last executing test programs: 27.205914512s ago: executing program 0 (id=1): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000a004e2100000003ff02000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0xb) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r7, 0x0, 0x25, 0x2, @void}, 0x10) 26.542889141s ago: executing program 0 (id=6): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) write$selinux_validatetrans(r0, 0x0, 0x79) 26.347568084s ago: executing program 0 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4c23, 0x81, @ipv4={'\x00', '\xff\xff', @remote}, 0xffbff001}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x1, @broadcast}, 0x2, 0x4}}, 0x2e) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") 25.89573985s ago: executing program 0 (id=11): r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x826e, 0x40, 0x3, 0xf0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) umount2(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000080)={0x5}, 0x0) 25.725951103s ago: executing program 0 (id=12): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc82b00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESOCT], 0xffe) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x11, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 24.597669608s ago: executing program 0 (id=18): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r1, 0xb}}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9135}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_usb_connect(0x6, 0x36, &(0x7f0000000280)=ANY=[], 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10) socket$tipc(0x1e, 0x5, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) close(r3) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r10, 0xffffffffffffffff, 0x0) sendfile(r4, r5, 0x0, 0x1000000201005) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r11, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getdents(r5, &(0x7f0000000600)=""/150, 0x96) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r13}}, 0x18) 24.597452098s ago: executing program 32 (id=18): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r1, 0xb}}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9135}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_usb_connect(0x6, 0x36, &(0x7f0000000280)=ANY=[], 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10) socket$tipc(0x1e, 0x5, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) close(r3) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r10, 0xffffffffffffffff, 0x0) sendfile(r4, r5, 0x0, 0x1000000201005) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r11, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getdents(r5, &(0x7f0000000600)=""/150, 0x96) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r13}}, 0x18) 7.382290277s ago: executing program 2 (id=221): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="d71f180018110000", @ANYRES8=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffd99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x8000000000000}, 0x18) sendmsg$AUDIT_USER_TTY(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, 0x464, 0x400, 0x70bd2d, 0x25dfdbfb, "81a9e2af34fb50dcbb85484f6b0d58e81a30de34d25ef826c9a3e84b20ed94bab9349dad99fc26c5d0d8b12e2632a28cb5172eed893b7f5998c7dadc347f80431bbf76fbb6aa32a62fc33a81ec3fd379b83bc28f1cc1301f41d7c686efab10e59d1bd19550dce979cc8aff7f567ab25c0a8cd7206fa109191c042bcd60ed33e9bed7f04d616d458b9d70e7498655dada926047f24ce534e96066fe8ec371f872944c21a30940a8717905a1313c358eb24d931f3ea7", ["", "", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x44880) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201"], 0x18) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 7.22101242s ago: executing program 2 (id=225): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/35, 0x23, 0x0, 0x4, 0x0, 0x8, 0x20000}}, 0x120) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000200)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@quota}]}, 0x1, 0x50d, &(0x7f0000000240)="$eJzs3c9vI1cdAPDvzK4T727abEsPgKBd2sKCVutsvG1U9QDLCSFUCdEjSNuQeKModhzFTmnCHtIzEickKnGCI38A5564c0Fw41IOSPyIQA0SB6MZj1MnazfpJrGj+PORRjNv3sTf9+Kd9+Kv134BTKxbEbEbEVMR8U5EzBbnk2KLB90tu+7jvcdL+3uPl5LodN7+Z5LXZ+ei72cyN4rHLEfED74T8ePkybit7Z21xXq9tlmU59qNjbnW9s7d1cbiSm2ltl6tLswv3Hvj/uvVM+vrS42p4ujLH/1h9xs/zZo1U5zp78dZ6na9dBAnczUivncewcbgStGfqXE3hKeSRsTzEfFyfv/PxpX82QQALrNOZzY6s/3lA8nhIgBwWaR5DixJK0UuYCbStFLp5vBeiOtpvdlq33nU3Fpf7ubKbkYpfbRar90rcoU3o5Rk5fn8+JNy9Uj5fkQ8FxG/mL6WlytLzfryOP/wAYAJduPI/P+f6e78DwBccuVxNwAAGDnzPwBMHvM/AEwe8z8ATJ7u/H9t3M0AAEbI638AmDzmfwCYKN9/661s6+wX33+9/O721lrz3bvLtdZapbG1VFlqbm5UVprNlfw7exrHPV692dyYfy223rv5zY1We661vfOw0dxabz/Mv9f7Ya2UX7U7gp4BAMM899KHf06yGfnNa/kWfWs5lMbaMuC8peNuADA2V8bdAGBsrPYFk+sUr/FLET+XIoBLYMASvYeUB31AqNPpdM6vScA5u/0F+X+YVH35f/8LGCaM/D9MLvl/mFydTnLSRf7jpBcCABebHD8w5P3/54v9b4s3B360fPSKD86zVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCx9db/rRRrgc9EmlYqEc9ExM0oJY9W67V7EfFsRPxpujSdlefH3GYA4LTSvyXF+l+3Z1+dOVT14o2Dw6mI+Mmv3v7le4vt9uYfI6aSf033zrc/KM5XR996AOB4vXk63/e9kP947/FSbxtle/7+7Ygod+Pv703F/kH8q3E135ejFBHX/50U5a6kL3dxGrvvR8TnB/U/iZk8B9Jd+fRo/Cz2MyONnx6Kn+Z13X32u/jcGbQFJs2H2fjzYND9l8atfD/4/i/nI9TpFeNf9lBL+/kY+En83vh3Zcj4d+ukMV77/Xe7R9eerHs/4otXI3qx9/vGn178ZEj8V08Y/y9fevHlYXWdX0fcjsHx+2PNtRsbc63tnburjcWV2kptvVpdmF+498b916tzeY56bvhs8I837zw7rC7r//Uh8cvH9P+rJ+z/b/73zg+/8inxv/7KoPhpvPAp8bM58WsnjL94/XflYXVZ/OUh/T/u+b9zwvgf/XXniWXDAYDxaW3vrC3W67VNB5f7II0L0YxTHmT/ZEcQ68HT/NS3RvVLmBryVP7sle49faSq97f/Z4w1bMQ4i6wbcBEc3PQR8d9xNwYAAAAAAAAAAAAAABhoFJ9YGncfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLz+HwAA//9N4cYu") r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") socket$netlink(0x10, 0x3, 0x8000000004) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000000306010100000000000000000000ad0a3600000500010007000000"], 0x1c}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) syz_open_dev$usbfs(&(0x7f0000003f00), 0x37fe4906, 0xa401) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 3.096581426s ago: executing program 3 (id=280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000002c0), 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000800), 0x10) 3.025519127s ago: executing program 3 (id=281): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000a004e2100000003ff02000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0xb) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) 2.85379644s ago: executing program 5 (id=284): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x1}, 0x18) semctl$SETALL(0x0, 0x0, 0x12, 0x0) 2.85317263s ago: executing program 5 (id=285): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000004, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff3a93}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r11, 0x0, 0xb, 0x8509) r12 = accept4$inet(r11, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x10, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r12, 0x80089419, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000000)={0x0, r13, 0x3, 0x4, 0xfb9b, 0x8}) 2.80747925s ago: executing program 3 (id=286): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x5, @empty, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x6, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x18}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 2.478784685s ago: executing program 5 (id=291): clock_gettime(0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0000000400000004000000020002000000cfff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 2.16666122s ago: executing program 5 (id=295): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000804}}], 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x14, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x9b1c}, 0x8) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0xc095}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x25, '\x00', [@ra={0x5, 0x2f}, @enc_lim={0x4, 0x1, 0x8}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x0, @private}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sync() sync() chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0x9, 0x4, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) 2.15813888s ago: executing program 2 (id=296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000002c0), 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000800), 0x10) 2.029016131s ago: executing program 2 (id=299): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20f2, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x2ae}, 0x100304, 0xc8, 0x0, 0x2, 0x1, 0xc}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) recvmsg$unix(r3, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00082c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b200007"], 0xfdef) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x1}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf251800000008000300", @ANYRES32=r8, @ANYBLOB="100030800c00018008000400000045f39eede085c7f96880d351475460090d474060e8798e91c7d0bc3652fee6f90ab163efe13e676f3b13a8a58a638e24f77c896af2595cdca3b575587f9a22cf39b66c869b124721ed5f12abc6a004485f92d5ea3d223d3579413c6e2201028474f317f6ac1ecf8b7d87060000006c3e2fd98aab006608151950c11489786fd1365400000000000000508200be18cf31dc"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x404c850) socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x42012, 0xffffffffffffffff, 0x0) 1.966210553s ago: executing program 1 (id=301): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) keyctl$reject(0x13, 0x0, 0x5, 0x5, 0xfffffffffffffff8) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==") lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='os2'], 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2100840, 0x0, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe80000000"], 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001600}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x164, 0x24, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff3, 0xe}, {0x9, 0x5}, {0x9, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffff9d}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}, @qdisc_kind_options=@q_red={{0x8}, {0x120, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x1}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1ff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x8000) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.327260871s ago: executing program 3 (id=302): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r1 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) fallocate(r1, 0x10, 0x2, 0x7000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x2, 0x0, 0x2}) 1.281698222s ago: executing program 3 (id=303): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000a004e2100000003ff02000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) 1.149667024s ago: executing program 2 (id=305): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000a004e2100000003ff02000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0xb) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) 1.091911365s ago: executing program 1 (id=307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1.019046815s ago: executing program 1 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000010400000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) rt_sigsuspend(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 781.443819ms ago: executing program 1 (id=310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000800), 0x10) 739.055079ms ago: executing program 1 (id=311): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) write$selinux_validatetrans(r0, 0x0, 0x79) 673.79492ms ago: executing program 1 (id=312): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x5, @empty, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x6, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x18}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 664.269631ms ago: executing program 4 (id=313): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") r1 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) fallocate(r1, 0x10, 0x2, 0x7000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x2, 0x0, 0x2}) 574.483872ms ago: executing program 4 (id=314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x9, 0x2}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0xf, 0x0, &(0x7f00000002c0)="cc2742e8dd6cea8b94a42626f6abf9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000}, 0x50) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x1181, 0x5dd8, 0xfffffffe, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) 547.307052ms ago: executing program 3 (id=315): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20f2, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x2ae}, 0x100304, 0xc8, 0x0, 0x2, 0x1, 0xc}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) recvmsg$unix(r3, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00082c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b200007"], 0xfdef) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x1}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf251800000008000300", @ANYRES32=r8, @ANYBLOB="100030800c00018008000400000045f39eede085c7f96880d351475460090d474060e8798e91c7d0bc3652fee6f90ab163efe13e676f3b13a8a58a638e24f77c896af2595cdca3b575587f9a22cf39b66c869b124721ed5f12abc6a004485f92d5ea3d223d3579413c6e2201028474f317f6ac1ecf8b7d87060000006c3e2fd98aab006608151950c11489786fd1365400000000000000508200be18cf31dc"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x404c850) socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x42012, 0xffffffffffffffff, 0x0) 544.899292ms ago: executing program 2 (id=316): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ff7) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xea, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x20000000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) sendfile(r0, r0, 0x0, 0x800000009) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/nfsfs\x00') getdents64(r8, 0x0, 0x0) write$sndseq(r8, &(0x7f0000000440)=[{0x9, 0x0, 0x7, 0xa, @tick=0xfffffff7, {0x33, 0x7}, {0xb, 0x4}, @quote={{0x4, 0x1}, 0xb, &(0x7f0000000400)={0x8, 0x5, 0x5, 0xe5, @time={0x9, 0xc6}, {0x2}, {0xe, 0x7}, @note={0x97, 0x5, 0x4, 0xfa, 0x3}}}}], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 347.933965ms ago: executing program 4 (id=317): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000000006600000000000000180000000000000000000000000000009500000000a7000007030000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='&\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c25000000000a2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100b180850000002d000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0)='-0', 0x2) 347.475605ms ago: executing program 4 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 241.772476ms ago: executing program 5 (id=319): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 237.834727ms ago: executing program 4 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r1 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) fallocate(r1, 0x10, 0x2, 0x7000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x2, 0x0, 0x2}) 181.396807ms ago: executing program 5 (id=321): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa0336468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb236414c9f4108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b6d9bfdaffa82b8e942c86e00f4ab87b1bfed95be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f3840005e6f1050d8ee8efdb56d581be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d12000000333fbf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff0158da0a9e90c73e907df69646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcc969c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b31e5bac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e08938624e2ceef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea825f7dc08ff690d28e4aa37094191e10d767c71ff7ef939de3cdb0eeeb11c6b6096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985ff855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27086000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae478468932b423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b68a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168e6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9e00446b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead860000000000000000000000000000a8fdb466cad7005ea0cd5a67dfcff12d42b1866ed6a3e1db00edf9ea82"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fcntl$notify(r0, 0x402, 0x8000003d) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@noquota}, {@grpquota}], [{@dont_measure}, {@subj_role}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") prctl$PR_SET_NAME(0xf, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91106a000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = timerfd_create(0x8, 0x0) timerfd_settime(r6, 0x3, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 0s ago: executing program 4 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x5b0) close(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x3, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x2], 0x80000001, 0x29, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffdfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) kernel console output (not intermixed with test programs): etdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.892625][ T3481] loop4: detected capacity change from 0 to 128 [ 38.930023][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.970193][ T3481] Zero length message leads to an empty skb [ 38.979147][ T3484] loop3: detected capacity change from 0 to 512 [ 39.038989][ T3484] EXT4-fs: Ignoring removed oldalloc option [ 39.067576][ T3491] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.088480][ T3484] EXT4-fs (loop3): 1 truncate cleaned up [ 39.098017][ T3484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.099767][ T3491] 0ªX¹¦À: renamed from caif0 [ 39.130314][ T3491] 0ªX¹¦À: entered allmulticast mode [ 39.135573][ T3491] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 39.228886][ T3491] hub 2-0:1.0: USB hub found [ 39.239784][ T3491] hub 2-0:1.0: 8 ports detected [ 39.500314][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.651805][ T3518] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.780029][ T3521] loop4: detected capacity change from 0 to 2048 [ 39.807724][ T3521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.822400][ T3521] EXT4-fs error (device loop4): ext4_ext_precache:648: inode #2: comm syz.4.16: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 39.840217][ T3521] EXT4-fs (loop4): Remounting filesystem read-only [ 39.869708][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.909459][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.916844][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.943447][ T3519] 0ªX¹¦À: left allmulticast mode [ 39.974094][ T3529] netlink: 3 bytes leftover after parsing attributes in process `syz.4.17'. [ 39.990803][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.018085][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.061586][ T3519] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.070691][ T3519] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.079898][ T3519] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.089184][ T3519] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.108463][ T3529] 0ªX¹¦À: renamed from caif0 [ 40.141283][ T3529] 0ªX¹¦À: entered allmulticast mode [ 40.146641][ T3529] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 40.162708][ T3531] hub 2-0:1.0: USB hub found [ 40.167496][ T3531] hub 2-0:1.0: 8 ports detected [ 40.190021][ T1088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.361056][ T1088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.532220][ T3545] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 40.538875][ T3545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 40.546419][ T3545] vhci_hcd vhci_hcd.0: Device attached [ 40.602694][ T3545] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 40.609368][ T3545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 40.616955][ T3545] vhci_hcd vhci_hcd.0: Device attached [ 40.799163][ T3545] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(21) [ 40.805825][ T3545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 40.813577][ T3545] vhci_hcd vhci_hcd.0: Device attached [ 40.850534][ T1088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.893584][ T3571] loop1: detected capacity change from 0 to 512 [ 40.906054][ T3569] loop2: detected capacity change from 0 to 512 [ 40.979474][ T3571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.999572][ T1088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.007884][ T3545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 41.021931][ T3545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 41.026571][ T3569] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.030458][ T3571] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.043127][ T3545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 41.055413][ T3569] EXT4-fs (loop2): 1 truncate cleaned up [ 41.065958][ T3563] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(24) [ 41.066773][ T3569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.072577][ T3563] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 41.072704][ T3563] vhci_hcd vhci_hcd.0: Device attached [ 41.097863][ T3485] vhci_hcd: vhci_device speed not set [ 41.107110][ T3557] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 41.113803][ T3557] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 41.121473][ T3557] vhci_hcd vhci_hcd.0: Device attached [ 41.131480][ T3545] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(26) [ 41.138139][ T3545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 41.140356][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.145777][ T3545] vhci_hcd vhci_hcd.0: Device attached [ 41.160419][ T3485] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 41.184322][ T3561] vhci_hcd: connection closed [ 41.184325][ T3552] vhci_hcd: connection closed [ 41.184543][ T3546] vhci_hcd: connection reset by peer [ 41.189951][ T3401] vhci_hcd: stop threads [ 41.196798][ T3569] No such timeout policy "syz1" [ 41.199225][ T3401] vhci_hcd: release socket [ 41.206895][ T3564] vhci_hcd: connection closed [ 41.208424][ T3401] vhci_hcd: disconnect device [ 41.212860][ T3562] vhci_hcd: connection closed [ 41.228854][ T3401] vhci_hcd: stop threads [ 41.238004][ T3401] vhci_hcd: release socket [ 41.242443][ T3401] vhci_hcd: disconnect device [ 41.269966][ T3401] vhci_hcd: stop threads [ 41.274277][ T3401] vhci_hcd: release socket [ 41.278759][ T3401] vhci_hcd: disconnect device [ 41.287697][ T3401] vhci_hcd: stop threads [ 41.292079][ T3401] vhci_hcd: release socket [ 41.296577][ T3401] vhci_hcd: disconnect device [ 41.301488][ T1088] bridge_slave_1: left allmulticast mode [ 41.307297][ T1088] bridge_slave_1: left promiscuous mode [ 41.313008][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.323254][ T3582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 41.336969][ T3401] vhci_hcd: stop threads [ 41.341270][ T3401] vhci_hcd: release socket [ 41.345706][ T3401] vhci_hcd: disconnect device [ 41.378390][ T3587] loop1: detected capacity change from 0 to 512 [ 41.386495][ T1088] bridge_slave_0: left allmulticast mode [ 41.392173][ T1088] bridge_slave_0: left promiscuous mode [ 41.396941][ T3590] loop4: detected capacity change from 0 to 512 [ 41.397910][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.433467][ T3590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.446255][ T3587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 41.454189][ T3587] System zones: 1-12 [ 41.473459][ T3590] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.483988][ T3587] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #2: comm syz.1.27: corrupted xattr block 255: invalid header [ 41.499848][ T3587] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 41.513537][ T3587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.527357][ T3569] syz.2.26 (3569) used greatest stack depth: 10448 bytes left [ 41.535368][ T3587] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #2: comm syz.1.27: corrupted xattr block 255: invalid header [ 41.550023][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.560771][ T3587] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 41.568412][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.578800][ T3587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.596053][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.596084][ T3603] loop2: detected capacity change from 0 to 512 [ 41.619676][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.619651][ T3603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.642347][ T3603] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.643127][ T1088] bond0 (unregistering): Released all slaves [ 41.690427][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.697959][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.715570][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.720068][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.732096][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.746029][ T3612] xt_connbytes: Forcing CT accounting to be enabled [ 41.752822][ T3612] Cannot find set identified by id 0 to match [ 41.779773][ T3612] netlink: 1536 bytes leftover after parsing attributes in process `syz.2.33'. [ 41.789011][ T1088] hsr_slave_0: left promiscuous mode [ 41.794841][ T1088] hsr_slave_1: left promiscuous mode [ 41.805155][ T3614] netlink: 3 bytes leftover after parsing attributes in process `syz.4.34'. [ 41.805690][ T3575] vhci_hcd: connection closed [ 41.814621][ T12] vhci_hcd: stop threads [ 41.814971][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.819356][ T12] vhci_hcd: release socket [ 41.823588][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.831116][ T12] vhci_hcd: disconnect device [ 41.857735][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.865236][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.883758][ T1088] veth1_macvtap: left promiscuous mode [ 41.889418][ T1088] veth0_macvtap: left promiscuous mode [ 41.895016][ T1088] veth1_vlan: left promiscuous mode [ 41.900419][ T1088] veth0_vlan: left promiscuous mode [ 41.959477][ T3621] hub 2-0:1.0: USB hub found [ 41.977115][ T3621] hub 2-0:1.0: 8 ports detected [ 41.983448][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 41.997935][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 42.034381][ T3536] chnl_net:caif_netlink_parms(): no params data found [ 42.051010][ T3612] hsr_slave_1 (unregistering): left promiscuous mode [ 42.067534][ T3614] 1ªX¹¦À: renamed from 60ªX¹¦À [ 42.074945][ T3614] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 42.097141][ T3620] batadv0: entered allmulticast mode [ 42.103284][ T3620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.242845][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.250209][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.275202][ T3646] loop1: detected capacity change from 0 to 2048 [ 42.283118][ T3536] bridge_slave_0: entered allmulticast mode [ 42.290856][ T3536] bridge_slave_0: entered promiscuous mode [ 42.297979][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.305082][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.312636][ T3536] bridge_slave_1: entered allmulticast mode [ 42.319175][ T3536] bridge_slave_1: entered promiscuous mode [ 42.347296][ T3646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.375651][ T3536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.386521][ T3536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.413526][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.414602][ T3536] team0: Port device team_slave_0 added [ 42.430264][ T3536] team0: Port device team_slave_1 added [ 42.472780][ T3536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.479849][ T3536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.505858][ T3536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.525741][ T3536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.532809][ T3536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.558887][ T3536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.625068][ T3670] loop2: detected capacity change from 0 to 512 [ 42.625947][ T3662] netlink: 3 bytes leftover after parsing attributes in process `syz.4.41'. [ 42.661996][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.688123][ T3670] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.700435][ T3536] hsr_slave_0: entered promiscuous mode [ 42.722887][ T3536] hsr_slave_1: entered promiscuous mode [ 42.732227][ T3536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.737420][ T3680] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 42.743500][ T3536] Cannot create hsr debugfs directory [ 42.746444][ T3680] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 42.746563][ T3680] vhci_hcd vhci_hcd.0: Device attached [ 42.770973][ T3662] 0ªX¹¦À: renamed from 61ªX¹¦À [ 42.776771][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.790977][ T3662] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 42.798471][ T3681] hub 2-0:1.0: USB hub found [ 42.815392][ T3681] hub 2-0:1.0: 8 ports detected [ 42.820515][ T3680] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 42.827158][ T3680] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.834745][ T3680] vhci_hcd vhci_hcd.0: Device attached [ 42.872431][ T3691] loop2: detected capacity change from 0 to 128 [ 42.894575][ T3692] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 42.901271][ T3692] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.909108][ T3692] vhci_hcd vhci_hcd.0: Device attached [ 42.917840][ T3680] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(20) [ 42.924472][ T3680] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.932262][ T3680] vhci_hcd vhci_hcd.0: Device attached [ 42.956329][ T3680] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 42.962981][ T3680] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 42.971062][ T3680] vhci_hcd vhci_hcd.0: Device attached [ 42.983943][ T3680] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.023496][ T3680] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.032179][ T3680] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.056920][ T3536] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.064372][ T3680] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(30) [ 43.071011][ T3680] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 43.078822][ T3680] vhci_hcd vhci_hcd.0: Device attached [ 43.089359][ T3536] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.101317][ T3536] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.113169][ T3536] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.124695][ T3695] vhci_hcd: connection closed [ 43.124701][ T3693] vhci_hcd: connection closed [ 43.124799][ T3697] vhci_hcd: connection closed [ 43.130369][ T3401] vhci_hcd: stop threads [ 43.135961][ T3687] vhci_hcd: connection closed [ 43.138868][ T3401] vhci_hcd: release socket [ 43.138882][ T3401] vhci_hcd: disconnect device [ 43.139111][ T3683] vhci_hcd: connection closed [ 43.161235][ T3401] vhci_hcd: stop threads [ 43.170013][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.170303][ T3401] vhci_hcd: release socket [ 43.177322][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.177420][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.181779][ T3401] vhci_hcd: disconnect device [ 43.200831][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.225624][ T3401] vhci_hcd: stop threads [ 43.230052][ T3401] vhci_hcd: release socket [ 43.234640][ T3401] vhci_hcd: disconnect device [ 43.239951][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.257818][ T3401] vhci_hcd: stop threads [ 43.262148][ T3401] vhci_hcd: release socket [ 43.266643][ T3401] vhci_hcd: disconnect device [ 43.276596][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.297434][ T3401] vhci_hcd: stop threads [ 43.301884][ T3401] vhci_hcd: release socket [ 43.306426][ T3401] vhci_hcd: disconnect device [ 43.330210][ T3724] netlink: 3 bytes leftover after parsing attributes in process `syz.4.48'. [ 43.341222][ T3724] 1ªX¹¦À: renamed from 60ªX¹¦À [ 43.348330][ T3724] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 43.377501][ T3726] loop1: detected capacity change from 0 to 512 [ 43.404880][ T3726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.419709][ T3724] hub 2-0:1.0: USB hub found [ 43.429927][ T3726] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.440482][ T3724] hub 2-0:1.0: 8 ports detected [ 43.443999][ T3536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.477031][ T3536] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.493367][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.500610][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.538383][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.545545][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.558552][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.677938][ T3709] vhci_hcd: connection closed [ 43.695070][ T12] vhci_hcd: stop threads [ 43.704140][ T12] vhci_hcd: release socket [ 43.708646][ T12] vhci_hcd: disconnect device [ 43.730852][ T3536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.739422][ T3756] loop3: detected capacity change from 0 to 512 [ 43.754374][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 43.754392][ T29] audit: type=1400 audit(1746970421.212:201): avc: denied { read } for pid=3752 comm="syz.1.52" dev="nsfs" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.781687][ T29] audit: type=1400 audit(1746970421.212:202): avc: denied { open } for pid=3752 comm="syz.1.52" path="net:[4026532647]" dev="nsfs" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.804707][ T29] audit: type=1400 audit(1746970421.212:203): avc: denied { create } for pid=3752 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.843297][ T29] audit: type=1400 audit(1746970421.232:204): avc: denied { bind } for pid=3752 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.862990][ T29] audit: type=1400 audit(1746970421.272:205): avc: denied { read } for pid=3752 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.889154][ T3756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.912104][ T29] audit: type=1400 audit(1746970421.362:206): avc: denied { create } for pid=3763 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.932435][ T29] audit: type=1400 audit(1746970421.372:207): avc: denied { write } for pid=3763 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.947538][ T3756] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.952383][ T29] audit: type=1400 audit(1746970421.372:208): avc: denied { nlmsg_write } for pid=3763 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.997400][ T29] audit: type=1400 audit(1746970421.442:209): avc: denied { ioctl } for pid=3763 comm="syz.2.56" path="socket:[6205]" dev="sockfs" ino=6205 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.022657][ T29] audit: type=1400 audit(1746970421.462:210): avc: denied { watch watch_reads } for pid=3770 comm="syz.4.55" path="/15/control" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.036069][ T3768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'. [ 44.055818][ T3767] loop1: detected capacity change from 0 to 512 [ 44.062471][ T3768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'. [ 44.086373][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.098184][ T3768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'. [ 44.112463][ T3768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'. [ 44.176692][ T3767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.196382][ T3767] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.203691][ T3768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'. [ 44.225936][ T3768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'. [ 44.236055][ T3798] netlink: 3 bytes leftover after parsing attributes in process `syz.3.60'. [ 44.258848][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.263499][ T3798] 0ªX¹¦À: renamed from caif0 [ 44.289717][ T3798] 0ªX¹¦À: entered allmulticast mode [ 44.295119][ T3798] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 44.304381][ T3806] netlink: 3 bytes leftover after parsing attributes in process `syz.1.61'. [ 44.330255][ T3806] 0ªX¹¦À: renamed from caif0 [ 44.337352][ T3806] 0ªX¹¦À: entered allmulticast mode [ 44.342776][ T3806] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 44.370231][ T3536] veth0_vlan: entered promiscuous mode [ 44.375853][ T3798] hub 2-0:1.0: USB hub found [ 44.381148][ T3798] hub 2-0:1.0: 8 ports detected [ 44.422864][ T3806] hub 2-0:1.0: USB hub found [ 44.425084][ T3536] veth1_vlan: entered promiscuous mode [ 44.427846][ T3806] hub 2-0:1.0: 8 ports detected [ 44.470100][ T3536] veth0_macvtap: entered promiscuous mode [ 44.479591][ T3536] veth1_macvtap: entered promiscuous mode [ 44.497079][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.507667][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.517665][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.528162][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.569900][ T3536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.592515][ T3824] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 44.595642][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.599151][ T3824] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 44.599354][ T3824] vhci_hcd vhci_hcd.0: Device attached [ 44.609647][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.609664][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.609688][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.613505][ T3536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.689908][ T3824] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 44.696766][ T3824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.704411][ T3824] vhci_hcd vhci_hcd.0: Device attached [ 44.723415][ T3536] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.732542][ T3536] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.741474][ T3536] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.750511][ T3536] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.767426][ T3824] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 44.774133][ T3824] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 44.781869][ T3824] vhci_hcd vhci_hcd.0: Device attached [ 44.820075][ T3844] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(21) [ 44.826728][ T3844] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 44.834376][ T3844] vhci_hcd vhci_hcd.0: Device attached [ 44.897041][ T3824] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 44.903694][ T3824] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 44.911510][ T3824] vhci_hcd vhci_hcd.0: Device attached [ 44.929519][ T3859] loop5: detected capacity change from 0 to 128 [ 44.978458][ T3824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 44.994236][ T3824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 45.016634][ T3824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 45.042125][ T3824] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(30) [ 45.048832][ T3824] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 45.056658][ T3824] vhci_hcd vhci_hcd.0: Device attached [ 45.099553][ T3845] vhci_hcd: connection closed [ 45.099640][ T3825] vhci_hcd: connection closed [ 45.099763][ T3834] vhci_hcd: connection closed [ 45.104701][ T110] vhci_hcd: stop threads [ 45.109703][ T3839] vhci_hcd: connection closed [ 45.114048][ T110] vhci_hcd: release socket [ 45.127548][ T110] vhci_hcd: disconnect device [ 45.151766][ T3856] vhci_hcd: connection closed [ 45.158092][ T3882] loop2: detected capacity change from 0 to 512 [ 45.215488][ T3885] loop4: detected capacity change from 0 to 128 [ 45.226633][ T110] vhci_hcd: stop threads [ 45.230927][ T110] vhci_hcd: release socket [ 45.235402][ T110] vhci_hcd: disconnect device [ 45.257384][ T3882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.270363][ T110] vhci_hcd: stop threads [ 45.274675][ T110] vhci_hcd: release socket [ 45.279260][ T110] vhci_hcd: disconnect device [ 45.284705][ T110] vhci_hcd: stop threads [ 45.289067][ T110] vhci_hcd: release socket [ 45.293515][ T110] vhci_hcd: disconnect device [ 45.299388][ T110] vhci_hcd: stop threads [ 45.299752][ T3882] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.303644][ T110] vhci_hcd: release socket [ 45.318322][ T110] vhci_hcd: disconnect device [ 45.340340][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.373771][ T3894] netlink: 3 bytes leftover after parsing attributes in process `syz.2.71'. [ 45.391444][ T3894] 1ªX¹¦À: renamed from 60ªX¹¦À [ 45.398401][ T3894] 1ªX¹¦À: entered allmulticast mode [ 45.403694][ T3894] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 45.419825][ T3896] 1ªX¹¦À: renamed from 60ªX¹¦À [ 45.429489][ T3896] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 45.479518][ T3894] hub 2-0:1.0: USB hub found [ 45.484360][ T3894] hub 2-0:1.0: 8 ports detected [ 45.661307][ T3872] vhci_hcd: connection closed [ 45.665601][ T31] vhci_hcd: stop threads [ 45.674750][ T31] vhci_hcd: release socket [ 45.679224][ T31] vhci_hcd: disconnect device [ 45.739218][ T3894] syz.2.71 (3894) used greatest stack depth: 10408 bytes left [ 46.184953][ T3918] loop4: detected capacity change from 0 to 512 [ 46.209172][ T3918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.241546][ T3918] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.256973][ T3485] usb 7-1: enqueue for inactive port 0 [ 46.262571][ T3485] usb 7-1: enqueue for inactive port 0 [ 46.281674][ T3921] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 46.294551][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.321617][ T3923] loop4: detected capacity change from 0 to 512 [ 46.331249][ T3923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.344909][ T3923] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.346228][ T3485] vhci_hcd: vhci_device speed not set [ 46.380094][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.428423][ T3928] loop3: detected capacity change from 0 to 2048 [ 46.437080][ T3928] EXT4-fs: Ignoring removed i_version option [ 46.488542][ T3928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.514663][ T3930] loop4: detected capacity change from 0 to 1024 [ 46.523585][ T3930] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 46.614216][ T3937] loop2: detected capacity change from 0 to 2048 [ 46.614237][ T3938] netlink: zone id is out of range [ 46.614249][ T3938] netlink: zone id is out of range [ 46.631145][ T3938] netlink: zone id is out of range [ 46.664495][ T3940] FAULT_INJECTION: forcing a failure. [ 46.664495][ T3940] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.664546][ T3940] CPU: 0 UID: 0 PID: 3940 Comm: syz.4.83 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 46.664579][ T3940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.664668][ T3940] Call Trace: [ 46.664675][ T3940] [ 46.664684][ T3940] __dump_stack+0x1d/0x30 [ 46.664710][ T3940] dump_stack_lvl+0xe8/0x140 [ 46.664733][ T3940] dump_stack+0x15/0x1b [ 46.664811][ T3940] should_fail_ex+0x265/0x280 [ 46.664951][ T3940] should_fail+0xb/0x20 [ 46.664984][ T3940] should_fail_usercopy+0x1a/0x20 [ 46.665073][ T3940] _copy_from_user+0x1c/0xb0 [ 46.665101][ T3940] __sys_bind+0x106/0x2a0 [ 46.665155][ T3940] __x64_sys_bind+0x3f/0x50 [ 46.665181][ T3940] x64_sys_call+0x2086/0x2fb0 [ 46.665201][ T3940] do_syscall_64+0xd0/0x1a0 [ 46.665254][ T3940] ? clear_bhb_loop+0x25/0x80 [ 46.665281][ T3940] ? clear_bhb_loop+0x25/0x80 [ 46.665306][ T3940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.665332][ T3940] RIP: 0033:0x7f57764be969 [ 46.665358][ T3940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.665438][ T3940] RSP: 002b:00007f5774b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 46.665461][ T3940] RAX: ffffffffffffffda RBX: 00007f57766e5fa0 RCX: 00007f57764be969 [ 46.665476][ T3940] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000006 [ 46.665513][ T3940] RBP: 00007f5774b27090 R08: 0000000000000000 R09: 0000000000000000 [ 46.665528][ T3940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.665543][ T3940] R13: 0000000000000000 R14: 00007f57766e5fa0 R15: 00007ffe401433a8 [ 46.665567][ T3940] [ 47.041562][ T3960] loop2: detected capacity change from 0 to 512 [ 47.052339][ T3960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.071808][ T3960] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.075100][ T3965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.089594][ T3965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.101096][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.110748][ T3965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.118259][ T3965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.151869][ T3966] loop5: detected capacity change from 0 to 512 [ 47.160706][ T3968] 0ªX¹¦À: renamed from 61ªX¹¦À [ 47.166618][ T3966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 47.175361][ T3966] System zones: 1-12 [ 47.180167][ T3966] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #2: comm syz.5.91: corrupted xattr block 255: invalid header [ 47.193501][ T3966] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 47.202326][ T3966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.215059][ T3966] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #2: comm syz.5.91: corrupted xattr block 255: invalid header [ 47.228355][ T3966] SELinux: (dev loop5, type ext4) getxattr errno 117 [ 47.235568][ T3966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.241280][ T3968] hub 2-0:1.0: USB hub found [ 47.250415][ T3968] hub 2-0:1.0: 8 ports detected [ 47.408414][ T3976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.417037][ T3976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.428417][ T3976] loop1: detected capacity change from 0 to 256 [ 47.619327][ T3980] FAULT_INJECTION: forcing a failure. [ 47.619327][ T3980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.632589][ T3980] CPU: 1 UID: 0 PID: 3980 Comm: syz.4.96 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 47.632622][ T3980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 47.632637][ T3980] Call Trace: [ 47.632643][ T3980] [ 47.632652][ T3980] __dump_stack+0x1d/0x30 [ 47.632676][ T3980] dump_stack_lvl+0xe8/0x140 [ 47.632700][ T3980] dump_stack+0x15/0x1b [ 47.632755][ T3980] should_fail_ex+0x265/0x280 [ 47.632788][ T3980] should_fail+0xb/0x20 [ 47.632889][ T3980] should_fail_usercopy+0x1a/0x20 [ 47.632912][ T3980] _copy_from_user+0x1c/0xb0 [ 47.632939][ T3980] ___sys_sendmsg+0xc1/0x1d0 [ 47.633024][ T3980] __x64_sys_sendmsg+0xd4/0x160 [ 47.633047][ T3980] x64_sys_call+0x2999/0x2fb0 [ 47.633129][ T3980] do_syscall_64+0xd0/0x1a0 [ 47.633172][ T3980] ? clear_bhb_loop+0x25/0x80 [ 47.633196][ T3980] ? clear_bhb_loop+0x25/0x80 [ 47.633220][ T3980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.633245][ T3980] RIP: 0033:0x7f57764be969 [ 47.633269][ T3980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.633291][ T3980] RSP: 002b:00007f5774b27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.633313][ T3980] RAX: ffffffffffffffda RBX: 00007f57766e5fa0 RCX: 00007f57764be969 [ 47.633327][ T3980] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 47.633337][ T3980] RBP: 00007f5774b27090 R08: 0000000000000000 R09: 0000000000000000 [ 47.633347][ T3980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.633368][ T3980] R13: 0000000000000000 R14: 00007f57766e5fa0 R15: 00007ffe401433a8 [ 47.633385][ T3980] [ 47.820129][ T3982] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 47.954643][ T3998] vlan2: entered allmulticast mode [ 47.959886][ T3998] bond0: entered allmulticast mode [ 47.965086][ T3998] bond_slave_0: entered allmulticast mode [ 47.970852][ T3998] bond_slave_1: entered allmulticast mode [ 47.977853][ T3984] Falling back ldisc for ttyS3. [ 48.039602][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.043734][ T4002] hub 2-0:1.0: USB hub found [ 48.054517][ T4002] hub 2-0:1.0: 8 ports detected [ 48.088786][ T4015] FAULT_INJECTION: forcing a failure. [ 48.088786][ T4015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.101960][ T4015] CPU: 0 UID: 0 PID: 4015 Comm: syz.3.100 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 48.102017][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 48.102028][ T4015] Call Trace: [ 48.102035][ T4015] [ 48.102042][ T4015] __dump_stack+0x1d/0x30 [ 48.102150][ T4015] dump_stack_lvl+0xe8/0x140 [ 48.102210][ T4015] dump_stack+0x15/0x1b [ 48.102319][ T4015] should_fail_ex+0x265/0x280 [ 48.102351][ T4015] should_fail+0xb/0x20 [ 48.102396][ T4015] should_fail_usercopy+0x1a/0x20 [ 48.102414][ T4015] _copy_to_iter+0xcf/0xdd0 [ 48.102433][ T4015] ? __pfx_lapic_next_event+0x10/0x10 [ 48.102466][ T4015] ? _raw_spin_unlock_irq+0x14/0x50 [ 48.102544][ T4015] timerfd_read_iter+0x4b1/0x520 [ 48.102564][ T4015] ? __pfx_autoremove_wake_function+0x10/0x10 [ 48.102601][ T4015] do_iter_readv_writev+0x41e/0x4c0 [ 48.102721][ T4015] vfs_readv+0x1e3/0x670 [ 48.102762][ T4015] do_readv+0xe7/0x210 [ 48.102802][ T4015] __x64_sys_readv+0x45/0x50 [ 48.102829][ T4015] x64_sys_call+0x29af/0x2fb0 [ 48.102850][ T4015] do_syscall_64+0xd0/0x1a0 [ 48.102872][ T4015] ? clear_bhb_loop+0x25/0x80 [ 48.102899][ T4015] ? clear_bhb_loop+0x25/0x80 [ 48.102989][ T4015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.103009][ T4015] RIP: 0033:0x7fca7309e969 [ 48.103024][ T4015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.103116][ T4015] RSP: 002b:00007fca71707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 48.103134][ T4015] RAX: ffffffffffffffda RBX: 00007fca732c5fa0 RCX: 00007fca7309e969 [ 48.103146][ T4015] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000005 [ 48.103157][ T4015] RBP: 00007fca71707090 R08: 0000000000000000 R09: 0000000000000000 [ 48.103169][ T4015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.103180][ T4015] R13: 0000000000000000 R14: 00007fca732c5fa0 R15: 00007ffdd18e4628 [ 48.103199][ T4015] [ 48.353480][ T4024] loop4: detected capacity change from 0 to 512 [ 48.362095][ T4022] __nla_validate_parse: 5 callbacks suppressed [ 48.362173][ T4022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 48.380372][ T4024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.399228][ T4024] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.414600][ T4022] hsr_slave_0: left promiscuous mode [ 48.446356][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.549550][ T4041] syz.4.110 uses obsolete (PF_INET,SOCK_PACKET) [ 48.591510][ T4048] netlink: 3 bytes leftover after parsing attributes in process `syz.3.114'. [ 48.601456][ T4048] 1ªX¹¦À: renamed from 60ªX¹¦À [ 48.611011][ T4048] net_ratelimit: 22 callbacks suppressed [ 48.611023][ T4048] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 48.612021][ T4051] FAULT_INJECTION: forcing a failure. [ 48.612021][ T4051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.645502][ T4051] CPU: 0 UID: 0 PID: 4051 Comm: syz.4.115 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 48.645612][ T4051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 48.645624][ T4051] Call Trace: [ 48.645630][ T4051] [ 48.645637][ T4051] __dump_stack+0x1d/0x30 [ 48.645657][ T4051] dump_stack_lvl+0xe8/0x140 [ 48.645677][ T4051] dump_stack+0x15/0x1b [ 48.645775][ T4051] should_fail_ex+0x265/0x280 [ 48.645809][ T4051] should_fail+0xb/0x20 [ 48.645836][ T4051] should_fail_usercopy+0x1a/0x20 [ 48.645902][ T4051] _copy_from_user+0x1c/0xb0 [ 48.645928][ T4051] __sys_bind+0x106/0x2a0 [ 48.645966][ T4051] __x64_sys_bind+0x3f/0x50 [ 48.645991][ T4051] x64_sys_call+0x2086/0x2fb0 [ 48.646021][ T4051] do_syscall_64+0xd0/0x1a0 [ 48.646057][ T4051] ? clear_bhb_loop+0x25/0x80 [ 48.646083][ T4051] ? clear_bhb_loop+0x25/0x80 [ 48.646153][ T4051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.646178][ T4051] RIP: 0033:0x7f57764be969 [ 48.646194][ T4051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.646215][ T4051] RSP: 002b:00007f5774b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 48.646234][ T4051] RAX: ffffffffffffffda RBX: 00007f57766e5fa0 RCX: 00007f57764be969 [ 48.646248][ T4051] RDX: 000000000000006e RSI: 0000200000000240 RDI: 0000000000000004 [ 48.646262][ T4051] RBP: 00007f5774b27090 R08: 0000000000000000 R09: 0000000000000000 [ 48.646326][ T4051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.646340][ T4051] R13: 0000000000000000 R14: 00007f57766e5fa0 R15: 00007ffe401433a8 [ 48.646369][ T4051] [ 48.862005][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 48.862023][ T29] audit: type=1326 audit(1746970426.322:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57764be969 code=0x7ffc0000 [ 48.891779][ T29] audit: type=1326 audit(1746970426.322:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57764be969 code=0x7ffc0000 [ 48.915289][ T29] audit: type=1326 audit(1746970426.322:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57764be969 code=0x7ffc0000 [ 48.938611][ T29] audit: type=1326 audit(1746970426.322:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57764be969 code=0x7ffc0000 [ 48.962541][ T29] audit: type=1326 audit(1746970426.322:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57764be969 code=0x7ffc0000 [ 48.986677][ T29] audit: type=1326 audit(1746970426.322:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f57764be969 code=0x7ffc0000 [ 48.990917][ T4064] loop1: detected capacity change from 0 to 512 [ 49.009957][ T29] audit: type=1326 audit(1746970426.322:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57764be969 code=0x7ffc0000 [ 49.039345][ T29] audit: type=1326 audit(1746970426.322:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57764be969 code=0x7ffc0000 [ 49.062784][ T29] audit: type=1326 audit(1746970426.322:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57764be969 code=0x7ffc0000 [ 49.072173][ T4064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.086204][ T29] audit: type=1326 audit(1746970426.322:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57764be969 code=0x7ffc0000 [ 49.099306][ T4064] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.154347][ T4061] random: crng reseeded on system resumption [ 49.255382][ T9] usb usb8-port1: attempt power cycle [ 49.290084][ T4072] FAULT_INJECTION: forcing a failure. [ 49.290084][ T4072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.303382][ T4072] CPU: 1 UID: 0 PID: 4072 Comm: syz.5.121 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 49.303488][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.303500][ T4072] Call Trace: [ 49.303508][ T4072] [ 49.303517][ T4072] __dump_stack+0x1d/0x30 [ 49.303541][ T4072] dump_stack_lvl+0xe8/0x140 [ 49.303562][ T4072] dump_stack+0x15/0x1b [ 49.303581][ T4072] should_fail_ex+0x265/0x280 [ 49.303641][ T4072] should_fail+0xb/0x20 [ 49.303701][ T4072] should_fail_usercopy+0x1a/0x20 [ 49.303724][ T4072] _copy_from_user+0x1c/0xb0 [ 49.303751][ T4072] __sys_bpf+0x178/0x790 [ 49.303852][ T4072] __x64_sys_bpf+0x41/0x50 [ 49.303880][ T4072] x64_sys_call+0x2478/0x2fb0 [ 49.303928][ T4072] do_syscall_64+0xd0/0x1a0 [ 49.303955][ T4072] ? clear_bhb_loop+0x25/0x80 [ 49.303981][ T4072] ? clear_bhb_loop+0x25/0x80 [ 49.304114][ T4072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.304140][ T4072] RIP: 0033:0x7fcd203ce969 [ 49.304182][ T4072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.304199][ T4072] RSP: 002b:00007fcd1ea37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.304220][ T4072] RAX: ffffffffffffffda RBX: 00007fcd205f5fa0 RCX: 00007fcd203ce969 [ 49.304235][ T4072] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 49.304249][ T4072] RBP: 00007fcd1ea37090 R08: 0000000000000000 R09: 0000000000000000 [ 49.304326][ T4072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.304340][ T4072] R13: 0000000000000000 R14: 00007fcd205f5fa0 R15: 00007fff2f9376a8 [ 49.304371][ T4072] [ 49.518290][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.560272][ T4082] FAULT_INJECTION: forcing a failure. [ 49.560272][ T4082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.573462][ T4082] CPU: 0 UID: 0 PID: 4082 Comm: syz.2.127 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 49.573542][ T4082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.573553][ T4082] Call Trace: [ 49.573560][ T4082] [ 49.573570][ T4082] __dump_stack+0x1d/0x30 [ 49.573604][ T4082] dump_stack_lvl+0xe8/0x140 [ 49.573629][ T4082] dump_stack+0x15/0x1b [ 49.573652][ T4082] should_fail_ex+0x265/0x280 [ 49.573757][ T4082] should_fail+0xb/0x20 [ 49.573836][ T4082] should_fail_usercopy+0x1a/0x20 [ 49.573854][ T4082] _copy_from_user+0x1c/0xb0 [ 49.573879][ T4082] __sys_bpf+0x178/0x790 [ 49.573923][ T4082] __x64_sys_bpf+0x41/0x50 [ 49.574010][ T4082] x64_sys_call+0x2478/0x2fb0 [ 49.574033][ T4082] do_syscall_64+0xd0/0x1a0 [ 49.574055][ T4082] ? clear_bhb_loop+0x25/0x80 [ 49.574076][ T4082] ? clear_bhb_loop+0x25/0x80 [ 49.574142][ T4082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.574163][ T4082] RIP: 0033:0x7f9e5676e969 [ 49.574177][ T4082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.574196][ T4082] RSP: 002b:00007f9e54dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.574227][ T4082] RAX: ffffffffffffffda RBX: 00007f9e56995fa0 RCX: 00007f9e5676e969 [ 49.574242][ T4082] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 49.574257][ T4082] RBP: 00007f9e54dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.574275][ T4082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.574286][ T4082] R13: 0000000000000000 R14: 00007f9e56995fa0 R15: 00007fff43196bf8 [ 49.574363][ T4082] [ 49.923647][ T4097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'. [ 49.944943][ T4102] FAULT_INJECTION: forcing a failure. [ 49.944943][ T4102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.958057][ T4102] CPU: 1 UID: 0 PID: 4102 Comm: syz.3.131 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 49.958084][ T4102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.958099][ T4102] Call Trace: [ 49.958107][ T4102] [ 49.958114][ T4102] __dump_stack+0x1d/0x30 [ 49.958215][ T4102] dump_stack_lvl+0xe8/0x140 [ 49.958303][ T4102] dump_stack+0x15/0x1b [ 49.958324][ T4102] should_fail_ex+0x265/0x280 [ 49.958400][ T4102] should_fail+0xb/0x20 [ 49.958429][ T4102] should_fail_usercopy+0x1a/0x20 [ 49.958524][ T4102] _copy_from_user+0x1c/0xb0 [ 49.958557][ T4102] bpf_test_init+0xdf/0x160 [ 49.958628][ T4102] bpf_prog_test_run_xdp+0x274/0x8f0 [ 49.958792][ T4102] ? kstrtouint+0x76/0xc0 [ 49.958826][ T4102] ? __rcu_read_unlock+0x4f/0x70 [ 49.958857][ T4102] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 49.958901][ T4102] bpf_prog_test_run+0x207/0x390 [ 49.958938][ T4102] __sys_bpf+0x3dc/0x790 [ 49.959004][ T4102] __x64_sys_bpf+0x41/0x50 [ 49.959035][ T4102] x64_sys_call+0x2478/0x2fb0 [ 49.959062][ T4102] do_syscall_64+0xd0/0x1a0 [ 49.959101][ T4102] ? clear_bhb_loop+0x25/0x80 [ 49.959121][ T4102] ? clear_bhb_loop+0x25/0x80 [ 49.959142][ T4102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.959205][ T4102] RIP: 0033:0x7fca7309e969 [ 49.959219][ T4102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.959235][ T4102] RSP: 002b:00007fca71707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.959253][ T4102] RAX: ffffffffffffffda RBX: 00007fca732c5fa0 RCX: 00007fca7309e969 [ 49.959268][ T4102] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 49.959310][ T4102] RBP: 00007fca71707090 R08: 0000000000000000 R09: 0000000000000000 [ 49.959321][ T4102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.959332][ T4102] R13: 0000000000000000 R14: 00007fca732c5fa0 R15: 00007ffdd18e4628 [ 49.959353][ T4102] [ 49.961118][ T4095] netlink: 'syz.5.128': attribute type 13 has an invalid length. [ 50.143206][ T4092] loop4: detected capacity change from 0 to 128 [ 50.176092][ T4107] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 50.193126][ T4106] loop5: detected capacity change from 0 to 512 [ 50.234834][ T4115] netlink: 3 bytes leftover after parsing attributes in process `syz.3.133'. [ 50.270370][ T4106] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.128: Failed to acquire dquot type 1 [ 50.287924][ T4117] loop2: detected capacity change from 0 to 512 [ 50.324436][ T4117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.343907][ T4117] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.357473][ T4106] EXT4-fs (loop5): 1 truncate cleaned up [ 50.363593][ T4106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.376430][ T4106] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.398173][ T4095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.414405][ T4115] 0ªX¹¦À: renamed from 61ªX¹¦À [ 50.431409][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.443005][ T4115] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 50.549805][ T3536] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.630697][ T4140] loop3: detected capacity change from 0 to 512 [ 50.653968][ T4140] ======================================================= [ 50.653968][ T4140] WARNING: The mand mount option has been deprecated and [ 50.653968][ T4140] and is ignored by this kernel. Remove the mand [ 50.653968][ T4140] option from the mount to silence this warning. [ 50.653968][ T4140] ======================================================= [ 50.707987][ T4140] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.777669][ T4140] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 50.785649][ T4140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 50.799711][ T4152] FAULT_INJECTION: forcing a failure. [ 50.799711][ T4152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.812932][ T4152] CPU: 0 UID: 0 PID: 4152 Comm: syz.4.145 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 50.812964][ T4152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 50.812978][ T4152] Call Trace: [ 50.812984][ T4152] [ 50.812991][ T4152] __dump_stack+0x1d/0x30 [ 50.813013][ T4152] dump_stack_lvl+0xe8/0x140 [ 50.813035][ T4152] dump_stack+0x15/0x1b [ 50.813143][ T4152] should_fail_ex+0x265/0x280 [ 50.813224][ T4152] should_fail+0xb/0x20 [ 50.813252][ T4152] should_fail_usercopy+0x1a/0x20 [ 50.813284][ T4152] _copy_to_user+0x20/0xa0 [ 50.813306][ T4152] simple_read_from_buffer+0xb5/0x130 [ 50.813361][ T4152] proc_fail_nth_read+0x100/0x140 [ 50.813388][ T4152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.813412][ T4152] vfs_read+0x19d/0x6f0 [ 50.813434][ T4152] ? __rcu_read_unlock+0x4f/0x70 [ 50.813454][ T4152] ? __rcu_read_unlock+0x4f/0x70 [ 50.813518][ T4152] ? __fget_files+0x184/0x1c0 [ 50.813546][ T4152] ? ksys_read+0x56/0x1a0 [ 50.813571][ T4152] ksys_read+0xda/0x1a0 [ 50.813638][ T4152] __x64_sys_read+0x40/0x50 [ 50.813662][ T4152] x64_sys_call+0x2d77/0x2fb0 [ 50.813707][ T4152] do_syscall_64+0xd0/0x1a0 [ 50.813730][ T4152] ? clear_bhb_loop+0x25/0x80 [ 50.813752][ T4152] ? clear_bhb_loop+0x25/0x80 [ 50.813773][ T4152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.813848][ T4152] RIP: 0033:0x7f57764bd37c [ 50.813863][ T4152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.813932][ T4152] RSP: 002b:00007f5774b27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.814065][ T4152] RAX: ffffffffffffffda RBX: 00007f57766e5fa0 RCX: 00007f57764bd37c [ 50.814077][ T4152] RDX: 000000000000000f RSI: 00007f5774b270a0 RDI: 0000000000000006 [ 50.814151][ T4152] RBP: 00007f5774b27090 R08: 0000000000000000 R09: 0000000000000000 [ 50.814163][ T4152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.814174][ T4152] R13: 0000000000000000 R14: 00007f57766e5fa0 R15: 00007ffe401433a8 [ 50.814193][ T4152] [ 51.024165][ T4140] System zones: 0-1, 15-15, 18-18, 34-34 [ 51.030182][ T4140] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.032494][ T4154] loop5: detected capacity change from 0 to 512 [ 51.036679][ T4140] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 51.050243][ T4154] /dev/loop5: Can't open blockdev [ 51.057627][ T4140] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 51.071629][ T4140] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.141: bg 0: block 40: padding at end of block bitmap is not set [ 51.096709][ T4140] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 51.109288][ T4140] EXT4-fs (loop3): 1 truncate cleaned up [ 51.116094][ T4140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.137362][ T4156] loop4: detected capacity change from 0 to 512 [ 51.151113][ T4156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.164340][ T4156] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.175465][ T4140] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.141: bad symlink. [ 51.219898][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.231117][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.337121][ T4167] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.147'. [ 51.346683][ T4167] netlink: zone id is out of range [ 51.351969][ T4167] netlink: zone id is out of range [ 51.357227][ T4167] netlink: zone id is out of range [ 51.362973][ T4167] netlink: zone id is out of range [ 51.368243][ T4167] netlink: zone id is out of range [ 51.373551][ T4167] netlink: zone id is out of range [ 51.378938][ T4167] netlink: zone id is out of range [ 51.409627][ T4170] FAULT_INJECTION: forcing a failure. [ 51.409627][ T4170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.422769][ T4170] CPU: 1 UID: 0 PID: 4170 Comm: syz.4.151 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 51.422802][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.422822][ T4170] Call Trace: [ 51.422829][ T4170] [ 51.422838][ T4170] __dump_stack+0x1d/0x30 [ 51.422862][ T4170] dump_stack_lvl+0xe8/0x140 [ 51.422903][ T4170] dump_stack+0x15/0x1b [ 51.422989][ T4170] should_fail_ex+0x265/0x280 [ 51.423022][ T4170] should_fail+0xb/0x20 [ 51.423058][ T4170] should_fail_usercopy+0x1a/0x20 [ 51.423095][ T4170] _copy_from_user+0x1c/0xb0 [ 51.423122][ T4170] __sys_bpf+0x178/0x790 [ 51.423165][ T4170] __x64_sys_bpf+0x41/0x50 [ 51.423260][ T4170] x64_sys_call+0x2478/0x2fb0 [ 51.423299][ T4170] do_syscall_64+0xd0/0x1a0 [ 51.423384][ T4170] ? clear_bhb_loop+0x25/0x80 [ 51.423406][ T4170] ? clear_bhb_loop+0x25/0x80 [ 51.423429][ T4170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.423451][ T4170] RIP: 0033:0x7f57764be969 [ 51.423508][ T4170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.423524][ T4170] RSP: 002b:00007f5774b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 51.423578][ T4170] RAX: ffffffffffffffda RBX: 00007f57766e5fa0 RCX: 00007f57764be969 [ 51.423589][ T4170] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 51.423600][ T4170] RBP: 00007f5774b27090 R08: 0000000000000000 R09: 0000000000000000 [ 51.423610][ T4170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.423620][ T4170] R13: 0000000000000000 R14: 00007f57766e5fa0 R15: 00007ffe401433a8 [ 51.423636][ T4170] [ 51.622524][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 51.633297][ T4173] netlink: 3 bytes leftover after parsing attributes in process `syz.5.152'. [ 51.643476][ T4173] 0ªX¹¦À: renamed from caif0 [ 51.657928][ T4173] 0ªX¹¦À: entered allmulticast mode [ 51.705805][ T4183] loop1: detected capacity change from 0 to 512 [ 51.734930][ T4183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.748173][ T9] usb usb8-port1: unable to enumerate USB device [ 51.757231][ T4183] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.786042][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.949995][ T4198] loop5: detected capacity change from 0 to 512 [ 51.989782][ T4198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.006443][ T4198] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.067769][ T3536] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.114049][ T4203] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 52.120732][ T4203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.128598][ T4203] vhci_hcd vhci_hcd.0: Device attached [ 52.140983][ T4207] netlink: 'syz.2.162': attribute type 10 has an invalid length. [ 52.156232][ T4207] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 52.170222][ T4203] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.210217][ T4203] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(18) [ 52.216861][ T4203] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.224519][ T4203] vhci_hcd vhci_hcd.0: Device attached [ 52.258592][ T4203] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(20) [ 52.265248][ T4203] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.272954][ T4203] vhci_hcd vhci_hcd.0: Device attached [ 52.303659][ T4221] FAULT_INJECTION: forcing a failure. [ 52.303659][ T4221] name failslab, interval 1, probability 0, space 0, times 0 [ 52.303744][ T4203] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(22) [ 52.316417][ T4221] CPU: 0 UID: 0 PID: 4221 Comm: syz.3.165 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 52.316462][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 52.316478][ T4221] Call Trace: [ 52.316486][ T4221] [ 52.316496][ T4221] __dump_stack+0x1d/0x30 [ 52.316523][ T4221] dump_stack_lvl+0xe8/0x140 [ 52.316548][ T4221] dump_stack+0x15/0x1b [ 52.316629][ T4221] should_fail_ex+0x265/0x280 [ 52.316670][ T4221] should_failslab+0x8c/0xb0 [ 52.316757][ T4221] kmem_cache_alloc_noprof+0x50/0x310 [ 52.316800][ T4221] ? flock_lock_inode+0x135/0xf60 [ 52.316889][ T4221] flock_lock_inode+0x135/0xf60 [ 52.316922][ T4221] ? file_has_perm+0x324/0x370 [ 52.316962][ T4221] locks_lock_inode_wait+0x6f/0x2a0 [ 52.317088][ T4221] ? selinux_file_lock+0x38/0x50 [ 52.317126][ T4221] __se_sys_flock+0x2f1/0x3b0 [ 52.317164][ T4221] __x64_sys_flock+0x31/0x40 [ 52.317190][ T4221] x64_sys_call+0x2eed/0x2fb0 [ 52.317217][ T4221] do_syscall_64+0xd0/0x1a0 [ 52.317287][ T4221] ? clear_bhb_loop+0x25/0x80 [ 52.317316][ T4221] ? clear_bhb_loop+0x25/0x80 [ 52.317343][ T4221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.317370][ T4221] RIP: 0033:0x7fca7309e969 [ 52.317389][ T4221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.317498][ T4221] RSP: 002b:00007fca71707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 52.317522][ T4221] RAX: ffffffffffffffda RBX: 00007fca732c5fa0 RCX: 00007fca7309e969 [ 52.317537][ T4221] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000008 [ 52.317553][ T4221] RBP: 00007fca71707090 R08: 0000000000000000 R09: 0000000000000000 [ 52.317568][ T4221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.317611][ T4221] R13: 0000000000000000 R14: 00007fca732c5fa0 R15: 00007ffdd18e4628 [ 52.317635][ T4221] [ 52.513506][ T4203] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 52.521399][ T4203] vhci_hcd vhci_hcd.0: Device attached [ 52.575886][ T4226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.586204][ T3393] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 52.599255][ T4203] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.610699][ T4203] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.628264][ T4230] netlink: 36 bytes leftover after parsing attributes in process `syz.3.168'. [ 52.637232][ T4230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.168'. [ 52.646273][ T4230] netlink: 36 bytes leftover after parsing attributes in process `syz.3.168'. [ 52.676173][ T4203] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(30) [ 52.682843][ T4203] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.690515][ T4203] vhci_hcd vhci_hcd.0: Device attached [ 52.707210][ T4234] 0ªX¹¦À: renamed from 61ªX¹¦À [ 52.736529][ T4212] vhci_hcd: connection closed [ 52.736628][ T4216] vhci_hcd: connection closed [ 52.736714][ T4205] vhci_hcd: connection reset by peer [ 52.741568][ T4218] vhci_hcd: connection closed [ 52.754237][ T3401] vhci_hcd: stop threads [ 52.763241][ T3401] vhci_hcd: release socket [ 52.767724][ T3401] vhci_hcd: disconnect device [ 52.773289][ T3401] vhci_hcd: stop threads [ 52.777671][ T3401] vhci_hcd: release socket [ 52.782195][ T3401] vhci_hcd: disconnect device [ 52.796667][ T3401] vhci_hcd: stop threads [ 52.800983][ T3401] vhci_hcd: release socket [ 52.805478][ T3401] vhci_hcd: disconnect device [ 52.811732][ T3401] vhci_hcd: stop threads [ 52.816077][ T3401] vhci_hcd: release socket [ 52.820618][ T3401] vhci_hcd: disconnect device [ 53.033292][ T4248] loop4: detected capacity change from 0 to 512 [ 53.043999][ T4248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.057204][ T4248] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.084717][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.123379][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.130916][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.138381][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.145811][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.153378][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.160839][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.168369][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.175836][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.183313][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.190812][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.198358][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.205817][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.213266][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.220735][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.228213][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.235608][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.243230][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.250673][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.258107][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.265507][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.272945][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.280516][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.287950][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.295417][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.302868][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.310471][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.317936][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.325408][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.333111][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.340613][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.346174][ T4231] vhci_hcd: connection closed [ 53.348147][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.349541][ T110] vhci_hcd: stop threads [ 53.352863][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.352890][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.360283][ T110] vhci_hcd: release socket [ 53.364529][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.371934][ T110] vhci_hcd: disconnect device [ 53.379307][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 53.403977][ T23] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.08 Device [syz0] on syz0 [ 53.435271][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.442844][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.450724][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.458511][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.464572][ T4260] fido_id[4260]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.465908][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.486903][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.494335][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.501866][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.509577][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.517057][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.524461][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.531974][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.539438][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.546889][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.554285][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.561789][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.569280][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.576857][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.584262][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.591739][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.599228][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.606698][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.614149][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.621598][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.629022][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.636453][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.643870][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.651296][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.658740][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.666167][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.673556][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.681041][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.688512][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.695930][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.703364][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 53.714910][ T9] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.08 Device [syz0] on syz0 [ 53.725689][ T4262] FAULT_INJECTION: forcing a failure. [ 53.725689][ T4262] name failslab, interval 1, probability 0, space 0, times 0 [ 53.738386][ T4262] CPU: 1 UID: 0 PID: 4262 Comm: syz.2.176 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 53.738494][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 53.738509][ T4262] Call Trace: [ 53.738516][ T4262] [ 53.738524][ T4262] __dump_stack+0x1d/0x30 [ 53.738552][ T4262] dump_stack_lvl+0xe8/0x140 [ 53.738575][ T4262] dump_stack+0x15/0x1b [ 53.738594][ T4262] should_fail_ex+0x265/0x280 [ 53.738624][ T4262] ? kobject_uevent_env+0x1c0/0x570 [ 53.738654][ T4262] should_failslab+0x8c/0xb0 [ 53.738698][ T4262] __kmalloc_cache_noprof+0x4c/0x320 [ 53.738723][ T4262] kobject_uevent_env+0x1c0/0x570 [ 53.738791][ T4262] ? device_pm_check_callbacks+0x683/0x6a0 [ 53.738824][ T4262] kobject_uevent+0x1d/0x30 [ 53.738924][ T4262] device_del+0x710/0x790 [ 53.738952][ T4262] device_destroy+0x66/0xa0 [ 53.738978][ T4262] drop_ref+0xbf/0x1a0 [ 53.739006][ T4262] hidraw_disconnect+0x39/0x50 [ 53.739032][ T4262] hid_device_remove+0x158/0x210 [ 53.739084][ T4262] ? __pfx_hid_device_remove+0x10/0x10 [ 53.739187][ T4262] device_release_driver_internal+0x2bb/0x4c0 [ 53.739220][ T4262] device_release_driver+0x19/0x20 [ 53.739247][ T4262] bus_remove_device+0x26d/0x290 [ 53.739279][ T4262] device_del+0x36a/0x790 [ 53.739377][ T4262] hid_destroy_device+0x54/0x120 [ 53.739407][ T4262] uhid_dev_destroy+0x6a/0xb0 [ 53.739448][ T4262] uhid_char_write+0x3aa/0x650 [ 53.739511][ T4262] ? __pfx_uhid_char_write+0x10/0x10 [ 53.739537][ T4262] vfs_write+0x266/0x8d0 [ 53.739566][ T4262] ? __rcu_read_unlock+0x4f/0x70 [ 53.739664][ T4262] ? __fget_files+0x184/0x1c0 [ 53.739693][ T4262] ksys_write+0xda/0x1a0 [ 53.739722][ T4262] __x64_sys_write+0x40/0x50 [ 53.739745][ T4262] x64_sys_call+0x2cdd/0x2fb0 [ 53.739812][ T4262] do_syscall_64+0xd0/0x1a0 [ 53.739832][ T4262] ? clear_bhb_loop+0x25/0x80 [ 53.739874][ T4262] ? clear_bhb_loop+0x25/0x80 [ 53.739893][ T4262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.739924][ T4262] RIP: 0033:0x7f9e5676e969 [ 53.739938][ T4262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.739958][ T4262] RSP: 002b:00007f9e54dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.739980][ T4262] RAX: ffffffffffffffda RBX: 00007f9e56995fa0 RCX: 00007f9e5676e969 [ 53.740060][ T4262] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 53.740081][ T4262] RBP: 00007f9e54dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.740095][ T4262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.740110][ T4262] R13: 0000000000000000 R14: 00007f9e56995fa0 R15: 00007fff43196bf8 [ 53.740130][ T4262] [ 53.757453][ T4271] fido_id[4271]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.960210][ T4281] __nla_validate_parse: 3 callbacks suppressed [ 53.960241][ T4281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 54.073130][ T4285] mmap: syz.2.181 (4285) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.082507][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.092600][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.107521][ T4282] loop3: detected capacity change from 0 to 512 [ 54.123374][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.130856][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.154152][ T4287] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 54.160817][ T4287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.168479][ T4287] vhci_hcd vhci_hcd.0: Device attached [ 54.184126][ T4287] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.209932][ T4282] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 54.218619][ T4282] System zones: 1-12 [ 54.222950][ T4282] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.184: corrupted xattr block 255: invalid header [ 54.227027][ T4287] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 54.237024][ T4282] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 54.242605][ T4287] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 54.252854][ T4282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.258535][ T4287] vhci_hcd vhci_hcd.0: Device attached [ 54.273114][ T4282] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.184: corrupted xattr block 255: invalid header [ 54.277318][ T4294] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(21) [ 54.296141][ T4294] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 54.303754][ T4294] vhci_hcd vhci_hcd.0: Device attached [ 54.330782][ T4282] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 54.343734][ T4282] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.344900][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 54.363156][ T4298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.367945][ T4287] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 54.377065][ T4287] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 54.384863][ T4287] vhci_hcd vhci_hcd.0: Device attached [ 54.392063][ T4298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.400738][ T4294] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.410634][ T4287] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.417139][ T4301] loop2: detected capacity change from 0 to 512 [ 54.419897][ T4287] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.436042][ T4287] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(30) [ 54.442735][ T4287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.450597][ T4287] vhci_hcd vhci_hcd.0: Device attached [ 54.456145][ T3499] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 54.464700][ T4301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 54.478415][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 54.478430][ T29] audit: type=1400 audit(1746970431.942:522): avc: denied { allowed } for pid=4286 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.483763][ T4292] vhci_hcd: connection closed [ 54.485543][ T29] audit: type=1326 audit(1746970431.942:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.3.188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca7309e969 code=0x0 [ 54.504171][ T4295] vhci_hcd: connection closed [ 54.512156][ T4301] System zones: [ 54.531878][ T4288] vhci_hcd: connection reset by peer [ 54.536143][ T4301] 1-12 [ 54.539963][ T4299] vhci_hcd: connection closed [ 54.548249][ T4301] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #2: comm syz.2.187: corrupted xattr block 255: invalid header [ 54.548859][ T1088] vhci_hcd: stop threads [ 54.553579][ T4301] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 54.566097][ T1088] vhci_hcd: release socket [ 54.566190][ T1088] vhci_hcd: disconnect device [ 54.568173][ T1088] vhci_hcd: stop threads [ 54.573049][ T4301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.578709][ T1088] vhci_hcd: release socket [ 54.583812][ T4301] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #2: comm syz.2.187: corrupted xattr block 255: invalid header [ 54.587881][ T1088] vhci_hcd: disconnect device [ 54.606811][ T4301] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 54.612729][ T4308] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.188'. [ 54.623043][ T4301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.627381][ T4308] net_ratelimit: 43 callbacks suppressed [ 54.627396][ T4308] netlink: zone id is out of range [ 54.643447][ T1088] vhci_hcd: stop threads [ 54.651878][ T4308] netlink: zone id is out of range [ 54.657554][ T1088] vhci_hcd: release socket [ 54.657572][ T1088] vhci_hcd: disconnect device [ 54.681616][ T4308] netlink: zone id is out of range [ 54.687572][ T4308] netlink: zone id is out of range [ 54.698531][ T1088] vhci_hcd: stop threads [ 54.702828][ T1088] vhci_hcd: release socket [ 54.707137][ T4308] netlink: zone id is out of range [ 54.707309][ T1088] vhci_hcd: disconnect device [ 54.725124][ T4308] netlink: zone id is out of range [ 54.739313][ T4308] netlink: zone id is out of range [ 54.744483][ T4308] netlink: zone id is out of range [ 54.749651][ T4308] netlink: zone id is out of range [ 54.755501][ T4308] netlink: zone id is out of range [ 54.792296][ T29] audit: type=1326 audit(1746970432.252:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4319 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5676e969 code=0x7ffc0000 [ 54.826614][ T29] audit: type=1326 audit(1746970432.282:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4319 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9e5676e969 code=0x7ffc0000 [ 54.849960][ T29] audit: type=1326 audit(1746970432.282:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4319 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5676e969 code=0x7ffc0000 [ 54.873279][ T29] audit: type=1326 audit(1746970432.282:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4319 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9e5676e969 code=0x7ffc0000 [ 54.896682][ T29] audit: type=1326 audit(1746970432.282:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4319 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5676e969 code=0x7ffc0000 [ 54.919985][ T29] audit: type=1326 audit(1746970432.282:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4319 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f9e5676e969 code=0x7ffc0000 [ 54.943421][ T29] audit: type=1326 audit(1746970432.282:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4319 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5676e969 code=0x7ffc0000 [ 54.966796][ T29] audit: type=1326 audit(1746970432.282:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4319 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e5676e969 code=0x7ffc0000 [ 55.050411][ T4302] vhci_hcd: connection closed [ 55.051806][ T1088] vhci_hcd: stop threads [ 55.060926][ T1088] vhci_hcd: release socket [ 55.065391][ T1088] vhci_hcd: disconnect device [ 55.070525][ T4332] loop2: detected capacity change from 0 to 2048 [ 55.089494][ T4332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.135392][ T4332] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.334549][ T4347] FAULT_INJECTION: forcing a failure. [ 55.334549][ T4347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.347665][ T4347] CPU: 0 UID: 0 PID: 4347 Comm: syz.3.196 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 55.347715][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 55.347731][ T4347] Call Trace: [ 55.347737][ T4347] [ 55.347756][ T4347] __dump_stack+0x1d/0x30 [ 55.347796][ T4347] dump_stack_lvl+0xe8/0x140 [ 55.347817][ T4347] dump_stack+0x15/0x1b [ 55.347891][ T4347] should_fail_ex+0x265/0x280 [ 55.348001][ T4347] should_fail+0xb/0x20 [ 55.348131][ T4347] should_fail_usercopy+0x1a/0x20 [ 55.348149][ T4347] _copy_from_iter+0xcf/0xdd0 [ 55.348169][ T4347] ? __build_skb_around+0x1a0/0x200 [ 55.348204][ T4347] ? __alloc_skb+0x223/0x320 [ 55.348240][ T4347] netlink_sendmsg+0x471/0x6b0 [ 55.348286][ T4347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.348370][ T4347] __sock_sendmsg+0x142/0x180 [ 55.348406][ T4347] ____sys_sendmsg+0x31e/0x4e0 [ 55.348430][ T4347] ___sys_sendmsg+0x17b/0x1d0 [ 55.348464][ T4347] __x64_sys_sendmsg+0xd4/0x160 [ 55.348487][ T4347] x64_sys_call+0x2999/0x2fb0 [ 55.348523][ T4347] do_syscall_64+0xd0/0x1a0 [ 55.348552][ T4347] ? clear_bhb_loop+0x25/0x80 [ 55.348579][ T4347] ? clear_bhb_loop+0x25/0x80 [ 55.348606][ T4347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.348664][ T4347] RIP: 0033:0x7fca7309e969 [ 55.348677][ T4347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.348697][ T4347] RSP: 002b:00007fca71707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.348719][ T4347] RAX: ffffffffffffffda RBX: 00007fca732c5fa0 RCX: 00007fca7309e969 [ 55.348734][ T4347] RDX: 0000000004000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 55.348749][ T4347] RBP: 00007fca71707090 R08: 0000000000000000 R09: 0000000000000000 [ 55.348764][ T4347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.348779][ T4347] R13: 0000000000000000 R14: 00007fca732c5fa0 R15: 00007ffdd18e4628 [ 55.348804][ T4347] [ 55.565449][ T3401] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 55.591684][ T3401] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 356 with error 117 [ 55.604357][ T3401] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.604357][ T3401] [ 55.694882][ T4355] loop3: detected capacity change from 0 to 512 [ 55.724469][ T4355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.744998][ T4355] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.840988][ T4367] loop3: detected capacity change from 0 to 1024 [ 55.886655][ T4367] ext4: Unknown parameter 'audit' [ 55.956381][ T4367] SELinux: failed to load policy [ 55.974823][ C0] hrtimer: interrupt took 25015 ns [ 56.015946][ T4367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.198'. [ 56.103094][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'. [ 56.294508][ T4333] syz.2.192 (4333) used greatest stack depth: 6832 bytes left [ 56.371057][ T4407] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 56.377700][ T4407] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.385207][ T4407] vhci_hcd vhci_hcd.0: Device attached [ 56.406882][ T4407] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 56.413699][ T4407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.421260][ T4407] vhci_hcd vhci_hcd.0: Device attached [ 56.434467][ T4407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.483495][ T4407] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19) [ 56.490238][ T4407] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.497974][ T4407] vhci_hcd vhci_hcd.0: Device attached [ 56.530504][ T4407] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 56.537222][ T4407] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.544884][ T4407] vhci_hcd vhci_hcd.0: Device attached [ 56.559202][ T4427] loop2: detected capacity change from 0 to 128 [ 56.576790][ T4429] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(24) [ 56.583446][ T4429] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 56.591203][ T4429] vhci_hcd vhci_hcd.0: Device attached [ 56.656842][ T4407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.665924][ T4435] infiniband syz0: set active [ 56.670775][ T4435] infiniband syz0: added bond0 [ 56.678610][ T4407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.697476][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 56.712718][ T4407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.724612][ T4442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.745580][ T4442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.755540][ T4435] RDS/IB: syz0: added [ 56.759712][ T4448] loop1: detected capacity change from 0 to 512 [ 56.767976][ T4435] smc: adding ib device syz0 with port count 1 [ 56.779107][ T4407] vhci_hcd vhci_hcd.0: port 0 already used [ 56.779593][ T4435] smc: ib device syz0 port 1 has pnetid [ 56.799858][ T4430] vhci_hcd: connection closed [ 56.800020][ T51] vhci_hcd: stop threads [ 56.809077][ T51] vhci_hcd: release socket [ 56.813063][ T4408] vhci_hcd: connection closed [ 56.813575][ T51] vhci_hcd: disconnect device [ 56.813591][ T4419] vhci_hcd: connection closed [ 56.823237][ T4422] vhci_hcd: connection closed [ 56.828051][ T4412] vhci_hcd: connection closed [ 56.836442][ T1088] vhci_hcd: stop threads [ 56.845431][ T1088] vhci_hcd: release socket [ 56.849977][ T1088] vhci_hcd: disconnect device [ 56.855727][ T4448] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.869040][ T1088] vhci_hcd: stop threads [ 56.873335][ T1088] vhci_hcd: release socket [ 56.877875][ T1088] vhci_hcd: disconnect device [ 56.883078][ T1088] vhci_hcd: stop threads [ 56.887411][ T1088] vhci_hcd: release socket [ 56.892004][ T1088] vhci_hcd: disconnect device [ 56.898293][ T1088] vhci_hcd: stop threads [ 56.902598][ T1088] vhci_hcd: release socket [ 56.907140][ T1088] vhci_hcd: disconnect device [ 56.945328][ T4459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4459 comm=syz.1.209 [ 57.180941][ T4491] netlink: 3 bytes leftover after parsing attributes in process `syz.4.216'. [ 57.214580][ T4491] 0ªX¹¦À: renamed from 61ªX¹¦À [ 57.343483][ T4502] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 57.351598][ T4502] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.358938][ T4502] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.375626][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.382790][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.390295][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.397417][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.408277][ T4502] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 57.420428][ T4502] bridge_slave_1: left allmulticast mode [ 57.426345][ T4502] bridge_slave_1: left promiscuous mode [ 57.432238][ T4502] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.443366][ T4510] loop4: detected capacity change from 0 to 512 [ 57.453186][ T4502] bridge_slave_0: left allmulticast mode [ 57.458955][ T4502] bridge_slave_0: left promiscuous mode [ 57.464953][ T4502] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.474311][ T4510] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.491537][ T4502] bond0: (slave bridge0): Releasing backup interface [ 57.521845][ T4519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=4519 comm=syz.2.221 [ 57.538237][ T4513] geneve0: entered allmulticast mode [ 57.546358][ T4515] ip6gretap1: entered promiscuous mode [ 57.551923][ T4515] ip6gretap1: entered allmulticast mode [ 57.608761][ T3393] usb 11-1: enqueue for inactive port 0 [ 57.619425][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.223'. [ 57.627519][ T3393] usb 11-1: enqueue for inactive port 0 [ 57.647803][ T4531] loop1: detected capacity change from 0 to 512 [ 57.650820][ T4531] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.653581][ T4523] loop5: detected capacity change from 0 to 512 [ 57.675448][ T4523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 57.675594][ T4523] System zones: 1-12 [ 57.675804][ T4523] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #2: comm syz.5.223: corrupted xattr block 255: invalid header [ 57.675970][ T4523] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 57.680407][ T4523] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #2: comm syz.5.223: corrupted xattr block 255: invalid header [ 57.680630][ T4523] SELinux: (dev loop5, type ext4) getxattr errno 117 [ 57.689947][ T4533] loop4: detected capacity change from 0 to 512 [ 57.696503][ T4533] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.697445][ T3393] vhci_hcd: vhci_device speed not set [ 57.735586][ T4540] loop2: detected capacity change from 0 to 512 [ 57.737282][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737315][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737344][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737373][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737401][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737534][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737658][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737686][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737714][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737743][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737826][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737868][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737895][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737921][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.737947][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738035][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738089][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738156][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738183][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738246][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738272][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738299][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738344][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738371][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738397][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738481][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738507][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738565][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738591][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738618][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738644][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738671][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738703][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738767][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.738821][ T3396] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 57.746454][ T3396] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.08 Device [syz0] on syz0 [ 57.765060][ T4543] netlink: 3 bytes leftover after parsing attributes in process `syz.3.230'. [ 57.765134][ T4543] 1ªX¹¦À: renamed from 60ªX¹¦À [ 57.775864][ T4547] FAULT_INJECTION: forcing a failure. [ 57.775864][ T4547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.775895][ T4547] CPU: 1 UID: 0 PID: 4547 Comm: syz.4.231 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 57.775983][ T4547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 57.776043][ T4547] Call Trace: [ 57.776049][ T4547] [ 57.776057][ T4547] __dump_stack+0x1d/0x30 [ 57.776082][ T4547] dump_stack_lvl+0xe8/0x140 [ 57.776110][ T4547] dump_stack+0x15/0x1b [ 57.776130][ T4547] should_fail_ex+0x265/0x280 [ 57.776165][ T4547] should_fail+0xb/0x20 [ 57.776252][ T4547] should_fail_usercopy+0x1a/0x20 [ 57.776275][ T4547] _copy_from_user+0x1c/0xb0 [ 57.776322][ T4547] sg_write+0x610/0x750 [ 57.776364][ T4547] vfs_writev+0x3eb/0x870 [ 57.776399][ T4547] ? __pfx_sg_write+0x10/0x10 [ 57.776439][ T4547] do_writev+0xe7/0x210 [ 57.776670][ T4547] __x64_sys_writev+0x45/0x50 [ 57.776698][ T4547] x64_sys_call+0x2006/0x2fb0 [ 57.776719][ T4547] do_syscall_64+0xd0/0x1a0 [ 57.776813][ T4547] ? clear_bhb_loop+0x25/0x80 [ 57.776835][ T4547] ? clear_bhb_loop+0x25/0x80 [ 57.776933][ T4547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.776954][ T4547] RIP: 0033:0x7f57764be969 [ 57.776968][ T4547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.777054][ T4547] RSP: 002b:00007f5774b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 57.777071][ T4547] RAX: ffffffffffffffda RBX: 00007f57766e5fa0 RCX: 00007f57764be969 [ 57.777083][ T4547] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 57.777095][ T4547] RBP: 00007f5774b27090 R08: 0000000000000000 R09: 0000000000000000 [ 57.777107][ T4547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.777118][ T4547] R13: 0000000000000000 R14: 00007f57766e5fa0 R15: 00007ffe401433a8 [ 57.777136][ T4547] [ 57.832177][ T4545] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 57.832207][ T4545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.832247][ T4545] vhci_hcd vhci_hcd.0: Device attached [ 57.859287][ T4545] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 57.859316][ T4545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.859398][ T4545] vhci_hcd vhci_hcd.0: Device attached [ 57.891133][ T4545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.891794][ T4545] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19) [ 57.891824][ T4545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 57.891881][ T4545] vhci_hcd vhci_hcd.0: Device attached [ 57.892521][ T4545] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 57.892540][ T4545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 57.892568][ T4545] vhci_hcd vhci_hcd.0: Device attached [ 57.893165][ T4545] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(23) [ 57.893183][ T4545] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 57.893208][ T4545] vhci_hcd vhci_hcd.0: Device attached [ 57.893520][ T4545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.893812][ T4545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.894061][ T4545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 57.905370][ T4545] vhci_hcd vhci_hcd.0: port 0 already used [ 57.950600][ T4553] vhci_hcd: connection closed [ 57.956696][ T4540] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.963639][ T4549] vhci_hcd: connection closed [ 57.975840][ T4569] loop4: detected capacity change from 0 to 128 [ 57.980440][ T4562] vhci_hcd: connection closed [ 58.037357][ T4560] vhci_hcd: connection closed [ 58.037543][ T4564] vhci_hcd: connection closed [ 58.052549][ T51] vhci_hcd: stop threads [ 58.186153][ T3393] vhci_hcd: vhci_device speed not set [ 58.188288][ T51] vhci_hcd: release socket [ 58.250271][ T4574] loop3: detected capacity change from 0 to 512 [ 58.252721][ T51] vhci_hcd: disconnect device [ 58.296617][ T51] vhci_hcd: stop threads [ 58.306568][ T4574] /dev/loop3: Can't open blockdev [ 58.306964][ T51] vhci_hcd: release socket [ 58.368758][ T3393] vhci_hcd: vhci_device speed not set [ 58.617659][ T51] vhci_hcd: disconnect device [ 58.674306][ T4592] FAULT_INJECTION: forcing a failure. [ 58.674306][ T4592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.687583][ T4592] CPU: 1 UID: 0 PID: 4592 Comm: syz.3.236 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 58.687618][ T4592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.687632][ T4592] Call Trace: [ 58.687638][ T4592] [ 58.687647][ T4592] __dump_stack+0x1d/0x30 [ 58.687750][ T4592] dump_stack_lvl+0xe8/0x140 [ 58.687775][ T4592] dump_stack+0x15/0x1b [ 58.687796][ T4592] should_fail_ex+0x265/0x280 [ 58.687910][ T4592] should_fail+0xb/0x20 [ 58.687960][ T4592] should_fail_usercopy+0x1a/0x20 [ 58.688019][ T4592] _copy_from_user+0x1c/0xb0 [ 58.688066][ T4592] ___sys_sendmsg+0xc1/0x1d0 [ 58.688109][ T4592] __x64_sys_sendmsg+0xd4/0x160 [ 58.688152][ T4592] x64_sys_call+0x2999/0x2fb0 [ 58.688173][ T4592] do_syscall_64+0xd0/0x1a0 [ 58.688266][ T4592] ? clear_bhb_loop+0x25/0x80 [ 58.688293][ T4592] ? clear_bhb_loop+0x25/0x80 [ 58.688394][ T4592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.688416][ T4592] RIP: 0033:0x7fca7309e969 [ 58.688433][ T4592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.688450][ T4592] RSP: 002b:00007fca71707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.688468][ T4592] RAX: ffffffffffffffda RBX: 00007fca732c5fa0 RCX: 00007fca7309e969 [ 58.688483][ T4592] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 58.688557][ T4592] RBP: 00007fca71707090 R08: 0000000000000000 R09: 0000000000000000 [ 58.688568][ T4592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.688590][ T4592] R13: 0000000000000000 R14: 00007fca732c5fa0 R15: 00007ffdd18e4628 [ 58.688608][ T4592] [ 58.689829][ T51] vhci_hcd: stop threads [ 58.865843][ T51] vhci_hcd: release socket [ 58.870509][ T51] vhci_hcd: disconnect device [ 58.875541][ T3393] usb 11-1: new full-speed USB device number 3 using vhci_hcd [ 58.883075][ T3393] usb 11-1: enqueue for inactive port 0 [ 58.888947][ T3393] usb 11-1: enqueue for inactive port 0 [ 58.894512][ T3393] usb 11-1: enqueue for inactive port 0 [ 58.936649][ T4606] FAULT_INJECTION: forcing a failure. [ 58.936649][ T4606] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 58.940975][ T51] vhci_hcd: stop threads [ 58.949931][ T4606] CPU: 1 UID: 0 PID: 4606 Comm: syz.5.241 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 58.949996][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.950012][ T4606] Call Trace: [ 58.950021][ T4606] [ 58.950031][ T4606] __dump_stack+0x1d/0x30 [ 58.950124][ T4606] dump_stack_lvl+0xe8/0x140 [ 58.950145][ T4606] dump_stack+0x15/0x1b [ 58.950166][ T4606] should_fail_ex+0x265/0x280 [ 58.950266][ T4606] should_fail_alloc_page+0xf2/0x100 [ 58.950306][ T4606] __alloc_frozen_pages_noprof+0xff/0x360 [ 58.950359][ T4606] alloc_pages_mpol+0xb3/0x250 [ 58.950457][ T4606] alloc_pages_noprof+0x90/0x130 [ 58.950530][ T4606] pte_alloc_one+0x2a/0x110 [ 58.950553][ T4606] __pte_alloc+0x32/0x290 [ 58.950644][ T4606] ? mas_state_walk+0x574/0x650 [ 58.950679][ T4606] handle_mm_fault+0x1d74/0x2ae0 [ 58.950717][ T4606] ? mas_walk+0xf2/0x120 [ 58.950747][ T4606] do_user_addr_fault+0x636/0x1090 [ 58.950845][ T4606] exc_page_fault+0x54/0xc0 [ 58.950888][ T4606] asm_exc_page_fault+0x26/0x30 [ 58.950913][ T4606] RIP: 0033:0x7fcd20290d66 [ 58.950932][ T4606] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 58.951019][ T4606] RSP: 002b:00007fcd1ea363f0 EFLAGS: 00010246 [ 58.951039][ T4606] RAX: 0000000000000001 RBX: 00007fcd1ea36490 RCX: 0000000000000101 [ 58.951055][ T4606] RDX: 000000000000000f RSI: 0000000000000001 RDI: 00007fcd1ea36530 [ 58.951071][ T4606] RBP: 0000000000000102 R08: 00007fcd16617000 R09: 0000000000000000 [ 58.951128][ T4606] R10: 0000000000000000 R11: 00007fcd1ea364a0 R12: 0000000000000001 [ 58.951143][ T4606] R13: 00007fcd2046bfc0 R14: 0000000000000000 R15: 00007fcd1ea36530 [ 58.951166][ T4606] [ 58.951179][ T4606] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 58.954203][ T51] vhci_hcd: release socket [ 58.954218][ T51] vhci_hcd: disconnect device [ 58.959414][ T51] vhci_hcd: stop threads [ 58.976785][ T3393] vhci_hcd: vhci_device speed not set [ 58.980032][ T51] vhci_hcd: release socket [ 59.162386][ T51] vhci_hcd: disconnect device [ 59.248716][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 59.275943][ T4606] loop5: detected capacity change from 0 to 8192 [ 59.319617][ T4605] loop3: detected capacity change from 0 to 512 [ 59.397274][ T4605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 59.405373][ T4605] System zones: 1-12 [ 59.411459][ T4605] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.240: corrupted xattr block 255: invalid header [ 59.432339][ T4606] loop5: p1 p3 p4 [ 59.436217][ T4606] loop5: p1 size 8390912 extends beyond EOD, truncated [ 59.439780][ T4605] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 59.446288][ T4606] loop5: p3 size 589824 extends beyond EOD, truncated [ 59.466682][ T4605] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.240: corrupted xattr block 255: invalid header [ 59.509786][ T4605] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 59.535260][ T3499] usb 9-1: enqueue for inactive port 0 [ 59.545962][ T3499] usb 9-1: enqueue for inactive port 0 [ 59.621120][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 59.621137][ T29] audit: type=1400 audit(1746970437.082:575): avc: denied { write } for pid=4622 comm="syz.5.246" name="rt_acct" dev="proc" ino=4026533635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.627287][ T3499] vhci_hcd: vhci_device speed not set [ 59.661538][ T4629] loop3: detected capacity change from 0 to 128 [ 59.663375][ T29] audit: type=1400 audit(1746970437.122:576): avc: denied { accept } for pid=4622 comm="syz.5.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 59.689722][ T29] audit: type=1326 audit(1746970437.152:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4627 comm="syz.4.247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57764be969 code=0x0 [ 59.741226][ T4630] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.247'. [ 59.750802][ T4630] net_ratelimit: 17 callbacks suppressed [ 59.750813][ T4630] netlink: zone id is out of range [ 59.761778][ T4630] netlink: zone id is out of range [ 59.767029][ T4630] netlink: zone id is out of range [ 59.772242][ T4250] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 59.776583][ T4630] netlink: zone id is out of range [ 59.792618][ T4630] netlink: zone id is out of range [ 59.798270][ T4630] netlink: zone id is out of range [ 59.803664][ T4630] netlink: zone id is out of range [ 59.808920][ T4630] netlink: zone id is out of range [ 59.808945][ T4633] loop5: detected capacity change from 0 to 512 [ 59.814136][ T4630] netlink: zone id is out of range [ 59.825600][ T4630] netlink: zone id is out of range [ 59.833852][ T4633] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.873868][ T4637] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 59.880515][ T4637] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.888055][ T4637] vhci_hcd vhci_hcd.0: Device attached [ 59.894651][ T4637] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 59.901299][ T4637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.908885][ T4637] vhci_hcd vhci_hcd.0: Device attached [ 59.914923][ T4637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 59.923903][ T4637] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19) [ 59.930514][ T4637] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.938233][ T4637] vhci_hcd vhci_hcd.0: Device attached [ 59.944870][ T4637] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 59.951500][ T4637] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.959226][ T4637] vhci_hcd vhci_hcd.0: Device attached [ 59.965531][ T4637] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(23) [ 59.972147][ T4637] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 59.979922][ T4637] vhci_hcd vhci_hcd.0: Device attached [ 59.985847][ T4637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 59.994462][ T4637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 60.002909][ T4637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 60.011843][ T4637] vhci_hcd vhci_hcd.0: port 0 already used [ 60.021855][ T4646] vhci_hcd: connection closed [ 60.021930][ T4642] vhci_hcd: connection closed [ 60.022008][ T4644] vhci_hcd: connection closed [ 60.026872][ T4638] vhci_hcd: connection closed [ 60.031630][ T3401] vhci_hcd: stop threads [ 60.036188][ T4640] vhci_hcd: connection closed [ 60.040826][ T3401] vhci_hcd: release socket [ 60.054100][ T3401] vhci_hcd: disconnect device [ 60.058958][ T3401] vhci_hcd: stop threads [ 60.063208][ T3401] vhci_hcd: release socket [ 60.067662][ T3401] vhci_hcd: disconnect device [ 60.072424][ T3401] vhci_hcd: stop threads [ 60.076737][ T3401] vhci_hcd: release socket [ 60.081172][ T3401] vhci_hcd: disconnect device [ 60.086141][ T3401] vhci_hcd: stop threads [ 60.090394][ T3401] vhci_hcd: release socket [ 60.094874][ T3401] vhci_hcd: disconnect device [ 60.099686][ T3401] vhci_hcd: stop threads [ 60.103944][ T3401] vhci_hcd: release socket [ 60.108411][ T3401] vhci_hcd: disconnect device [ 60.111677][ T29] audit: type=1326 audit(1746970437.572:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13170fe969 code=0x7ffc0000 [ 60.137163][ T4652] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 60.140431][ T29] audit: type=1326 audit(1746970437.572:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13170fe969 code=0x7ffc0000 [ 60.144821][ T4652] audit: out of memory in audit_log_start [ 60.174125][ T29] audit: type=1326 audit(1746970437.602:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13170fe969 code=0x7ffc0000 [ 60.197399][ T29] audit: type=1326 audit(1746970437.602:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13170fd2d0 code=0x7ffc0000 [ 60.220780][ T29] audit: type=1326 audit(1746970437.602:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.1.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f13170fd41f code=0x7ffc0000 [ 60.247975][ T3393] vhci_hcd: vhci_device speed not set [ 60.293078][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 60.305009][ T4658] loop1: detected capacity change from 0 to 512 [ 60.313784][ T4658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 60.322102][ T4658] System zones: 1-12 [ 60.326844][ T4658] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #2: comm syz.1.255: corrupted xattr block 255: invalid header [ 60.340366][ T4658] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 60.349463][ T4658] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #2: comm syz.1.255: corrupted xattr block 255: invalid header [ 60.363179][ T4658] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 60.456360][ T3391] usb usb8-port1: attempt power cycle [ 60.504937][ T4664] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.256'. [ 60.620838][ T4674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 60.633048][ T4674] loop3: detected capacity change from 0 to 512 [ 60.654664][ T4674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 60.664689][ T4674] System zones: 1-12 [ 60.669031][ T4674] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.261: corrupted xattr block 255: invalid header [ 60.683397][ T4674] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 60.692124][ T4674] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #2: comm syz.3.261: corrupted xattr block 255: invalid header [ 60.705546][ T4674] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 60.735406][ T4683] loop4: detected capacity change from 0 to 512 [ 60.754336][ T4683] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.776629][ T4688] loop3: detected capacity change from 0 to 512 [ 60.795204][ T4688] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.855361][ T4696] loop3: detected capacity change from 0 to 512 [ 60.864622][ T4696] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.938297][ T4704] loop3: detected capacity change from 0 to 128 [ 60.948130][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 61.021076][ T4714] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 61.027751][ T4714] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.035346][ T4714] vhci_hcd vhci_hcd.0: Device attached [ 61.042335][ T4714] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 61.049013][ T4714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.056608][ T4714] vhci_hcd vhci_hcd.0: Device attached [ 61.062796][ T4714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 61.071458][ T4714] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 61.078120][ T4714] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 61.085784][ T4714] vhci_hcd vhci_hcd.0: Device attached [ 61.092388][ T4714] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 61.098994][ T4714] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 61.106620][ T4714] vhci_hcd vhci_hcd.0: Device attached [ 61.112987][ T4714] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 61.119603][ T4714] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 61.127285][ T4714] vhci_hcd vhci_hcd.0: Device attached [ 61.133505][ T4714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 61.141985][ T4714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 61.150670][ T4714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 61.159642][ T4714] vhci_hcd vhci_hcd.0: port 0 already used [ 61.169756][ T4724] vhci_hcd: connection closed [ 61.169770][ T4720] vhci_hcd: connection closed [ 61.169897][ T3401] vhci_hcd: stop threads [ 61.174790][ T4717] vhci_hcd: connection closed [ 61.179208][ T3401] vhci_hcd: release socket [ 61.183962][ T4722] vhci_hcd: connection closed [ 61.188146][ T3401] vhci_hcd: disconnect device [ 61.192913][ T4715] vhci_hcd: connection closed [ 61.197902][ T3401] vhci_hcd: stop threads [ 61.210990][ T3401] vhci_hcd: release socket [ 61.215407][ T3401] vhci_hcd: disconnect device [ 61.220723][ T3401] vhci_hcd: stop threads [ 61.225015][ T3401] vhci_hcd: release socket [ 61.229501][ T3401] vhci_hcd: disconnect device [ 61.234301][ T3391] usb 8-1: enqueue for inactive port 0 [ 61.240446][ T3401] vhci_hcd: stop threads [ 61.244713][ T3401] vhci_hcd: release socket [ 61.249230][ T3401] vhci_hcd: disconnect device [ 61.256217][ T3401] vhci_hcd: stop threads [ 61.260594][ T3401] vhci_hcd: release socket [ 61.265085][ T3401] vhci_hcd: disconnect device [ 61.446200][ T3391] usb 8-1: enqueue for inactive port 0 [ 61.517552][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.275'. [ 61.529081][ T4733] loop5: detected capacity change from 0 to 512 [ 61.537576][ T4733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 61.545603][ T4733] System zones: 1-12 [ 61.551412][ T4733] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #2: comm syz.5.275: corrupted xattr block 255: invalid header [ 61.564911][ T4733] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 61.576705][ T4733] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #2: comm syz.5.275: corrupted xattr block 255: invalid header [ 61.590163][ T4733] SELinux: (dev loop5, type ext4) getxattr errno 117 [ 61.638223][ T4740] loop5: detected capacity change from 0 to 512 [ 61.648331][ T4740] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.705706][ T4745] netlink: 3 bytes leftover after parsing attributes in process `syz.5.279'. [ 61.714915][ T4745] 1ªX¹¦À: renamed from 60ªX¹¦À [ 61.763277][ T4749] netlink: 3 bytes leftover after parsing attributes in process `syz.3.281'. [ 61.772383][ T4749] 0ªX¹¦À: renamed from 61ªX¹¦À [ 61.837051][ T4753] loop5: detected capacity change from 0 to 512 [ 61.874675][ T4753] EXT4-fs (loop5): too many log groups per flexible block group [ 61.882565][ T4753] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 61.897702][ T4753] EXT4-fs (loop5): mount failed [ 61.983523][ T4764] loop5: detected capacity change from 0 to 512 [ 62.072291][ T4764] EXT4-fs (loop5): 1 orphan inode deleted [ 62.081445][ T4764] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.123955][ T110] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 62.166346][ T9] usb usb10-port1: attempt power cycle [ 62.185054][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 62.197591][ T4770] loop1: detected capacity change from 0 to 512 [ 62.233721][ T4770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 62.268136][ T4782] loop4: detected capacity change from 0 to 512 [ 62.280097][ T4770] System zones: 1-12 [ 62.295257][ T4782] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.318440][ T4770] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #2: comm syz.1.287: corrupted xattr block 255: invalid header [ 62.370660][ T4770] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 62.406572][ T4770] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #2: comm syz.1.287: corrupted xattr block 255: invalid header [ 62.449894][ T4770] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 62.522924][ T4790] loop4: detected capacity change from 0 to 1764 [ 62.556679][ T4790] iso9660: Unknown parameter 'utf8-µ®ÐÙÌsJ)t' [ 62.616400][ T3391] usb usb8-port1: unable to enumerate USB device [ 62.686263][ T3499] vhci_hcd: vhci_device speed not set [ 62.734146][ T4800] loop5: detected capacity change from 0 to 1024 [ 62.749400][ T36] usb usb12-port1: attempt power cycle [ 62.756588][ T4800] EXT4-fs: Ignoring removed orlov option [ 62.772777][ T4804] program syz.4.298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.782194][ T4800] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 62.863786][ T4810] loop1: detected capacity change from 0 to 128 [ 63.266257][ T4817] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 63.266257][ T4817] program syz.4.298 not setting count and/or reply_len properly [ 63.408161][ T4819] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.295: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 63.453255][ T4819] EXT4-fs error (device loop5): ext4_find_dest_de:2054: inode #12: block 7: comm syz.5.295: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 63.507560][ T4821] loop3: detected capacity change from 0 to 512 [ 63.516988][ T4821] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.707335][ T4826] 1ªX¹¦À: renamed from 60ªX¹¦À [ 63.859512][ T4833] bond1: entered promiscuous mode [ 63.864665][ T4833] bond1: entered allmulticast mode [ 63.887728][ T4833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.909191][ T4833] bond1 (unregistering): Released all slaves [ 64.005061][ T4841] 1ªX¹¦À: renamed from 60ªX¹¦À [ 64.188579][ T4850] loop4: detected capacity change from 0 to 512 [ 64.215014][ T4850] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.283566][ T9] usb usb10-port1: unable to enumerate USB device [ 64.304311][ T4859] __nla_validate_parse: 3 callbacks suppressed [ 64.304325][ T4859] netlink: 132 bytes leftover after parsing attributes in process `syz.2.316'. [ 64.393468][ T4862] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.315'. [ 64.630402][ T4870] loop4: detected capacity change from 0 to 512 [ 64.672266][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 64.672280][ T29] audit: type=1400 audit(1746970442.132:635): avc: denied { watch_reads } for pid=4871 comm="syz.5.321" path="/38" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.705202][ T4872] loop5: detected capacity change from 0 to 512 [ 64.726981][ T4872] ext2: Unknown parameter 'dont_measure' [ 64.737069][ T4870] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.754620][ T29] audit: type=1400 audit(1746970442.212:636): avc: denied { wake_alarm } for pid=4871 comm="syz.5.321" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.775700][ T29] audit: type=1400 audit(1746970442.212:637): avc: denied { bind } for pid=4871 comm="syz.5.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.795094][ T29] audit: type=1400 audit(1746970442.212:638): avc: denied { listen } for pid=4871 comm="syz.5.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.814638][ T29] audit: type=1400 audit(1746970442.212:639): avc: denied { write } for pid=4871 comm="syz.5.321" path="socket:[8061]" dev="sockfs" ino=8061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.842429][ T3004] ================================================================== [ 64.850555][ T3004] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 64.857340][ T3004] [ 64.859679][ T3004] write to 0xffff8881021a6620 of 8 bytes by task 3315 on cpu 0: [ 64.867329][ T3004] inc_diskseq+0x2d/0x40 [ 64.871593][ T3004] disk_force_media_change+0x9e/0xe0 [ 64.876919][ T3004] lo_release+0x2cb/0x400 [ 64.881279][ T3004] bdev_release+0x370/0x3d0 [ 64.885804][ T3004] blkdev_release+0x15/0x20 [ 64.890339][ T3004] __fput+0x298/0x650 [ 64.894327][ T3004] fput_close_sync+0x6e/0x120 [ 64.899061][ T3004] __x64_sys_close+0x56/0xf0 [ 64.903675][ T3004] x64_sys_call+0x2747/0x2fb0 [ 64.908470][ T3004] do_syscall_64+0xd0/0x1a0 [ 64.912999][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.918915][ T3004] [ 64.921249][ T3004] read to 0xffff8881021a6620 of 8 bytes by task 3004 on cpu 1: [ 64.928804][ T3004] block_uevent+0x31/0x50 [ 64.933164][ T3004] dev_uevent+0x349/0x3d0 [ 64.937515][ T3004] uevent_show+0x117/0x200 [ 64.941953][ T3004] dev_attr_show+0x3c/0xa0 [ 64.946394][ T3004] sysfs_kf_seq_show+0x1a0/0x280 [ 64.951351][ T3004] kernfs_seq_show+0x7f/0xa0 [ 64.956007][ T3004] seq_read_iter+0x316/0x940 [ 64.960616][ T3004] kernfs_fop_read_iter+0xc4/0x300 [ 64.965757][ T3004] vfs_read+0x5ca/0x6f0 [ 64.969945][ T3004] ksys_read+0xda/0x1a0 [ 64.974128][ T3004] __x64_sys_read+0x40/0x50 [ 64.978656][ T3004] x64_sys_call+0x2d77/0x2fb0 [ 64.983348][ T3004] do_syscall_64+0xd0/0x1a0 [ 64.987862][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.993765][ T3004] [ 64.996089][ T3004] value changed: 0x00000000000000b4 -> 0x00000000000000b7 [ 65.003221][ T3004] [ 65.005552][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 65.011703][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 65.023688][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 65.033751][ T3004] ================================================================== [ 65.686358][ T36] usb usb12-port1: unable to enumerate USB device