffff8089, 0xf5f, 0x557, 0x0, 0x3, 0x0, 0x101}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2d, 0x4, 0xfd, 0x0, 0x0, 0x4, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x4000, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, r1, 0xb) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$eJzs3U9vI2cZAPBnHHvZ7GabFDhAJUqhRdkVrJ00tI04lCIhOFUCyr2ExImiOHEUO+0mqtis+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIdjCgQN00NjjNJv4X7tOnE1+P2ky78y8M8/zOprxvJ7RTACX1lMR8VJEvJOm6a2ImM7nF/IhDtpDVu/t+28sZ0MSafrKP5JI8nmdbSX5+Hq+2tWI+NqXI76ZnIzb2NvfWKrVqjv5dKW5uV1p7O3fXt9cWquuVbcWFuafX3xh8bnFuZG080ZEvPjFv3z/Oz/90ou//Mzrf3z1bze/laU1lS8/2o73qNhvYbvppdZncXSFnfcZ7DwqtlqYm+xWY+LEnHunnBMAAN1l5/gfjIhPRsStmI6J/qezAAAAwCMo/fxU/DeJSLu70mM+AAAA8AgptO6BTQrl/F6AqSgUyuX2PbwfjmuFWr3R/PRqfXdrpX2v7EyUCqvrtepcfq/wTJSSbHq+VX53+tlj0wsR8XhEfG96sjVdXq7XVsb94wcAAABcEteP9f//Pd3u/3fcHWdyAAAAwOjMjDsBAAAA4NQN2/+/dsp5AAAAAKfH9X8AAAC40L7y8svZkHbef73y2t7uRv212yvVxkZ5c3e5vFzf2S6v1etrrWf2bQ7aXq1e3/5sbO3eqTSrjWalsXc1Nuu7W81X1x94BTYAAABwhh7/+Ju/TyLi4HOTrSFzZbhVh6wGnFfFw1KSj7vs1n94rD3+8xklBZyJiXEnAIxNcdwJAGNTGncCwNglA5b3vHnnN/n4E6PNBwAAGL3Zj/a+/l/ou+ZB/8XAuWcnhsvL9X+4vFrX/4e9k7fgbeBwkZQGnQH07SA4HsBF8NDX/wdK0/eUEAAAMHJTrSEplIud6UKhXI640XotQClZXa9V5yLisYj43XTpA9n0fKtmMrDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pWkSKQAAAHChRRT+mvyq/Sz/2elnpo7/PnAl+c905K8Iff1Hr/zgzlKzuTOfzf/n4fzmD/P5z47jFwwAAAC4FAa8wP9BnX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP09v03ljvDWcb9+xciYqZb/GJcbY2vRikirv0rieKR9ZKImBhB/Mnsz0e6xU+ytA5Ddos/OYL4B/f6xo+D/FPoFv/6COLDZfZmdvx5qdv+V4inWuPu+18x4oHp96v38S8Oj38TPfb/G0PGeOKtn1d6xr8X8UTxRPy7WYRO/KRH/KeHjP+Nr+/v91qW/jhituv3T9Kpkh0ho9Lc3K409vZvr28urVXXqlsLC/PPL76w+NziXGV1vVbN/3aN8d2P/eKdfu2/1iP+zID2P3Nia1e6xvjfW3fuf6hdLHWLf/PpLvF//ZO8xsn4hfy771N5OVs+2ykftMtHPfmz3z7Zr/0rPdo/6P9/s9dGj7n11W//aciqAMAZaOztbyzVatWdC1vIeulDVs7Ozs5FzgpDFCYefjt3R5pYmqZptk89xHaSGPenelgY95EJAAAYtXdP+sedCQAAAAAAAAAAAAAAAAAAAFxeZ/E4seMxDw5LySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9t9tlI") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000014c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1m35.720652911s ago: executing program 1 (id=227): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getrlimit(0xd, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80017af460a978268fe9c856e27d7b7a0000", @ANYRES16=r5, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xac, r5, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c77}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd1b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbdf2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a3200000000050004000000000014000780080012400000000005001500220000000500050002000000050001"], 0x64}}, 0x20000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x9, &(0x7f0000000100)={[{@nombcache}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@nojournal_checksum}, {@grpjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000780), 0x3ff, 0x2) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x5}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000040)={0xa0000000}) r11 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m35.410872703s ago: executing program 1 (id=232): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1414bb00000000000000000000000000000003040000000a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) mount$tmpfs(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 1m35.389236453s ago: executing program 32 (id=232): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1414bb00000000000000000000000000000003040000000a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) mount$tmpfs(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 1m28.042247728s ago: executing program 3 (id=321): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmmsg$inet6(r3, 0x0, 0x0, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x40800) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000fbdbdf25250000000e0101006e655f94f1b638ce4f3fe87491b91e7464657673696d0000000f0002"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6694e456001411ff000000000000000000001b000000000000000000000000000000ffff000000004e204e22"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 1m27.71739453s ago: executing program 3 (id=327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x66, 0x0, &(0x7f00000009c0)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a774c1e1380081ffad000400e8d50000000100000bb500000500242c1089064b55fca7b68e8f81bcc421a6252e239750facaee2c374eb7b985a76abe99a4bb774ff9823c4fc500317240b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f00000000c0)={0x32, 0x33, 0x1016, 0xa, 0x7, 0x100, 0x0, 0x53, 0xffffffffffffffff}) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000000206010800000000000000000000fff21400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365000086c2396e58348df381db614a0522b07f7cdf163c41739fcfc72dd89302be65e86aaa7fc39d431e0ceea6f67f5139a042b326eaca077648bf546f95d934fa3f84374ac9fcfa9b16987e3ffe108fc4c678fb804d1f63cc27f07174901e821b5525fed089249cffd4203c76d4d1369fd7f46312ea0ef3a344e22fda0247173815f8cf397b56f95ee61c9887adadbc41cf95690ca6abaa1d0c33cbf2facbbd19b79498524e860a07f829fc2674624358a21e0f8ebe8f559ce3c033605444721f236e8bedaff04cee9d7d9bd05fc063cd23529cf8ec77"], 0x60}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) splice(r7, 0x0, r5, 0x0, 0xfff, 0x2) 1m26.754328406s ago: executing program 3 (id=344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$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") 1m26.576966227s ago: executing program 3 (id=348): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x40000, @mcast1={0xff, 0x7}, 0xffffffff}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x301802, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f00000003c0)=r2}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x511, &(0x7f0000000dc0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1m25.854252971s ago: executing program 3 (id=356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x1250c1, 0x4}, 0x18) open_tree(r1, &(0x7f0000000b40)='./file0\x00', 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa20000000000000702000000ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r2, 0x0, 0x80000001}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xbd2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010326bd7000fbdbdf251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000005c0)={@initdev, 0x0}, &(0x7f0000000600)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x11, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000a80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044800) 1m25.342503575s ago: executing program 3 (id=362): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x5) r3 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (fail_nth: 1) 1m25.290328135s ago: executing program 33 (id=362): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x5) r3 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (fail_nth: 1) 2.986117372s ago: executing program 5 (id=1473): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kcmp(0x0, 0x0, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) 2.941164072s ago: executing program 5 (id=1475): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) setresuid(0x0, 0xee00, 0xffffffffffffffff) r2 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.848533242s ago: executing program 5 (id=1478): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40890) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x3, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 2.423697515s ago: executing program 4 (id=1490): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 2.332154146s ago: executing program 6 (id=1493): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.254042736s ago: executing program 4 (id=1494): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f0000000280)=@tcp, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) clock_gettime(0x0, &(0x7f0000000000)) 2.131009997s ago: executing program 4 (id=1495): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @local, @private}, &(0x7f0000000440)=0xc) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x1f4, 0x12, 0x800, 0x70bd2b, 0x25dfdbfb, {0x9, 0x5b, 0x10, 0x6, {0x4e24, 0x4e22, [0x5e31f2ed, 0x7b, 0x1, 0xc75c], [0xffebfffb, 0x7, 0xfffffff8, 0xfffffff4], r2, [0x400, 0x59d9]}, 0xf61, 0xf}, [@INET_DIAG_REQ_BYTECODE={0xde, 0x1, "0c9d1dc2953c6f02e12c9c6906144497c430e48a4a99696f889622140c9883d5ea2a17d62c060224938b22633ba952ef9cbac4564f693df646f4db05b24cd333121459b9bf3101fde14df525c1bba7b174aa5de3998462fbdeccdd1615f04eda0aba866d772001202a27288464d9bd3540a91e083ca590dc790477735e1f6d78efbc65629a4cc8ebf0e634adab1cadc9adc92f22bc4464589e42c84c1066e701bb35bba66d7cf62683953c00de97d35d54e5d3c381b0f5fa0179897f59982f0f9b477ba1b3ca3782b7f2b53b4a67c2701b26bd5a38b6916ee1e8"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "82ef9e654e81801916c58708b845134e3d2e6c25c60fd1998ee5c494e6294cd87130ef5ed2eaa856fb3761dcd7725eaf8abcf82fac02095f92f043208829ea8898af595477ba338d64079204ad479bf1fff9a41f6cf59d83b6c5ca2d7a41f5e93d16942f118f73e75e9d2fa6a0d5ad6af0f11d1cb9b6045573116811e74e2ccbbe6f0e0af3acd0707ae34848b3b3364d87e3c3bc36a506d1db88652be4e1c2bba890dfd3c1fbf1248ccbea8c9fe620d003ff6a49e6f4ce579e014a50945a3b118f14"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40800}, 0x20040844) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="180100001100000000fdffffff030000850000007b00000095963d444d9d570400000000000000a002b68d6fc0c712bf52377f14d7e32d13ee7b483e7ccf954fa9c954261c67bb675c837df2f731367a224f9abe8fcc29ae9cc4509bd577361c335e5ca62c1337bdf0e36f83533d3f6fb143fe439a"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000006bbff02000000000000000000000000000186009078000000c4896a97ce520f9200"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000ec0)={'syztnl1\x00', r2, 0x8, 0x40, 0x200, 0xe9e4, {{0xc, 0x4, 0x1, 0x8, 0x30, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@end, @noop, @noop, @timestamp_prespec={0x44, 0x14, 0x40, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1b}}]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, 0x0, &(0x7f0000000080)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_setup(0x81, &(0x7f0000000080)=0x0) io_submit(r8, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000040)='\x00', 0x1, 0x3, 0x0, 0x2}]) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x4a6ff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r10 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xce, &(0x7f0000000c80)={@random="4e1c29c51f5f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0xfff}}, {@llc_tr={0x11, {@snap={0xab, 0xab, 'c', "e5c615", 0x1, "064b2e220863a907f3c114016ee738f5aec9c0c7cbec6a1186eee84c3e3a14d7de7726c0cad4687ccde32e7dcf97174063cba3a7c519b0404a6ecf26308bb9809e071ba193ac0a1b648c7fe3f76ba9b12f568ce78dc203724ee8ee02ffa663f69942bf6b9ff72477af6ca2f68006a912896b8716d4791aa7ec8f3c2751684052ea50e5d7b04eb55f6f241a7bd478045f9b4f64541216f2d5290687df109f5e37c53c59bffa98449176351e8db5e7a6ce"}}}}}, 0x0) close(r10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0xc, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYBLOB="8a8baa259b1975f3e188f29b701a25a0158cf4823db761510d0c8af47e19c7f94af4cfcecd795ccd35f27cd33b30a227b0a2e1735caf0d11e22c020c6dc3ed031dc1ed82d484ba142ef5228fb15c28104f", @ANYBLOB="3424fb78f34c13ecf334da4aca882443dccf74dde9a76631df2c327d5d9443c0c3e41e7151cba4699283d6e6c524d7500db93b265649b13dfda725c7986347ac880ed32a7b81eee7546a5578aa102c3549b2441a3a21ba09bba8cff4209be5cdab42897bdcd9b0372b73a93e5398c5b2", @ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x2e, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001d00)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00'], 0x1, 0x26c, &(0x7f0000000340)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) 2.103698537s ago: executing program 6 (id=1496): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000002fa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7ffb}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x5) 2.008452078s ago: executing program 0 (id=1498): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kcmp(0x0, 0x0, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) 1.913809109s ago: executing program 0 (id=1499): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000b0ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000006b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.875000479s ago: executing program 0 (id=1502): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1008000, &(0x7f0000000380)=ANY=[@ANYBLOB="6572726f72733d636f6e7469646f733178666c000270792c6e6f646f74732c00"], 0x1, 0x29d, &(0x7f0000000000)="$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") dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) getuid() mount$9p_fd(0x0, 0x0, 0x0, 0x800048, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="41e5809741424f8f2aae2c00"]) rseq(0x0, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='logon\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='dos1xfloppy', r5) 1.013774704s ago: executing program 4 (id=1504): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 861.544495ms ago: executing program 6 (id=1505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x0) 860.936075ms ago: executing program 5 (id=1506): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0xd2c}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10, 0x4}, {0x0, 0x470a, 0x0, 0x8000000, 0x0, 0xffffffff}, {}, {0x2, 0x0, 0x0, 0x0, 0x3, 0x6}, {}, {}, {0x0, 0x2, 0x2, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x8, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x101}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3, 0x3}, {}, {0x0, 0xffffffff}, {0x4, 0x0, 0x0, 0x8510}, {0xffff, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0xfffffffd, 0xfffffffc, 0x4}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xd, 0x0, 0x1000, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0x8000000, 0x4}, {}, {0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0xffffffff, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000, 0x0, 0x2}, {0xfffffffc, 0x0, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x4}, {0x0, 0x0, 0x0, 0x3}, {0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000, 0x0, 0x40000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {0x2}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x3e8, 0x300, 0x300, 0x1f0, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 858.556195ms ago: executing program 0 (id=1507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff020000000000"], 0xa8}}, 0x40080) 806.675105ms ago: executing program 6 (id=1508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 800.362795ms ago: executing program 4 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 795.339375ms ago: executing program 0 (id=1510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 764.909685ms ago: executing program 5 (id=1511): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getrlimit(0xd, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80017af460a978268fe9c856e27d7b7a0000", @ANYRES16=r5, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xd8, r5, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c77}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd1b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbdf2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a3200000000050004000000000014000780080012400000000005001500220000000500050002000000050001"], 0x64}}, 0x20000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x9, &(0x7f0000000100)={[{@nombcache}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@nojournal_checksum}, {@grpjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 700.416826ms ago: executing program 6 (id=1512): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000003c0)="8df5863a27", 0x8600}], 0x1, 0x7a00, 0x0, 0x3) 567.154267ms ago: executing program 2 (id=1513): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) process_vm_writev(0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000580)=""/16, 0x10}], 0x7, &(0x7f0000001240)=[{&(0x7f0000000680)=""/56, 0x38}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000900)=""/48, 0x30}, {&(0x7f0000000940)=""/249, 0xf9}, {&(0x7f0000000a40)=""/121, 0x79}, {&(0x7f0000000ac0)=""/218, 0xda}, {&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000001180)=""/154, 0x9a}], 0x8, 0x0) 441.625247ms ago: executing program 0 (id=1514): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0xf8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) mlockall(0x3) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 441.318127ms ago: executing program 6 (id=1515): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0xf8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) mlockall(0x3) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 437.807237ms ago: executing program 4 (id=1516): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40890) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x3, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 434.290088ms ago: executing program 2 (id=1517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000980), 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r7, 0x0, 0x0, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x228, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x86}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x82}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fff, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @mcast1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x4}]}, 0x228}, 0x1, 0x0, 0x0, 0x20044800}, 0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "e6d34655882c98c6315de7832d135153b9"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 289.506379ms ago: executing program 2 (id=1518): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) setresuid(0x0, 0xee00, 0xffffffffffffffff) r2 = io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 138.052089ms ago: executing program 2 (id=1519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 20.42413ms ago: executing program 2 (id=1520): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff020000000000"], 0xa8}}, 0x40080) 19.09655ms ago: executing program 5 (id=1521): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0xd2c}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10, 0x4}, {0x0, 0x470a, 0x0, 0x8000000, 0x0, 0xffffffff}, {}, {0x2, 0x0, 0x0, 0x0, 0x3, 0x6}, {}, {}, {0x0, 0x2, 0x2, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x8, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x101}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3, 0x3}, {}, {0x0, 0xffffffff}, {0x4, 0x0, 0x0, 0x8510}, {0xffff, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0xfffffffd, 0xfffffffc, 0x4}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xd, 0x0, 0x1000, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0x8000000, 0x4}, {}, {0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0xffffffff, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000, 0x0, 0x2}, {0xfffffffc, 0x0, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x4}, {0x0, 0x0, 0x0, 0x3}, {0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000, 0x0, 0x40000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {0x2}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x3e8, 0x300, 0x300, 0x1f0, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 0s ago: executing program 2 (id=1522): r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x62040200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00', 0x7003, [0xffffffff, 0xe9, 0x0, 0x2, 0x2]}, &(0x7f00000000c0)=0x54) kernel console output (not intermixed with test programs): 11) [ 105.349175][ T6970] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.356809][ T6970] vhci_hcd vhci_hcd.0: Device attached [ 105.363048][ T6975] vhci_hcd: connection closed [ 105.363356][ T1602] vhci_hcd: stop threads [ 105.363776][ T6970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.368257][ T1602] vhci_hcd: release socket [ 105.368274][ T1602] vhci_hcd: disconnect device [ 105.377402][ T6962] vhci_hcd: connection closed [ 105.380653][ T6966] vhci_hcd: connection closed [ 105.385336][ T6954] vhci_hcd: connection closed [ 105.390102][ T6956] vhci_hcd: connection closed [ 105.399127][ T6972] vhci_hcd: connection closed [ 105.406746][ T1602] vhci_hcd: stop threads [ 105.409132][ T6970] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 105.413167][ T1602] vhci_hcd: release socket [ 105.413181][ T1602] vhci_hcd: disconnect device [ 105.413369][ T1602] vhci_hcd: stop threads [ 105.417509][ T6970] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.417580][ T6970] vhci_hcd vhci_hcd.0: Device attached [ 105.424122][ T1602] vhci_hcd: release socket [ 105.424136][ T1602] vhci_hcd: disconnect device [ 105.424776][ T1602] vhci_hcd: stop threads [ 105.437803][ T4160] usb 11-1: new low-speed USB device number 5 using vhci_hcd [ 105.445201][ T1602] vhci_hcd: release socket [ 105.452768][ T6985] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17) [ 105.455094][ T1602] vhci_hcd: disconnect device [ 105.459755][ T6985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.459829][ T6985] vhci_hcd vhci_hcd.0: Device attached [ 105.464756][ T1602] vhci_hcd: stop threads [ 105.504506][ T1602] vhci_hcd: release socket [ 105.508962][ T1602] vhci_hcd: disconnect device [ 105.540475][ T1602] vhci_hcd: stop threads [ 105.544805][ T1602] vhci_hcd: release socket [ 105.549423][ T1602] vhci_hcd: disconnect device [ 105.554619][ T6970] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(19) [ 105.561235][ T6970] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.569145][ T6970] vhci_hcd vhci_hcd.0: Device attached [ 105.576250][ T4183] usb 1-1: new low-speed USB device number 5 using vhci_hcd [ 105.603733][ T6986] vhci_hcd: connection closed [ 105.603753][ T6990] vhci_hcd: connection closed [ 105.604065][ T3442] vhci_hcd: stop threads [ 105.610839][ T6983] vhci_hcd: connection closed [ 105.613187][ T3442] vhci_hcd: release socket [ 105.613203][ T3442] vhci_hcd: disconnect device [ 105.617988][ T6980] vhci_hcd: connection closed [ 105.627036][ T3442] vhci_hcd: stop threads [ 105.633292][ T6971] vhci_hcd: connection reset by peer [ 105.636121][ T3442] vhci_hcd: release socket [ 105.640647][ T6978] vhci_hcd: connection closed [ 105.645695][ T3442] vhci_hcd: disconnect device [ 105.659770][ T3442] vhci_hcd: stop threads [ 105.664113][ T3442] vhci_hcd: release socket [ 105.668692][ T3442] vhci_hcd: disconnect device [ 105.673751][ T3442] vhci_hcd: stop threads [ 105.678038][ T3442] vhci_hcd: release socket [ 105.682463][ T3442] vhci_hcd: disconnect device [ 105.689189][ T3442] vhci_hcd: stop threads [ 105.693449][ T3442] vhci_hcd: release socket [ 105.697936][ T3442] vhci_hcd: disconnect device [ 105.702822][ T3442] vhci_hcd: stop threads [ 105.707144][ T3442] vhci_hcd: release socket [ 105.711565][ T3442] vhci_hcd: disconnect device [ 105.747980][ T6999] loop4: detected capacity change from 0 to 512 [ 105.755575][ T6999] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.761920][ T6999] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 105.770170][ T6999] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 105.784687][ T6999] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1096: attempt to clear invalid blocks 2 len 1 [ 105.798422][ T6999] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1096: invalid indirect mapped block 1819239214 (level 0) [ 105.812540][ T6999] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1096: invalid indirect mapped block 1819239214 (level 1) [ 105.826811][ T6999] EXT4-fs (loop4): 1 truncate cleaned up [ 105.832923][ T6999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.863219][ T7004] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1097'. [ 105.873235][ T7004] net_ratelimit: 15 callbacks suppressed [ 105.873248][ T7004] netlink: zone id is out of range [ 105.884056][ T7004] netlink: zone id is out of range [ 105.889398][ T7004] FAULT_INJECTION: forcing a failure. [ 105.889398][ T7004] name failslab, interval 1, probability 0, space 0, times 0 [ 105.902023][ T7004] CPU: 0 UID: 0 PID: 7004 Comm: syz.6.1097 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.902055][ T7004] Tainted: [W]=WARN [ 105.902106][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.902122][ T7004] Call Trace: [ 105.902129][ T7004] [ 105.902137][ T7004] __dump_stack+0x1d/0x30 [ 105.902163][ T7004] dump_stack_lvl+0xe8/0x140 [ 105.902218][ T7004] dump_stack+0x15/0x1b [ 105.902237][ T7004] should_fail_ex+0x265/0x280 [ 105.902313][ T7004] ? ovs_ct_limit_cmd_set+0x23c/0x5d0 [ 105.902342][ T7004] should_failslab+0x8c/0xb0 [ 105.902371][ T7004] __kmalloc_cache_noprof+0x4c/0x4a0 [ 105.902452][ T7004] ovs_ct_limit_cmd_set+0x23c/0x5d0 [ 105.902489][ T7004] genl_family_rcv_msg_doit+0x143/0x1b0 [ 105.902525][ T7004] genl_rcv_msg+0x422/0x460 [ 105.902602][ T7004] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 105.902679][ T7004] netlink_rcv_skb+0x123/0x220 [ 105.902791][ T7004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.902824][ T7004] genl_rcv+0x28/0x40 [ 105.902849][ T7004] netlink_unicast+0x5c0/0x690 [ 105.902948][ T7004] netlink_sendmsg+0x58b/0x6b0 [ 105.902972][ T7004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.903037][ T7004] __sock_sendmsg+0x145/0x180 [ 105.903067][ T7004] ____sys_sendmsg+0x31e/0x4e0 [ 105.903150][ T7004] ___sys_sendmsg+0x17b/0x1d0 [ 105.903184][ T7004] __x64_sys_sendmsg+0xd4/0x160 [ 105.903265][ T7004] x64_sys_call+0x191e/0x3000 [ 105.903293][ T7004] do_syscall_64+0xd2/0x200 [ 105.903310][ T7004] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.903381][ T7004] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.903409][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.903429][ T7004] RIP: 0033:0x7f8b6bfbf6c9 [ 105.903447][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.903468][ T7004] RSP: 002b:00007f8b6aa1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.903599][ T7004] RAX: ffffffffffffffda RBX: 00007f8b6c215fa0 RCX: 00007f8b6bfbf6c9 [ 105.903614][ T7004] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 105.903626][ T7004] RBP: 00007f8b6aa1f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.903638][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.903650][ T7004] R13: 00007f8b6c216038 R14: 00007f8b6c215fa0 R15: 00007ffc776b04c8 [ 105.903667][ T7004] [ 106.142956][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.398510][ T7030] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 106.398510][ T7030] program syz.0.1107 not setting count and/or reply_len properly [ 106.537247][ T7039] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 106.543802][ T7039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.551367][ T7039] vhci_hcd vhci_hcd.0: Device attached [ 106.577134][ T7042] loop2: detected capacity change from 0 to 512 [ 106.612442][ T7047] loop5: detected capacity change from 0 to 128 [ 106.619344][ T7042] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.625730][ T7042] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 106.635127][ T7047] FAT-fs (loop5): Directory bread(block 162) failed [ 106.641847][ T7047] FAT-fs (loop5): Directory bread(block 163) failed [ 106.684622][ T7053] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 106.716173][ T7053] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 106.722792][ T7053] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.730465][ T7053] vhci_hcd vhci_hcd.0: Device attached [ 106.748509][ T7047] FAT-fs (loop5): Directory bread(block 164) failed [ 106.758817][ T7042] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 106.783455][ T7047] FAT-fs (loop5): Directory bread(block 165) failed [ 106.792300][ T7047] FAT-fs (loop5): Directory bread(block 166) failed [ 106.809435][ T7047] FAT-fs (loop5): Directory bread(block 167) failed [ 106.817301][ T7059] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(20) [ 106.823906][ T7059] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.831509][ T7059] vhci_hcd vhci_hcd.0: Device attached [ 106.842280][ T7042] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1109: attempt to clear invalid blocks 2 len 1 [ 106.860696][ T7047] FAT-fs (loop5): Directory bread(block 168) failed [ 106.936442][ T7047] FAT-fs (loop5): Directory bread(block 169) failed [ 106.969582][ T7039] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 106.976190][ T7039] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.983911][ T7039] vhci_hcd vhci_hcd.0: Device attached [ 107.007393][ T7047] FAT-fs (loop5): Directory bread(block 162) failed [ 107.014014][ T7047] FAT-fs (loop5): Directory bread(block 163) failed [ 107.046392][ T7048] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 107.053023][ T7048] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.060654][ T7048] vhci_hcd vhci_hcd.0: Device attached [ 107.060951][ T7042] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1109: invalid indirect mapped block 1819239214 (level 0) [ 107.081166][ T7042] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1109: invalid indirect mapped block 1819239214 (level 1) [ 107.088274][ T7047] syz.5.1111: attempt to access beyond end of device [ 107.088274][ T7047] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 107.095586][ T7042] EXT4-fs (loop2): 1 truncate cleaned up [ 107.117603][ T7053] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(11) [ 107.124297][ T7053] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.132065][ T7053] vhci_hcd vhci_hcd.0: Device attached [ 107.132425][ T7042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.146456][ T7047] syz.5.1111: attempt to access beyond end of device [ 107.146456][ T7047] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 107.198653][ T7061] vhci_hcd: connection closed [ 107.198690][ T7056] vhci_hcd: connection closed [ 107.203500][ T7065] vhci_hcd: connection closed [ 107.203547][ T7044] vhci_hcd: connection closed [ 107.208214][ T7049] vhci_hcd: connection closed [ 107.208732][ T1602] vhci_hcd: stop threads [ 107.226569][ T1602] vhci_hcd: release socket [ 107.230999][ T1602] vhci_hcd: disconnect device [ 107.236119][ T7040] vhci_hcd: connection closed [ 107.250018][ T1602] vhci_hcd: stop threads [ 107.259063][ T1602] vhci_hcd: release socket [ 107.263493][ T1602] vhci_hcd: disconnect device [ 107.278975][ T1602] vhci_hcd: stop threads [ 107.283231][ T1602] vhci_hcd: release socket [ 107.287733][ T1602] vhci_hcd: disconnect device [ 107.315222][ T1602] vhci_hcd: stop threads [ 107.319554][ T1602] vhci_hcd: release socket [ 107.324026][ T1602] vhci_hcd: disconnect device [ 107.340553][ T7079] loop5: detected capacity change from 0 to 128 [ 107.347877][ T1602] vhci_hcd: stop threads [ 107.352132][ T1602] vhci_hcd: release socket [ 107.356599][ T1602] vhci_hcd: disconnect device [ 107.356944][ T7079] FAT-fs (loop5): Directory bread(block 162) failed [ 107.361544][ T1602] vhci_hcd: stop threads [ 107.372281][ T1602] vhci_hcd: release socket [ 107.376729][ T1602] vhci_hcd: disconnect device [ 107.380895][ T7079] FAT-fs (loop5): Directory bread(block 163) failed [ 107.396847][ T7079] FAT-fs (loop5): Directory bread(block 164) failed [ 107.403465][ T7079] FAT-fs (loop5): Directory bread(block 165) failed [ 107.410359][ T7079] FAT-fs (loop5): Directory bread(block 166) failed [ 107.417053][ T7079] FAT-fs (loop5): Directory bread(block 167) failed [ 107.423754][ T7079] FAT-fs (loop5): Directory bread(block 168) failed [ 107.430464][ T7079] FAT-fs (loop5): Directory bread(block 169) failed [ 107.448663][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.460360][ T7079] FAT-fs (loop5): Directory bread(block 162) failed [ 107.467176][ T7079] FAT-fs (loop5): Directory bread(block 163) failed [ 107.474643][ T7079] syz.5.1120: attempt to access beyond end of device [ 107.474643][ T7079] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 107.487863][ T7079] syz.5.1120: attempt to access beyond end of device [ 107.487863][ T7079] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 107.663900][ T7101] loop4: detected capacity change from 0 to 128 [ 107.680644][ T7101] FAT-fs (loop4): Directory bread(block 162) failed [ 107.698128][ T7101] FAT-fs (loop4): Directory bread(block 163) failed [ 107.704836][ T7101] FAT-fs (loop4): Directory bread(block 164) failed [ 107.739371][ T7101] FAT-fs (loop4): Directory bread(block 165) failed [ 107.746008][ T7101] FAT-fs (loop4): Directory bread(block 166) failed [ 107.760465][ T7101] FAT-fs (loop4): Directory bread(block 167) failed [ 107.767208][ T7101] FAT-fs (loop4): Directory bread(block 168) failed [ 107.773905][ T7101] FAT-fs (loop4): Directory bread(block 169) failed [ 107.811726][ T7108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7108 comm=syz.5.1132 [ 107.844529][ T7112] FAT-fs (loop4): Directory bread(block 162) failed [ 107.854095][ T7112] FAT-fs (loop4): Directory bread(block 163) failed [ 107.884640][ T7112] syz.4.1129: attempt to access beyond end of device [ 107.884640][ T7112] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 107.918925][ T7112] syz.4.1129: attempt to access beyond end of device [ 107.918925][ T7112] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 108.042845][ T7120] loop0: detected capacity change from 0 to 512 [ 108.070048][ T7120] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.076516][ T7120] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 108.091929][ T7120] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 108.113029][ T7120] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1136: attempt to clear invalid blocks 2 len 1 [ 108.218393][ T7120] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1136: invalid indirect mapped block 1819239214 (level 0) [ 108.242578][ T7120] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1136: invalid indirect mapped block 1819239214 (level 1) [ 108.257135][ T7120] EXT4-fs (loop0): 1 truncate cleaned up [ 108.263454][ T7120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.700787][ T7129] loop5: detected capacity change from 0 to 512 [ 108.760584][ T7129] EXT4-fs: Ignoring removed bh option [ 108.773672][ T7129] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.787148][ T7129] EXT4-fs (loop5): 1 truncate cleaned up [ 108.797995][ T7129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.863731][ T4240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.881791][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.895742][ T7143] loop5: detected capacity change from 0 to 512 [ 108.908555][ T7143] EXT4-fs (loop5): orphan cleanup on readonly fs [ 108.914935][ T7143] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 108.923740][ T7143] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 108.938611][ T7143] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1143: attempt to clear invalid blocks 2 len 1 [ 108.964848][ T7143] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1143: invalid indirect mapped block 1819239214 (level 0) [ 108.979217][ T7143] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1143: invalid indirect mapped block 1819239214 (level 1) [ 109.004081][ T7143] EXT4-fs (loop5): 1 truncate cleaned up [ 109.011527][ T7143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.044329][ T7152] loop4: detected capacity change from 0 to 128 [ 109.051097][ T4240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.062134][ T7152] FAT-fs (loop4): Directory bread(block 162) failed [ 109.069470][ T7152] FAT-fs (loop4): Directory bread(block 163) failed [ 109.076907][ T7152] FAT-fs (loop4): Directory bread(block 164) failed [ 109.083856][ T7152] FAT-fs (loop4): Directory bread(block 165) failed [ 109.090811][ T7152] FAT-fs (loop4): Directory bread(block 166) failed [ 109.097711][ T7152] FAT-fs (loop4): Directory bread(block 167) failed [ 109.104468][ T7152] FAT-fs (loop4): Directory bread(block 168) failed [ 109.111303][ T7152] FAT-fs (loop4): Directory bread(block 169) failed [ 109.120774][ T7152] FAT-fs (loop4): Directory bread(block 162) failed [ 109.128126][ T7152] FAT-fs (loop4): Directory bread(block 163) failed [ 109.135293][ T7152] syz.4.1147: attempt to access beyond end of device [ 109.135293][ T7152] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 109.148621][ T7152] syz.4.1147: attempt to access beyond end of device [ 109.148621][ T7152] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 109.390064][ T7171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7171 comm=syz.4.1151 [ 110.344129][ T7183] syz.0.1157 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 110.349273][ T7184] loop6: detected capacity change from 0 to 512 [ 110.364625][ T7184] EXT4-fs (loop6): orphan cleanup on readonly fs [ 110.371033][ T7184] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 110.379718][ T7184] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 110.400976][ T7184] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1159: attempt to clear invalid blocks 2 len 1 [ 110.426903][ T7190] loop4: detected capacity change from 0 to 128 [ 110.444203][ T7184] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1159: invalid indirect mapped block 1819239214 (level 0) [ 110.458265][ T7184] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1159: invalid indirect mapped block 1819239214 (level 1) [ 110.472774][ T7184] EXT4-fs (loop6): 1 truncate cleaned up [ 110.490981][ T7183] loop0: detected capacity change from 0 to 512 [ 110.493455][ T7190] FAT-fs (loop4): Directory bread(block 162) failed [ 110.504092][ T7190] FAT-fs (loop4): Directory bread(block 163) failed [ 110.504352][ T29] kauditd_printk_skb: 898 callbacks suppressed [ 110.504398][ T29] audit: type=1400 audit(1762356226.424:11417): avc: denied { mount } for pid=7178 comm="syz.0.1157" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 110.518566][ T7190] FAT-fs (loop4): Directory bread(block 164) failed [ 110.538850][ T4160] usb 11-1: enqueue for inactive port 0 [ 110.549025][ T7184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.552928][ T4160] usb 11-1: enqueue for inactive port 0 [ 110.564747][ T7190] FAT-fs (loop4): Directory bread(block 165) failed [ 110.569336][ T29] audit: type=1326 audit(1762356226.484:11418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 110.575973][ T7190] FAT-fs (loop4): Directory bread(block 166) failed [ 110.598911][ T29] audit: type=1326 audit(1762356226.484:11419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 110.606247][ T4183] usb 1-1: enqueue for inactive port 0 [ 110.628928][ T29] audit: type=1326 audit(1762356226.504:11420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 110.635770][ T7190] FAT-fs (loop4): Directory bread(block 167) failed [ 110.657832][ T29] audit: type=1326 audit(1762356226.504:11421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 110.665977][ T4183] usb 1-1: enqueue for inactive port 0 [ 110.687859][ T29] audit: type=1326 audit(1762356226.504:11422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 110.716910][ T4160] vhci_hcd: vhci_device speed not set [ 110.722745][ T7190] FAT-fs (loop4): Directory bread(block 168) failed [ 110.729405][ T7190] FAT-fs (loop4): Directory bread(block 169) failed [ 110.736825][ T29] audit: type=1326 audit(1762356226.654:11423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 110.760421][ T29] audit: type=1326 audit(1762356226.654:11424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 110.784262][ T29] audit: type=1326 audit(1762356226.654:11425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 110.787354][ T7190] FAT-fs (loop4): Directory bread(block 162) failed [ 110.807802][ T29] audit: type=1326 audit(1762356226.654:11426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 110.814481][ T7190] FAT-fs (loop4): Directory bread(block 163) failed [ 110.844436][ T4183] vhci_hcd: vhci_device speed not set [ 110.848572][ T4660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.852678][ T7190] syz.4.1161: attempt to access beyond end of device [ 110.852678][ T7190] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 110.872105][ T7190] syz.4.1161: attempt to access beyond end of device [ 110.872105][ T7190] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 110.885621][ T7183] EXT4-fs (loop0): too many log groups per flexible block group [ 110.893650][ T7183] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 110.900658][ T7183] EXT4-fs (loop0): mount failed [ 110.954330][ T7212] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 110.960881][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.968514][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 111.001545][ T7220] loop6: detected capacity change from 0 to 128 [ 111.008717][ T7220] FAT-fs (loop6): Directory bread(block 162) failed [ 111.015411][ T7220] FAT-fs (loop6): Directory bread(block 163) failed [ 111.026187][ T7220] FAT-fs (loop6): Directory bread(block 164) failed [ 111.035071][ T7204] loop5: detected capacity change from 0 to 2048 [ 111.041869][ T7220] FAT-fs (loop6): Directory bread(block 165) failed [ 111.048758][ T7212] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 111.055362][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.062994][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 111.071890][ T7220] FAT-fs (loop6): Directory bread(block 166) failed [ 111.088868][ T7212] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 111.091112][ T7220] FAT-fs (loop6): Directory bread(block 167) failed [ 111.095482][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.109775][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 111.115333][ T7220] FAT-fs (loop6): Directory bread(block 168) failed [ 111.118915][ T7204] GPT:first_usable_lbas don't match. [ 111.127332][ T7204] GPT:34 != 290 [ 111.130799][ T7204] GPT: Use GNU Parted to correct GPT errors. [ 111.133786][ T7227] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.136870][ T7204] loop5: p1 p2 p3 [ 111.157550][ T7220] FAT-fs (loop6): Directory bread(block 169) failed [ 111.165653][ T7227] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 111.172267][ T7227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.179905][ T7227] vhci_hcd vhci_hcd.0: Device attached [ 111.251163][ T7227] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(19) [ 111.257863][ T7227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.265494][ T7227] vhci_hcd vhci_hcd.0: Device attached [ 111.293297][ T7204] 9pnet_fd: Insufficient options for proto=fd [ 111.310985][ T7212] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(13) [ 111.317610][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.325214][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 111.331895][ T7220] FAT-fs (loop6): Directory bread(block 162) failed [ 111.339513][ T7220] FAT-fs (loop6): Directory bread(block 163) failed [ 111.456480][ T7225] vhci_hcd: connection closed [ 111.466219][ T7232] vhci_hcd: connection closed [ 111.471024][ T7235] vhci_hcd: connection closed [ 111.476186][ T7213] vhci_hcd: connection closed [ 111.481032][ T7228] vhci_hcd: connection closed [ 111.493918][ T7221] vhci_hcd: connection closed [ 111.505946][ T2627] vhci_hcd: stop threads [ 111.514949][ T2627] vhci_hcd: release socket [ 111.519412][ T2627] vhci_hcd: disconnect device [ 111.571834][ T2627] vhci_hcd: stop threads [ 111.576212][ T2627] vhci_hcd: release socket [ 111.580726][ T2627] vhci_hcd: disconnect device [ 111.676407][ T2627] vhci_hcd: stop threads [ 111.680785][ T2627] vhci_hcd: release socket [ 111.685221][ T2627] vhci_hcd: disconnect device [ 111.771453][ T2627] vhci_hcd: stop threads [ 111.775738][ T2627] vhci_hcd: release socket [ 111.780184][ T2627] vhci_hcd: disconnect device [ 111.785164][ T2627] vhci_hcd: stop threads [ 111.789456][ T2627] vhci_hcd: release socket [ 111.793886][ T2627] vhci_hcd: disconnect device [ 111.799956][ T2627] vhci_hcd: stop threads [ 111.804216][ T2627] vhci_hcd: release socket [ 111.808746][ T2627] vhci_hcd: disconnect device [ 111.819320][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1177'. [ 111.838088][ T7246] loop5: detected capacity change from 0 to 512 [ 111.876467][ T4183] usb 1-1: enqueue for inactive port 0 [ 111.882176][ T4183] usb 1-1: enqueue for inactive port 0 [ 111.885836][ T7251] loop6: detected capacity change from 0 to 128 [ 111.887679][ T4183] usb 1-1: enqueue for inactive port 0 [ 111.900798][ T7246] EXT4-fs (loop5): orphan cleanup on readonly fs [ 111.907270][ T7246] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 111.923990][ T7251] FAT-fs (loop6): Directory bread(block 162) failed [ 111.930776][ T7246] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 111.945172][ T7251] FAT-fs (loop6): Directory bread(block 163) failed [ 111.946414][ T7246] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1175: attempt to clear invalid blocks 2 len 1 [ 111.951859][ T7251] FAT-fs (loop6): Directory bread(block 164) failed [ 111.971237][ T4183] vhci_hcd: vhci_device speed not set [ 111.976600][ T7251] FAT-fs (loop6): Directory bread(block 165) failed [ 111.986230][ T7246] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1175: invalid indirect mapped block 1819239214 (level 0) [ 112.000266][ T7251] FAT-fs (loop6): Directory bread(block 166) failed [ 112.007129][ T7251] FAT-fs (loop6): Directory bread(block 167) failed [ 112.014062][ T7246] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1175: invalid indirect mapped block 1819239214 (level 1) [ 112.014082][ T7251] FAT-fs (loop6): Directory bread(block 168) failed [ 112.025841][ T7246] EXT4-fs (loop5): 1 truncate cleaned up [ 112.028553][ T7251] FAT-fs (loop6): Directory bread(block 169) failed [ 112.034646][ T7255] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 112.034726][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.047025][ T7246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.053603][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 112.113997][ T7260] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 112.120540][ T7260] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.128167][ T7260] vhci_hcd vhci_hcd.0: Device attached [ 112.157179][ T7264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7264 comm=syz.0.1181 [ 112.166577][ T7251] FAT-fs (loop6): Directory bread(block 162) failed [ 112.176548][ T7251] FAT-fs (loop6): Directory bread(block 163) failed [ 112.183531][ T7251] bio_check_eod: 2 callbacks suppressed [ 112.183546][ T7251] syz.6.1178: attempt to access beyond end of device [ 112.183546][ T7251] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 112.206200][ T7251] syz.6.1178: attempt to access beyond end of device [ 112.206200][ T7251] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 112.219853][ T7255] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 112.226500][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.234154][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 112.251411][ T7255] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.260522][ T7255] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 112.267296][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.274959][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 112.291451][ T7255] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17) [ 112.298062][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.305590][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 112.313674][ T7276] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 112.320203][ T7276] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.327735][ T7276] vhci_hcd vhci_hcd.0: Device attached [ 112.335056][ T4240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.336247][ T3393] usb 5-1: new low-speed USB device number 5 using vhci_hcd [ 112.351607][ T7255] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(19) [ 112.358226][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.365866][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 112.373096][ T7276] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 112.379626][ T7276] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.387263][ T7276] vhci_hcd vhci_hcd.0: Device attached [ 112.400350][ T7289] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 112.407061][ T7289] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.414666][ T7289] vhci_hcd vhci_hcd.0: Device attached [ 112.440834][ T7283] loop6: detected capacity change from 0 to 512 [ 112.448000][ T7256] vhci_hcd: connection reset by peer [ 112.448043][ T7277] vhci_hcd: connection closed [ 112.453470][ T7261] vhci_hcd: connection closed [ 112.453544][ T7268] vhci_hcd: connection closed [ 112.460432][ T7283] EXT4-fs (loop6): orphan cleanup on readonly fs [ 112.463138][ T3442] vhci_hcd: stop threads [ 112.467638][ T7283] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 112.473926][ T3442] vhci_hcd: release socket [ 112.473943][ T3442] vhci_hcd: disconnect device [ 112.474057][ T7273] vhci_hcd: connection closed [ 112.495920][ T7279] vhci_hcd: connection closed [ 112.506376][ T3442] vhci_hcd: stop threads [ 112.515325][ T3442] vhci_hcd: release socket [ 112.519775][ T3442] vhci_hcd: disconnect device [ 112.526593][ T7283] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 112.555684][ T7285] vhci_hcd: connection closed [ 112.563669][ T7283] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1185: attempt to clear invalid blocks 2 len 1 [ 112.564433][ T7280] vhci_hcd: connection closed [ 112.573842][ T7283] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1185: invalid indirect mapped block 1819239214 (level 0) [ 112.582020][ T7290] vhci_hcd: connection closed [ 112.604568][ T7283] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1185: invalid indirect mapped block 1819239214 (level 1) [ 112.624610][ T3442] vhci_hcd: stop threads [ 112.625158][ T7283] EXT4-fs (loop6): 1 truncate cleaned up [ 112.628937][ T3442] vhci_hcd: release socket [ 112.628950][ T3442] vhci_hcd: disconnect device [ 112.634925][ T7283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.639344][ T3442] vhci_hcd: stop threads [ 112.643736][ T3414] usb 9-1: new low-speed USB device number 5 using vhci_hcd [ 112.656009][ T3442] vhci_hcd: release socket [ 112.656025][ T3442] vhci_hcd: disconnect device [ 112.663729][ T7281] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 112.676414][ T3442] vhci_hcd: stop threads [ 112.686970][ T3442] vhci_hcd: release socket [ 112.691441][ T3442] vhci_hcd: disconnect device [ 112.716760][ T3442] vhci_hcd: stop threads [ 112.721074][ T3442] vhci_hcd: release socket [ 112.725514][ T3442] vhci_hcd: disconnect device [ 112.759337][ T3442] vhci_hcd: stop threads [ 112.763633][ T3442] vhci_hcd: release socket [ 112.768087][ T3442] vhci_hcd: disconnect device [ 112.790296][ T4660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.799787][ T3442] vhci_hcd: stop threads [ 112.804047][ T3442] vhci_hcd: release socket [ 112.808519][ T3442] vhci_hcd: disconnect device [ 112.814877][ T3442] vhci_hcd: stop threads [ 112.819160][ T3442] vhci_hcd: release socket [ 112.823591][ T3442] vhci_hcd: disconnect device [ 113.222259][ T7321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7321 comm=syz.0.1195 [ 113.677570][ T7325] loop5: detected capacity change from 0 to 128 [ 113.687448][ T7325] FAT-fs (loop5): Directory bread(block 162) failed [ 113.694296][ T7325] FAT-fs (loop5): Directory bread(block 163) failed [ 113.703956][ T7325] FAT-fs (loop5): Directory bread(block 164) failed [ 113.713675][ T7325] FAT-fs (loop5): Directory bread(block 165) failed [ 113.720892][ T7325] FAT-fs (loop5): Directory bread(block 166) failed [ 113.727629][ T7325] FAT-fs (loop5): Directory bread(block 167) failed [ 113.734251][ T7325] FAT-fs (loop5): Directory bread(block 168) failed [ 113.741133][ T7325] FAT-fs (loop5): Directory bread(block 169) failed [ 113.749358][ T7325] FAT-fs (loop5): Directory bread(block 162) failed [ 113.755986][ T7325] FAT-fs (loop5): Directory bread(block 163) failed [ 113.763084][ T7325] syz.5.1196: attempt to access beyond end of device [ 113.763084][ T7325] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 113.776332][ T7325] syz.5.1196: attempt to access beyond end of device [ 113.776332][ T7325] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 113.848308][ T7333] loop2: detected capacity change from 0 to 512 [ 113.858436][ T7333] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1200: invalid block [ 113.871225][ T7333] EXT4-fs (loop2): Remounting filesystem read-only [ 113.882746][ T7333] EXT4-fs (loop2): 2 truncates cleaned up [ 113.888990][ T7333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.919937][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.934384][ T7329] loop5: detected capacity change from 0 to 512 [ 113.956368][ T7329] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.962742][ T7329] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 113.971072][ T7329] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 113.985841][ T7329] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1198: attempt to clear invalid blocks 2 len 1 [ 113.999395][ T7329] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1198: invalid indirect mapped block 1819239214 (level 0) [ 114.023856][ T7329] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1198: invalid indirect mapped block 1819239214 (level 1) [ 114.047974][ T7329] EXT4-fs (loop5): 1 truncate cleaned up [ 114.054062][ T7329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.162408][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1203'. [ 114.173636][ T7346] loop2: detected capacity change from 0 to 512 [ 114.329973][ T4240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.584433][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1202'. [ 114.655576][ T7346] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.662002][ T7346] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 114.674318][ T7346] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 114.702151][ T7346] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1201: attempt to clear invalid blocks 2 len 1 [ 114.715411][ T7346] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1201: invalid indirect mapped block 1819239214 (level 0) [ 114.729580][ T7346] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1201: invalid indirect mapped block 1819239214 (level 1) [ 114.745585][ T7346] EXT4-fs (loop2): 1 truncate cleaned up [ 114.752246][ T7346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.781621][ T7357] random: crng reseeded on system resumption [ 114.792210][ T7355] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 114.808347][ T7357] loop4: detected capacity change from 0 to 512 [ 114.829426][ T7357] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.842520][ T7357] EXT4-fs (loop4): 1 truncate cleaned up [ 114.855099][ T7357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.922570][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.951638][ T7368] loop0: detected capacity change from 0 to 128 [ 114.959385][ T7366] loop2: detected capacity change from 0 to 128 [ 114.968601][ T7357] Restarting kernel threads ... [ 114.974215][ T7357] Done restarting kernel threads. [ 114.979661][ T7368] FAT-fs (loop0): Directory bread(block 162) failed [ 114.986858][ T7368] FAT-fs (loop0): Directory bread(block 163) failed [ 114.993462][ T7368] FAT-fs (loop0): Directory bread(block 164) failed [ 115.005943][ T7366] FAT-fs (loop2): Directory bread(block 162) failed [ 115.025021][ T7368] FAT-fs (loop0): Directory bread(block 165) failed [ 115.035961][ T7368] FAT-fs (loop0): Directory bread(block 166) failed [ 115.042669][ T7368] FAT-fs (loop0): Directory bread(block 167) failed [ 115.049313][ T7368] FAT-fs (loop0): Directory bread(block 168) failed [ 115.056003][ T7368] FAT-fs (loop0): Directory bread(block 169) failed [ 115.062790][ T7366] FAT-fs (loop2): Directory bread(block 163) failed [ 115.073738][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.082804][ T7366] FAT-fs (loop2): Directory bread(block 164) failed [ 115.091339][ T7368] FAT-fs (loop0): Directory bread(block 162) failed [ 115.098292][ T7366] FAT-fs (loop2): Directory bread(block 165) failed [ 115.105253][ T7368] FAT-fs (loop0): Directory bread(block 163) failed [ 115.112201][ T7366] FAT-fs (loop2): Directory bread(block 166) failed [ 115.119590][ T7368] syz.0.1208: attempt to access beyond end of device [ 115.119590][ T7368] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 115.132913][ T7366] FAT-fs (loop2): Directory bread(block 167) failed [ 115.139607][ T7368] syz.0.1208: attempt to access beyond end of device [ 115.139607][ T7368] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 115.153212][ T7366] FAT-fs (loop2): Directory bread(block 168) failed [ 115.159915][ T7366] FAT-fs (loop2): Directory bread(block 169) failed [ 115.173804][ T7366] FAT-fs (loop2): Directory bread(block 162) failed [ 115.190798][ T7366] FAT-fs (loop2): Directory bread(block 163) failed [ 115.201667][ T7366] syz.2.1206: attempt to access beyond end of device [ 115.201667][ T7366] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 115.214998][ T7366] syz.2.1206: attempt to access beyond end of device [ 115.214998][ T7366] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 115.343256][ T7382] random: crng reseeded on system resumption [ 115.358274][ T7380] loop0: detected capacity change from 0 to 512 [ 115.367160][ T7382] Restarting kernel threads ... [ 115.372310][ T7382] Done restarting kernel threads. [ 115.407838][ T7380] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.414191][ T7380] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 115.434107][ T7380] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 115.448922][ T7380] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1213: attempt to clear invalid blocks 2 len 1 [ 115.462008][ T7380] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1213: invalid indirect mapped block 1819239214 (level 0) [ 115.476266][ T7380] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1213: invalid indirect mapped block 1819239214 (level 1) [ 115.490536][ T7380] EXT4-fs (loop0): 1 truncate cleaned up [ 115.496469][ T7380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.510562][ T29] kauditd_printk_skb: 849 callbacks suppressed [ 115.510629][ T29] audit: type=1326 audit(1762356231.444:12276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87ccfcdf10 code=0x7ffc0000 [ 115.549953][ T29] audit: type=1326 audit(1762356231.474:12277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f87ccfce417 code=0x7ffc0000 [ 115.573443][ T29] audit: type=1326 audit(1762356231.474:12278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87ccfcdf10 code=0x7ffc0000 [ 115.596950][ T29] audit: type=1326 audit(1762356231.474:12279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 115.620447][ T29] audit: type=1326 audit(1762356231.484:12280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 115.644031][ T29] audit: type=1326 audit(1762356231.484:12281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 115.667640][ T29] audit: type=1326 audit(1762356231.484:12282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 115.691094][ T29] audit: type=1326 audit(1762356231.484:12283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 115.714680][ T29] audit: type=1326 audit(1762356231.484:12284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 115.738252][ T29] audit: type=1326 audit(1762356231.484:12285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.0.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 115.784937][ T7388] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 115.791550][ T7388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.799126][ T7388] vhci_hcd vhci_hcd.0: Device attached [ 115.802909][ T7395] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 115.816216][ T7386] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 115.822810][ T7386] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.830441][ T7386] vhci_hcd vhci_hcd.0: Device attached [ 115.915595][ T7388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.926665][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.936001][ T7386] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 115.942617][ T7386] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.950304][ T7386] vhci_hcd vhci_hcd.0: Device attached [ 115.964149][ T7388] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 115.970782][ T7388] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.978410][ T7388] vhci_hcd vhci_hcd.0: Device attached [ 115.995110][ T7409] loop0: detected capacity change from 0 to 512 [ 116.001509][ T7404] loop5: detected capacity change from 0 to 2048 [ 116.010313][ T7409] msdos: Bad value for 'errors' [ 116.027507][ T7386] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 116.034128][ T7386] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.041745][ T7386] vhci_hcd vhci_hcd.0: Device attached [ 116.859951][ T7414] 9pnet_fd: Insufficient options for proto=fd [ 116.985922][ T7404] GPT:first_usable_lbas don't match. [ 116.991292][ T7404] GPT:34 != 290 [ 116.994783][ T7404] GPT: Use GNU Parted to correct GPT errors. [ 117.000855][ T7404] loop5: p1 p2 p3 [ 117.005655][ T7386] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(19) [ 117.012253][ T7386] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.019909][ T7386] vhci_hcd vhci_hcd.0: Device attached [ 117.071396][ T7401] vhci_hcd: connection closed [ 117.071402][ T7415] vhci_hcd: connection closed [ 117.071610][ T1602] vhci_hcd: stop threads [ 117.076208][ T7402] vhci_hcd: connection closed [ 117.080880][ T1602] vhci_hcd: release socket [ 117.080899][ T1602] vhci_hcd: disconnect device [ 117.085389][ T7391] vhci_hcd: connection closed [ 117.089866][ T7397] vhci_hcd: connection closed [ 117.106759][ T7410] vhci_hcd: connection closed [ 117.110408][ T7425] loop0: detected capacity change from 0 to 512 [ 117.123207][ T7425] msdos: Bad value for 'errors' [ 117.128652][ T1602] vhci_hcd: stop threads [ 117.132971][ T1602] vhci_hcd: release socket [ 117.137462][ T1602] vhci_hcd: disconnect device [ 117.143577][ T1602] vhci_hcd: stop threads [ 117.147890][ T1602] vhci_hcd: release socket [ 117.152317][ T1602] vhci_hcd: disconnect device [ 117.158033][ T1602] vhci_hcd: stop threads [ 117.162284][ T1602] vhci_hcd: release socket [ 117.166773][ T1602] vhci_hcd: disconnect device [ 117.191553][ T1602] vhci_hcd: stop threads [ 117.195849][ T1602] vhci_hcd: release socket [ 117.200313][ T1602] vhci_hcd: disconnect device [ 117.234995][ T1602] vhci_hcd: stop threads [ 117.239313][ T1602] vhci_hcd: release socket [ 117.243749][ T1602] vhci_hcd: disconnect device [ 117.386382][ T3393] usb 5-1: enqueue for inactive port 0 [ 117.392632][ T3393] usb 5-1: enqueue for inactive port 0 [ 117.637853][ T3393] vhci_hcd: vhci_device speed not set [ 117.706221][ T3414] usb 9-1: enqueue for inactive port 0 [ 117.707154][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1227'. [ 117.711787][ T3414] usb 9-1: enqueue for inactive port 0 [ 117.782858][ T7444] loop4: detected capacity change from 0 to 2048 [ 117.806226][ T3414] vhci_hcd: vhci_device speed not set [ 117.954788][ T7444] GPT:first_usable_lbas don't match. [ 117.960190][ T7444] GPT:34 != 290 [ 117.963702][ T7444] GPT: Use GNU Parted to correct GPT errors. [ 117.966571][ T4168] IPVS: starting estimator thread 0... [ 117.969858][ T7444] loop4: p1 p2 p3 [ 118.080266][ T7454] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 118.233942][ T7460] 9pnet_fd: Insufficient options for proto=fd [ 118.256350][ T7451] IPVS: using max 2928 ests per chain, 146400 per kthread [ 118.462268][ T7464] loop6: detected capacity change from 0 to 512 [ 118.490082][ T7464] msdos: Bad value for 'errors' [ 119.373093][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1241'. [ 119.432486][ T7484] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 119.439043][ T7484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.446614][ T7484] vhci_hcd vhci_hcd.0: Device attached [ 119.478708][ T7484] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(9) [ 119.485272][ T7484] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.492954][ T7484] vhci_hcd vhci_hcd.0: Device attached [ 119.526207][ T7484] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(11) [ 119.532838][ T7484] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.540502][ T7484] vhci_hcd vhci_hcd.0: Device attached [ 119.546566][ T7484] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 119.556263][ T7484] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(15) [ 119.562880][ T7484] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.570545][ T7484] vhci_hcd vhci_hcd.0: Device attached [ 119.584441][ T7497] loop0: detected capacity change from 0 to 512 [ 119.592738][ T7484] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(17) [ 119.599356][ T7484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.605213][ T7497] msdos: Bad value for 'errors' [ 119.606878][ T7484] vhci_hcd vhci_hcd.0: Device attached [ 119.629445][ T7484] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(19) [ 119.636058][ T7484] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.643647][ T7484] vhci_hcd vhci_hcd.0: Device attached [ 119.655354][ T7500] vhci_hcd: connection closed [ 119.655560][ T7498] vhci_hcd: connection closed [ 119.660457][ T7493] vhci_hcd: connection closed [ 119.665313][ T7487] vhci_hcd: connection closed [ 119.676857][ T3442] vhci_hcd: stop threads [ 119.685789][ T3442] vhci_hcd: release socket [ 119.690235][ T3442] vhci_hcd: disconnect device [ 119.694945][ T7491] vhci_hcd: connection closed [ 119.695108][ T7485] vhci_hcd: connection closed [ 119.700518][ T3442] vhci_hcd: stop threads [ 119.709482][ T3442] vhci_hcd: release socket [ 119.713921][ T3442] vhci_hcd: disconnect device [ 119.718655][ T4183] usb 13-1: new low-speed USB device number 4 using vhci_hcd [ 119.726185][ T7486] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 119.752712][ T3442] vhci_hcd: stop threads [ 119.757015][ T3442] vhci_hcd: release socket [ 119.761440][ T3442] vhci_hcd: disconnect device [ 120.224873][ T3442] vhci_hcd: stop threads [ 120.229198][ T3442] vhci_hcd: release socket [ 120.233704][ T3442] vhci_hcd: disconnect device [ 120.238716][ T3442] vhci_hcd: stop threads [ 120.243033][ T3442] vhci_hcd: release socket [ 120.247502][ T3442] vhci_hcd: disconnect device [ 120.254025][ T3442] vhci_hcd: stop threads [ 120.258320][ T3442] vhci_hcd: release socket [ 120.262748][ T3442] vhci_hcd: disconnect device [ 120.478666][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1252'. [ 120.511887][ T7531] random: crng reseeded on system resumption [ 120.522338][ T7531] Restarting kernel threads ... [ 120.528802][ T7531] Done restarting kernel threads. [ 120.580781][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 120.580800][ T29] audit: type=1326 audit(1762356236.514:12604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 120.625572][ T29] audit: type=1326 audit(1762356236.514:12605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 120.649128][ T29] audit: type=1326 audit(1762356236.514:12606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 120.672709][ T29] audit: type=1326 audit(1762356236.514:12607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 120.677059][ T7546] loop4: detected capacity change from 0 to 128 [ 120.696328][ T29] audit: type=1326 audit(1762356236.514:12608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 120.703818][ T7546] FAT-fs (loop4): Directory bread(block 162) failed [ 120.726101][ T29] audit: type=1326 audit(1762356236.514:12609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 120.734343][ T7546] FAT-fs (loop4): Directory bread(block 163) failed [ 120.756254][ T29] audit: type=1326 audit(1762356236.514:12610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 120.756281][ T29] audit: type=1326 audit(1762356236.514:12611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 120.763106][ T7546] FAT-fs (loop4): Directory bread(block 164) failed [ 120.786364][ T29] audit: type=1326 audit(1762356236.514:12612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 120.809965][ T7546] FAT-fs (loop4): Directory bread(block 165) failed [ 120.816371][ T29] audit: type=1326 audit(1762356236.514:12613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7538 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 120.841194][ T7546] FAT-fs (loop4): Directory bread(block 166) failed [ 120.876735][ T7546] FAT-fs (loop4): Directory bread(block 167) failed [ 120.888991][ T7548] loop2: detected capacity change from 0 to 512 [ 120.895665][ T7548] msdos: Bad value for 'errors' [ 120.999642][ T7546] FAT-fs (loop4): Directory bread(block 168) failed [ 121.006362][ T7546] FAT-fs (loop4): Directory bread(block 169) failed [ 121.018439][ T7546] FAT-fs (loop4): Directory bread(block 162) failed [ 121.025477][ T7546] FAT-fs (loop4): Directory bread(block 163) failed [ 121.032804][ T7546] syz.4.1262: attempt to access beyond end of device [ 121.032804][ T7546] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 121.036738][ T7550] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 121.046451][ T7546] syz.4.1262: attempt to access beyond end of device [ 121.046451][ T7546] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 121.052479][ T7550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.073545][ T7550] vhci_hcd vhci_hcd.0: Device attached [ 122.031578][ T7557] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 122.038141][ T7557] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.045890][ T7557] vhci_hcd vhci_hcd.0: Device attached [ 122.065294][ T7550] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 122.071917][ T7550] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 122.079519][ T7550] vhci_hcd vhci_hcd.0: Device attached [ 122.087059][ T7550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 122.096773][ T7550] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 122.103384][ T7550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.111134][ T7550] vhci_hcd vhci_hcd.0: Device attached [ 123.039113][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 123.071299][ T7557] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17) [ 123.077919][ T7557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.085520][ T7557] vhci_hcd vhci_hcd.0: Device attached [ 123.196247][ T4168] usb 1-1: new low-speed USB device number 6 using vhci_hcd [ 123.315558][ T7573] loop4: detected capacity change from 0 to 512 [ 124.002257][ T7550] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(19) [ 124.008923][ T7550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.016763][ T7550] vhci_hcd vhci_hcd.0: Device attached [ 124.033110][ T7573] msdos: Bad value for 'errors' [ 124.069574][ T7571] vhci_hcd: connection closed [ 124.069604][ T7563] vhci_hcd: connection closed [ 124.069816][ T7560] vhci_hcd: connection closed [ 124.074372][ T7558] vhci_hcd: connection closed [ 124.084062][ T7551] vhci_hcd: connection reset by peer [ 124.111812][ T7568] vhci_hcd: connection closed [ 124.131285][ T41] vhci_hcd: stop threads [ 124.140294][ T41] vhci_hcd: release socket [ 124.144713][ T41] vhci_hcd: disconnect device [ 124.185798][ T41] vhci_hcd: stop threads [ 124.190103][ T41] vhci_hcd: release socket [ 124.194531][ T41] vhci_hcd: disconnect device [ 124.210431][ T41] vhci_hcd: stop threads [ 124.214758][ T41] vhci_hcd: release socket [ 124.219225][ T41] vhci_hcd: disconnect device [ 124.224119][ T41] vhci_hcd: stop threads [ 124.228485][ T41] vhci_hcd: release socket [ 124.233054][ T41] vhci_hcd: disconnect device [ 124.238289][ T41] vhci_hcd: stop threads [ 124.242541][ T41] vhci_hcd: release socket [ 124.247012][ T41] vhci_hcd: disconnect device [ 124.251890][ T41] vhci_hcd: stop threads [ 124.256207][ T41] vhci_hcd: release socket [ 124.260663][ T41] vhci_hcd: disconnect device [ 124.726086][ T7596] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 124.732656][ T7596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.740245][ T7596] vhci_hcd vhci_hcd.0: Device attached [ 124.746245][ T4183] usb 13-1: enqueue for inactive port 0 [ 124.751814][ T4183] usb 13-1: enqueue for inactive port 0 [ 124.758226][ T7600] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 124.764892][ T7600] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.772674][ T7600] vhci_hcd vhci_hcd.0: Device attached [ 124.827798][ T4183] vhci_hcd: vhci_device speed not set [ 124.833323][ T7596] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(9) [ 124.839833][ T7596] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 124.847548][ T7596] vhci_hcd vhci_hcd.0: Device attached [ 124.854603][ T7608] random: crng reseeded on system resumption [ 124.865413][ T7608] Restarting kernel threads ... [ 124.870971][ T7608] Done restarting kernel threads. [ 124.877411][ T7596] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.936947][ T7612] loop2: detected capacity change from 0 to 512 [ 124.956405][ T7600] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(18) [ 124.963020][ T7600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.970616][ T7600] vhci_hcd vhci_hcd.0: Device attached [ 124.976666][ T7617] loop6: detected capacity change from 0 to 512 [ 125.008347][ T7617] msdos: Bad value for 'errors' [ 125.014317][ T7596] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15) [ 125.021001][ T7596] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.022724][ T1044] usb 11-1: new low-speed USB device number 6 using vhci_hcd [ 125.028753][ T7596] vhci_hcd vhci_hcd.0: Device attached [ 125.046780][ T7600] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(20) [ 125.053396][ T7600] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.061039][ T7600] vhci_hcd vhci_hcd.0: Device attached [ 125.067279][ T7612] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.073627][ T7612] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 125.084336][ T7612] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 125.099584][ T7612] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1276: attempt to clear invalid blocks 2 len 1 [ 125.112584][ T7612] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1276: invalid indirect mapped block 1819239214 (level 0) [ 125.126724][ T7612] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1276: invalid indirect mapped block 1819239214 (level 1) [ 125.154419][ T7612] EXT4-fs (loop2): 1 truncate cleaned up [ 125.156115][ T7626] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 125.168144][ T7612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.192288][ T7622] vhci_hcd: connection closed [ 125.192293][ T7618] vhci_hcd: connection closed [ 125.198779][ T2627] vhci_hcd: stop threads [ 125.207784][ T2627] vhci_hcd: release socket [ 125.212214][ T2627] vhci_hcd: disconnect device [ 125.545235][ T7614] vhci_hcd: connection closed [ 125.553557][ T7602] vhci_hcd: connection closed [ 125.559602][ T7601] vhci_hcd: connection reset by peer [ 125.606672][ T7609] vhci_hcd: connection closed [ 125.642266][ T2627] vhci_hcd: stop threads [ 125.651254][ T2627] vhci_hcd: release socket [ 125.655690][ T2627] vhci_hcd: disconnect device [ 125.661484][ T2627] vhci_hcd: stop threads [ 125.665751][ T2627] vhci_hcd: release socket [ 125.670229][ T2627] vhci_hcd: disconnect device [ 125.695362][ T2627] vhci_hcd: stop threads [ 125.699663][ T2627] vhci_hcd: release socket [ 125.704090][ T2627] vhci_hcd: disconnect device [ 125.718425][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 125.718442][ T29] audit: type=1326 audit(1762356241.654:12725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 125.748844][ T29] audit: type=1326 audit(1762356241.654:12726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 125.772365][ T29] audit: type=1326 audit(1762356241.654:12727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 125.788206][ T2627] vhci_hcd: stop threads [ 125.795840][ T29] audit: type=1326 audit(1762356241.654:12728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 125.800050][ T2627] vhci_hcd: release socket [ 125.823506][ T29] audit: type=1326 audit(1762356241.654:12729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 125.823535][ T29] audit: type=1326 audit(1762356241.654:12730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 125.828013][ T2627] vhci_hcd: disconnect device [ 125.851444][ T29] audit: type=1326 audit(1762356241.654:12731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 125.903004][ T29] audit: type=1326 audit(1762356241.654:12732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 125.926534][ T29] audit: type=1326 audit(1762356241.654:12733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 125.950070][ T29] audit: type=1326 audit(1762356241.654:12734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7605 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cadf6c9 code=0x7ffc0000 [ 125.958463][ T2627] vhci_hcd: stop threads [ 125.977848][ T2627] vhci_hcd: release socket [ 125.982282][ T2627] vhci_hcd: disconnect device [ 126.069589][ T7637] random: crng reseeded on system resumption [ 126.090372][ T7637] Restarting kernel threads ... [ 126.096504][ T7637] Done restarting kernel threads. [ 126.102372][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.113261][ T7641] loop6: detected capacity change from 0 to 128 [ 126.127625][ T7641] FAT-fs (loop6): Directory bread(block 162) failed [ 126.142840][ T7641] FAT-fs (loop6): Directory bread(block 163) failed [ 126.156379][ T7641] FAT-fs (loop6): Directory bread(block 164) failed [ 126.164364][ T7641] FAT-fs (loop6): Directory bread(block 165) failed [ 126.189281][ T7641] FAT-fs (loop6): Directory bread(block 166) failed [ 126.197110][ T7641] FAT-fs (loop6): Directory bread(block 167) failed [ 126.207207][ T7641] FAT-fs (loop6): Directory bread(block 168) failed [ 126.213883][ T7650] random: crng reseeded on system resumption [ 126.217490][ T7641] FAT-fs (loop6): Directory bread(block 169) failed [ 126.227954][ T7650] Restarting kernel threads ... [ 126.232933][ T7650] Done restarting kernel threads. [ 126.250749][ T7653] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 126.257287][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.264895][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 126.286931][ T7658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7658 comm=syz.4.1287 [ 126.307274][ T7653] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 126.313878][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.321495][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 126.334455][ T7665] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(11) [ 126.341078][ T7665] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.348810][ T7665] vhci_hcd vhci_hcd.0: Device attached [ 126.356767][ T7653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 126.366901][ T7653] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15) [ 126.373518][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.381189][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 126.399437][ T7653] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(17) [ 126.406056][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.413583][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 126.420302][ T7653] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(19) [ 126.427035][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.434692][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 126.443535][ T7662] loop0: detected capacity change from 0 to 512 [ 126.443593][ T7677] loop2: detected capacity change from 0 to 512 [ 126.456680][ T7677] msdos: Bad value for 'errors' [ 126.506530][ T7662] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.512903][ T7662] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 126.521337][ T7662] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 126.535974][ T7662] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1291: attempt to clear invalid blocks 2 len 1 [ 126.550118][ T7662] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1291: invalid indirect mapped block 1819239214 (level 0) [ 126.564599][ T7662] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1291: invalid indirect mapped block 1819239214 (level 1) [ 126.578734][ T7678] vhci_hcd: connection closed [ 126.578934][ T7675] vhci_hcd: connection closed [ 126.579034][ T3442] vhci_hcd: stop threads [ 126.583879][ T7659] vhci_hcd: connection closed [ 126.588423][ T3442] vhci_hcd: release socket [ 126.592802][ T7666] vhci_hcd: connection closed [ 126.597320][ T3442] vhci_hcd: disconnect device [ 126.602882][ T7662] EXT4-fs (loop0): 1 truncate cleaned up [ 126.606797][ T7672] vhci_hcd: connection closed [ 126.611701][ T7662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.617877][ T7656] vhci_hcd: connection closed [ 126.627484][ T3442] vhci_hcd: stop threads [ 126.642686][ T3442] vhci_hcd: release socket [ 126.647199][ T3442] vhci_hcd: disconnect device [ 126.677311][ T3442] vhci_hcd: stop threads [ 126.681634][ T3442] vhci_hcd: release socket [ 126.686053][ T3442] vhci_hcd: disconnect device [ 127.050113][ T3442] vhci_hcd: stop threads [ 127.054431][ T3442] vhci_hcd: release socket [ 127.058938][ T3442] vhci_hcd: disconnect device [ 127.078543][ T3442] vhci_hcd: stop threads [ 127.082819][ T3442] vhci_hcd: release socket [ 127.087289][ T3442] vhci_hcd: disconnect device [ 127.100451][ T3442] vhci_hcd: stop threads [ 127.104727][ T3442] vhci_hcd: release socket [ 127.109230][ T3442] vhci_hcd: disconnect device [ 127.118019][ T7700] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 127.155295][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.476220][ T7724] loop0: detected capacity change from 0 to 1024 [ 127.485281][ T7730] loop2: detected capacity change from 0 to 512 [ 127.510055][ T7729] loop6: detected capacity change from 0 to 512 [ 127.536450][ T7730] msdos: Bad value for 'errors' [ 127.690472][ T7729] EXT4-fs (loop6): orphan cleanup on readonly fs [ 127.696861][ T7729] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 127.707691][ T7729] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 128.062464][ T7738] random: crng reseeded on system resumption [ 128.081126][ T7729] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1308: attempt to clear invalid blocks 2 len 1 [ 128.170411][ T7729] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1308: invalid indirect mapped block 1819239214 (level 0) [ 128.220766][ T7729] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1308: invalid indirect mapped block 1819239214 (level 1) [ 128.257469][ T7729] EXT4-fs (loop6): 1 truncate cleaned up [ 128.263584][ T7729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.266384][ T4168] usb 1-1: enqueue for inactive port 0 [ 128.299190][ T4168] usb 1-1: enqueue for inactive port 0 [ 128.318454][ T7722] loop5: detected capacity change from 0 to 512 [ 128.333876][ T7722] EXT4-fs (loop5): orphan cleanup on readonly fs [ 128.340346][ T7722] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 128.349392][ T7722] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 128.364529][ T7722] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1309: attempt to clear invalid blocks 2 len 1 [ 128.389614][ T7722] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1309: invalid indirect mapped block 1819239214 (level 0) [ 128.404081][ T7722] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1309: invalid indirect mapped block 1819239214 (level 1) [ 128.418177][ T4168] vhci_hcd: vhci_device speed not set [ 128.424055][ T7722] EXT4-fs (loop5): 1 truncate cleaned up [ 128.431326][ T7722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.457763][ T7747] FAULT_INJECTION: forcing a failure. [ 128.457763][ T7747] name failslab, interval 1, probability 0, space 0, times 0 [ 128.470419][ T7747] CPU: 1 UID: 0 PID: 7747 Comm: syz.4.1315 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.470455][ T7747] Tainted: [W]=WARN [ 128.470462][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.470474][ T7747] Call Trace: [ 128.470481][ T7747] [ 128.470488][ T7747] __dump_stack+0x1d/0x30 [ 128.470512][ T7747] dump_stack_lvl+0xe8/0x140 [ 128.470535][ T7747] dump_stack+0x15/0x1b [ 128.470672][ T7747] should_fail_ex+0x265/0x280 [ 128.470694][ T7747] should_failslab+0x8c/0xb0 [ 128.471011][ T7747] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 128.471049][ T7747] ? ethnl_default_set_doit+0x3a0/0x6c0 [ 128.471075][ T7747] kmemdup_noprof+0x2b/0x70 [ 128.471105][ T7747] ethnl_default_set_doit+0x3a0/0x6c0 [ 128.471252][ T7747] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 128.471285][ T7747] genl_family_rcv_msg_doit+0x143/0x1b0 [ 128.471319][ T7747] genl_rcv_msg+0x422/0x460 [ 128.471365][ T7747] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 128.471473][ T7747] netlink_rcv_skb+0x123/0x220 [ 128.471507][ T7747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.471618][ T7747] genl_rcv+0x28/0x40 [ 128.471720][ T7747] netlink_unicast+0x5c0/0x690 [ 128.471830][ T7747] netlink_sendmsg+0x58b/0x6b0 [ 128.471854][ T7747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.471877][ T7747] __sock_sendmsg+0x145/0x180 [ 128.471912][ T7747] ____sys_sendmsg+0x31e/0x4e0 [ 128.471951][ T7747] ___sys_sendmsg+0x17b/0x1d0 [ 128.471990][ T7747] __x64_sys_sendmsg+0xd4/0x160 [ 128.472070][ T7747] x64_sys_call+0x191e/0x3000 [ 128.472096][ T7747] do_syscall_64+0xd2/0x200 [ 128.472116][ T7747] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.472147][ T7747] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 128.472220][ T7747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.472242][ T7747] RIP: 0033:0x7f7fd315f6c9 [ 128.472258][ T7747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.472346][ T7747] RSP: 002b:00007f7fd1bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.472370][ T7747] RAX: ffffffffffffffda RBX: 00007f7fd33b5fa0 RCX: 00007f7fd315f6c9 [ 128.472384][ T7747] RDX: 00000000040040c0 RSI: 0000200000000200 RDI: 0000000000000006 [ 128.472398][ T7747] RBP: 00007f7fd1bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.472445][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.472459][ T7747] R13: 00007f7fd33b6038 R14: 00007f7fd33b5fa0 R15: 00007fffc972a7c8 [ 128.472480][ T7747] [ 128.759382][ T7752] loop4: detected capacity change from 0 to 512 [ 128.765916][ T7752] msdos: Bad value for 'errors' [ 128.773629][ T4660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.847149][ T4240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.401658][ T7768] unsupported nla_type 52263 [ 129.410401][ T7766] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 129.416931][ T7766] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.424523][ T7766] vhci_hcd vhci_hcd.0: Device attached [ 129.456652][ T7766] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 129.463196][ T7766] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.470836][ T7766] vhci_hcd vhci_hcd.0: Device attached [ 129.484511][ T7766] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(11) [ 129.491135][ T7766] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.498911][ T7766] vhci_hcd vhci_hcd.0: Device attached [ 129.505754][ T7766] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.517859][ T7766] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15) [ 129.524484][ T7766] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.532134][ T7766] vhci_hcd vhci_hcd.0: Device attached [ 129.538454][ T7766] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(17) [ 129.545096][ T7766] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.552744][ T7766] vhci_hcd vhci_hcd.0: Device attached [ 129.560232][ T7766] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(19) [ 129.566840][ T7766] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.574511][ T7766] vhci_hcd vhci_hcd.0: Device attached [ 129.646696][ T7773] vhci_hcd: connection closed [ 129.646795][ T7771] vhci_hcd: connection closed [ 129.646961][ T7775] vhci_hcd: connection closed [ 129.656460][ T7769] vhci_hcd: connection closed [ 129.661364][ T41] vhci_hcd: stop threads [ 129.661459][ T7777] vhci_hcd: connection closed [ 129.666059][ T41] vhci_hcd: release socket [ 129.672329][ T7779] vhci_hcd: connection closed [ 129.675006][ T41] vhci_hcd: disconnect device [ 129.702817][ T41] vhci_hcd: stop threads [ 129.707116][ T41] vhci_hcd: release socket [ 129.711583][ T41] vhci_hcd: disconnect device [ 129.755313][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810d19de00: rx timeout, send abort [ 129.756400][ T41] vhci_hcd: stop threads [ 129.767870][ T41] vhci_hcd: release socket [ 129.772337][ T41] vhci_hcd: disconnect device [ 129.795611][ T41] vhci_hcd: stop threads [ 129.799944][ T41] vhci_hcd: release socket [ 129.804330][ T7787] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 129.804370][ T41] vhci_hcd: disconnect device [ 129.825624][ T41] vhci_hcd: stop threads [ 129.829975][ T41] vhci_hcd: release socket [ 129.834424][ T41] vhci_hcd: disconnect device [ 129.839671][ T41] vhci_hcd: stop threads [ 129.843924][ T41] vhci_hcd: release socket [ 129.848427][ T41] vhci_hcd: disconnect device [ 129.916538][ T7784] loop4: detected capacity change from 0 to 512 [ 129.931504][ T7784] EXT4-fs (loop4): orphan cleanup on readonly fs [ 129.937902][ T7784] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 129.956157][ T7784] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 129.981032][ T7784] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1323: attempt to clear invalid blocks 2 len 1 [ 129.994460][ T7784] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1323: invalid indirect mapped block 1819239214 (level 0) [ 130.045463][ T7784] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1323: invalid indirect mapped block 1819239214 (level 1) [ 130.102856][ T7784] EXT4-fs (loop4): 1 truncate cleaned up [ 130.108627][ T1044] usb 11-1: enqueue for inactive port 0 [ 130.116293][ T1044] usb 11-1: enqueue for inactive port 0 [ 130.127491][ T7784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.196197][ T1044] vhci_hcd: vhci_device speed not set [ 130.237420][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.255335][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810d19c600: rx timeout, send abort [ 130.266182][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810d19de00: abort rx timeout. Force session deactivation [ 130.372628][ T7798] bridge_slave_0: left allmulticast mode [ 130.378454][ T7798] bridge_slave_0: left promiscuous mode [ 130.384131][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.413455][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1328'. [ 130.444709][ T7806] loop5: detected capacity change from 0 to 512 [ 130.446013][ T7798] bridge_slave_1: left promiscuous mode [ 130.456796][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.465083][ T7806] EXT4-fs (loop5): orphan cleanup on readonly fs [ 130.471486][ T7806] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 130.487173][ T7806] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 130.506863][ T7798] bond0: (slave bond_slave_0): Releasing backup interface [ 130.514181][ T7806] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1330: attempt to clear invalid blocks 2 len 1 [ 130.541278][ T7806] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1330: invalid indirect mapped block 1819239214 (level 0) [ 130.555484][ T7806] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1330: invalid indirect mapped block 1819239214 (level 1) [ 130.555595][ T7798] bond0: (slave bond_slave_1): Releasing backup interface [ 130.570153][ T7806] EXT4-fs (loop5): 1 truncate cleaned up [ 130.582670][ T7806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.604484][ T7798] team0: Port device team_slave_0 removed [ 130.614098][ T7798] team0: Port device team_slave_1 removed [ 130.621271][ T7798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.628858][ T7798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.647428][ T7798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.654830][ T7798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.664511][ T7798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.726333][ T29] kauditd_printk_skb: 2047 callbacks suppressed [ 130.726351][ T29] audit: type=1326 audit(1762356246.654:14784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6df9d9b779 code=0x7ffc0000 [ 130.756413][ T29] audit: type=1326 audit(1762356246.644:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6df9df6567 code=0x7ffc0000 [ 130.763568][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810d19c600: abort rx timeout. Force session deactivation [ 130.779831][ T29] audit: type=1326 audit(1762356246.664:14785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6df9d9b779 code=0x7ffc0000 [ 130.813330][ T29] audit: type=1326 audit(1762356246.664:14786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6df9df6567 code=0x7ffc0000 [ 130.836797][ T29] audit: type=1326 audit(1762356246.664:14787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6df9d9b779 code=0x7ffc0000 [ 130.860337][ T29] audit: type=1326 audit(1762356246.664:14788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6df9df6567 code=0x7ffc0000 [ 130.883775][ T29] audit: type=1326 audit(1762356246.664:14789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6df9d9b779 code=0x7ffc0000 [ 130.907223][ T29] audit: type=1326 audit(1762356246.664:14790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6df9df6567 code=0x7ffc0000 [ 130.930676][ T29] audit: type=1326 audit(1762356246.664:14791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6df9d9b779 code=0x7ffc0000 [ 130.954089][ T29] audit: type=1326 audit(1762356246.664:14792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6df9df6567 code=0x7ffc0000 [ 131.014662][ T7820] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 131.021234][ T7820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.028794][ T7820] vhci_hcd vhci_hcd.0: Device attached [ 131.076427][ T7820] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 131.082982][ T7820] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.090727][ T7820] vhci_hcd vhci_hcd.0: Device attached [ 131.105915][ T7825] loop6: detected capacity change from 0 to 512 [ 131.114482][ T7825] EXT4-fs (loop6): orphan cleanup on readonly fs [ 131.120897][ T7825] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 131.140793][ T7820] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 131.147418][ T7820] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 131.155069][ T7820] vhci_hcd vhci_hcd.0: Device attached [ 131.161012][ T7825] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 131.179750][ T7833] loop2: detected capacity change from 0 to 512 [ 131.205580][ T7833] msdos: Bad value for 'errors' [ 131.210526][ T7820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 131.226581][ T7825] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1337: attempt to clear invalid blocks 2 len 1 [ 131.286196][ T4175] usb 9-1: new low-speed USB device number 6 using vhci_hcd [ 131.312947][ T7825] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1337: invalid indirect mapped block 1819239214 (level 0) [ 131.328343][ T7825] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1337: invalid indirect mapped block 1819239214 (level 1) [ 131.342633][ T7825] EXT4-fs (loop6): 1 truncate cleaned up [ 131.349799][ T7825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.369008][ T7820] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15) [ 131.375632][ T7820] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.383271][ T7820] vhci_hcd vhci_hcd.0: Device attached [ 131.395506][ T7836] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18) [ 131.402131][ T7836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.409802][ T7836] vhci_hcd vhci_hcd.0: Device attached [ 131.446349][ T7842] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(21) [ 131.453003][ T7842] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.460643][ T7842] vhci_hcd vhci_hcd.0: Device attached [ 131.897409][ T7841] vhci_hcd: connection closed [ 131.897578][ T1602] vhci_hcd: stop threads [ 131.906601][ T1602] vhci_hcd: release socket [ 131.911107][ T1602] vhci_hcd: disconnect device [ 131.915850][ T7843] vhci_hcd: connection closed [ 131.918384][ T7828] vhci_hcd: connection closed [ 131.918690][ T7835] vhci_hcd: connection closed [ 131.928119][ T7821] vhci_hcd: connection reset by peer [ 131.932819][ T1602] vhci_hcd: stop threads [ 131.933075][ T7830] vhci_hcd: connection closed [ 131.938210][ T1602] vhci_hcd: release socket [ 131.951675][ T1602] vhci_hcd: disconnect device [ 132.002414][ T1602] vhci_hcd: stop threads [ 132.006835][ T1602] vhci_hcd: release socket [ 132.011341][ T1602] vhci_hcd: disconnect device [ 132.058016][ T1602] vhci_hcd: stop threads [ 132.062302][ T1602] vhci_hcd: release socket [ 132.066858][ T1602] vhci_hcd: disconnect device [ 132.088490][ T1602] vhci_hcd: stop threads [ 132.092842][ T1602] vhci_hcd: release socket [ 132.097305][ T1602] vhci_hcd: disconnect device [ 132.108712][ T4660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.134650][ T1602] vhci_hcd: stop threads [ 132.138966][ T1602] vhci_hcd: release socket [ 132.143476][ T1602] vhci_hcd: disconnect device [ 132.150836][ T4240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.221501][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1348'. [ 132.273691][ T7869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.283385][ T7873] vlan2: entered allmulticast mode [ 132.288544][ T7873] bond1: entered allmulticast mode [ 132.611142][ T7892] loop5: detected capacity change from 0 to 512 [ 132.618989][ T7890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.631261][ T7892] EXT4-fs (loop5): orphan cleanup on readonly fs [ 132.637665][ T7892] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 132.755580][ T7892] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 133.090307][ T7892] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1356: attempt to clear invalid blocks 2 len 1 [ 133.106198][ T7892] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1356: invalid indirect mapped block 1819239214 (level 0) [ 133.126375][ T7892] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1356: invalid indirect mapped block 1819239214 (level 1) [ 133.157801][ T7907] FAULT_INJECTION: forcing a failure. [ 133.157801][ T7907] name failslab, interval 1, probability 0, space 0, times 0 [ 133.170672][ T7907] CPU: 0 UID: 0 PID: 7907 Comm: syz.6.1360 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 133.170709][ T7907] Tainted: [W]=WARN [ 133.170717][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.170728][ T7907] Call Trace: [ 133.170733][ T7907] [ 133.170740][ T7907] __dump_stack+0x1d/0x30 [ 133.170767][ T7907] dump_stack_lvl+0xe8/0x140 [ 133.170792][ T7907] dump_stack+0x15/0x1b [ 133.170880][ T7907] should_fail_ex+0x265/0x280 [ 133.170912][ T7907] should_failslab+0x8c/0xb0 [ 133.170939][ T7907] kmem_cache_alloc_noprof+0x50/0x480 [ 133.171010][ T7907] ? sk_prot_alloc+0x3f/0x190 [ 133.171039][ T7907] sk_prot_alloc+0x3f/0x190 [ 133.171117][ T7907] sk_alloc+0x34/0x360 [ 133.171154][ T7907] unix_create1+0xa5/0x430 [ 133.171185][ T7907] ? inode_init_always_gfp+0x4cd/0x500 [ 133.171229][ T7907] unix_create+0x11f/0x150 [ 133.171261][ T7907] __sock_create+0x2ec/0x5b0 [ 133.171286][ T7907] __sys_socketpair+0x170/0x430 [ 133.171311][ T7907] ? ksys_write+0x192/0x1a0 [ 133.171338][ T7907] __x64_sys_socketpair+0x52/0x60 [ 133.171371][ T7907] x64_sys_call+0x2bf6/0x3000 [ 133.171397][ T7907] do_syscall_64+0xd2/0x200 [ 133.171500][ T7907] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 133.171534][ T7907] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 133.171591][ T7907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.171611][ T7907] RIP: 0033:0x7f8b6bfbf6c9 [ 133.171627][ T7907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.171704][ T7907] RSP: 002b:00007f8b6aa1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 133.171723][ T7907] RAX: ffffffffffffffda RBX: 00007f8b6c215fa0 RCX: 00007f8b6bfbf6c9 [ 133.171735][ T7907] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 133.171780][ T7907] RBP: 00007f8b6aa1f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.171795][ T7907] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 133.171810][ T7907] R13: 00007f8b6c216038 R14: 00007f8b6c215fa0 R15: 00007ffc776b04c8 [ 133.171831][ T7907] [ 133.226670][ T7892] EXT4-fs (loop5): 1 truncate cleaned up [ 133.406559][ T7892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.472359][ T7918] x_tables: duplicate underflow at hook 1 [ 133.491946][ T7922] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 133.498490][ T7922] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.506082][ T7922] vhci_hcd vhci_hcd.0: Device attached [ 133.521452][ T7922] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 133.527973][ T7922] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 133.535584][ T7922] vhci_hcd vhci_hcd.0: Device attached [ 133.547578][ T7922] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 133.554286][ T7922] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 133.561936][ T7922] vhci_hcd vhci_hcd.0: Device attached [ 133.578155][ T4240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.600727][ T7922] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 133.642283][ T7940] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 133.648942][ T7940] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 133.656670][ T7940] vhci_hcd vhci_hcd.0: Device attached [ 133.694139][ T7943] loop0: detected capacity change from 0 to 512 [ 133.727539][ T7922] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(15) [ 133.734176][ T7922] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.741784][ T7922] vhci_hcd vhci_hcd.0: Device attached [ 133.756372][ T7943] EXT4-fs (loop0): orphan cleanup on readonly fs [ 133.762753][ T7943] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 133.801023][ T7943] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 133.905938][ T7943] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1370: attempt to clear invalid blocks 2 len 1 [ 133.909487][ T7922] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(19) [ 133.919451][ T7943] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1370: invalid indirect mapped block 1819239214 (level 0) [ 133.925346][ T7922] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 133.939471][ T7943] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1370: invalid indirect mapped block 1819239214 (level 1) [ 133.946862][ T7922] vhci_hcd vhci_hcd.0: Device attached [ 133.961009][ T7943] EXT4-fs (loop0): 1 truncate cleaned up [ 133.980578][ T7943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.022180][ T7945] vhci_hcd: connection closed [ 134.022360][ T7941] vhci_hcd: connection closed [ 134.029254][ T7925] vhci_hcd: connection closed [ 134.066257][ T7955] vhci_hcd: connection closed [ 134.086318][ T7929] vhci_hcd: connection closed [ 134.096471][ T7923] vhci_hcd: connection closed [ 134.134212][ T167] vhci_hcd: stop threads [ 134.143229][ T167] vhci_hcd: release socket [ 134.147668][ T167] vhci_hcd: disconnect device [ 134.216398][ T167] vhci_hcd: stop threads [ 134.220768][ T167] vhci_hcd: release socket [ 134.225203][ T167] vhci_hcd: disconnect device [ 134.406334][ T167] vhci_hcd: stop threads [ 134.410624][ T167] vhci_hcd: release socket [ 134.415058][ T167] vhci_hcd: disconnect device [ 134.433471][ T167] vhci_hcd: stop threads [ 134.437784][ T167] vhci_hcd: release socket [ 134.442211][ T167] vhci_hcd: disconnect device [ 134.456168][ T167] vhci_hcd: stop threads [ 134.460429][ T167] vhci_hcd: release socket [ 134.464856][ T167] vhci_hcd: disconnect device [ 134.496217][ T167] vhci_hcd: stop threads [ 134.500492][ T167] vhci_hcd: release socket [ 134.504962][ T167] vhci_hcd: disconnect device [ 134.579907][ T7972] netlink: 'syz.4.1377': attribute type 5 has an invalid length. [ 134.591706][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.690637][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1381'. [ 134.731290][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 134.820434][ T7976] FAULT_INJECTION: forcing a failure. [ 134.820434][ T7976] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 134.833728][ T7976] CPU: 0 UID: 0 PID: 7976 Comm: syz.0.1378 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.833762][ T7976] Tainted: [W]=WARN [ 134.833769][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.833780][ T7976] Call Trace: [ 134.833786][ T7976] [ 134.833794][ T7976] __dump_stack+0x1d/0x30 [ 134.833826][ T7976] dump_stack_lvl+0xe8/0x140 [ 134.833845][ T7976] dump_stack+0x15/0x1b [ 134.833868][ T7976] should_fail_ex+0x265/0x280 [ 134.833961][ T7976] should_fail_alloc_page+0xf2/0x100 [ 134.833995][ T7976] __alloc_frozen_pages_noprof+0xff/0x360 [ 134.834016][ T7976] alloc_pages_mpol+0xb3/0x260 [ 134.834038][ T7976] folio_alloc_mpol_noprof+0x39/0x80 [ 134.834180][ T7976] shmem_get_folio_gfp+0x3cf/0xd60 [ 134.834252][ T7976] shmem_fault+0xf6/0x250 [ 134.834273][ T7976] __do_fault+0xbc/0x200 [ 134.834296][ T7976] handle_mm_fault+0xd69/0x2be0 [ 134.834392][ T7976] ? mt_find+0x208/0x320 [ 134.834418][ T7976] do_user_addr_fault+0x3fe/0x1080 [ 134.834468][ T7976] exc_page_fault+0x62/0xa0 [ 134.834495][ T7976] asm_exc_page_fault+0x26/0x30 [ 134.834584][ T7976] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 134.834616][ T7976] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 134.834657][ T7976] RSP: 0018:ffffc90010db3d50 EFLAGS: 00050212 [ 134.834677][ T7976] RAX: 5f6d64617379733a RBX: 0000000000000013 RCX: 0000000000000013 [ 134.834693][ T7976] RDX: 0000000000000000 RSI: ffff888119f6d6a4 RDI: 0000200000000000 [ 134.834708][ T7976] RBP: 0000000000001000 R08: 00000000000004eb R09: 0000000000000000 [ 134.834720][ T7976] R10: 0001888119f6d6a4 R11: 0001888119f6d6b6 R12: 0000200000000013 [ 134.834732][ T7976] R13: 00007ffffffff000 R14: 0000200000000000 R15: ffff888119f6d6a4 [ 134.834749][ T7976] _copy_to_user+0x7c/0xa0 [ 134.834776][ T7976] simple_read_from_buffer+0xb5/0x130 [ 134.834805][ T7976] proc_pid_attr_read+0x134/0x1a0 [ 134.834856][ T7976] ? __pfx_proc_pid_attr_read+0x10/0x10 [ 134.834907][ T7976] vfs_read+0x1a8/0x770 [ 134.834931][ T7976] ? __fget_files+0x184/0x1c0 [ 134.835020][ T7976] ? __rcu_read_unlock+0x4f/0x70 [ 134.835049][ T7976] ? __fget_files+0x184/0x1c0 [ 134.835145][ T7976] __x64_sys_pread64+0xfd/0x150 [ 134.835170][ T7976] x64_sys_call+0x29e6/0x3000 [ 134.835266][ T7976] do_syscall_64+0xd2/0x200 [ 134.835288][ T7976] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.835314][ T7976] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 134.835403][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.835427][ T7976] RIP: 0033:0x7f87ccfcf6c9 [ 134.835445][ T7976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.835531][ T7976] RSP: 002b:00007f87cba37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 134.835550][ T7976] RAX: ffffffffffffffda RBX: 00007f87cd225fa0 RCX: 00007f87ccfcf6c9 [ 134.835562][ T7976] RDX: 0000000000001000 RSI: 0000200000000000 RDI: 0000000000000003 [ 134.835574][ T7976] RBP: 00007f87cba37090 R08: 0000000000000000 R09: 0000000000000000 [ 134.835666][ T7976] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 134.835681][ T7976] R13: 00007f87cd226038 R14: 00007f87cd225fa0 R15: 00007fff0855ed78 [ 134.835698][ T7976] [ 135.271657][ T7996] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 135.330052][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1389'. [ 135.343502][ T8002] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 135.350036][ T8002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.357630][ T8002] vhci_hcd vhci_hcd.0: Device attached [ 135.390942][ T8002] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 135.397482][ T8002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 135.405191][ T8002] vhci_hcd vhci_hcd.0: Device attached [ 135.428174][ T8002] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 135.434871][ T8002] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 135.442524][ T8002] vhci_hcd vhci_hcd.0: Device attached [ 135.457488][ T8002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 135.516832][ T8016] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18) [ 135.523480][ T8016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.531152][ T8016] vhci_hcd vhci_hcd.0: Device attached [ 135.548187][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1389'. [ 135.557675][ T8002] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15) [ 135.564282][ T8002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 135.571954][ T8002] vhci_hcd vhci_hcd.0: Device attached [ 135.948372][ T8017] vhci_hcd: connection closed [ 135.948892][ T8009] vhci_hcd: connection closed [ 135.953789][ T8006] vhci_hcd: connection closed [ 135.964661][ T6636] vhci_hcd: stop threads [ 135.973664][ T6636] vhci_hcd: release socket [ 135.978110][ T6636] vhci_hcd: disconnect device [ 136.379903][ T8013] vhci_hcd: connection closed [ 136.403889][ T8003] vhci_hcd: connection closed [ 136.437490][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 136.456451][ T8005] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 136.531813][ T6636] vhci_hcd: stop threads [ 136.536110][ T6636] vhci_hcd: release socket [ 136.540630][ T6636] vhci_hcd: disconnect device [ 136.736948][ T6636] vhci_hcd: stop threads [ 136.741435][ T6636] vhci_hcd: release socket [ 136.745876][ T6636] vhci_hcd: disconnect device [ 136.759655][ T6636] vhci_hcd: stop threads [ 136.763975][ T6636] vhci_hcd: release socket [ 136.768460][ T6636] vhci_hcd: disconnect device [ 136.773143][ T29] kauditd_printk_skb: 3814 callbacks suppressed [ 136.773158][ T29] audit: type=1400 audit(1762356252.704:18606): avc: denied { read } for pid=8040 comm="syz.6.1397" dev="nsfs" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.800787][ T29] audit: type=1400 audit(1762356252.704:18607): avc: denied { open } for pid=8040 comm="syz.6.1397" path="net:[4026532546]" dev="nsfs" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.824161][ T29] audit: type=1400 audit(1762356252.704:18608): avc: denied { create } for pid=8040 comm="syz.6.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.844245][ T29] audit: type=1400 audit(1762356252.704:18609): avc: denied { bind } for pid=8040 comm="syz.6.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.864187][ T29] audit: type=1326 audit(1762356252.704:18610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 136.887988][ T29] audit: type=1326 audit(1762356252.704:18611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 136.896199][ T6636] vhci_hcd: stop threads [ 136.911524][ T29] audit: type=1326 audit(1762356252.704:18612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 136.911550][ T29] audit: type=1326 audit(1762356252.704:18613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 136.911574][ T29] audit: type=1326 audit(1762356252.704:18614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8039 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ccfcf6c9 code=0x7ffc0000 [ 136.915809][ T6636] vhci_hcd: release socket [ 136.915852][ T6636] vhci_hcd: disconnect device [ 136.939487][ T29] audit: type=1400 audit(1762356252.704:18615): avc: denied { write } for pid=8040 comm="syz.6.1397" path="socket:[21187]" dev="sockfs" ino=21187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.964375][ T4175] usb 9-1: enqueue for inactive port 0 [ 137.052977][ T8052] FAULT_INJECTION: forcing a failure. [ 137.052977][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.066192][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.0.1400 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 137.066236][ T8052] Tainted: [W]=WARN [ 137.066265][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.066276][ T8052] Call Trace: [ 137.066283][ T8052] [ 137.066290][ T8052] __dump_stack+0x1d/0x30 [ 137.066318][ T8052] dump_stack_lvl+0xe8/0x140 [ 137.066342][ T8052] dump_stack+0x15/0x1b [ 137.066417][ T8052] should_fail_ex+0x265/0x280 [ 137.066436][ T8052] should_fail+0xb/0x20 [ 137.066451][ T8052] should_fail_usercopy+0x1a/0x20 [ 137.066471][ T8052] _copy_to_user+0x20/0xa0 [ 137.066498][ T8052] simple_read_from_buffer+0xb5/0x130 [ 137.066544][ T8052] proc_fail_nth_read+0x10e/0x150 [ 137.066592][ T8052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.066685][ T8052] vfs_read+0x1a8/0x770 [ 137.066714][ T8052] ? __rcu_read_unlock+0x4f/0x70 [ 137.066746][ T8052] ? __fget_files+0x184/0x1c0 [ 137.066852][ T8052] ksys_read+0xda/0x1a0 [ 137.066880][ T8052] __x64_sys_read+0x40/0x50 [ 137.066909][ T8052] x64_sys_call+0x27c0/0x3000 [ 137.066930][ T8052] do_syscall_64+0xd2/0x200 [ 137.067026][ T8052] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.067055][ T8052] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.067141][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.067166][ T8052] RIP: 0033:0x7f87ccfce0dc [ 137.067184][ T8052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 137.067328][ T8052] RSP: 002b:00007f87cba37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.067350][ T8052] RAX: ffffffffffffffda RBX: 00007f87cd225fa0 RCX: 00007f87ccfce0dc [ 137.067366][ T8052] RDX: 000000000000000f RSI: 00007f87cba370a0 RDI: 0000000000000008 [ 137.067381][ T8052] RBP: 00007f87cba37090 R08: 0000000000000000 R09: 0000000000000000 [ 137.067429][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.067443][ T8052] R13: 00007f87cd226038 R14: 00007f87cd225fa0 R15: 00007fff0855ed78 [ 137.067463][ T8052] [ 137.097242][ T4175] usb 9-1: enqueue for inactive port 0 [ 137.146062][ T8063] random: crng reseeded on system resumption [ 137.272124][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1406'. [ 137.302600][ T4175] vhci_hcd: vhci_device speed not set [ 137.358676][ T8071] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 137.592081][ T8091] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 137.598650][ T8091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.606260][ T8091] vhci_hcd vhci_hcd.0: Device attached [ 137.661399][ T8096] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 137.667953][ T8096] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.675581][ T8096] vhci_hcd vhci_hcd.0: Device attached [ 137.758592][ T8091] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 137.765253][ T8091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 137.772901][ T8091] vhci_hcd vhci_hcd.0: Device attached [ 137.840121][ T8091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 137.840200][ T8105] loop5: detected capacity change from 0 to 512 [ 137.855828][ T3414] usb 1-1: new low-speed USB device number 7 using vhci_hcd [ 137.866621][ T8091] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 137.873248][ T8091] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.880822][ T8091] vhci_hcd vhci_hcd.0: Device attached [ 137.892014][ T8105] EXT4-fs (loop5): orphan cleanup on readonly fs [ 137.898473][ T8105] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 137.924056][ T8108] vhci_hcd: connection closed [ 137.924221][ T52] vhci_hcd: stop threads [ 137.933309][ T52] vhci_hcd: release socket [ 137.937785][ T52] vhci_hcd: disconnect device [ 137.942967][ T8097] vhci_hcd: connection closed [ 137.943078][ T8092] vhci_hcd: connection reset by peer [ 137.956292][ T8102] vhci_hcd: connection closed [ 137.958806][ T52] vhci_hcd: stop threads [ 137.963760][ T8105] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, [ 137.967835][ T52] vhci_hcd: release socket [ 137.967859][ T52] vhci_hcd: disconnect device [ 137.975236][ T52] vhci_hcd: stop threads [ 137.976104][ T8105] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 137.998212][ T52] vhci_hcd: release socket [ 138.002893][ T52] vhci_hcd: disconnect device [ 138.009522][ T52] vhci_hcd: stop threads [ 138.012774][ T8105] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1417: attempt to clear invalid blocks 2 len 1 [ 138.013791][ T52] vhci_hcd: release socket [ 138.031033][ T52] vhci_hcd: disconnect device [ 138.038201][ T8105] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1417: invalid indirect mapped block 1819239214 (level 0) [ 138.043001][ T8118] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 138.052599][ T8105] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1417: invalid indirect mapped block 1819239214 (level 1) [ 138.058684][ T8118] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 138.058770][ T8118] vhci_hcd vhci_hcd.0: Device attached [ 138.073076][ T8105] EXT4-fs (loop5): 1 truncate cleaned up [ 138.092527][ T8105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.096543][ T8118] vhci_hcd vhci_hcd.0: port 0 already used [ 138.159138][ T4240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.313045][ T8126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1423'. [ 138.346287][ T4183] usb 6-1: SetAddress Request (2) to port 0 [ 138.352298][ T4183] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 138.393137][ T8119] vhci_hcd: connection reset by peer [ 138.398812][ T2627] vhci_hcd: stop threads [ 138.403101][ T2627] vhci_hcd: release socket [ 138.407627][ T2627] vhci_hcd: disconnect device [ 138.472594][ T8136] loop4: detected capacity change from 0 to 512 [ 138.490296][ T8136] EXT4-fs (loop4): orphan cleanup on readonly fs [ 138.496781][ T8136] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 138.507300][ T8136] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 138.545116][ T8136] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1426: attempt to clear invalid blocks 2 len 1 [ 138.564567][ T8154] loop5: detected capacity change from 0 to 512 [ 138.585868][ T8136] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1426: invalid indirect mapped block 1819239214 (level 0) [ 138.606777][ T8136] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1426: invalid indirect mapped block 1819239214 (level 1) [ 138.621467][ T8136] EXT4-fs (loop4): 1 truncate cleaned up [ 138.627682][ T8136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.641630][ T8154] EXT4-fs (loop5): orphan cleanup on readonly fs [ 138.648065][ T8154] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 138.690554][ T8154] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 138.705228][ T8154] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1430: attempt to clear invalid blocks 2 len 1 [ 138.746841][ T8154] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1430: invalid indirect mapped block 1819239214 (level 0) [ 138.768657][ T8154] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1430: invalid indirect mapped block 1819239214 (level 1) [ 138.784333][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.793956][ T8154] EXT4-fs (loop5): 1 truncate cleaned up [ 138.800106][ T8159] loop0: detected capacity change from 0 to 512 [ 138.800417][ T8154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.819753][ T8159] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.826206][ T8159] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 138.840617][ T8159] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 138.856205][ T8159] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1434: attempt to clear invalid blocks 2 len 1 [ 138.869653][ T8159] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1434: invalid indirect mapped block 1819239214 (level 0) [ 138.895106][ T8159] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1434: invalid indirect mapped block 1819239214 (level 1) [ 138.926862][ T4240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.948064][ T8159] EXT4-fs (loop0): 1 truncate cleaned up [ 138.954028][ T8159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.093057][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.452208][ T8199] 9pnet_fd: Insufficient options for proto=fd [ 139.490746][ T8202] loop6: detected capacity change from 0 to 512 [ 139.506305][ T8202] EXT4-fs (loop6): orphan cleanup on readonly fs [ 139.512703][ T8202] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 139.536482][ T8202] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 139.607050][ T8202] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1448: attempt to clear invalid blocks 2 len 1 [ 139.620590][ T8202] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1448: invalid indirect mapped block 1819239214 (level 0) [ 139.640361][ T8202] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1448: invalid indirect mapped block 1819239214 (level 1) [ 139.657148][ T8213] random: crng reseeded on system resumption [ 139.670313][ T8202] EXT4-fs (loop6): 1 truncate cleaned up [ 139.685178][ T8202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.688799][ T8213] Restarting kernel threads ... [ 139.706284][ T8213] Done restarting kernel threads. [ 139.816619][ T4660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.839293][ T8219] loop0: detected capacity change from 0 to 512 [ 139.865357][ T8219] EXT4-fs (loop0): orphan cleanup on readonly fs [ 139.871811][ T8219] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 139.896943][ T8219] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 140.007914][ T8219] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1455: attempt to clear invalid blocks 2 len 1 [ 140.058533][ T8219] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1455: invalid indirect mapped block 1819239214 (level 0) [ 140.101611][ T8219] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1455: invalid indirect mapped block 1819239214 (level 1) [ 140.121779][ T8219] EXT4-fs (loop0): 1 truncate cleaned up [ 140.132250][ T8219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.246392][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.317197][ T8251] loop2: detected capacity change from 0 to 512 [ 140.324958][ T8251] EXT4-fs (loop2): orphan cleanup on readonly fs [ 140.331362][ T8251] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 140.340254][ T8251] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 140.361162][ T8251] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1466: attempt to clear invalid blocks 2 len 1 [ 140.374621][ T8251] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1466: invalid indirect mapped block 1819239214 (level 0) [ 140.388928][ T8251] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1466: invalid indirect mapped block 1819239214 (level 1) [ 140.403383][ T8251] EXT4-fs (loop2): 1 truncate cleaned up [ 140.410063][ T8251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.522365][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.800309][ T8287] loop2: detected capacity change from 0 to 512 [ 140.866463][ T8287] EXT4-fs (loop2): orphan cleanup on readonly fs [ 140.872875][ T8287] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 140.905514][ T8287] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 140.973458][ T8287] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1479: attempt to clear invalid blocks 2 len 1 [ 141.018293][ T8305] random: crng reseeded on system resumption [ 141.047372][ T8305] Restarting kernel threads ... [ 141.065284][ T8304] loop0: detected capacity change from 0 to 512 [ 141.072769][ T8305] Done restarting kernel threads. [ 141.107058][ T8287] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1479: invalid indirect mapped block 1819239214 (level 0) [ 141.121474][ T8287] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1479: invalid indirect mapped block 1819239214 (level 1) [ 141.136046][ T8287] EXT4-fs (loop2): 1 truncate cleaned up [ 141.142153][ T8287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.168117][ T8304] EXT4-fs (loop0): orphan cleanup on readonly fs [ 141.174485][ T8304] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 141.183138][ T8304] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 141.198045][ T8304] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1487: attempt to clear invalid blocks 2 len 1 [ 141.211150][ T8304] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1487: invalid indirect mapped block 1819239214 (level 0) [ 141.225539][ T8304] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1487: invalid indirect mapped block 1819239214 (level 1) [ 141.251875][ T8304] EXT4-fs (loop0): 1 truncate cleaned up [ 141.259523][ T8304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.385640][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.425312][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.466304][ T8317] loop4: detected capacity change from 0 to 256 [ 141.472857][ T8317] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.553888][ T8337] loop0: detected capacity change from 0 to 512 [ 141.571331][ T8337] msdos: Bad value for 'errors' [ 142.370268][ T29] kauditd_printk_skb: 2009 callbacks suppressed [ 142.370284][ T29] audit: type=1400 audit(1762356258.304:20625): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 142.730317][ T29] audit: type=1326 audit(1762356258.664:20626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.6.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6bfbf6c9 code=0x7ffc0000 [ 142.753964][ T29] audit: type=1326 audit(1762356258.664:20627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.6.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6bfbf6c9 code=0x7ffc0000 [ 142.777587][ T29] audit: type=1326 audit(1762356258.664:20628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.6.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6bfbf6c9 code=0x7ffc0000 [ 142.801195][ T29] audit: type=1326 audit(1762356258.664:20629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.6.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6bfbf6c9 code=0x7ffc0000 [ 142.824744][ T29] audit: type=1326 audit(1762356258.664:20630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.6.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6bfbf6c9 code=0x7ffc0000 [ 142.849038][ T29] audit: type=1326 audit(1762356258.744:20631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.6.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6bfbf6c9 code=0x7ffc0000 [ 142.872645][ T29] audit: type=1326 audit(1762356258.744:20632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.6.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6bfbf6c9 code=0x7ffc0000 [ 142.896214][ T29] audit: type=1326 audit(1762356258.744:20633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.6.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6bfbf6c9 code=0x7ffc0000 [ 142.919785][ T29] audit: type=1326 audit(1762356258.744:20634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.6.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6bfbf6c9 code=0x7ffc0000 [ 142.919863][ T3414] usb 1-1: enqueue for inactive port 0 [ 142.919888][ T3414] usb 1-1: enqueue for inactive port 0 [ 142.972358][ T8362] loop5: detected capacity change from 0 to 512 [ 143.000893][ T8374] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 143.026266][ T3414] vhci_hcd: vhci_device speed not set [ 143.054847][ T8377] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 143.080187][ T8362] EXT4-fs (loop5): orphan cleanup on readonly fs [ 143.086673][ T8362] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 143.100223][ T8362] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 143.136630][ T8362] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1511: attempt to clear invalid blocks 2 len 1 [ 143.196429][ T8362] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1511: invalid indirect mapped block 1819239214 (level 0) [ 143.242958][ T8362] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1511: invalid indirect mapped block 1819239214 (level 1) [ 143.281099][ T8362] EXT4-fs (loop5): 1 truncate cleaned up [ 143.295893][ T8362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.397478][ T4240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.417544][ T4240] ================================================================== [ 143.425656][ T4240] BUG: KCSAN: data-race in munlock_folio / need_mlock_drain [ 143.432978][ T4240] [ 143.435306][ T4240] read-write to 0xffff888237d26a90 of 1 bytes by task 8370 on cpu 1: [ 143.443375][ T4240] munlock_folio+0x44/0x120 [ 143.447903][ T4240] folio_remove_rmap_ptes+0x197/0x1a0 [ 143.453291][ T4240] unmap_page_range+0x1523/0x25c0 [ 143.458325][ T4240] unmap_vmas+0x23d/0x3a0 [ 143.462675][ T4240] exit_mmap+0x1b0/0x6c0 [ 143.466925][ T4240] __mmput+0x28/0x1c0 [ 143.470932][ T4240] mmput+0x40/0x50 [ 143.474673][ T4240] exit_mm+0xe4/0x180 [ 143.476265][ T4183] usb 6-1: device descriptor read/8, error -110 [ 143.478659][ T4240] do_exit+0x417/0x15c0 [ 143.478681][ T4240] do_group_exit+0x139/0x140 [ 143.493638][ T4240] __x64_sys_exit_group+0x1f/0x20 [ 143.498671][ T4240] x64_sys_call+0x2ff1/0x3000 [ 143.503358][ T4240] do_syscall_64+0xd2/0x200 [ 143.507866][ T4240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.513765][ T4240] [ 143.516087][ T4240] read to 0xffff888237d26a90 of 1 bytes by task 4240 on cpu 0: [ 143.523637][ T4240] need_mlock_drain+0x30/0x50 [ 143.528344][ T4240] __lru_add_drain_all+0x273/0x450 [ 143.533471][ T4240] lru_add_drain_all+0x10/0x20 [ 143.538250][ T4240] invalidate_bdev+0x47/0x70 [ 143.542865][ T4240] ext4_put_super+0x624/0x7d0 [ 143.547570][ T4240] generic_shutdown_super+0xe6/0x210 [ 143.552886][ T4240] kill_block_super+0x2a/0x70 [ 143.557575][ T4240] ext4_kill_sb+0x42/0x80 [ 143.561912][ T4240] deactivate_locked_super+0x75/0x1c0 [ 143.567286][ T4240] deactivate_super+0x97/0xa0 [ 143.571960][ T4240] cleanup_mnt+0x269/0x2e0 [ 143.576383][ T4240] __cleanup_mnt+0x19/0x20 [ 143.580811][ T4240] task_work_run+0x131/0x1a0 [ 143.585406][ T4240] exit_to_user_mode_loop+0xed/0x110 [ 143.590694][ T4240] do_syscall_64+0x1d6/0x200 [ 143.595285][ T4240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.601178][ T4240] [ 143.603500][ T4240] value changed: 0x17 -> 0x1d [ 143.608167][ T4240] [ 143.610487][ T4240] Reported by Kernel Concurrency Sanitizer on: [ 143.616636][ T4240] CPU: 0 UID: 0 PID: 4240 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 143.628099][ T4240] Tainted: [W]=WARN [ 143.631895][ T4240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.641949][ T4240] ================================================================== [ 143.676408][ T4183] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 143.709189][ T4183] usb 6-1: enqueue for inactive port 0 [ 143.747404][ T4183] usb 6-1: enqueue for inactive port 0 [ 143.773532][ T4183] usb 6-1: enqueue for inactive port 0 [ 144.796299][ T4183] usb usb6-port1: attempt power cycle [ 146.616300][ T4183] usb usb6-port1: unable to enumerate USB device