last executing test programs: 2m21.746943715s ago: executing program 32 (id=1106): openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/profiling', 0x0, 0x102) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_setup(0x3759, &(0x7f0000000140)={0x0, 0xe281, 0x800, 0x2, 0x102}, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32], 0x20}}, 0x0) 2m5.98793117s ago: executing program 33 (id=1465): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2m5.698777334s ago: executing program 34 (id=1476): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8000}, 0x1}) io_uring_enter(r2, 0x266a, 0x41e3, 0x2, 0x0, 0x55) readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) 2m5.448306137s ago: executing program 35 (id=1481): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 2m4.592021517s ago: executing program 36 (id=1490): r0 = io_uring_setup(0x23ea, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) read(r1, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$sock_qrtr_TIOCINQ(r1, 0x8917, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m3.520078628s ago: executing program 37 (id=1498): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) recvmmsg$unix(r1, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) 1m59.535033563s ago: executing program 7 (id=1517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r0, 0x1) 1m59.497277113s ago: executing program 7 (id=1519): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) 1m59.389868275s ago: executing program 7 (id=1520): mlockall(0x2) io_setup(0x10000, &(0x7f0000000180)) 1m59.359252675s ago: executing program 38 (id=1522): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x401eb94) 1m59.313142665s ago: executing program 7 (id=1524): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') pivot_root(0x0, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 1m59.288871196s ago: executing program 7 (id=1525): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) 1m58.84240776s ago: executing program 0 (id=1499): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x20000010, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xab, 0xffffffffffffff6b, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x70e4, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m58.767883132s ago: executing program 0 (id=1526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'syz_tun\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x0) 1m58.754372241s ago: executing program 7 (id=1527): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x300, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) 1m58.737129622s ago: executing program 39 (id=1527): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x300, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) 1m58.577109603s ago: executing program 0 (id=1531): r0 = io_uring_setup(0x1b47, &(0x7f00000001c0)={0x0, 0x9278, 0x400, 0x2, 0x7ffc}) r1 = socket$qrtr(0x2a, 0x2, 0x0) read(r1, &(0x7f0000000040)=""/41, 0x29) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r2, 0x0) 1m58.474657445s ago: executing program 0 (id=1533): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') pivot_root(0x0, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 1m58.408678015s ago: executing program 0 (id=1537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}}}}, 0x36) 1m57.469968406s ago: executing program 6 (id=1561): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$inet6(r0, 0x0, 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4063, 0xfdf, 0x800104e7, 0x0, 0x0) 1m57.372049587s ago: executing program 6 (id=1563): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x20000010, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xab, 0xffffffffffffff6b, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m57.369041127s ago: executing program 6 (id=1566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010"], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) 1m57.350506447s ago: executing program 6 (id=1567): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0/../file0\x00', 0x0) 1m57.333097928s ago: executing program 6 (id=1568): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) 1m57.263967778s ago: executing program 9 (id=1569): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) read(r0, &(0x7f0000000040)=""/41, 0x29) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) 1m57.035983951s ago: executing program 6 (id=1570): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m57.019605031s ago: executing program 40 (id=1570): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m56.619302075s ago: executing program 0 (id=1572): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 1m56.591485985s ago: executing program 41 (id=1572): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 1m56.440969018s ago: executing program 9 (id=1574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x401}, 0x14}}, 0x0) 1m56.421321478s ago: executing program 9 (id=1575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010"], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) 1m56.309240239s ago: executing program 9 (id=1576): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0/../file0\x00', 0x0) 1m56.21848977s ago: executing program 9 (id=1577): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, 0x0, 0x0, 0x0) 1m55.975996722s ago: executing program 9 (id=1578): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x20000010, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xab, 0xffffffffffffff6b, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m55.975841802s ago: executing program 42 (id=1578): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x20000010, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xab, 0xffffffffffffff6b, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m11.455151287s ago: executing program 1 (id=2473): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x80) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000400)=@usbdevfs_disconnect={0x1}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) getpid() syz_emit_ethernet(0x82, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 1m11.435007447s ago: executing program 1 (id=2474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m11.413500238s ago: executing program 1 (id=2475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10909d, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 1m11.397133667s ago: executing program 1 (id=2476): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 1m11.381608278s ago: executing program 1 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}}}}, 0x36) 1m11.19612593s ago: executing program 1 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1m11.19600622s ago: executing program 43 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4.115603335s ago: executing program 5 (id=3398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4.025888276s ago: executing program 5 (id=3399): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000500)={0x0, 0xd52b, 0x10100, 0x0, 0x93}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40010000, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000001080)={0x2, 'veth1_macvtap\x00', {0x4}}) 3.998109266s ago: executing program 5 (id=3400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) (async) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB="0000001d00000000000000000000000000000000191edced9493109b0e1666d42add5efac0e0aec0b422d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010100000200"/28], 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000008000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = dup2(r1, r2) (async) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x5f5}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) (async) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) (async) r11 = socket$inet6(0xa, 0x1, 0x0) (async) r12 = socket(0x15, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) (async, rerun: 64) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) (rerun: 64) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r13, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r16], 0x20}}, 0x0) (async) setsockopt$inet6_mreq(r13, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000100000000000100800018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000064628000fcffffff18120000", @ANYRES32=r4, @ANYBLOB="000000000000000003dc65300500000018330000020000000000000000000000b7080000000000007b8af8ff00000000b70800008f8900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186400000a0000000000000090400000852000000200000085100000feffffff181b0000", @ANYRES32=r6, @ANYBLOB="00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x60, 0xc4, &(0x7f0000000440)=""/196, 0x41100, 0x2, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x6, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[{0x1, 0x1, 0xd}, {0x3, 0x2, 0x2, 0x2}, {0x5, 0x1, 0x3, 0xb}, {0x4, 0x2, 0x10, 0x212620bfb8bd57f8}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0xa438, @void, @value}, 0x94) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (rerun: 64) 3.824084247s ago: executing program 5 (id=3404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 3.786244468s ago: executing program 5 (id=3405): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newqdisc={0x110, 0x24, 0x8, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xa8, 0xffff, 0x1, 0x2, 0x9, 0xc2, 0x3}}, {0xa, 0x2, [0x7, 0x6, 0x6]}}, {{0x1c, 0x1, {0xb2, 0x80, 0x4, 0x1, 0x2, 0x9, 0x4, 0x6}}, {0x10, 0x2, [0x7, 0xa3, 0x3, 0xe62, 0x8001, 0xfff7]}}, {{0x1c, 0x1, {0x9, 0x9b, 0x6, 0xe3b7, 0x0, 0x80, 0xfffffff8, 0x9}}, {0x16, 0x2, [0xc, 0x7, 0x3, 0x0, 0x8001, 0xfffc, 0x0, 0xfff, 0x6]}}, {{0x1c, 0x1, {0x8, 0x9, 0x9, 0x8, 0x0, 0x4, 0x4, 0x9}}, {0x16, 0x2, [0x501d, 0xfff, 0xcbd, 0x6, 0xca, 0x1ff, 0x40, 0xfffb, 0x6]}}]}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200, 0x0, 0x3}}, {0xa, 0x2, [0xffff, 0x8, 0x1]}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1c}, 0x48, 0xffffffffffffffff) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) r9 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x61, 0x63, 0x66, 0x39, 0x37, 0x33, 0x32, 0x64, 0x37, 0x32, 0x35, 0x61, 0x37, 0x31, 0x7a6ff47e778edd51, 0x66]}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b43770bab1a9b01c103a4c6de626961380000000001f42900", 0x35}, 0x94, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r9, r7, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r11], 0x24}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r10, 0x0, 0x8000000000}, 0x18) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c200ff000000000000000800451000380080000000019078ac1e0001ac1414aa03ff0300000000000000000000670000008900007f000001e0f8ff7ecde62a0000020018"], 0x0) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2}, 0x48, 0xffffffffffffffff) 1.987380878s ago: executing program 4 (id=3432): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000000), 0x0) 1.926776249s ago: executing program 4 (id=3433): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000740), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100) fallocate(r1, 0x3, 0x2, 0x8000c62) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e00000000000000070000000004000000100000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0500000001000000020000000e000000f100000000000000000000003f629c587d0dcd975b680d2b3e3214618ed06a23c4a4b06c988462681ee8f36db80f1368352cbce20754fccf3c3dc0594ff112a86da1f2e6f8affbab2fdad3807d375b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d871af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f0085c705000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x400}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000380)=0x9) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000fa00000400008238f968b76e221d3c", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x2c, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000b80)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x1, 0x0, {{0x19, 0x4, 0x1, 0x3e, 0x64, 0x68, 0x0, 0x7d, 0x4, 0x0, @local, @multicast1, {[@noop, @ssrr={0x89, 0xf, 0x3a, [@multicast2, @empty, @multicast2]}, @noop, @rr={0x7, 0x2b, 0x6, [@multicast2, @private=0xa010101, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010102, @private=0xa010101, @rand_addr=0x64010102, @remote, @local, @dev={0xac, 0x14, 0x14, 0x44}]}, @ra={0x94, 0x4}, @generic={0x86, 0xf, "5947df922ae42101f79ddef352"}]}}}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000780)='net/tcp6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x300, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = getpgrp(0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r7, 0x0, r5, r5) fcntl$setownex(r1, 0xf, &(0x7f00000009c0)={0x2, r7}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000020000000185905000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000956bbff1d93e62007b7d15364fdf0cd23f0c70c74507aa1b1645e7e0e053727a75f44a2a742cde5e48bb787f50bba666ca73e9be49a2442e72db699ea779ec939141792e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x80000}, 0x18) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffaeffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fallocate(r10, 0x10, 0x100, 0x5) 1.8163236s ago: executing program 4 (id=3436): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.7940278s ago: executing program 4 (id=3437): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_kthread_work_execute_end\x00', r1}, 0xffffffffffffff6b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44], 0x30}], 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='kmem_cache_free\x00', r5}, 0x10) modify_ldt$write(0x1, &(0x7f00000001c0)={0x3, 0x40a96351c29a6e3a, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, 0x0, 0x0, 0xc006, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x1f) close(r6) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000180)={'rose0\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) getitimer(0x0, &(0x7f0000000280)) 1.490688654s ago: executing program 3 (id=3439): keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000002c0)=@get={0x1, 0x0, 0x5}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x208010, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000f40)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNOr+luF4fxy1J0TYYrT27jR5ND0+2Vdkd5df0sLXuRNbfuvDYbWgQq9cXEam7Bqrjfzj6YuPSteF45dOuNg5YV5VKpdLs9blwvgL8j2XR7RYA3VG+0Kf3v+Vxm6Yed4TLL9beAKW4rxVH7Ur/0trBQMP7204ajYgj5//9Mh3RiXUIAICb+D7Nf55tNv/L44G6cvcUeygjEXFvRGyLiPsiYntE3B9RLftgRDy0xvobd0hunP/kl24psFVK878Xir2t5fO/cvYXI31Fbms1/oHs6PG52X3Fc7I3BoZSfmKFOn54+ffPy/SGhmv18790pPrLuWDRjkv9DQt0M1OLU+3GXbr8ScTO/mbxZ1Fu42QRsSMidt5iHcef/npXq2s3j38FK+wzrVblq4inav1/PpbFf72rspb7kxPPH5o8OL4h5mb3jZd3xY1++e3CG63qbyv+Dkj9v6np/b+0CzySbYhYOHP2RHW/dmHtdVz487O6Mb1sdznFn38bseb7fzB7q5oeLM59OLW4eHoiYjB77cbzk9d/t8yX5VP8e/c0H//b6lr8cESkm3h3RDxSbOKmvnssIh6PiD0rxP/TS0+81+pa6/5fYVW+g1L8Mzfr/6jv/7Un+k78+N3a4y+l/j9QTe0tzqzm799qG9jOcwcAAAB3i7z6GfgsH1tK5/nYWO0z/NtjUz43v7D4zNH5D07N1D4rPxIDebnSNVy3HjpRrA2X+cmG/P5i3fiLvo3V/Nj0/NxMt4OHHre5xfhP/urrduuAddeBfTTgLmX8Q+8y/qF3Gf/Qu4x/6F3Nxv/HXWgHcPt5/YfeZfxD7zL+oXcZ/9CTWn43Pm/rK/9dTpT/O+FOaU+XEhvXs4rIux9gTyT61/s2Hmp6qct/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrkvwAAAP//ZWPiyA==") write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') (fail_nth: 1) 1.236506596s ago: executing program 3 (id=3440): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1b2f, 0x800, 0x1, 0x333}, &(0x7f0000000400), &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@gettaction={0xc8, 0x32, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x88, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd85b}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2c}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) r7 = dup2(r6, r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000500)={[{@nofavordynmods}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xfffffffffffffffa}, 0x18) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8, 0xffffffffffffffff}) 1.125293158s ago: executing program 3 (id=3442): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0x48, 0x44}, 'port1\x00', 0x18, 0x805, 0xfffffc00, 0xaa, 0x9, 0x6, 0x7, 0x0, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000001c0)=""/103, &(0x7f0000000240)=0x67) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000280)=""/81, 0x51}, &(0x7f0000000300), 0x37}, 0x20) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) move_pages(r4, 0x4, &(0x7f0000000400)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4) keyctl$set_reqkey_keyring(0xe, 0x4) bind$unix(r3, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/custom1\x00', 0x802, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '/dev/snd/seq\x00'}], 0xa, "d676eb4812eb08d69146053506b005fb59afd222c17a3bb64ef10f9bb67609303bd05477180b66d545c447930bfd7feaba5be0a3a510cf55e7abafa7a3f452aa12772c0af1fda2b33582c32c05ebbc91ac7d9a0ce5d38a9911ff26e8f7cb215614fd57aae76c3751fefa63bcf060b70d3e05d47a94ecbc53fed969ef0a29878943506a583735acc5d7f2e9e8dd31df"}, 0xa8) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x30143, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000680)='scmi_xfer_response_wait\x00', r7, 0x0, 0x9aff00b}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x1, 0x0, r7, 0x8, '\x00', 0x0, r7, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x16, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000008c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000900)=[r7], &(0x7f0000000940)=[{0x1, 0x3, 0x0, 0x2}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x4, 0xd, 0x2}, {0x1, 0x5, 0xb, 0x8}, {0x0, 0x5, 0x10, 0x6}], 0x10, 0x5, @void, @value}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000000d80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)={0x1d4, r9, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xc, 0x79}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xa, 0x64, 0x4}}]}, @NL80211_ATTR_IE={0x9a, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xad, 0x8}}, @fast_bss_trans={0x37, 0x8e, {0x1, 0x4, "2b2f98010ae5faa0e85a497e44182c0a", "941d5ce2f0c3c52cc56ba942b57875608e1f23a3d34f7e9d822102f4cb4c1c48", "bc2edf0bdba3b6822e8f15ee7d289f5f1683ec0f3a67afef06490e4ed22a3ca2", [{0x1, 0x6, "33238894803d"}, {0x3, 0xc, "f6dcdc269540be5006b842ef"}, {0x2, 0x15, "894e634b209602a3b0cfc8ea89bc46e90ccf60ee70"}, {0x2, 0xd, "3dee67a80614860f9bfdfeb3d1"}]}}]}, @NL80211_ATTR_IE={0x29, 0x2a, [@ht={0x2d, 0x1a, {0x80, 0x1, 0x2, 0x0, {0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3}, 0x800, 0x2, 0x6}}, @chsw_timing={0x68, 0x4, {0x400, 0x3ff}}, @challenge={0x10, 0x1, 0x2d}]}, @NL80211_ATTR_IE={0xd8, 0x2a, [@chsw_timing={0x68, 0x4, {0x3, 0x3}}, @tim={0x5, 0x5a, {0x1e, 0x1d, 0xbe, "69b57a0ed12ef787ef24ecad5483d8085a1f7b9a4d818a0b347dd7387ccacac53ccafb604ebf73da655bd02b0c3b6d03843843d8214f378751bf4bd6b3d52a7c5f57cbe34ad8fb2fe343a95fc2fbf88e41242e71a67756"}}, @chsw_timing={0x68, 0x4, {0x9, 0x7}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @peer_mgmt={0x75, 0x16, {0x0, 0x8c3a, @val=0x8, @void, @val="9e27ee61bde42079c314b89f81673675"}}, @peer_mgmt={0x75, 0x8, {0x0, 0x6, @val=0x100, @val=0x1f, @void}}, @random={0x3, 0x29, "d19df6641d9fac1f61493def39632b55448c2d079bf3366f0d4332bafc236c3f5eb24552f9993d4e65"}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x15}, 0x4004) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000dc0)={{0x1e, 0x1}, 'port0\x00', 0x5, 0x0, 0xfffffff7, 0xd4f, 0x80, 0x1, 0x73, 0x0, 0x0, 0x3}) write$P9_RREMOVE(r7, &(0x7f0000000e80)={0x7, 0x7b, 0x1}, 0x7) keyctl$set_reqkey_keyring(0xe, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), r7) 1.087783338s ago: executing program 3 (id=3444): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x29, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x1a3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000280)="ea", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@delalloc}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.010117679s ago: executing program 3 (id=3448): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 758.846892ms ago: executing program 3 (id=3449): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) 736.124612ms ago: executing program 8 (id=3450): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4041) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/171, 0xab}, 0x20000}, {{&(0x7f00000000c0)=@ieee802154, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000040)}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000300)=""/24, 0x18}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f00000006c0)}], 0x8, &(0x7f0000001580)=""/4096, 0x1000}, 0x103dc}], 0x2, 0x12140, 0x0) 735.079862ms ago: executing program 8 (id=3451): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4041) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/171, 0xab}, 0x20000}, {{&(0x7f00000000c0)=@ieee802154, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000040)}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000300)=""/24, 0x18}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f00000006c0)}], 0x8, &(0x7f0000001580)=""/4096, 0x1000}, 0x103dc}], 0x2, 0x12140, 0x0) (fail_nth: 1) 515.325224ms ago: executing program 5 (id=3452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0xffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f", 0x7}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x64, 0xa3, &(0x7f00000002c0)="299ad098a3fc6fcc35ad4af368bff3910b67fe6fa16cda571e0848c7cc722edc2abd36872c0a15931056106498dc1220df89ea14922bf2fed901543fa12b57d287050f6d8d8c75f35dcdf95a2246d70b4f4a02c1fd5bb412f660ee698ad6c69e90407782", &(0x7f0000000680)=""/163, 0x9, 0x0, 0xd7, 0x7c, &(0x7f0000000740)="b506284041e0a22728a909eb75c88b17c89bc39595de76752be7782a0e2f6326ed9ebd149223ac39020ba9e3b52ac235ca763b983335e7e2f5d9fdb7b5f2b815e7d542f069bcbf737475dcfe71cac211acc6492780f1a272e28ae71dbf0b13874d4ea64382b4f75c3ffffa1a75b5e977ab5dc11fe6e583619198365ac43f29ca31f3db74b8c1efe92f7273725cf29223da2036e0016819323b65e83060b6ffcef38d4cb6d1fa4dcd77467b12a4b7fde628a3b591031631892470c606005924115a8dcf9666cd4b02e6d3cd1fce826c3309b7a103646214", &(0x7f00000004c0)="5cfa036ffae2914d6d569a598d6119351d1781f0ef4ea6e049513370d99b82e9ad2f7fd949b3d80b2da04b4c413fc0edc8a7bd393ae5da74eb7536b3bdc4dabe912de31de1126fce82cc81a64b4abca547df60210f74b9817b98fec6e3347beb5a270f73ab03015db60ebc49028d2f7709ab4707f8d33508f856b3e3", 0x0, 0x0, 0x38}, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r7, 0x0, r1}) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:net_conf_t:s0\x00', 0xffd7, 0x1) 514.675974ms ago: executing program 4 (id=3453): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1b2f, 0x800, 0x1, 0x333}, &(0x7f0000000400), &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@gettaction={0xc8, 0x32, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x88, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd85b}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2c}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) r7 = dup2(r6, r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000500)={[{@nofavordynmods}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xfffffffffffffffa}, 0x18) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8, 0xffffffffffffffff}) 489.614405ms ago: executing program 2 (id=3454): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4041) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/171, 0xab}, 0x20000}, {{&(0x7f00000000c0)=@ieee802154, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000040)}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000300)=""/24, 0x18}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f00000006c0)}], 0x8, &(0x7f0000001580)=""/4096, 0x1000}, 0x103dc}], 0x2, 0x12140, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0xa, 0x7, 0x0, 0x64, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, 0x40, 0x20, 0xfc, 0x40}}) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x1, 0x7, 0xac9, @vifc_lcl_ifindex=r4, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) 424.116756ms ago: executing program 8 (id=3455): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000000), 0x0) 403.402736ms ago: executing program 2 (id=3456): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r4, 0x6e2, 0x600, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080)}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffc, 0x0, 0x0, 0x0, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x24004071) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 364.479526ms ago: executing program 8 (id=3457): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x15, 0x80000088, 0xc000067}, 0x2c) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 236.114718ms ago: executing program 2 (id=3458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x88ff, &(0x7f0000000080)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x40}}, 0x0) 235.722248ms ago: executing program 2 (id=3459): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}]}, 0x28}}, 0x8000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004800}, 0x490) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2ffffffff}, 0x1904, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200f01, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x44, 0x28, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0xfff5, 0x6}, {0xfff3, 0xa}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x80000001}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0xc8811) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4800) 185.261348ms ago: executing program 2 (id=3460): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 131.817189ms ago: executing program 8 (id=3461): r0 = fsmount(0xffffffffffffffff, 0x1, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) close_range(r0, r1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) 89.274189ms ago: executing program 2 (id=3462): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newqdisc={0x110, 0x24, 0x8, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xa8, 0xffff, 0x1, 0x2, 0x9, 0xc2, 0x3}}, {0xa, 0x2, [0x7, 0x6, 0x6]}}, {{0x1c, 0x1, {0xb2, 0x80, 0x4, 0x1, 0x2, 0x9, 0x4, 0x6}}, {0x10, 0x2, [0x7, 0xa3, 0x3, 0xe62, 0x8001, 0xfff7]}}, {{0x1c, 0x1, {0x9, 0x9b, 0x6, 0xe3b7, 0x0, 0x80, 0xfffffff8, 0x9}}, {0x16, 0x2, [0xc, 0x7, 0x3, 0x0, 0x8001, 0xfffc, 0x0, 0xfff, 0x6]}}, {{0x1c, 0x1, {0x8, 0x9, 0x9, 0x8, 0x0, 0x4, 0x4, 0x9}}, {0x16, 0x2, [0x501d, 0xfff, 0xcbd, 0x6, 0xca, 0x1ff, 0x40, 0xfffb, 0x6]}}]}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200, 0x0, 0x3}}, {0xa, 0x2, [0xffff, 0x8, 0x1]}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1c}, 0x48, 0xffffffffffffffff) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) r9 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x61, 0x63, 0x66, 0x39, 0x37, 0x33, 0x32, 0x64, 0x37, 0x32, 0x35, 0x61, 0x37, 0x31, 0x7a6ff47e778edd51, 0x66]}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b43770bab1a9b01c103a4c6de626961380000000001f42900", 0x35}, 0x94, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r9, r7, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r11], 0x24}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r10, 0x0, 0x8000000000}, 0x18) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c200ff000000000000000800451000380080000000019078ac1e0001ac1414aa03ff0300000000000000000000670000008900007f000001e0f8ff7ecde62a0000020018"], 0x0) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2}, 0x48, 0xffffffffffffffff) 59.33963ms ago: executing program 4 (id=3463): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_kthread_work_execute_end\x00', r1}, 0xffffffffffffff6b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44], 0x30}], 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='kmem_cache_free\x00', r5}, 0x10) modify_ldt$write(0x1, &(0x7f00000001c0)={0x3, 0x40a96351c29a6e3a, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, 0x0, 0x0, 0xc006, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x1f) close(r6) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000180)={'rose0\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) getitimer(0x0, &(0x7f0000000280)) 0s ago: executing program 8 (id=3464): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x8) kernel console output (not intermixed with test programs): ds [ 194.495742][ T3348] vhci_hcd: release socket [ 194.500209][ T3348] vhci_hcd: disconnect device [ 194.512591][T15094] loop4: detected capacity change from 0 to 512 [ 194.536937][T15094] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2992: Failed to acquire dquot type 1 [ 194.548644][T15094] EXT4-fs (loop4): 1 truncate cleaned up [ 194.560691][T15094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.573396][T15094] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.586003][T15115] loop2: detected capacity change from 0 to 512 [ 194.587196][T15094] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.597310][T15115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.614847][T15115] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 194.630696][T15115] EXT4-fs (loop2): mount failed [ 194.684792][T15119] loop2: detected capacity change from 0 to 8192 [ 194.737272][T15121] SELinux: ebitmap: truncated map [ 194.743400][T15121] SELinux: failed to load policy [ 195.014563][T15132] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 195.021369][T15132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.028983][T15132] vhci_hcd vhci_hcd.0: Device attached [ 195.037901][T15132] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 195.044535][T15132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 195.052247][T15132] vhci_hcd vhci_hcd.0: Device attached [ 195.059938][T15132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.070029][T15132] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 195.076653][T15132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.084195][T15132] vhci_hcd vhci_hcd.0: Device attached [ 195.091780][T15132] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 195.098454][T15132] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.106208][T15132] vhci_hcd vhci_hcd.0: Device attached [ 195.113467][T15132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.122571][T15132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.131876][T15132] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.141813][T15132] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(32) [ 195.148559][T15132] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.156168][T15132] vhci_hcd vhci_hcd.0: Device attached [ 195.171029][T15136] vhci_hcd: connection closed [ 195.171187][T15140] vhci_hcd: connection closed [ 195.172130][ T56] vhci_hcd: stop threads [ 195.176119][T15138] vhci_hcd: connection closed [ 195.180588][ T56] vhci_hcd: release socket [ 195.180604][ T56] vhci_hcd: disconnect device [ 195.182855][T15134] vhci_hcd: connection closed [ 195.185726][ T56] vhci_hcd: stop threads [ 195.207889][ T56] vhci_hcd: release socket [ 195.212312][ T56] vhci_hcd: disconnect device [ 195.217848][ T56] vhci_hcd: stop threads [ 195.222099][ T56] vhci_hcd: release socket [ 195.226598][ T56] vhci_hcd: disconnect device [ 195.231849][ T56] vhci_hcd: stop threads [ 195.236212][ T56] vhci_hcd: release socket [ 195.240634][ T56] vhci_hcd: disconnect device [ 195.282876][ T9] usb 7-1: new low-speed USB device number 10 using vhci_hcd [ 195.290476][ T9] usb 7-1: enqueue for inactive port 0 [ 195.296103][ T9] usb 7-1: enqueue for inactive port 0 [ 195.301691][ T9] usb 7-1: enqueue for inactive port 0 [ 195.383276][ T9] vhci_hcd: vhci_device speed not set [ 195.717317][T15142] vhci_hcd: connection closed [ 195.717488][ T41] vhci_hcd: stop threads [ 195.726675][ T41] vhci_hcd: release socket [ 195.731177][ T41] vhci_hcd: disconnect device [ 195.773192][T15157] loop4: detected capacity change from 0 to 512 [ 195.796754][T15157] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.825567][T15157] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3009: bg 0: block 248: padding at end of block bitmap is not set [ 195.840249][T15160] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3010'. [ 195.852034][T15157] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3009: Failed to acquire dquot type 1 [ 195.863980][T15157] EXT4-fs (loop4): 1 truncate cleaned up [ 195.870129][T15157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.953322][T15168] loop2: detected capacity change from 0 to 8192 [ 195.960493][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.000415][T15170] loop4: detected capacity change from 0 to 1024 [ 196.011177][T15170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.024423][T15170] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 196.035978][T15170] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 196.045457][T15170] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.3014: lblock 2 mapped to illegal pblock 2 (length 1) [ 196.059705][T15170] EXT4-fs (loop4): Remounting filesystem read-only [ 196.066571][T15170] EXT4-fs (loop4): 1 orphan inode deleted [ 196.072725][T15170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.088970][T15170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.229695][T15170] loop4: detected capacity change from 0 to 512 [ 196.245481][T15170] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3014: Failed to acquire dquot type 1 [ 196.257866][T15170] EXT4-fs (loop4): 1 truncate cleaned up [ 196.264257][T15170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.276904][T15170] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.288597][T15170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.956269][T15197] loop8: detected capacity change from 0 to 8192 [ 197.560426][T15209] loop3: detected capacity change from 0 to 1024 [ 197.569237][T15209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.578357][T15209] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.589364][T15209] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 197.612239][T15212] loop4: detected capacity change from 0 to 1024 [ 197.619795][T15209] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3027: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.635364][T15209] EXT4-fs (loop3): Remounting filesystem read-only [ 197.642388][T15209] EXT4-fs (loop3): 1 orphan inode deleted [ 197.648603][T15209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.661596][T15209] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.667188][T15212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.679478][T15212] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.711884][T15212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 197.727932][T15216] loop5: detected capacity change from 0 to 1024 [ 197.748478][T15212] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.3037: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.763539][T15212] EXT4-fs (loop4): Remounting filesystem read-only [ 197.770289][T15212] EXT4-fs (loop4): 1 orphan inode deleted [ 197.776612][T15212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.789417][T15212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.798486][T15216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.807189][T15216] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.818791][ T30] kauditd_printk_skb: 536 callbacks suppressed [ 197.818805][ T30] audit: type=1326 audit(1749017730.659:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15211 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde7405d2d0 code=0x7ffc0000 [ 197.824573][T15216] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 197.827285][ T30] audit: type=1326 audit(1749017730.659:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15211 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7405e56b code=0x7ffc0000 [ 197.850539][T15216] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.3028: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.856640][ T30] audit: type=1326 audit(1749017730.659:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15211 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fde7405d5ca code=0x7ffc0000 [ 197.898879][T15216] EXT4-fs (loop5): Remounting filesystem read-only [ 197.917202][ T30] audit: type=1326 audit(1749017730.659:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15211 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 197.923783][T15216] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 197.955616][ T30] audit: type=1326 audit(1749017730.659:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15211 comm="syz.4.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 197.993257][T15216] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 198.002088][T15216] EXT4-fs (loop5): 1 orphan inode deleted [ 198.012983][ T30] audit: type=1326 audit(1749017730.839:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15208 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 198.023275][T15216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.036529][ T30] audit: type=1326 audit(1749017730.839:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15208 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 198.072122][ T30] audit: type=1326 audit(1749017730.859:8061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15208 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 198.092667][T15209] loop3: detected capacity change from 0 to 512 [ 198.113485][T15216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.116006][T15209] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3027: Failed to acquire dquot type 1 [ 198.137783][T15209] EXT4-fs (loop3): 1 truncate cleaned up [ 198.154379][T15209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.167391][T15209] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.190944][T15212] loop4: detected capacity change from 0 to 512 [ 198.204217][T15212] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3037: Failed to acquire dquot type 1 [ 198.224330][T15209] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.255574][T15212] EXT4-fs (loop4): 1 truncate cleaned up [ 198.261824][T15212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.296136][T15212] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.307719][T15212] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.390480][T15238] loop3: detected capacity change from 0 to 512 [ 198.402162][T15238] EXT4-fs (loop3): orphan cleanup on readonly fs [ 198.429974][T15241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.440940][T15241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.455831][T15216] loop5: detected capacity change from 0 to 512 [ 198.462891][T15238] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3033: bg 0: block 248: padding at end of block bitmap is not set [ 198.484915][T15216] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3028: Failed to acquire dquot type 1 [ 198.499613][T15238] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3033: Failed to acquire dquot type 1 [ 198.523357][T15216] EXT4-fs (loop5): 1 truncate cleaned up [ 198.529505][T15216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.552994][T15216] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.562891][T15238] EXT4-fs (loop3): 1 truncate cleaned up [ 198.569699][T15249] loop4: detected capacity change from 0 to 128 [ 198.576642][T15238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.579629][T15216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.664267][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.755724][T15254] loop3: detected capacity change from 0 to 8192 [ 198.788226][T15259] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 198.794944][T15259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.802556][T15259] vhci_hcd vhci_hcd.0: Device attached [ 198.809787][T15259] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 198.816443][T15259] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 198.824148][T15259] vhci_hcd vhci_hcd.0: Device attached [ 198.831204][T15259] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.840725][T15259] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 198.847352][T15259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.855004][T15259] vhci_hcd vhci_hcd.0: Device attached [ 198.861987][T15259] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(21) [ 198.868640][T15259] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 198.876448][T15259] vhci_hcd vhci_hcd.0: Device attached [ 198.883779][T15259] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.892495][T15259] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.901350][T15259] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.911400][T15259] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(32) [ 198.918015][T15259] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.925741][T15259] vhci_hcd vhci_hcd.0: Device attached [ 198.939837][T15266] vhci_hcd: connection closed [ 198.940051][ T7953] vhci_hcd: stop threads [ 198.940210][T15264] vhci_hcd: connection closed [ 198.944871][ T7953] vhci_hcd: release socket [ 198.958304][ T7953] vhci_hcd: disconnect device [ 198.963201][T15262] vhci_hcd: connection closed [ 198.963322][T15260] vhci_hcd: connection closed [ 198.963830][ T7953] vhci_hcd: stop threads [ 198.977005][ T7953] vhci_hcd: release socket [ 198.981433][ T7953] vhci_hcd: disconnect device [ 198.989758][ T7953] vhci_hcd: stop threads [ 198.994060][ T7953] vhci_hcd: release socket [ 198.998488][ T7953] vhci_hcd: disconnect device [ 199.003765][ T7953] vhci_hcd: stop threads [ 199.008037][ T7953] vhci_hcd: release socket [ 199.012455][ T7953] vhci_hcd: disconnect device [ 199.480537][T15273] loop8: detected capacity change from 0 to 8192 [ 199.500317][T15268] vhci_hcd: connection closed [ 199.512515][ T41] vhci_hcd: stop threads [ 199.518310][T15275] loop4: detected capacity change from 0 to 512 [ 199.521485][ T41] vhci_hcd: release socket [ 199.521499][ T41] vhci_hcd: disconnect device [ 199.552026][T15275] EXT4-fs (loop4): orphan cleanup on readonly fs [ 199.561591][T15275] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3044: bg 0: block 248: padding at end of block bitmap is not set [ 199.576433][T15275] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3044: Failed to acquire dquot type 1 [ 199.588821][T15275] EXT4-fs (loop4): 1 truncate cleaned up [ 199.600667][T15275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.726769][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.795276][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3046'. [ 199.870536][T15294] loop5: detected capacity change from 0 to 8192 [ 200.029667][T15296] blktrace: Concurrent blktraces are not allowed on loop9 [ 200.660922][T15305] blktrace: Concurrent blktraces are not allowed on loop7 [ 200.676231][T15307] loop8: detected capacity change from 0 to 8192 [ 200.948817][T15312] loop5: detected capacity change from 0 to 512 [ 200.961736][T15312] EXT4-fs (loop5): orphan cleanup on readonly fs [ 200.972852][T15312] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3056: bg 0: block 248: padding at end of block bitmap is not set [ 200.991204][T15312] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3056: Failed to acquire dquot type 1 [ 201.007524][T15312] EXT4-fs (loop5): 1 truncate cleaned up [ 201.017374][T15312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.109753][ T8299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.264864][T15326] loop5: detected capacity change from 0 to 8192 [ 201.357867][T15328] loop2: detected capacity change from 0 to 8192 [ 201.661355][T15336] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 201.668086][T15336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.675764][T15336] vhci_hcd vhci_hcd.0: Device attached [ 201.693113][T15336] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 201.699786][T15336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.707310][T15336] vhci_hcd vhci_hcd.0: Device attached [ 201.725403][T15336] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 201.732132][T15336] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 201.739846][T15336] vhci_hcd vhci_hcd.0: Device attached [ 201.747471][T15336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.756810][T15336] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 201.763437][T15336] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.770982][T15336] vhci_hcd vhci_hcd.0: Device attached [ 201.777410][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3064'. [ 201.786783][T15347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.794297][T15347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.802178][T15347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.809600][T15347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.818475][T15336] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 201.825100][T15336] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 201.832861][T15336] vhci_hcd vhci_hcd.0: Device attached [ 201.864352][T15336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.879960][T15336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.889772][T15336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.913429][T15336] vhci_hcd vhci_hcd.0: port 0 already used [ 201.923238][ T1038] usb 7-1: new low-speed USB device number 11 using vhci_hcd [ 201.961375][T15348] vhci_hcd: connection closed [ 201.961555][T15345] vhci_hcd: connection closed [ 201.962639][T15337] vhci_hcd: connection reset by peer [ 201.966270][T15341] vhci_hcd: connection closed [ 201.966493][T15343] vhci_hcd: connection closed [ 201.981403][ T56] vhci_hcd: stop threads [ 201.990406][ T56] vhci_hcd: release socket [ 201.991026][T15351] loop4: detected capacity change from 0 to 8192 [ 201.994838][ T56] vhci_hcd: disconnect device [ 202.012048][ T56] vhci_hcd: stop threads [ 202.016388][ T56] vhci_hcd: release socket [ 202.020832][ T56] vhci_hcd: disconnect device [ 202.027662][ T56] vhci_hcd: stop threads [ 202.031929][ T56] vhci_hcd: release socket [ 202.036419][ T56] vhci_hcd: disconnect device [ 202.041438][ T56] vhci_hcd: stop threads [ 202.045744][ T56] vhci_hcd: release socket [ 202.050229][ T56] vhci_hcd: disconnect device [ 202.056263][ T56] vhci_hcd: stop threads [ 202.060526][ T56] vhci_hcd: release socket [ 202.064987][ T56] vhci_hcd: disconnect device [ 202.492230][T15361] loop5: detected capacity change from 0 to 512 [ 202.511928][T15361] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 202.548507][T15361] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 202.576905][T15361] EXT4-fs (loop5): mount failed [ 202.674986][T15381] loop3: detected capacity change from 0 to 512 [ 202.710977][T15381] EXT4-fs (loop3): orphan cleanup on readonly fs [ 202.728391][T15381] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3075: bg 0: block 248: padding at end of block bitmap is not set [ 202.759118][T15377] blktrace: Concurrent blktraces are not allowed on loop17 [ 202.766414][T15381] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3075: Failed to acquire dquot type 1 [ 202.794565][T15381] EXT4-fs (loop3): 1 truncate cleaned up [ 202.800766][T15381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.847349][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.861883][ T30] kauditd_printk_skb: 361 callbacks suppressed [ 202.861898][ T30] audit: type=1326 audit(1749017735.709:8408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15379 comm="syz.5.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 202.891689][ T30] audit: type=1326 audit(1749017735.709:8409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15379 comm="syz.5.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 202.915305][ T30] audit: type=1326 audit(1749017735.709:8410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15379 comm="syz.5.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 202.920947][T15390] loop3: detected capacity change from 0 to 1024 [ 202.946208][ T30] audit: type=1326 audit(1749017735.739:8411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 202.969801][ T30] audit: type=1326 audit(1749017735.739:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 202.993310][ T30] audit: type=1326 audit(1749017735.739:8413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 203.016666][ T30] audit: type=1326 audit(1749017735.739:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 203.040235][ T30] audit: type=1326 audit(1749017735.739:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 203.063879][ T30] audit: type=1326 audit(1749017735.749:8416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 203.087436][ T30] audit: type=1326 audit(1749017735.749:8417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 203.113390][T15390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.127964][T15390] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.143295][T15390] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 203.152711][T15390] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3077: lblock 2 mapped to illegal pblock 2 (length 1) [ 203.167286][T15390] EXT4-fs (loop3): Remounting filesystem read-only [ 203.174973][T15390] EXT4-fs (loop3): 1 orphan inode deleted [ 203.181144][T15390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.194246][T15390] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.322455][T15390] loop3: detected capacity change from 0 to 512 [ 203.344590][T15390] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3077: Failed to acquire dquot type 1 [ 203.356798][T15390] EXT4-fs (loop3): 1 truncate cleaned up [ 203.362870][T15390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.375739][T15390] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.386305][T15400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3078'. [ 203.397259][T15390] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.517459][T15409] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 203.524066][T15409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.531592][T15409] vhci_hcd vhci_hcd.0: Device attached [ 203.540150][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3081'. [ 203.549182][T15409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3081'. [ 203.562723][T15409] loop5: detected capacity change from 0 to 1024 [ 203.569982][T15409] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 203.581357][T15410] vhci_hcd: connection closed [ 203.581697][ T41] vhci_hcd: stop threads [ 203.590748][ T41] vhci_hcd: release socket [ 203.595325][ T41] vhci_hcd: disconnect device [ 203.853770][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3083'. [ 204.160328][T15429] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 204.166930][T15429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.174549][T15429] vhci_hcd vhci_hcd.0: Device attached [ 204.188847][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3088'. [ 204.198247][T15429] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3088'. [ 204.219391][T15429] loop5: detected capacity change from 0 to 1024 [ 204.228856][T15429] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 204.249178][T15430] vhci_hcd: connection closed [ 204.249372][T15435] loop4: detected capacity change from 0 to 8192 [ 204.249511][ T41] vhci_hcd: stop threads [ 204.264756][ T41] vhci_hcd: release socket [ 204.269176][ T41] vhci_hcd: disconnect device [ 204.397151][T15444] loop2: detected capacity change from 0 to 128 [ 204.521869][T15447] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3093'. [ 204.586136][T15449] loop3: detected capacity change from 0 to 8192 [ 204.714733][T15458] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 204.721304][T15458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.728829][T15458] vhci_hcd vhci_hcd.0: Device attached [ 204.738765][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3097'. [ 204.791486][T15458] loop8: detected capacity change from 0 to 1024 [ 204.802551][T15458] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 204.811720][T15459] vhci_hcd: connection closed [ 204.814202][ T7953] vhci_hcd: stop threads [ 204.823190][ T7953] vhci_hcd: release socket [ 204.827611][ T7953] vhci_hcd: disconnect device [ 205.150886][T15477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.160592][T15477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.416628][T15479] loop4: detected capacity change from 0 to 8192 [ 205.528504][T15489] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 205.535055][T15489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.542587][T15489] vhci_hcd vhci_hcd.0: Device attached [ 205.555074][T15489] __nla_validate_parse: 1 callbacks suppressed [ 205.555085][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3109'. [ 205.570621][T15489] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3109'. [ 205.586106][T15489] loop8: detected capacity change from 0 to 1024 [ 205.599825][T15489] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 205.610762][T15490] vhci_hcd: connection closed [ 205.610863][ T12] vhci_hcd: stop threads [ 205.619853][ T12] vhci_hcd: release socket [ 205.624296][ T12] vhci_hcd: disconnect device [ 205.775266][T15499] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 205.781943][T15499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.789523][T15499] vhci_hcd vhci_hcd.0: Device attached [ 205.806716][T15499] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 205.813330][T15499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.820833][T15499] vhci_hcd vhci_hcd.0: Device attached [ 205.845704][T15499] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(15) [ 205.852351][T15499] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 205.859982][T15499] vhci_hcd vhci_hcd.0: Device attached [ 205.869079][T15499] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.884384][T15499] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20) [ 205.891001][T15499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.898567][T15499] vhci_hcd vhci_hcd.0: Device attached [ 205.912773][T15510] loop3: detected capacity change from 0 to 8192 [ 205.919608][T15499] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(22) [ 205.926214][T15499] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 205.934015][T15499] vhci_hcd vhci_hcd.0: Device attached [ 205.953117][T15499] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.962254][T15499] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.971592][T15499] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.996605][T15499] vhci_hcd vhci_hcd.0: port 0 already used [ 206.018124][T15511] vhci_hcd: connection closed [ 206.018286][T15507] vhci_hcd: connection closed [ 206.018593][T15513] vhci_hcd: connection closed [ 206.024042][T15504] vhci_hcd: connection closed [ 206.027824][ T56] vhci_hcd: stop threads [ 206.032765][T15500] vhci_hcd: connection closed [ 206.037053][ T56] vhci_hcd: release socket [ 206.050504][ T56] vhci_hcd: disconnect device [ 206.055839][ T3392] usb 11-1: new low-speed USB device number 4 using vhci_hcd [ 206.063413][ T56] vhci_hcd: stop threads [ 206.067704][ T56] vhci_hcd: release socket [ 206.072146][ T56] vhci_hcd: disconnect device [ 206.077193][ T56] vhci_hcd: stop threads [ 206.081456][ T56] vhci_hcd: release socket [ 206.082968][T15501] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 206.085932][ T56] vhci_hcd: disconnect device [ 206.107995][ T56] vhci_hcd: stop threads [ 206.112265][ T56] vhci_hcd: release socket [ 206.116777][ T56] vhci_hcd: disconnect device [ 206.160372][ T56] vhci_hcd: stop threads [ 206.164906][ T56] vhci_hcd: release socket [ 206.169451][ T56] vhci_hcd: disconnect device [ 206.235393][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3116'. [ 206.264275][T15522] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 206.270901][T15522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.278428][T15522] vhci_hcd vhci_hcd.0: Device attached [ 206.284266][T15525] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3116'. [ 206.309259][T15522] loop8: detected capacity change from 0 to 1024 [ 206.317388][T15522] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 206.331130][T15523] vhci_hcd: connection closed [ 206.331663][ T7838] vhci_hcd: stop threads [ 206.340655][ T7838] vhci_hcd: release socket [ 206.345152][ T7838] vhci_hcd: disconnect device [ 206.539645][T15532] loop4: detected capacity change from 0 to 8192 [ 206.567070][T15534] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 206.573615][T15534] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.581198][T15534] vhci_hcd vhci_hcd.0: Device attached [ 206.613755][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3120'. [ 206.623734][T15534] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3120'. [ 206.640220][T15534] loop5: detected capacity change from 0 to 1024 [ 206.652859][T15534] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 206.667928][T15535] vhci_hcd: connection closed [ 206.667981][ T7838] vhci_hcd: stop threads [ 206.677049][ T7838] vhci_hcd: release socket [ 206.681516][ T7838] vhci_hcd: disconnect device [ 206.963706][ T1038] usb 7-1: enqueue for inactive port 0 [ 206.979180][ T1038] usb 7-1: enqueue for inactive port 0 [ 206.985316][T15538] blktrace: Concurrent blktraces are not allowed on loop17 [ 207.092873][ T1038] vhci_hcd: vhci_device speed not set [ 207.132093][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3124'. [ 207.188518][T15550] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 207.195101][T15550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.202673][T15550] vhci_hcd vhci_hcd.0: Device attached [ 207.211159][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3125'. [ 207.220143][T15550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3125'. [ 207.235641][T15550] loop5: detected capacity change from 0 to 1024 [ 207.242400][T15550] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 207.257579][T15551] vhci_hcd: connection closed [ 207.258968][ T41] vhci_hcd: stop threads [ 207.267949][ T41] vhci_hcd: release socket [ 207.272371][ T41] vhci_hcd: disconnect device [ 207.411902][T15557] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 207.418460][T15557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.426025][T15557] vhci_hcd vhci_hcd.0: Device attached [ 207.433136][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3126'. [ 207.446164][T15557] loop4: detected capacity change from 0 to 1024 [ 207.453314][T15557] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 207.461992][T15558] vhci_hcd: connection closed [ 207.462351][ T48] vhci_hcd: stop threads [ 207.471331][ T48] vhci_hcd: release socket [ 207.475889][ T48] vhci_hcd: disconnect device [ 207.782375][T15565] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 207.789115][T15565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.796743][T15565] vhci_hcd vhci_hcd.0: Device attached [ 207.802988][T15565] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 207.809597][T15565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.817170][T15565] vhci_hcd vhci_hcd.0: Device attached [ 207.825091][T15571] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 207.827751][T15565] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16) [ 207.831611][T15571] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.838178][T15565] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 207.845740][T15571] vhci_hcd vhci_hcd.0: Device attached [ 207.853186][T15565] vhci_hcd vhci_hcd.0: Device attached [ 207.855821][T15565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.875918][T15565] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 207.882620][T15565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.890134][T15565] vhci_hcd vhci_hcd.0: Device attached [ 207.897004][T15565] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(23) [ 207.903619][T15565] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 207.911406][T15565] vhci_hcd vhci_hcd.0: Device attached [ 207.922166][T15571] loop3: detected capacity change from 0 to 1024 [ 207.928892][T15565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.942900][T15571] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 207.951929][T15565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.961609][T15565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.970831][T15572] vhci_hcd: connection closed [ 207.971135][ T48] vhci_hcd: stop threads [ 207.980092][ T48] vhci_hcd: release socket [ 207.984570][ T48] vhci_hcd: disconnect device [ 207.997898][T15565] vhci_hcd vhci_hcd.0: port 0 already used [ 208.006993][T15579] vhci_hcd: connection closed [ 208.007096][ T48] vhci_hcd: stop threads [ 208.007457][T15573] vhci_hcd: connection closed [ 208.011830][ T48] vhci_hcd: release socket [ 208.011875][ T48] vhci_hcd: disconnect device [ 208.017184][T15566] vhci_hcd: connection closed [ 208.020800][T15577] vhci_hcd: connection closed [ 208.021042][T15568] vhci_hcd: connection closed [ 208.039075][ T30] kauditd_printk_skb: 278 callbacks suppressed [ 208.039089][ T30] audit: type=1326 audit(1749017740.879:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 208.044128][ T48] vhci_hcd: stop threads [ 208.051620][ T30] audit: type=1326 audit(1749017740.889:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 208.073634][ T48] vhci_hcd: release socket [ 208.073720][ T48] vhci_hcd: disconnect device [ 208.097841][ T30] audit: type=1326 audit(1749017740.919:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 208.121036][ T48] vhci_hcd: stop threads [ 208.133962][ T30] audit: type=1326 audit(1749017740.919:8695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 208.138141][ T48] vhci_hcd: release socket [ 208.138155][ T48] vhci_hcd: disconnect device [ 208.161582][ T30] audit: type=1326 audit(1749017740.919:8696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 208.161621][ T30] audit: type=1326 audit(1749017740.919:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 208.196696][T15594] loop4: detected capacity change from 0 to 128 [ 208.218001][ T30] audit: type=1326 audit(1749017740.919:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 208.248001][ T30] audit: type=1326 audit(1749017740.919:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 208.271607][ T30] audit: type=1326 audit(1749017740.919:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 208.295231][ T30] audit: type=1326 audit(1749017740.919:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.4.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7405e969 code=0x7ffc0000 [ 208.303155][ T48] vhci_hcd: stop threads [ 208.323019][ T48] vhci_hcd: release socket [ 208.327512][ T48] vhci_hcd: disconnect device [ 208.334953][ T48] vhci_hcd: stop threads [ 208.339251][ T48] vhci_hcd: release socket [ 208.343707][ T48] vhci_hcd: disconnect device [ 208.421737][T15599] loop2: detected capacity change from 0 to 8192 [ 208.481860][T15608] loop4: detected capacity change from 0 to 8192 [ 209.015131][T15622] blktrace: Concurrent blktraces are not allowed on loop17 [ 209.066514][T15626] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 209.073068][T15626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.080652][T15626] vhci_hcd vhci_hcd.0: Device attached [ 209.099336][T15626] loop8: detected capacity change from 0 to 1024 [ 209.109889][T15626] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 209.142513][T15627] vhci_hcd: connection closed [ 209.142647][ T7838] vhci_hcd: stop threads [ 209.151640][ T7838] vhci_hcd: release socket [ 209.156089][ T7838] vhci_hcd: disconnect device [ 209.559368][T15637] loop5: detected capacity change from 0 to 128 [ 209.619946][T15641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.631420][T15641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.653107][ T9] usb usb8-port1: attempt power cycle [ 209.692857][T15643] loop4: detected capacity change from 0 to 8192 [ 209.734202][T15649] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 209.740963][T15649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.748519][T15649] vhci_hcd vhci_hcd.0: Device attached [ 209.784711][T15647] loop8: detected capacity change from 0 to 8192 [ 209.795288][T15649] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 209.801912][T15649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.809477][T15649] vhci_hcd vhci_hcd.0: Device attached [ 209.819227][T15649] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 209.825906][T15649] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 209.833589][T15649] vhci_hcd vhci_hcd.0: Device attached [ 209.848295][T15649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 209.866116][T15649] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 209.872756][T15649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.880279][T15649] vhci_hcd vhci_hcd.0: Device attached [ 209.889485][T15649] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(23) [ 209.896105][T15649] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 209.903843][T15649] vhci_hcd vhci_hcd.0: Device attached [ 209.910105][T15649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 209.919229][T15649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 209.932706][T15649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 209.943915][T15649] vhci_hcd vhci_hcd.0: port 0 already used [ 209.955054][T15661] vhci_hcd: connection closed [ 209.955147][T15656] vhci_hcd: connection closed [ 209.960000][ T41] vhci_hcd: stop threads [ 209.960159][T15658] vhci_hcd: connection closed [ 209.964706][ T41] vhci_hcd: release socket [ 209.964720][ T41] vhci_hcd: disconnect device [ 209.969885][T15650] vhci_hcd: connection closed [ 209.973826][ T41] vhci_hcd: stop threads [ 209.979694][T15654] vhci_hcd: connection closed [ 209.982695][ T41] vhci_hcd: release socket [ 209.982710][ T41] vhci_hcd: disconnect device [ 210.005646][ T9] usb 8-1: enqueue for inactive port 0 [ 210.014410][ T41] vhci_hcd: stop threads [ 210.018718][ T41] vhci_hcd: release socket [ 210.023221][ T41] vhci_hcd: disconnect device [ 210.028283][ T41] vhci_hcd: stop threads [ 210.032546][ T41] vhci_hcd: release socket [ 210.037042][ T41] vhci_hcd: disconnect device [ 210.042457][ T41] vhci_hcd: stop threads [ 210.046753][ T41] vhci_hcd: release socket [ 210.051184][ T41] vhci_hcd: disconnect device [ 210.222870][ T9] usb 8-1: enqueue for inactive port 0 [ 210.648254][T15671] loop8: detected capacity change from 0 to 8192 [ 210.758448][T15681] loop4: detected capacity change from 0 to 8192 [ 210.761103][T15686] loop5: detected capacity change from 0 to 128 [ 210.900238][T15693] loop5: detected capacity change from 0 to 512 [ 210.909354][T15693] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.927564][T15693] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 210.942403][T15693] EXT4-fs (loop5): mount failed [ 211.044196][T15699] loop5: detected capacity change from 0 to 1024 [ 211.053144][T15699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.065727][T15699] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.078680][T15699] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 211.090320][T15699] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.3162: lblock 2 mapped to illegal pblock 2 (length 1) [ 211.105528][T15699] EXT4-fs (loop5): Remounting filesystem read-only [ 211.112399][T15699] EXT4-fs (loop5): 1 orphan inode deleted [ 211.118314][ T3392] usb 11-1: enqueue for inactive port 0 [ 211.123983][ T3392] usb 11-1: enqueue for inactive port 0 [ 211.130127][T15699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.144542][T15699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.192922][ T3392] vhci_hcd: vhci_device speed not set [ 211.315385][T15699] loop5: detected capacity change from 0 to 512 [ 211.355454][T15699] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3162: Failed to acquire dquot type 1 [ 211.363612][ T9] usb usb8-port1: unable to enumerate USB device [ 211.369408][T15699] EXT4-fs (loop5): 1 truncate cleaned up [ 211.379980][T15699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.392880][T15699] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.404419][T15699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.432823][ T7062] vhci_hcd: vhci_device speed not set [ 211.647562][T15706] loop3: detected capacity change from 0 to 8192 [ 211.698700][T15710] loop5: detected capacity change from 0 to 8192 [ 212.004875][T15725] loop8: detected capacity change from 0 to 128 [ 212.160781][T15728] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 212.167357][T15728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.174945][T15728] vhci_hcd vhci_hcd.0: Device attached [ 212.196069][T15728] __nla_validate_parse: 6 callbacks suppressed [ 212.196081][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3172'. [ 212.223716][T15728] loop8: detected capacity change from 0 to 1024 [ 212.232292][T15728] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 212.243750][T15729] vhci_hcd: connection closed [ 212.244138][ T56] vhci_hcd: stop threads [ 212.253128][ T56] vhci_hcd: release socket [ 212.257600][ T56] vhci_hcd: disconnect device [ 212.511123][T15732] SELinux: ebitmap: truncated map [ 212.517169][T15732] SELinux: failed to load policy [ 212.563351][T15737] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3174'. [ 212.575380][T15739] loop3: detected capacity change from 0 to 1024 [ 212.583057][T15739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.591677][T15739] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 212.602479][T15739] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 212.611360][T15739] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3176: lblock 2 mapped to illegal pblock 2 (length 1) [ 212.626448][T15739] EXT4-fs (loop3): Remounting filesystem read-only [ 212.633054][T15739] EXT4-fs (loop3): 1 orphan inode deleted [ 212.639223][T15739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.651936][T15739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.793591][T15739] loop3: detected capacity change from 0 to 512 [ 212.822177][T15747] loop4: detected capacity change from 0 to 8192 [ 212.831072][T15739] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3176: Failed to acquire dquot type 1 [ 212.831112][T15746] loop8: detected capacity change from 0 to 8192 [ 212.854539][T15739] EXT4-fs (loop3): 1 truncate cleaned up [ 212.866522][T15739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.879122][T15739] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.893280][T15739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.016095][T15755] loop3: detected capacity change from 0 to 1024 [ 213.025887][T15755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.040597][T15755] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.054492][T15755] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 213.063801][T15755] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3179: lblock 2 mapped to illegal pblock 2 (length 1) [ 213.092953][T15755] EXT4-fs (loop3): Remounting filesystem read-only [ 213.099531][T15755] __quota_error: 455 callbacks suppressed [ 213.099580][T15755] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 213.113556][T15755] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 213.122381][T15755] EXT4-fs (loop3): 1 orphan inode deleted [ 213.128949][T15755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.141715][T15755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.152394][ T30] audit: type=1326 audit(1749017745.989:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.3.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c56c9d2d0 code=0x7ffc0000 [ 213.179528][ T30] audit: type=1326 audit(1749017745.989:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.3.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c56c9e56b code=0x7ffc0000 [ 213.203236][ T30] audit: type=1326 audit(1749017745.989:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.3.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2c56c9d5ca code=0x7ffc0000 [ 213.226663][ T30] audit: type=1326 audit(1749017745.989:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.3.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 213.250237][ T30] audit: type=1326 audit(1749017745.989:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.3.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 213.273788][ T30] audit: type=1326 audit(1749017745.989:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.3.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 213.297350][ T30] audit: type=1326 audit(1749017745.989:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.3.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 213.320945][ T30] audit: type=1326 audit(1749017745.989:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15754 comm="syz.3.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c56c9e969 code=0x7ffc0000 [ 213.402104][T15755] loop3: detected capacity change from 0 to 512 [ 213.439814][T15755] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3179: Failed to acquire dquot type 1 [ 213.458150][T15755] EXT4-fs (loop3): 1 truncate cleaned up [ 213.464348][T15755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.477045][T15755] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.488643][T15755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.534881][T15769] loop5: detected capacity change from 0 to 128 [ 213.773053][ T3393] usb usb12-port1: attempt power cycle [ 213.780549][T15775] loop3: detected capacity change from 0 to 8192 [ 213.826217][T15777] loop5: detected capacity change from 0 to 8192 [ 213.893986][T15782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.902897][T15782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.017591][T15785] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 214.024185][T15785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.031731][T15785] vhci_hcd vhci_hcd.0: Device attached [ 214.041428][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'. [ 214.057917][T15785] loop4: detected capacity change from 0 to 1024 [ 214.068112][T15785] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 214.078916][T15786] vhci_hcd: connection closed [ 214.079202][ T48] vhci_hcd: stop threads [ 214.088246][ T48] vhci_hcd: release socket [ 214.092665][ T48] vhci_hcd: disconnect device [ 214.655362][T15791] loop5: detected capacity change from 0 to 8192 [ 214.716797][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3188'. [ 214.725993][T15793] loop3: detected capacity change from 0 to 8192 [ 215.614559][ T3393] usb usb12-port1: unable to enumerate USB device [ 215.677057][T15801] blktrace: Concurrent blktraces are not allowed on loop9 [ 215.735247][T15806] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3192'. [ 215.804283][T15808] loop5: detected capacity change from 0 to 1024 [ 215.811407][T15804] blktrace: Concurrent blktraces are not allowed on loop9 [ 215.817297][T15808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.827567][T15808] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.843880][T15808] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 215.857641][T15808] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.3194: lblock 2 mapped to illegal pblock 2 (length 1) [ 215.873308][T15808] EXT4-fs (loop5): Remounting filesystem read-only [ 215.880081][T15808] EXT4-fs (loop5): 1 orphan inode deleted [ 215.889634][T15808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.905003][T15808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.918573][T15815] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 215.918868][T15814] IPVS: stopping master sync thread 15815 ... [ 215.986984][T15819] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 215.993574][T15819] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.001142][T15819] vhci_hcd vhci_hcd.0: Device attached [ 216.009028][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3198'. [ 216.021807][T15819] loop4: detected capacity change from 0 to 1024 [ 216.028513][T15819] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 216.037416][T15820] vhci_hcd: connection closed [ 216.038627][ T7838] vhci_hcd: stop threads [ 216.047690][ T7838] vhci_hcd: release socket [ 216.052164][ T7838] vhci_hcd: disconnect device [ 216.057342][T15823] loop5: detected capacity change from 0 to 512 [ 216.074399][T15823] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3194: Failed to acquire dquot type 1 [ 216.086402][T15823] EXT4-fs (loop5): 1 truncate cleaned up [ 216.092293][T15823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.105260][T15823] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.116556][T15823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.260382][T15829] loop5: detected capacity change from 0 to 8192 [ 216.471845][T15834] loop2: detected capacity change from 0 to 512 [ 216.481453][T15834] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 216.490202][T15834] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 216.498877][T15834] EXT4-fs (loop2): 1 truncate cleaned up [ 216.508327][T15834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.544725][ T8334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.571668][T15837] loop4: detected capacity change from 0 to 128 [ 216.878766][T15842] blktrace: Concurrent blktraces are not allowed on loop9 [ 217.046780][T15856] loop8: detected capacity change from 0 to 8192 [ 217.086173][T15861] FAULT_INJECTION: forcing a failure. [ 217.086173][T15861] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 217.099329][T15861] CPU: 1 UID: 0 PID: 15861 Comm: syz.4.3213 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 217.099360][T15861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.099457][T15861] Call Trace: [ 217.099465][T15861] [ 217.099473][T15861] __dump_stack+0x1d/0x30 [ 217.099498][T15861] dump_stack_lvl+0xe8/0x140 [ 217.099565][T15861] dump_stack+0x15/0x1b [ 217.099639][T15861] should_fail_ex+0x265/0x280 [ 217.099736][T15861] should_fail+0xb/0x20 [ 217.099756][T15861] should_fail_usercopy+0x1a/0x20 [ 217.099782][T15861] _copy_from_user+0x1c/0xb0 [ 217.099841][T15861] bpf_test_init+0xdf/0x160 [ 217.099872][T15861] bpf_prog_test_run_skb+0x144/0xbd0 [ 217.099942][T15861] ? __rcu_read_unlock+0x4f/0x70 [ 217.100028][T15861] ? __fget_files+0x184/0x1c0 [ 217.100054][T15861] ? __rcu_read_unlock+0x4f/0x70 [ 217.100129][T15861] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 217.100153][T15861] bpf_prog_test_run+0x22a/0x390 [ 217.100176][T15861] __sys_bpf+0x3dc/0x790 [ 217.100247][T15861] __x64_sys_bpf+0x41/0x50 [ 217.100276][T15861] x64_sys_call+0x2478/0x2fb0 [ 217.100296][T15861] do_syscall_64+0xd2/0x200 [ 217.100405][T15861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 217.100434][T15861] ? clear_bhb_loop+0x40/0x90 [ 217.100464][T15861] ? clear_bhb_loop+0x40/0x90 [ 217.100490][T15861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.100515][T15861] RIP: 0033:0x7fde7405e969 [ 217.100533][T15861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.100548][T15861] RSP: 002b:00007fde726c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.100644][T15861] RAX: ffffffffffffffda RBX: 00007fde74285fa0 RCX: 00007fde7405e969 [ 217.100655][T15861] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 217.100666][T15861] RBP: 00007fde726c7090 R08: 0000000000000000 R09: 0000000000000000 [ 217.100680][T15861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.100694][T15861] R13: 0000000000000000 R14: 00007fde74285fa0 R15: 00007ffece6b1178 [ 217.100716][T15861] [ 217.312496][T15859] loop3: detected capacity change from 0 to 8192 [ 217.360043][T15863] loop5: detected capacity change from 0 to 512 [ 217.398673][T15863] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 217.431974][T15863] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 217.487114][T15863] EXT4-fs (loop5): 1 truncate cleaned up [ 217.515357][T15863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.567764][ T8299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.622146][T15874] blktrace: Concurrent blktraces are not allowed on loop9 [ 217.960481][T15891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.988134][T15891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.021871][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3226'. [ 218.072038][T15904] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 218.078669][T15904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.086233][T15904] vhci_hcd vhci_hcd.0: Device attached [ 218.099023][T15904] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(13) [ 218.105646][T15904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.113251][T15904] vhci_hcd vhci_hcd.0: Device attached [ 218.120139][T15904] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(16) [ 218.126761][T15904] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 218.134484][T15904] vhci_hcd vhci_hcd.0: Device attached [ 218.140862][T15904] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 218.150003][T15904] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(21) [ 218.154356][T15908] blktrace: Concurrent blktraces are not allowed on loop9 [ 218.156642][T15904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.156712][T15904] vhci_hcd vhci_hcd.0: Device attached [ 218.199336][T15904] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(23) [ 218.206008][T15904] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 218.213689][T15904] vhci_hcd vhci_hcd.0: Device attached [ 218.220728][T15904] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 218.230091][T15904] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 218.239233][T15904] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 218.251283][T15904] vhci_hcd vhci_hcd.0: port 0 already used [ 218.266925][T15915] vhci_hcd: connection closed [ 218.266984][T15913] vhci_hcd: connection closed [ 218.267133][ T7838] vhci_hcd: stop threads [ 218.271931][T15911] vhci_hcd: connection closed [ 218.276435][ T7838] vhci_hcd: release socket [ 218.281176][T15909] vhci_hcd: connection closed [ 218.285334][ T7838] vhci_hcd: disconnect device [ 218.290096][T15905] vhci_hcd: connection closed [ 218.307195][ T7838] vhci_hcd: stop threads [ 218.316472][ T7838] vhci_hcd: release socket [ 218.320958][ T7838] vhci_hcd: disconnect device [ 218.322888][ T7062] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 218.333770][T15925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3233'. [ 218.342769][T15925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3233'. [ 218.352657][T15906] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 218.367352][T15925] loop4: detected capacity change from 0 to 1764 [ 218.374868][ T7838] vhci_hcd: stop threads [ 218.379135][ T7838] vhci_hcd: release socket [ 218.383575][ T7838] vhci_hcd: disconnect device [ 218.388786][ T7838] vhci_hcd: stop threads [ 218.393167][ T7838] vhci_hcd: release socket [ 218.397586][ T7838] vhci_hcd: disconnect device [ 218.414103][ T7838] vhci_hcd: stop threads [ 218.418486][ T7838] vhci_hcd: release socket [ 218.422948][ T7838] vhci_hcd: disconnect device [ 218.437223][T15922] blktrace: Concurrent blktraces are not allowed on loop7 [ 218.467684][T15928] loop4: detected capacity change from 0 to 8192 [ 218.529825][T15933] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3237'. [ 218.558161][ T30] kauditd_printk_skb: 275 callbacks suppressed [ 218.558175][ T30] audit: type=1326 audit(1749017751.399:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.5.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 218.600259][T15934] loop3: detected capacity change from 0 to 8192 [ 218.604444][ T30] audit: type=1326 audit(1749017751.439:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.5.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 218.630284][ T30] audit: type=1326 audit(1749017751.439:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.5.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 218.654008][ T30] audit: type=1326 audit(1749017751.439:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.5.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 218.677578][ T30] audit: type=1326 audit(1749017751.439:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.5.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 218.701152][ T30] audit: type=1326 audit(1749017751.439:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.5.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 218.724666][ T30] audit: type=1326 audit(1749017751.439:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.5.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 218.725189][T15940] FAULT_INJECTION: forcing a failure. [ 218.725189][T15940] name failslab, interval 1, probability 0, space 0, times 0 [ 218.748130][ T30] audit: type=1326 audit(1749017751.439:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.5.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 218.748162][ T30] audit: type=1326 audit(1749017751.439:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.5.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 218.760751][T15940] CPU: 0 UID: 0 PID: 15940 Comm: syz.5.3239 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 218.760776][T15940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.760805][T15940] Call Trace: [ 218.760813][T15940] [ 218.760822][T15940] __dump_stack+0x1d/0x30 [ 218.760879][T15940] dump_stack_lvl+0xe8/0x140 [ 218.760902][T15940] dump_stack+0x15/0x1b [ 218.760921][T15940] should_fail_ex+0x265/0x280 [ 218.760958][T15940] should_failslab+0x8c/0xb0 [ 218.760985][T15940] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 218.761018][T15940] ? __d_alloc+0x3d/0x350 [ 218.761061][T15940] __d_alloc+0x3d/0x350 [ 218.761091][T15940] d_alloc_parallel+0x53/0xc40 [ 218.761123][T15940] ? selinux_inode_permission+0x532/0x620 [ 218.761187][T15940] ? make_vfsuid+0x49/0xa0 [ 218.761213][T15940] ? lockref_get_not_dead+0x120/0x1c0 [ 218.761280][T15940] ? __rcu_read_unlock+0x4f/0x70 [ 218.761305][T15940] __lookup_slow+0x8c/0x250 [ 218.761339][T15940] lookup_slow+0x3c/0x60 [ 218.761371][T15940] walk_component+0x1ec/0x220 [ 218.761442][T15940] path_lookupat+0xfe/0x2a0 [ 218.761492][T15940] filename_lookup+0x147/0x340 [ 218.761582][T15940] vfs_statx+0x9d/0x390 [ 218.761613][T15940] __se_sys_newstat+0x69/0x280 [ 218.761650][T15940] ? fput+0x8f/0xc0 [ 218.761680][T15940] ? ksys_write+0x192/0x1a0 [ 218.761750][T15940] __x64_sys_newstat+0x31/0x40 [ 218.761780][T15940] x64_sys_call+0x781/0x2fb0 [ 218.761833][T15940] do_syscall_64+0xd2/0x200 [ 218.761923][T15940] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 218.762009][T15940] ? clear_bhb_loop+0x40/0x90 [ 218.762033][T15940] ? clear_bhb_loop+0x40/0x90 [ 218.762057][T15940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.762081][T15940] RIP: 0033:0x7fad7bb1e969 [ 218.762097][T15940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.762141][T15940] RSP: 002b:00007fad7a187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 218.762182][T15940] RAX: ffffffffffffffda RBX: 00007fad7bd45fa0 RCX: 00007fad7bb1e969 [ 218.762195][T15940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 218.762208][T15940] RBP: 00007fad7a187090 R08: 0000000000000000 R09: 0000000000000000 [ 218.762221][T15940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.762236][T15940] R13: 0000000000000000 R14: 00007fad7bd45fa0 R15: 00007ffc95737e58 [ 218.762256][T15940] [ 219.050349][ T30] audit: type=1326 audit(1749017751.439:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15936 comm="syz.5.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 219.153652][T15949] blktrace: Concurrent blktraces are not allowed on loop11 [ 219.218400][T15955] loop5: detected capacity change from 0 to 128 [ 219.225409][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3241'. [ 219.435575][T15962] netlink: 87 bytes leftover after parsing attributes in process `syz.5.3245'. [ 219.479558][T15962] netlink: 'syz.5.3245': attribute type 10 has an invalid length. [ 219.496953][T15962] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 219.585763][T15964] blktrace: Concurrent blktraces are not allowed on loop9 [ 219.667916][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3250'. [ 219.942131][T15981] loop8: detected capacity change from 0 to 128 [ 220.067952][T15983] blktrace: Concurrent blktraces are not allowed on loop17 [ 220.138754][T15987] loop8: detected capacity change from 0 to 8192 [ 220.431716][T15990] loop5: detected capacity change from 0 to 8192 [ 220.483147][T15992] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3257'. [ 220.644097][T16000] blktrace: Concurrent blktraces are not allowed on loop9 [ 220.746244][T16009] loop4: detected capacity change from 0 to 128 [ 220.796575][T16011] loop3: detected capacity change from 0 to 1024 [ 220.813122][T16011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.822449][T16011] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 220.834031][T16011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 220.844563][T16011] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3264: lblock 2 mapped to illegal pblock 2 (length 1) [ 220.907715][T16011] EXT4-fs (loop3): Remounting filesystem read-only [ 220.914542][T16011] EXT4-fs (loop3): 1 orphan inode deleted [ 220.920911][T16011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.965481][T16011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.097736][T16019] loop4: detected capacity change from 0 to 8192 [ 221.109707][T16021] loop2: detected capacity change from 0 to 8192 [ 221.129633][T16011] loop3: detected capacity change from 0 to 512 [ 221.154475][T16011] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3264: Failed to acquire dquot type 1 [ 221.175644][T16011] EXT4-fs (loop3): 1 truncate cleaned up [ 221.222633][T16011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.260891][T16011] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.280311][T16011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.084495][T16047] loop4: detected capacity change from 0 to 128 [ 222.136571][T16053] loop8: detected capacity change from 0 to 128 [ 222.210157][T16057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.219248][T16057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.287196][T16061] loop4: detected capacity change from 0 to 8192 [ 222.359186][T16067] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 222.365765][T16067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.373304][T16067] vhci_hcd vhci_hcd.0: Device attached [ 222.378906][T16065] loop3: detected capacity change from 0 to 8192 [ 222.395942][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3283'. [ 222.414007][T16067] loop8: detected capacity change from 0 to 1024 [ 222.422293][T16067] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 222.434828][T16068] vhci_hcd: connection closed [ 222.435176][ T12] vhci_hcd: stop threads [ 222.444147][ T12] vhci_hcd: release socket [ 222.448568][ T12] vhci_hcd: disconnect device [ 222.615092][T16075] blktrace: Concurrent blktraces are not allowed on loop11 [ 223.285374][T16089] loop4: detected capacity change from 0 to 128 [ 223.324872][T16093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 223.331508][T16093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.339045][T16093] vhci_hcd vhci_hcd.0: Device attached [ 223.353014][ T7062] usb 17-1: enqueue for inactive port 0 [ 223.353041][T16093] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 223.358785][ T7062] usb 17-1: enqueue for inactive port 0 [ 223.365142][T16093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.378309][T16093] vhci_hcd vhci_hcd.0: Device attached [ 223.388485][T16093] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 223.395160][T16093] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 223.402760][T16093] vhci_hcd vhci_hcd.0: Device attached [ 223.409919][T16093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.418923][T16093] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 223.425575][T16093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.433092][T16093] vhci_hcd vhci_hcd.0: Device attached [ 223.438675][ T7062] vhci_hcd: vhci_device speed not set [ 223.445330][T16093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(23) [ 223.452055][T16093] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 223.459729][T16093] vhci_hcd vhci_hcd.0: Device attached [ 223.467390][T16093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.476035][T16093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.484752][T16093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.494299][T16093] vhci_hcd vhci_hcd.0: port 0 already used [ 223.505448][T16103] vhci_hcd: connection closed [ 223.505808][ T41] vhci_hcd: stop threads [ 223.505834][T16099] vhci_hcd: connection closed [ 223.505974][T16101] vhci_hcd: connection closed [ 223.510553][ T41] vhci_hcd: release socket [ 223.527155][T16096] vhci_hcd: connection closed [ 223.528628][ T41] vhci_hcd: disconnect device [ 223.528911][T16094] vhci_hcd: connection closed [ 223.534941][ T41] vhci_hcd: stop threads [ 223.547065][ T41] vhci_hcd: release socket [ 223.551560][ T41] vhci_hcd: disconnect device [ 223.556735][ T41] vhci_hcd: stop threads [ 223.561005][ T41] vhci_hcd: release socket [ 223.565500][ T41] vhci_hcd: disconnect device [ 223.571373][ T41] vhci_hcd: stop threads [ 223.575762][ T41] vhci_hcd: release socket [ 223.580188][ T41] vhci_hcd: disconnect device [ 223.587095][ T30] kauditd_printk_skb: 480 callbacks suppressed [ 223.587107][ T30] audit: type=1326 audit(1749017756.419:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="syz.5.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 223.608270][T16114] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 223.616888][ T30] audit: type=1326 audit(1749017756.419:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="syz.5.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 223.623300][T16114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.623415][T16114] vhci_hcd vhci_hcd.0: Device attached [ 223.646768][ T30] audit: type=1326 audit(1749017756.419:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="syz.5.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 223.646808][ T30] audit: type=1326 audit(1749017756.419:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="syz.5.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 223.659252][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3296'. [ 223.659717][ T30] audit: type=1326 audit(1749017756.419:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="syz.5.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 223.683473][T16118] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3296'. [ 223.706584][ T30] audit: type=1326 audit(1749017756.419:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="syz.5.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 223.706617][ T30] audit: type=1326 audit(1749017756.419:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="syz.5.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 223.706647][ T30] audit: type=1326 audit(1749017756.419:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="syz.5.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 223.720200][ T41] vhci_hcd: stop threads [ 223.738963][ T30] audit: type=1326 audit(1749017756.419:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="syz.5.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 223.747976][ T41] vhci_hcd: release socket [ 223.747991][ T41] vhci_hcd: disconnect device [ 223.855570][ T30] audit: type=1326 audit(1749017756.419:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16111 comm="syz.5.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 223.865142][T16114] loop5: detected capacity change from 0 to 1024 [ 223.879578][ T9] usb 7-1: new low-speed USB device number 13 using vhci_hcd [ 223.886807][T16114] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 223.892879][ T9] usb 7-1: enqueue for inactive port 0 [ 223.892976][ T9] usb 7-1: enqueue for inactive port 0 [ 223.902827][ T1038] usb 11-1: new low-speed USB device number 5 using vhci_hcd [ 223.906686][ T9] usb 7-1: enqueue for inactive port 0 [ 223.929512][T16115] vhci_hcd: connection reset by peer [ 223.935284][ T7953] vhci_hcd: stop threads [ 223.939639][ T7953] vhci_hcd: release socket [ 223.944089][ T7953] vhci_hcd: disconnect device [ 224.002982][ T9] vhci_hcd: vhci_device speed not set [ 224.165995][T16121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3297'. [ 224.402747][T16131] loop4: detected capacity change from 0 to 2048 [ 224.433435][T16131] loop4: p1 < > p4 [ 224.441377][T16131] loop4: p4 size 8388608 extends beyond EOD, truncated [ 224.516058][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 224.519898][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 224.537320][T16134] loop5: detected capacity change from 0 to 8192 [ 224.620810][T16132] loop3: detected capacity change from 0 to 512 [ 224.657249][T16132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.669979][T16132] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.909338][T16143] loop4: detected capacity change from 0 to 128 [ 225.146823][T16153] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 225.153514][T16153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.161141][T16153] vhci_hcd vhci_hcd.0: Device attached [ 225.173003][T16153] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 225.179725][T16153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.187298][T16153] vhci_hcd vhci_hcd.0: Device attached [ 225.195229][T16158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.203760][T16158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.225666][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.245533][T16153] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 225.247330][T16162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3308'. [ 225.252140][T16153] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 225.268751][T16153] vhci_hcd vhci_hcd.0: Device attached [ 225.294299][T16153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.318605][T16153] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 225.325233][T16153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.332966][T16153] vhci_hcd vhci_hcd.0: Device attached [ 225.347715][T16153] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(23) [ 225.354350][T16153] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 225.362198][T16153] vhci_hcd vhci_hcd.0: Device attached [ 225.372549][T16153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.383772][T16153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.392322][T16153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.413117][T16153] vhci_hcd vhci_hcd.0: port 0 already used [ 225.417533][ T7062] usb 5-1: new low-speed USB device number 8 using vhci_hcd [ 225.425041][T16165] vhci_hcd: connection closed [ 225.426244][T16167] vhci_hcd: connection closed [ 225.431135][ T48] vhci_hcd: stop threads [ 225.440164][ T48] vhci_hcd: release socket [ 225.444618][ T48] vhci_hcd: disconnect device [ 225.450362][T16160] vhci_hcd: connection closed [ 225.450586][T16154] vhci_hcd: connection reset by peer [ 225.452840][T16156] vhci_hcd: connection closed [ 225.460656][ T48] vhci_hcd: stop threads [ 225.469714][ T48] vhci_hcd: release socket [ 225.474158][ T48] vhci_hcd: disconnect device [ 225.480026][ T48] vhci_hcd: stop threads [ 225.484339][ T48] vhci_hcd: release socket [ 225.488799][ T48] vhci_hcd: disconnect device [ 225.493904][ T48] vhci_hcd: stop threads [ 225.498160][ T48] vhci_hcd: release socket [ 225.502586][ T48] vhci_hcd: disconnect device [ 225.507609][ T48] vhci_hcd: stop threads [ 225.511898][ T48] vhci_hcd: release socket [ 225.516431][ T48] vhci_hcd: disconnect device [ 225.773970][T16187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.782499][T16187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.987935][T16191] loop8: detected capacity change from 0 to 128 [ 226.100740][T16200] Cannot find add_set index 1 as target [ 226.161199][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.169798][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.442645][T16206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16206 comm=syz.5.3319 [ 226.573912][T16214] loop5: detected capacity change from 0 to 8192 [ 227.255412][T16224] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 227.262136][T16224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.269730][T16224] vhci_hcd vhci_hcd.0: Device attached [ 227.277068][T16224] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(13) [ 227.283902][T16224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.291496][T16224] vhci_hcd vhci_hcd.0: Device attached [ 227.298265][T16224] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(16) [ 227.304878][T16224] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 227.312517][T16224] vhci_hcd vhci_hcd.0: Device attached [ 227.318433][T16224] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.327341][T16224] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(21) [ 227.333956][T16224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.341625][T16224] vhci_hcd vhci_hcd.0: Device attached [ 227.348560][T16224] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(23) [ 227.355239][T16224] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 227.363031][T16224] vhci_hcd vhci_hcd.0: Device attached [ 227.369687][T16224] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.378549][T16224] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.387333][T16224] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 227.401107][T16224] vhci_hcd vhci_hcd.0: port 0 already used [ 227.412971][T16233] vhci_hcd: connection closed [ 227.413101][ T41] vhci_hcd: stop threads [ 227.413144][T16231] vhci_hcd: connection closed [ 227.417893][ T41] vhci_hcd: release socket [ 227.422453][T16229] vhci_hcd: connection closed [ 227.426797][ T41] vhci_hcd: disconnect device [ 227.427344][T16227] vhci_hcd: connection closed [ 227.440969][ T41] vhci_hcd: stop threads [ 227.449997][ T41] vhci_hcd: release socket [ 227.454480][ T41] vhci_hcd: disconnect device [ 227.461666][T16225] vhci_hcd: connection closed [ 227.462848][ T41] vhci_hcd: stop threads [ 227.471841][ T41] vhci_hcd: release socket [ 227.476331][ T41] vhci_hcd: disconnect device [ 227.483050][ T41] vhci_hcd: stop threads [ 227.487304][ T41] vhci_hcd: release socket [ 227.491745][ T41] vhci_hcd: disconnect device [ 227.497951][ T41] vhci_hcd: stop threads [ 227.502195][ T41] vhci_hcd: release socket [ 227.506725][ T41] vhci_hcd: disconnect device [ 227.532846][ T7937] usb 17-1: new low-speed USB device number 3 using vhci_hcd [ 227.540330][ T7937] usb 17-1: enqueue for inactive port 0 [ 227.546129][ T7937] usb 17-1: enqueue for inactive port 0 [ 227.551699][ T7937] usb 17-1: enqueue for inactive port 0 [ 227.622984][ T7937] vhci_hcd: vhci_device speed not set [ 227.981962][T16244] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 227.988540][T16244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.996054][T16244] vhci_hcd vhci_hcd.0: Device attached [ 228.003450][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3328'. [ 228.012453][T16244] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3328'. [ 228.026103][T16244] loop8: detected capacity change from 0 to 1024 [ 228.032809][T16244] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 228.041814][T16245] vhci_hcd: connection closed [ 228.042080][ T12] vhci_hcd: stop threads [ 228.051041][ T12] vhci_hcd: release socket [ 228.055518][ T12] vhci_hcd: disconnect device [ 228.492253][T16251] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 228.595647][T16253] blktrace: Concurrent blktraces are not allowed on loop11 [ 228.735993][T16268] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 228.742874][T16268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.750511][T16268] vhci_hcd vhci_hcd.0: Device attached [ 228.759591][T16268] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 228.766211][T16268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.773876][T16268] vhci_hcd vhci_hcd.0: Device attached [ 228.780423][T16268] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 228.787049][T16268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 228.794703][T16268] vhci_hcd vhci_hcd.0: Device attached [ 228.801005][T16268] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.810081][T16268] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 228.816696][T16268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.824543][T16268] vhci_hcd vhci_hcd.0: Device attached [ 228.831920][T16268] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(23) [ 228.838541][T16268] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 228.846237][T16268] vhci_hcd vhci_hcd.0: Device attached [ 228.852585][T16268] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.861023][T16263] blktrace: Concurrent blktraces are not allowed on loop11 [ 228.861388][T16268] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.878832][T16268] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.879147][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.896392][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.904494][T16268] vhci_hcd vhci_hcd.0: port 0 already used [ 228.917863][T16280] vhci_hcd: connection closed [ 228.917991][ T41] vhci_hcd: stop threads [ 228.918167][T16277] vhci_hcd: connection closed [ 228.922763][ T41] vhci_hcd: release socket [ 228.922815][ T41] vhci_hcd: disconnect device [ 228.927427][T16275] vhci_hcd: connection closed [ 228.941117][T16271] vhci_hcd: connection closed [ 228.945892][ T41] vhci_hcd: stop threads [ 228.954860][ T41] vhci_hcd: release socket [ 228.959365][ T41] vhci_hcd: disconnect device [ 228.961880][T16269] vhci_hcd: connection closed [ 228.964297][ T1038] usb 11-1: enqueue for inactive port 0 [ 228.974947][ T1038] usb 11-1: enqueue for inactive port 0 [ 228.982541][ T41] vhci_hcd: stop threads [ 228.986866][ T41] vhci_hcd: release socket [ 228.991279][ T41] vhci_hcd: disconnect device [ 228.996654][ T41] vhci_hcd: stop threads [ 229.000895][ T41] vhci_hcd: release socket [ 229.005528][ T41] vhci_hcd: disconnect device [ 229.010330][ T3394] usb 7-1: new low-speed USB device number 14 using vhci_hcd [ 229.018037][ T41] vhci_hcd: stop threads [ 229.022364][ T41] vhci_hcd: release socket [ 229.026827][ T41] vhci_hcd: disconnect device [ 229.034912][T16289] loop4: detected capacity change from 0 to 512 [ 229.043155][ T1038] vhci_hcd: vhci_device speed not set [ 229.048232][T16289] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 229.057031][T16289] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 229.065513][T16289] EXT4-fs (loop4): 1 truncate cleaned up [ 229.074930][T16289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.100903][T16294] loop2: detected capacity change from 0 to 512 [ 229.118500][T16294] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 229.127414][ T8077] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.139837][T16294] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 229.156218][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 229.156232][ T30] audit: type=1326 audit(1749017761.999:9965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.5.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7fc00000 [ 229.188005][T16294] EXT4-fs (loop2): 1 truncate cleaned up [ 229.196408][T16294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.204823][T16298] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 229.215413][T16298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 229.222984][T16298] vhci_hcd vhci_hcd.0: Device attached [ 229.230484][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3343'. [ 229.239706][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3343'. [ 229.255221][T16298] loop4: detected capacity change from 0 to 1024 [ 229.265705][T16298] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 229.266847][ T8334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.284122][T16299] vhci_hcd: connection closed [ 229.284837][ T56] vhci_hcd: stop threads [ 229.293889][ T56] vhci_hcd: release socket [ 229.298314][ T56] vhci_hcd: disconnect device [ 229.326269][T16304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 229.332814][T16304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 229.340422][T16304] vhci_hcd vhci_hcd.0: Device attached [ 229.348557][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'. [ 229.361263][T16304] loop2: detected capacity change from 0 to 1024 [ 229.367897][T16304] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 229.378603][T16305] vhci_hcd: connection closed [ 229.378643][ T41] vhci_hcd: stop threads [ 229.387611][ T41] vhci_hcd: release socket [ 229.392033][ T41] vhci_hcd: disconnect device [ 229.797924][ T30] audit: type=1326 audit(1749017762.639:9966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.5.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad7babab39 code=0x7fc00000 [ 229.824329][T16312] FAULT_INJECTION: forcing a failure. [ 229.824329][T16312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.837566][T16312] CPU: 0 UID: 0 PID: 16312 Comm: syz.4.3348 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 229.837676][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.837687][T16312] Call Trace: [ 229.837692][T16312] [ 229.837699][T16312] __dump_stack+0x1d/0x30 [ 229.837718][T16312] dump_stack_lvl+0xe8/0x140 [ 229.837736][T16312] dump_stack+0x15/0x1b [ 229.837778][T16312] should_fail_ex+0x265/0x280 [ 229.837796][T16312] should_fail+0xb/0x20 [ 229.837811][T16312] should_fail_usercopy+0x1a/0x20 [ 229.837832][T16312] _copy_from_user+0x1c/0xb0 [ 229.837878][T16312] do_sock_getsockopt+0xf1/0x240 [ 229.837906][T16312] __x64_sys_getsockopt+0x11e/0x1a0 [ 229.837997][T16312] x64_sys_call+0x12aa/0x2fb0 [ 229.838016][T16312] do_syscall_64+0xd2/0x200 [ 229.838103][T16312] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 229.838128][T16312] ? clear_bhb_loop+0x40/0x90 [ 229.838162][T16312] ? clear_bhb_loop+0x40/0x90 [ 229.838220][T16312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.838239][T16312] RIP: 0033:0x7fde7405e969 [ 229.838253][T16312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.838269][T16312] RSP: 002b:00007fde726c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 229.838286][T16312] RAX: ffffffffffffffda RBX: 00007fde74285fa0 RCX: 00007fde7405e969 [ 229.838326][T16312] RDX: 000000000000005d RSI: 0000000000000001 RDI: 0000000000000003 [ 229.838338][T16312] RBP: 00007fde726c7090 R08: 00002000000003c0 R09: 0000000000000000 [ 229.838350][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.838362][T16312] R13: 0000000000000000 R14: 00007fde74285fa0 R15: 00007ffece6b1178 [ 229.838398][T16312] [ 230.122465][T16316] blktrace: Concurrent blktraces are not allowed on loop11 [ 230.170278][ T30] audit: type=1326 audit(1749017763.009:9967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 230.193927][ T30] audit: type=1326 audit(1749017763.009:9968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 230.217607][ T30] audit: type=1326 audit(1749017763.009:9969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 230.221449][T16327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.241122][ T30] audit: type=1326 audit(1749017763.009:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 230.256588][T16327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.272948][ T30] audit: type=1326 audit(1749017763.009:9971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 230.304057][ T30] audit: type=1326 audit(1749017763.009:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 230.327606][ T30] audit: type=1326 audit(1749017763.009:9973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 230.351123][ T30] audit: type=1326 audit(1749017763.009:9974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.5.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fad7bb1e969 code=0x7ffc0000 [ 230.409241][T16333] loop3: detected capacity change from 0 to 128 [ 230.472833][ T7062] usb 5-1: enqueue for inactive port 0 [ 230.478416][ T7062] usb 5-1: enqueue for inactive port 0 [ 230.553214][ T7062] vhci_hcd: vhci_device speed not set [ 230.570078][T16336] blktrace: Concurrent blktraces are not allowed on loop7 [ 230.710193][T16340] blktrace: Concurrent blktraces are not allowed on loop7 [ 231.061485][T16360] loop5: detected capacity change from 0 to 1024 [ 231.074260][T16360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.086549][T16360] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.101172][T16360] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 231.116188][T16360] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 231.128609][T16360] EXT4-fs (loop5): This should not happen!! Data will be lost [ 231.128609][T16360] [ 231.138313][T16360] EXT4-fs (loop5): Total free blocks count 0 [ 231.144387][T16360] EXT4-fs (loop5): Free/Dirty block details [ 231.150353][T16360] EXT4-fs (loop5): free_blocks=4293918720 [ 231.152420][ T7937] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 231.156207][T16360] EXT4-fs (loop5): dirty_blocks=64 [ 231.168785][T16360] EXT4-fs (loop5): Block reservation details [ 231.174815][T16360] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 231.177631][ T7937] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 231.210160][ T8299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.220094][T16364] fido_id[16364]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.292151][T16366] blktrace: Concurrent blktraces are not allowed on loop11 [ 231.864779][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 231.873855][T16411] loop8: detected capacity change from 0 to 8192 [ 231.955814][T16416] blktrace: Concurrent blktraces are not allowed on loop9 [ 232.022032][T16423] FAULT_INJECTION: forcing a failure. [ 232.022032][T16423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.035266][T16423] CPU: 0 UID: 0 PID: 16423 Comm: syz.4.3383 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 232.035330][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.035347][T16423] Call Trace: [ 232.035354][T16423] [ 232.035363][T16423] __dump_stack+0x1d/0x30 [ 232.035389][T16423] dump_stack_lvl+0xe8/0x140 [ 232.035415][T16423] dump_stack+0x15/0x1b [ 232.035506][T16423] should_fail_ex+0x265/0x280 [ 232.035527][T16423] should_fail+0xb/0x20 [ 232.035544][T16423] should_fail_usercopy+0x1a/0x20 [ 232.035572][T16423] _copy_from_user+0x1c/0xb0 [ 232.035604][T16423] ___sys_sendmsg+0xc1/0x1d0 [ 232.035702][T16423] __x64_sys_sendmsg+0xd4/0x160 [ 232.035820][T16423] x64_sys_call+0x2999/0x2fb0 [ 232.035845][T16423] do_syscall_64+0xd2/0x200 [ 232.035899][T16423] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 232.035933][T16423] ? clear_bhb_loop+0x40/0x90 [ 232.035960][T16423] ? clear_bhb_loop+0x40/0x90 [ 232.035999][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.036045][T16423] RIP: 0033:0x7fde7405e969 [ 232.036060][T16423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.036078][T16423] RSP: 002b:00007fde726c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.036243][T16423] RAX: ffffffffffffffda RBX: 00007fde74285fa0 RCX: 00007fde7405e969 [ 232.036256][T16423] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 232.036269][T16423] RBP: 00007fde726c7090 R08: 0000000000000000 R09: 0000000000000000 [ 232.036285][T16423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.036300][T16423] R13: 0000000000000000 R14: 00007fde74285fa0 R15: 00007ffece6b1178 [ 232.036355][T16423] [ 232.324180][T16434] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3387'. [ 232.335951][T16436] loop4: detected capacity change from 0 to 128 [ 232.342656][T16436] EXT4-fs: Ignoring removed nobh option [ 232.351944][T16436] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.374376][T16436] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.403136][ T8077] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.546978][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.556493][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.841048][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3392'. [ 232.859815][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3392'. [ 232.997925][T16463] blktrace: Concurrent blktraces are not allowed on loop17 [ 233.035358][T16465] loop8: detected capacity change from 0 to 2048 [ 233.054417][T16465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 233.177472][T16469] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 233.194037][T16469] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1888 with error 28 [ 233.206513][T16469] EXT4-fs (loop8): This should not happen!! Data will be lost [ 233.206513][T16469] [ 233.216246][T16469] EXT4-fs (loop8): Total free blocks count 0 [ 233.222225][T16469] EXT4-fs (loop8): Free/Dirty block details [ 233.228245][T16469] EXT4-fs (loop8): free_blocks=2415919104 [ 233.234045][T16469] EXT4-fs (loop8): dirty_blocks=1904 [ 233.239407][T16469] EXT4-fs (loop8): Block reservation details [ 233.245531][T16469] EXT4-fs (loop8): i_reserved_data_blocks=119 [ 233.264775][T16474] netlink: 'syz.2.3395': attribute type 10 has an invalid length. [ 233.272631][T16474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3395'. [ 233.282150][T16473] netlink: 'syz.2.3395': attribute type 10 has an invalid length. [ 233.290022][T16473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3395'. [ 233.300326][T16474] dummy0: entered promiscuous mode [ 233.306476][T16474] bridge0: port 3(dummy0) entered blocking state [ 233.312940][T16474] bridge0: port 3(dummy0) entered disabled state [ 233.319767][T16474] dummy0: entered allmulticast mode [ 233.338653][T16465] EXT4-fs error (device loop8): ext4_lookup:1787: inode #16: comm +}[@: iget: bad i_size value: 8796093031208 [ 233.418513][ T41] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 233.578639][T16486] loop5: detected capacity change from 0 to 1024 [ 233.619149][T16486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.685097][ T8299] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.777625][T16499] loop8: detected capacity change from 0 to 128 [ 233.788868][T16502] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 233.795494][T16502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.803013][T16502] vhci_hcd vhci_hcd.0: Device attached [ 233.813987][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 233.839034][T16502] loop3: detected capacity change from 0 to 1024 [ 233.845731][T16502] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 233.855369][T16504] vhci_hcd: connection reset by peer [ 233.861416][ T56] vhci_hcd: stop threads [ 233.865709][ T56] vhci_hcd: release socket [ 233.870157][ T56] vhci_hcd: disconnect device [ 233.896562][T16508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.905195][T16508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.051736][T16513] loop8: detected capacity change from 0 to 1024 [ 234.069721][T16516] blktrace: Concurrent blktraces are not allowed on loop5 [ 234.077161][ T3394] usb 7-1: enqueue for inactive port 0 [ 234.082708][ T3394] usb 7-1: enqueue for inactive port 0 [ 234.085379][T16513] 9pnet: Could not find request transport:  [ 234.138435][T16522] FAULT_INJECTION: forcing a failure. [ 234.138435][T16522] name failslab, interval 1, probability 0, space 0, times 0 [ 234.151226][T16522] CPU: 1 UID: 0 PID: 16522 Comm: syz.8.3411 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 234.151249][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.151261][T16522] Call Trace: [ 234.151287][T16522] [ 234.151295][T16522] __dump_stack+0x1d/0x30 [ 234.151317][T16522] dump_stack_lvl+0xe8/0x140 [ 234.151372][T16522] dump_stack+0x15/0x1b [ 234.151391][T16522] should_fail_ex+0x265/0x280 [ 234.151413][T16522] should_failslab+0x8c/0xb0 [ 234.151529][T16522] kmem_cache_alloc_noprof+0x50/0x310 [ 234.151552][T16522] ? getname_flags+0x80/0x3b0 [ 234.151618][T16522] getname_flags+0x80/0x3b0 [ 234.151775][T16522] user_path_at+0x28/0x130 [ 234.151808][T16522] do_utimes+0xd9/0x210 [ 234.151826][T16522] __x64_sys_utime+0xbc/0x140 [ 234.151905][T16522] x64_sys_call+0x2e1c/0x2fb0 [ 234.151929][T16522] do_syscall_64+0xd2/0x200 [ 234.151959][T16522] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.151981][T16522] ? clear_bhb_loop+0x40/0x90 [ 234.152067][T16522] ? clear_bhb_loop+0x40/0x90 [ 234.152132][T16522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.152151][T16522] RIP: 0033:0x7fc832d3e969 [ 234.152166][T16522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.152233][T16522] RSP: 002b:00007fc8313a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 234.152249][T16522] RAX: ffffffffffffffda RBX: 00007fc832f65fa0 RCX: 00007fc832d3e969 [ 234.152339][T16522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 234.152350][T16522] RBP: 00007fc8313a7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.152360][T16522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.152371][T16522] R13: 0000000000000000 R14: 00007fc832f65fa0 R15: 00007ffdac55acd8 [ 234.152387][T16522] [ 234.355100][ T3394] vhci_hcd: vhci_device speed not set [ 234.357623][ T30] kauditd_printk_skb: 300 callbacks suppressed [ 234.357637][ T30] audit: type=1400 audit(1749017767.199:10275): avc: denied { unmount } for pid=13091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 234.452401][T16530] loop2: detected capacity change from 0 to 8192 [ 234.577439][ T30] audit: type=1326 audit(1749017767.419:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16535 comm="syz.8.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc832d3e969 code=0x7ffc0000 [ 234.607556][ T30] audit: type=1326 audit(1749017767.449:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16535 comm="syz.8.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc832d3e969 code=0x7ffc0000 [ 234.631171][ T30] audit: type=1326 audit(1749017767.449:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16535 comm="syz.8.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc832d3e969 code=0x7ffc0000 [ 234.654800][ T30] audit: type=1326 audit(1749017767.449:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16535 comm="syz.8.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc832d3e969 code=0x7ffc0000 [ 234.678440][ T30] audit: type=1326 audit(1749017767.449:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16535 comm="syz.8.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc832d3e969 code=0x7ffc0000 [ 234.702007][ T30] audit: type=1326 audit(1749017767.449:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16535 comm="syz.8.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc832d3e969 code=0x7ffc0000 [ 234.725637][ T30] audit: type=1326 audit(1749017767.449:10282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16535 comm="syz.8.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc832d3e969 code=0x7ffc0000 [ 234.749208][ T30] audit: type=1326 audit(1749017767.449:10283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16535 comm="syz.8.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc832d3e969 code=0x7ffc0000 [ 234.772759][ T30] audit: type=1326 audit(1749017767.449:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16535 comm="syz.8.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc832d3e969 code=0x7ffc0000 [ 234.808349][T16538] loop3: detected capacity change from 0 to 512 [ 234.820245][T16538] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 234.830942][T16538] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 234.839456][T16538] EXT4-fs (loop3): 1 truncate cleaned up [ 234.845653][T16538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.872978][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.926036][T16549] FAULT_INJECTION: forcing a failure. [ 234.926036][T16549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.939285][T16549] CPU: 1 UID: 0 PID: 16549 Comm: syz.3.3419 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 234.939308][T16549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.939317][T16549] Call Trace: [ 234.939322][T16549] [ 234.939327][T16549] __dump_stack+0x1d/0x30 [ 234.939427][T16549] dump_stack_lvl+0xe8/0x140 [ 234.939477][T16549] dump_stack+0x15/0x1b [ 234.939496][T16549] should_fail_ex+0x265/0x280 [ 234.939518][T16549] should_fail+0xb/0x20 [ 234.939536][T16549] should_fail_usercopy+0x1a/0x20 [ 234.939555][T16549] _copy_from_user+0x1c/0xb0 [ 234.939579][T16549] ___sys_sendmsg+0xc1/0x1d0 [ 234.939679][T16549] __x64_sys_sendmsg+0xd4/0x160 [ 234.939753][T16549] x64_sys_call+0x2999/0x2fb0 [ 234.939810][T16549] do_syscall_64+0xd2/0x200 [ 234.939842][T16549] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.939871][T16549] ? clear_bhb_loop+0x40/0x90 [ 234.939915][T16549] ? clear_bhb_loop+0x40/0x90 [ 234.939940][T16549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.939958][T16549] RIP: 0033:0x7f2c56c9e969 [ 234.939974][T16549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.940060][T16549] RSP: 002b:00007f2c55307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.940077][T16549] RAX: ffffffffffffffda RBX: 00007f2c56ec5fa0 RCX: 00007f2c56c9e969 [ 234.940087][T16549] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 234.940099][T16549] RBP: 00007f2c55307090 R08: 0000000000000000 R09: 0000000000000000 [ 234.940112][T16549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.940186][T16549] R13: 0000000000000000 R14: 00007f2c56ec5fa0 R15: 00007ffe2b112c28 [ 234.940202][T16549] [ 235.400110][T16566] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 235.406655][T16566] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.414341][T16566] vhci_hcd vhci_hcd.0: Device attached [ 235.421783][T16566] __nla_validate_parse: 1 callbacks suppressed [ 235.421793][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3426'. [ 235.446890][T16566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3426'. [ 235.474251][T16566] loop3: detected capacity change from 0 to 1024 [ 235.491879][T16571] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3428'. [ 235.503982][T16574] loop2: detected capacity change from 0 to 128 [ 235.511783][T16566] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 235.521687][T16574] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.542996][T16567] vhci_hcd: connection closed [ 235.545452][ T7953] vhci_hcd: stop threads [ 235.554414][ T7953] vhci_hcd: release socket [ 235.558844][ T7953] vhci_hcd: disconnect device [ 235.573172][T16574] ext4 filesystem being mounted at /279/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.635540][ T8334] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.663745][T16586] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3434'. [ 235.699375][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3431'. [ 235.701195][T16591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3435'. [ 235.782115][T16591] loop2: detected capacity change from 0 to 1024 [ 235.790304][T16591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.800540][T16591] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 235.811954][T16591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 235.820868][T16591] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.3435: lblock 2 mapped to illegal pblock 2 (length 1) [ 235.835518][T16591] EXT4-fs (loop2): Remounting filesystem read-only [ 235.842193][T16591] EXT4-fs (loop2): 1 orphan inode deleted [ 235.848417][T16591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.861005][T16591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.066614][T16606] loop3: detected capacity change from 0 to 512 [ 236.073587][T16606] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 236.082013][T16606] EXT4-fs (loop3): invalid journal inode [ 236.088496][T16606] EXT4-fs (loop3): can't get journal size [ 236.095179][T16606] EXT4-fs (loop3): 1 truncate cleaned up [ 236.101327][T16606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.114539][T16606] FAULT_INJECTION: forcing a failure. [ 236.114539][T16606] name failslab, interval 1, probability 0, space 0, times 0 [ 236.127272][T16606] CPU: 0 UID: 0 PID: 16606 Comm: syz.3.3439 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 236.127356][T16606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.127369][T16606] Call Trace: [ 236.127375][T16606] [ 236.127381][T16606] __dump_stack+0x1d/0x30 [ 236.127427][T16606] dump_stack_lvl+0xe8/0x140 [ 236.127443][T16606] dump_stack+0x15/0x1b [ 236.127459][T16606] should_fail_ex+0x265/0x280 [ 236.127481][T16606] should_failslab+0x8c/0xb0 [ 236.127506][T16606] kmem_cache_alloc_noprof+0x50/0x310 [ 236.127599][T16606] ? getname_flags+0x80/0x3b0 [ 236.127680][T16606] getname_flags+0x80/0x3b0 [ 236.127735][T16606] __x64_sys_rmdir+0x21/0x40 [ 236.127751][T16606] x64_sys_call+0x2ae3/0x2fb0 [ 236.127772][T16606] do_syscall_64+0xd2/0x200 [ 236.127867][T16606] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 236.127896][T16606] ? clear_bhb_loop+0x40/0x90 [ 236.127950][T16606] ? clear_bhb_loop+0x40/0x90 [ 236.127974][T16606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.127997][T16606] RIP: 0033:0x7f2c56c9e969 [ 236.128010][T16606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.128024][T16606] RSP: 002b:00007f2c55307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 236.128043][T16606] RAX: ffffffffffffffda RBX: 00007f2c56ec5fa0 RCX: 00007f2c56c9e969 [ 236.128064][T16606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 236.128078][T16606] RBP: 00007f2c55307090 R08: 0000000000000000 R09: 0000000000000000 [ 236.128092][T16606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.128103][T16606] R13: 0000000000000000 R14: 00007f2c56ec5fa0 R15: 00007ffe2b112c28 [ 236.128118][T16606] [ 236.312187][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.394272][T16609] blktrace: Concurrent blktraces are not allowed on loop7 [ 236.470792][T16617] loop3: detected capacity change from 0 to 512 [ 236.488385][T16617] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 236.496604][T16617] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 236.507339][T16617] EXT4-fs (loop3): 1 truncate cleaned up [ 236.513420][T16617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.542173][ T8257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.544568][T16624] FAULT_INJECTION: forcing a failure. [ 236.544568][T16624] name failslab, interval 1, probability 0, space 0, times 0 [ 236.563825][T16624] CPU: 1 UID: 0 PID: 16624 Comm: +}[@ Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 236.563857][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.563871][T16624] Call Trace: [ 236.563878][T16624] [ 236.563886][T16624] __dump_stack+0x1d/0x30 [ 236.563909][T16624] dump_stack_lvl+0xe8/0x140 [ 236.563938][T16624] dump_stack+0x15/0x1b [ 236.564030][T16624] should_fail_ex+0x265/0x280 [ 236.564054][T16624] should_failslab+0x8c/0xb0 [ 236.564151][T16624] kmem_cache_alloc_noprof+0x50/0x310 [ 236.564174][T16624] ? audit_log_start+0x365/0x6c0 [ 236.564222][T16624] audit_log_start+0x365/0x6c0 [ 236.564251][T16624] audit_seccomp+0x48/0x100 [ 236.564274][T16624] ? __seccomp_filter+0x68c/0x10d0 [ 236.564472][T16624] __seccomp_filter+0x69d/0x10d0 [ 236.564494][T16624] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 236.564514][T16624] ? vfs_write+0x75e/0x8e0 [ 236.564530][T16624] ? __rcu_read_unlock+0x4f/0x70 [ 236.564561][T16624] ? __fget_files+0x184/0x1c0 [ 236.564584][T16624] __secure_computing+0x82/0x150 [ 236.564678][T16624] syscall_trace_enter+0xcf/0x1e0 [ 236.564699][T16624] do_syscall_64+0xac/0x200 [ 236.564796][T16624] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 236.564818][T16624] ? clear_bhb_loop+0x40/0x90 [ 236.564836][T16624] ? clear_bhb_loop+0x40/0x90 [ 236.564909][T16624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.564927][T16624] RIP: 0033:0x7fc832d3e969 [ 236.564939][T16624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.565023][T16624] RSP: 002b:00007fc8313a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f5 [ 236.565041][T16624] RAX: ffffffffffffffda RBX: 00007fc832f65fa0 RCX: 00007fc832d3e969 [ 236.565056][T16624] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 236.565071][T16624] RBP: 00007fc8313a7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.565085][T16624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.565165][T16624] R13: 0000000000000000 R14: 00007fc832f65fa0 R15: 00007ffdac55acd8 [ 236.565253][T16624] [ 236.826615][T16632] FAULT_INJECTION: forcing a failure. [ 236.826615][T16632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.839874][T16632] CPU: 1 UID: 0 PID: 16632 Comm: syz.8.3451 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 236.839897][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.839909][T16632] Call Trace: [ 236.839915][T16632] [ 236.839922][T16632] __dump_stack+0x1d/0x30 [ 236.839962][T16632] dump_stack_lvl+0xe8/0x140 [ 236.839979][T16632] dump_stack+0x15/0x1b [ 236.839998][T16632] should_fail_ex+0x265/0x280 [ 236.840038][T16632] should_fail+0xb/0x20 [ 236.840120][T16632] should_fail_usercopy+0x1a/0x20 [ 236.840144][T16632] _copy_from_user+0x1c/0xb0 [ 236.840215][T16632] ___sys_recvmsg+0xaa/0x370 [ 236.840248][T16632] ? _parse_integer+0x27/0x40 [ 236.840338][T16632] do_recvmmsg+0x1ef/0x540 [ 236.840377][T16632] ? fput+0x8f/0xc0 [ 236.840436][T16632] __x64_sys_recvmmsg+0xe5/0x170 [ 236.840466][T16632] x64_sys_call+0x1c6a/0x2fb0 [ 236.840489][T16632] do_syscall_64+0xd2/0x200 [ 236.840517][T16632] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 236.840621][T16632] ? clear_bhb_loop+0x40/0x90 [ 236.840641][T16632] ? clear_bhb_loop+0x40/0x90 [ 236.840667][T16632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.840713][T16632] RIP: 0033:0x7fc832d3e969 [ 236.840730][T16632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.840756][T16632] RSP: 002b:00007fc8313a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 236.840774][T16632] RAX: ffffffffffffffda RBX: 00007fc832f65fa0 RCX: 00007fc832d3e969 [ 236.840786][T16632] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000004 [ 236.840797][T16632] RBP: 00007fc8313a7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.840810][T16632] R10: 0000000000012140 R11: 0000000000000246 R12: 0000000000000001 [ 236.840866][T16632] R13: 0000000000000000 R14: 00007fc832f65fa0 R15: 00007ffdac55acd8 [ 236.840882][T16632] [ 237.042622][T16628] loop3: detected capacity change from 0 to 8192 [ 237.341581][ T3392] IPVS: starting estimator thread 0... [ 237.385183][T16661] blktrace: Concurrent blktraces are not allowed on loop9 [ 237.432991][T16660] IPVS: using max 2064 ests per chain, 103200 per kthread [ 237.544264][ T48] ================================================================== [ 237.552388][ T48] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 237.560629][ T48] [ 237.562946][ T48] write to 0xffff88812692391c of 2 bytes by task 16628 on cpu 1: [ 237.570678][ T48] fat16_ent_put+0x28/0x60 [ 237.575097][ T48] fat_alloc_clusters+0x4ce/0xa80 [ 237.580119][ T48] fat_get_block+0x258/0x5e0 [ 237.584714][ T48] __block_write_begin_int+0x400/0xf90 [ 237.590177][ T48] cont_write_begin+0x5fc/0x970 [ 237.595025][ T48] fat_write_begin+0x4f/0xe0 [ 237.599643][ T48] generic_perform_write+0x181/0x490 [ 237.604928][ T48] __generic_file_write_iter+0x9e/0x120 [ 237.610470][ T48] generic_file_write_iter+0x8d/0x2f0 [ 237.615837][ T48] vfs_write+0x4a0/0x8e0 [ 237.620080][ T48] ksys_write+0xda/0x1a0 [ 237.624365][ T48] __x64_sys_write+0x40/0x50 [ 237.628951][ T48] x64_sys_call+0x2cdd/0x2fb0 [ 237.633624][ T48] do_syscall_64+0xd2/0x200 [ 237.638146][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.644030][ T48] [ 237.646362][ T48] read to 0xffff888126923800 of 512 bytes by task 48 on cpu 0: [ 237.653890][ T48] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 237.659793][ T48] generic_perform_write+0x2c2/0x490 [ 237.665082][ T48] shmem_file_write_iter+0xc5/0xf0 [ 237.670210][ T48] lo_rw_aio+0x5fa/0x7c0 [ 237.674449][ T48] loop_process_work+0x52d/0xa60 [ 237.679386][ T48] loop_workfn+0x31/0x40 [ 237.683619][ T48] process_scheduled_works+0x4cb/0x9d0 [ 237.689110][ T48] worker_thread+0x582/0x770 [ 237.693803][ T48] kthread+0x486/0x510 [ 237.697874][ T48] ret_from_fork+0xda/0x150 [ 237.702366][ T48] ret_from_fork_asm+0x1a/0x30 [ 237.707120][ T48] [ 237.709431][ T48] Reported by Kernel Concurrency Sanitizer on: [ 237.715593][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 237.727657][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.737708][ T48] Workqueue: loop3 loop_workfn [ 237.742480][ T48] ================================================================== [ 237.756587][T16673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.767102][T16673] misc raw-gadget: fail, usb_gadget_register_driver returned -16