last executing test programs: 4m15.604288881s ago: executing program 0 (id=1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_getres(0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r4 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="00000000000000000010", @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd5, 0xfffffff9, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x8) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000440)="c9eaa76e94ab46544a4b9af678a852d805d78dde07b38b9b13a0ddc6730dafef145fa7861488c1e5b2c4aebb5df5c388db1aac476a6d9067df2fd9e331336efbcc62f9f6560b1b5b3a293065d25ea5b6919fb60cb606c5d4b72fe9a8c691fe3892e78b2bb33d22199ca180e1341fb049aed6f1b26d8b4b97e2779c4f301be3cfa5a3b7ec714123453a281e69aed8b67ff21fa80eace8b29bff7e9532bdca6ab47245746f8a90d2d74c0812150db8ca428a9ec73b8b3f28a75f0ca7e999adba5c81977a4440167c3a6f119784", 0xcc}, {&(0x7f0000000540)="c2395cf28954178bfee2e397fa989ddd9d0d032363da9ba564a63fdeeea3373e3ead813b2d4194375066b918830e9f4851a138f76db952a445143f5ba0bba885b71f94cd6d2019e5d37f0b365509", 0x4e}], 0x2, 0x8) 4m14.731249314s ago: executing program 0 (id=14): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x962a, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3513, 0x217, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) cachestat(r1, &(0x7f0000000380)={0x9, 0x9}, &(0x7f00000003c0), 0x0) sendfile(r1, r1, 0x0, 0xfffe80) 4m14.349438991s ago: executing program 0 (id=17): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES16=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000018110000", @ANYRES32=r4, @ANYBLOB="6ba0407b010000000000000034d1e42d356c0b5c9540eb5d5a11ce0a305db2d4d0a587a34e76c4ca8a1fa1f9c4d4e5af0cd3c30f645e33"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r5, 0x0, 0xfffffffffffffd75}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x8000000}, 0x18) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) 4m12.563274669s ago: executing program 0 (id=34): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r0}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) time(0xfffffffffffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r3, 0x20, 0x4000, 0x8000) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) migrate_pages(r4, 0x2, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x6) 4m12.562662368s ago: executing program 32 (id=34): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r0}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) time(0xfffffffffffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r3, 0x20, 0x4000, 0x8000) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) migrate_pages(r4, 0x2, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x6) 3m39.628654005s ago: executing program 4 (id=520): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0xffffffffffffffdb, r1, 0x729, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x40e1}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6(0xa, 0x80002, 0x0) read(r4, &(0x7f00000019c0)=""/4097, 0x1001) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x54, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x54}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x48, r7, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r9, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r11, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x5c, r9, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}}, 0x4000001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r12) 3m39.496635227s ago: executing program 4 (id=521): socket$inet6(0xa, 0x3, 0xff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) write$tun(0xffffffffffffffff, 0x0, 0x46) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x3c, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x6f74, 0x4, 0x9, 0x0, 0x0, 0x2, 0x3ff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x4008240b, &(0x7f00000013c0)) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 3m39.391070038s ago: executing program 4 (id=523): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x27c}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xf19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1208010, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r9], 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x20}) r11 = open(&(0x7f0000000080)='./file1\x00', 0x64042, 0x0) pwritev2(r11, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 3m39.086923683s ago: executing program 4 (id=527): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x962a, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3513, 0x217, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) cachestat(r1, &(0x7f0000000380)={0x9, 0x9}, &(0x7f00000003c0), 0x0) sendfile(r1, r1, 0x0, 0xfffe80) 3m38.707260919s ago: executing program 4 (id=535): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbb1bff0011aa0000000000000001"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x0, 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYRESOCT=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xf4, 0x0, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x8, 0x1, 0x0, 0x7}}) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f00000001c0)={@empty, r9}, 0x14) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000006df1dc0900020073797a30000000000900010073797a3042bea25a8746f795cf023186d100000000140000001100010000000000000000000300008a"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 3m38.247403207s ago: executing program 4 (id=539): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_getres(0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r4 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="00000000000000000010", @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd5, 0xfffffff9, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x8) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000440)="c9eaa76e94ab46544a4b9af678a852d805d78dde07b38b9b13a0ddc6730dafef145fa7861488c1e5b2c4aebb5df5c388db1aac476a6d9067df2fd9e331336efbcc62f9f6560b1b5b3a293065d25ea5b6919fb60cb606c5d4b72fe9a8c691fe3892e78b2bb33d22199ca180e1341fb049aed6f1b26d8b4b97e2779c4f301be3cfa5a3b7ec714123453a281e69aed8b67ff21fa80eace8b29bff7e9532bdca6ab47245746f8a90d2d74c0812150db8ca428a9ec73b8b3f28a75f0ca7e999adba5c81977a4440", 0xc5}, {0x0}], 0x2, 0x8) 3m38.247167686s ago: executing program 33 (id=539): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_getres(0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d350887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r4 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="00000000000000000010", @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd5, 0xfffffff9, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x8) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000440)="c9eaa76e94ab46544a4b9af678a852d805d78dde07b38b9b13a0ddc6730dafef145fa7861488c1e5b2c4aebb5df5c388db1aac476a6d9067df2fd9e331336efbcc62f9f6560b1b5b3a293065d25ea5b6919fb60cb606c5d4b72fe9a8c691fe3892e78b2bb33d22199ca180e1341fb049aed6f1b26d8b4b97e2779c4f301be3cfa5a3b7ec714123453a281e69aed8b67ff21fa80eace8b29bff7e9532bdca6ab47245746f8a90d2d74c0812150db8ca428a9ec73b8b3f28a75f0ca7e999adba5c81977a4440", 0xc5}, {0x0}], 0x2, 0x8) 2m14.183053465s ago: executing program 3 (id=1963): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES16=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000018110000", @ANYRES32=r4, @ANYBLOB="6ba0407b010000000000000034d1e42d356c0b5c9540eb5d5a11ce0a305db2d4d0a587a34e76c4ca8a1fa1f9c4d4e5af0cd3c30f645e33"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r5, 0x0, 0xfffffffffffffd75}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="500100001000130400000000fbdbdf25fe800000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff000000060000000032000000ac141400000000000000000000000000ad380000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff0000000000000000000000000000000000001000000000000000000b0000000000000000000000000000000080000000000000000000000000000000000000000000000000000102000100000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000004000000025cac521"], 0x150}}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x8000000}, 0x18) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) 2m13.20761082s ago: executing program 3 (id=1966): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd7, 0x0, 0x5, 0x3, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) 2m13.155656701s ago: executing program 3 (id=1967): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000e968d5590000619e6f0000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'sit0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'pim6reg0\x00'}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 2m13.109106902s ago: executing program 3 (id=1969): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000001540)="$eJzs3U9oHOfZAPBnFMmyZeIv5PvIZ4zjjO18YPM5ykpKlIoc0s1qJE8i7YrdVbEpITGxnBrLSUgIaUxp6kvSlpbSU49priGX3FoKLfTQ9lRoDr30EAjk0pKWFkpLKbjs7K61+rOSLctymv5+i/edfeedd953djzPzmrfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIqlMl0pjSczl1cUzaX+V6XptfpP53fp+tirZZL0RSetf7N0bB9tZB/9nZfZ9radjcbj96nDsbSV748r+++55/L8HB7rLb9Kg7Traf9ZQ74sk4hutRl06t7y89MptaMgu+vZPOhN7b3iRv19rPc9m1bxRy+fLs1maN2rp1ORk6eHTM410Jp/LGmcbzWw+rdSzcrNWT09UTqZjU1MTaTZ6trZYnZ0uz2XdzMceGi+VJtOnRheycr1Rqz781Gijcjqfm8urs0WZ8dLr0SrzWGtHfDpvps2sPJ+mFy4uL01s1dRWobFVOcOrdpzDD97zyWsf/+XiUmuH7FdJ0tkxx8fGxsfHJh+devSxUmlwvDS+OqO0RlwvEQMRrRK3Zaflztq/Qd5gZ49ZNyPi2n/tzMEbbtFAJ/7HXORRjcU4E2mkMVA8rzyGohLTUY9azLde/3Zozfx18f//Hv7jrzdbb2/870b5gyuzD0UR/4+0Xx3pF//XtWIHHoP9aq2+325Nb96r8UZciUtxLpZjOZbile2scc/aWm/HY7idDuxsrbORRTXyaEQt8piPcpGTdnLSmIrJmIxSPBunYyYakcZM5DEXWTTibDSiGVmxR1WiHlmUoxm1qEcaJ6ISJyONsZiKqZiINLIYjbNRi8WoxmxMR7mo5UJcLLb7xJp23ff15378wm8+eac1fb3Q2CYdSVof5vZ/FPHnTQqtC/c3Ef9bJQY6e/euxCR2yd6bfFd36MgNt+5aEf8H73QzAAAAgNsoKb59TyJiKO4vpmbyuezLd7pZAAAAwA4qftd8uJUMtabuj6R1/l/aoOSHEcO73jwAAABgByTFGLskIkbigfZUd7jURl8CAAAAAP+Gir//H2klIxFvFhnO/wEAAOBz5pv9rrH/8Z7iGrsj0VgYTn76p6jXh5KrC2ceTC6XW+XKl+9qL9dJvnS9xubMoeRAp5IimRy8sj+JiMFKdjjpXv3yn52xBJ8Wz4dWLkDY71r/yRYNiM0bULyK78TRdpmj59vp+e6c9lpGZvK5bLRSm3t8LOl8OdJ87cWLX42i+9+qzh9I4sLF5aXR519aPl+05WqrlquXO5eHT7pLRbQHVGzSlmvd0RT3b9zjoWIgRme9I+31lnr737ma7MDm/U961/lWHGuXOTbSTkdW939va51jo4+PRbl8YKCZnWm+dq2n951WjK30fLjb2+Qm3oW34ni7zPETx9vJBq0YX9WKF9e3Yrx3+9/YtrjhVrxz9M0zf/1FLckmtmrFxC22AuBOuVBc9WclCu0rotA/rrW1AtqauLuvu+TNHOUurHzK6C7fE+sGY110T7cT3d+KE+0yJ9qfJwYPbRBXShsc0V+++PIvO0f0R977wQ+fOfKrD9bE9ZtoxXtxsl2mk8S9P+8TY1t9/u6aqPpua4l3+663MTeevD48MZS0bz4UVx66ePncC0svLL04Pj4xWXqkVHp0PIaKjwqdpE9LRR6A/2xb3WPng69dL9rvLjzJI1ucVd97/ScFo/F8vBTLcT5OFaMNIuKBjWsd6fkZwqktzlpHeu7wcmqLc8uVsuNryw4fT6JP2YmeLfa/3y+Sv92mNwQAdsGxLeJwEve0L/vz+t2dJdaUuCtJTvWed38lIg71i7mtWH6yfePc7tlx9I/lvX7fSb+wGxsFAD7nsvqnyUjz7aRezxeeHZuaGis3T2dpvVZ5Oq3n07NZmlebWb1yulydzdKFeq1Zq3S/Op7OGmljcWGhVm+mM7V6ulBr5GeKO7+nnVu/N7L5crWZVxoLc1m5kaWVWrVZrjTT6bxRSRcWn5zLG6ezerFwYyGr5DN5pdzMa9W0UVusV7LRNG1kWU/BfDqrNvOZPBtK82q6UM/ny/WrETG3OJ+l01mjUs8XmrV2hd115dWZWn2+qHZ0fff/sNvbGwA+C15948qlc8vLS69sb+J3N1L4TvcRAFhNlAYAAAAAAAAAAAAAgM++9cP1Wrk3NRBwKLY9fPDV4WhN7Nvu4q2JZzo9uYVRjJtMDMYOV7j5xP+/3+7MTlS4vp6hbs7dW4373LfqPd3T2cS7tBF2cuK5J564tJKTDPZu3iffPHj6oyy6vdukno3/p2w01PXtAxF7fvS9ds4X+xROBne4px9GxDYWv5ZsUmZ3j0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCP+FQAA//+XX0rH") r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x22) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000200)={0xe99, 0x1, 0x1}, &(0x7f0000000280)=[{}]) r6 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) recvmmsg(r9, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000bc0)={[{@nobh}, {@data_writeback}], [{@dont_hash}, {@audit}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.862090801s ago: executing program 7 (id=3986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.834683872s ago: executing program 5 (id=3988): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES16], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000240)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000780), 0x0}, 0x20) 1.795630782s ago: executing program 5 (id=3991): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005"], 0x40}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x1b4, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfccd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20044041}, 0x4040850) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7d}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='.\x00', &(0x7f00000002c0), 0x0, 0x0, 0x3) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x3) 1.700740394s ago: executing program 5 (id=3992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1.579464846s ago: executing program 5 (id=3994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.231593741s ago: executing program 6 (id=3999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f00001ea000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000200)=0x5, 0x9, 0x2) (fail_nth: 10) 1.153837702s ago: executing program 6 (id=4002): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r0, 0x0, 0x478) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000002c0)={{0x1}, 0x2, 0x0, 0x21}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x40087602, 0xfffffffffffffffe) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xa}]}}]}, 0x40}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f00000004c0), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xe, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x92}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000480)='GPL\x00', 0x1, 0x75, &(0x7f00000004c0)=""/117, 0x41000, 0x40, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000580)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x2, 0x10d, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000600)=[r1], &(0x7f0000000640)=[{0x4, 0x1, 0xf, 0x5}, {0x0, 0x5, 0x10, 0xc}, {0x0, 0x4, 0x8, 0xa}, {0x4, 0x5, 0xd, 0x1}, {0x4, 0x5, 0xc, 0x8}, {0x4, 0x3, 0x1}, {0x2, 0x3, 0x10, 0xa}, {0x4, 0x2, 0x6, 0xa}, {0x1, 0x4, 0xf, 0x6}, {0x3, 0x5, 0xa, 0xa}], 0x10, 0x7ff, @void, @value}, 0x94) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 1.088539524s ago: executing program 2 (id=4005): r0 = timerfd_create(0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x12, r0, 0xe1b5d000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ID={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7f}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20008060) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30ff0000000900010073797a3000000000300003"], 0xfc}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 1.027449754s ago: executing program 7 (id=4007): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='scmi_xfer_end\x00', r1}, 0x18) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@user_xattr}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") io_getevents(r2, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r5, 0x0, 0x4}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) unshare(0x480) io_destroy(r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "fa7fd6875500"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048004}, 0x20000800) 951.558315ms ago: executing program 2 (id=4009): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) ftruncate(r0, 0x88801) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000007000046009d40"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x85}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sysfs$1(0x1, &(0x7f0000000280)='/proc/thread-self\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) dup(r10) bind$inet6(r10, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 951.094265ms ago: executing program 6 (id=4010): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x15, 0x101000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="800000000901000000000091f3805f5f44099b2200"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9e, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x2, @buffer={0x0, 0x10, &(0x7f00000007c0)=""/16}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10010, 0x0, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r3], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 891.388016ms ago: executing program 1 (id=4012): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) futex(0x0, 0x0, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xfffd, 0x0, 0xff, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x800, @private, @local, {[@cipso={0x86, 0x21, 0x0, [{0x1, 0xb, "5e000000ff00000000"}, {0x0, 0x2}, {0x0, 0xe, "9606053d008ce500800000b6"}]}, @timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0xa, [{@loopback, 0x2}, {@multicast1, 0xa6de}, {@loopback, 0xffff}]}]}}}}}}}, 0x0) 854.412197ms ago: executing program 6 (id=4013): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000, 0x1}, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 625.264091ms ago: executing program 1 (id=4014): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r2, 0x60b}, 0x14}}, 0x40050) (fail_nth: 8) 608.515601ms ago: executing program 6 (id=4015): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 582.788881ms ago: executing program 5 (id=4016): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(r0, 0x0, 0x0) 520.809293ms ago: executing program 5 (id=4017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 520.540902ms ago: executing program 1 (id=4018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000400)="1165b65dc1f84946f03562d6913624a2b6d8ec92d3b85d62c12f159214de3618d4dc028c1b6992dc66459f58c8b8b56fe04e31cdde47a1821cf3bddee1076115f9afb5391f0f33219347a02ffb4109374ae3528f700cf1963b704fd24e27b70dd82d3ef5fd0d6c7e9512db1aff64b84d0fe3cce36da98fcc74949374701d31a1418b3fb186b4fc5f661870be567805e16f89688c5b75b19b2081c8026c57eb5eefe65efbb7e36ceb1c63f4b46af44c39a7651531bd31e4bcb66636f5412f2f97dd0f6eba05988d5dbfef41b1382b757fa76544", 0xd3}, {&(0x7f0000000c00)="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", 0xfa}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18df066960ba60b27a4a33fe21f9fb144b71ece5b7c8bc9eb9", 0xe7}, {&(0x7f0000001700)="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", 0xc0a}, {&(0x7f0000000600)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297ec7e9c5cbdc825ace3cddc", 0x4e}, {&(0x7f0000002340)="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", 0xe8b}], 0x8}, 0xc0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0xfffffffffffffd0c, 0x4, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100}) 512.447002ms ago: executing program 1 (id=4019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0xaa11efd3308fb405}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x3c}}, 0x0) 511.820682ms ago: executing program 7 (id=4020): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x486283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x17642, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200c0d2, &(0x7f0000000140)={[{@user_xattr}]}, 0x21, 0x549, &(0x7f0000001800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100006000000070020"], 0x24, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1c0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_pts(r2, 0x22700) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x24000420) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 500.477063ms ago: executing program 6 (id=4021): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r0, 0x0, 0x478) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000002c0)={{0x1}, 0x2, 0x0, 0x21}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x40087602, 0xfffffffffffffffe) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xa}]}}]}, 0x40}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f00000004c0), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xe, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x92}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000480)='GPL\x00', 0x1, 0x75, &(0x7f00000004c0)=""/117, 0x41000, 0x40, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000580)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x2, 0x10d, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000600)=[r1], &(0x7f0000000640)=[{0x4, 0x1, 0xf, 0x5}, {0x0, 0x5, 0x10, 0xc}, {0x0, 0x4, 0x8, 0xa}, {0x4, 0x5, 0xd, 0x1}, {0x4, 0x5, 0xc, 0x8}, {0x4, 0x3, 0x1}, {0x2, 0x3, 0x10, 0xa}, {0x4, 0x2, 0x6, 0xa}, {0x1, 0x4, 0xf, 0x6}, {0x3, 0x5, 0xa, 0xa}], 0x10, 0x7ff, @void, @value}, 0x94) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 452.268023ms ago: executing program 2 (id=4022): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005"], 0x40}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x1dc, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfccd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20044041}, 0x4040850) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7d}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='.\x00', &(0x7f00000002c0), 0x0, 0x0, 0x3) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x3) 451.843303ms ago: executing program 2 (id=4023): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x15, 0x101000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="800000000901000000000091f3805f5f44099b2200"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9e, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x2, @buffer={0x0, 0x10, &(0x7f00000007c0)=""/16}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10010, 0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 439.008524ms ago: executing program 1 (id=4024): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats\x00') (fail_nth: 11) 158.496108ms ago: executing program 2 (id=4025): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000, 0x1}, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 46.775ms ago: executing program 2 (id=4026): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, 0x2, 0x6, 0x600, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xf4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc38590c4aab483ba}]}, 0x90}, 0x1, 0x0, 0x0, 0x44844}, 0x8008) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) fsync(r2) 0s ago: executing program 1 (id=4027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x0) kernel console output (not intermixed with test programs): Device attached [ 260.147454][ T9638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.156661][T15182] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 260.163308][T15182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.171563][T15182] vhci_hcd vhci_hcd.0: Device attached [ 260.184136][T15182] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.197997][T15182] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 260.204649][T15182] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.212098][T15182] vhci_hcd vhci_hcd.0: Device attached [ 260.222779][T15182] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 260.229463][T15182] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 260.237199][T15182] vhci_hcd vhci_hcd.0: Device attached [ 260.256470][T15182] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(21) [ 260.263112][T15182] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 260.270729][T15182] vhci_hcd vhci_hcd.0: Device attached [ 260.279301][T15195] FAULT_INJECTION: forcing a failure. [ 260.279301][T15195] name failslab, interval 1, probability 0, space 0, times 0 [ 260.292058][T15195] CPU: 1 UID: 0 PID: 15195 Comm: syz.7.3587 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 260.292087][T15195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.292097][T15195] Call Trace: [ 260.292102][T15195] [ 260.292108][T15195] dump_stack_lvl+0xf6/0x150 [ 260.292132][T15195] dump_stack+0x15/0x1a [ 260.292149][T15195] should_fail_ex+0x261/0x270 [ 260.292173][T15195] should_failslab+0x8f/0xb0 [ 260.292261][T15195] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 260.292289][T15195] ? __alloc_skb+0x10d/0x320 [ 260.292312][T15195] ? security_capable+0x81/0x90 [ 260.292410][T15195] __alloc_skb+0x10d/0x320 [ 260.292462][T15195] netlink_ack+0xf1/0x4f0 [ 260.292481][T15195] ? ref_tracker_free+0x3b8/0x420 [ 260.292510][T15195] netlink_rcv_skb+0x19f/0x230 [ 260.292534][T15195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.292600][T15195] rtnetlink_rcv+0x1c/0x30 [ 260.292627][T15195] netlink_unicast+0x605/0x6c0 [ 260.292648][T15195] netlink_sendmsg+0x609/0x720 [ 260.292760][T15195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.292781][T15195] __sock_sendmsg+0x140/0x180 [ 260.292797][T15195] ____sys_sendmsg+0x350/0x4e0 [ 260.292878][T15195] __sys_sendmsg+0x1a0/0x240 [ 260.292964][T15195] __x64_sys_sendmsg+0x46/0x50 [ 260.292990][T15195] x64_sys_call+0x26f3/0x2e10 [ 260.293084][T15195] do_syscall_64+0xc9/0x1c0 [ 260.293110][T15195] ? clear_bhb_loop+0x25/0x80 [ 260.293130][T15195] ? clear_bhb_loop+0x25/0x80 [ 260.293153][T15195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.293174][T15195] RIP: 0033:0x7f8324f0d169 [ 260.293216][T15195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.293300][T15195] RSP: 002b:00007f832356f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.293316][T15195] RAX: ffffffffffffffda RBX: 00007f8325125fa0 RCX: 00007f8324f0d169 [ 260.293326][T15195] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009 [ 260.293336][T15195] RBP: 00007f832356f090 R08: 0000000000000000 R09: 0000000000000000 [ 260.293404][T15195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.293417][T15195] R13: 0000000000000000 R14: 00007f8325125fa0 R15: 00007ffdfe10faf8 [ 260.293438][T15195] [ 260.524170][T15182] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.537251][ T985] vhci_hcd: vhci_device speed not set [ 260.561700][T15199] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.579654][T15182] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.598993][ T985] usb 5-1: new full-speed USB device number 17 using vhci_hcd [ 260.634101][T15194] vhci_hcd: connection closed [ 260.634279][ T4915] vhci_hcd: stop threads [ 260.634321][T15189] vhci_hcd: connection closed [ 260.639011][ T4915] vhci_hcd: release socket [ 260.639024][ T4915] vhci_hcd: disconnect device [ 260.639178][T15185] vhci_hcd: connection closed [ 260.639437][ T4915] vhci_hcd: stop threads [ 260.639445][ T4915] vhci_hcd: release socket [ 260.639454][ T4915] vhci_hcd: disconnect device [ 260.669601][T15183] vhci_hcd: connection reset by peer [ 260.681367][T15191] vhci_hcd: connection closed [ 260.688540][ T5040] vhci_hcd: stop threads [ 260.697547][ T5040] vhci_hcd: release socket [ 260.702012][ T5040] vhci_hcd: disconnect device [ 260.723781][T15207] lo speed is unknown, defaulting to 1000 [ 260.737331][ T5040] vhci_hcd: stop threads [ 260.741598][ T5040] vhci_hcd: release socket [ 260.746019][ T5040] vhci_hcd: disconnect device [ 260.762189][ T5040] vhci_hcd: stop threads [ 260.766466][ T5040] vhci_hcd: release socket [ 260.771039][ T5040] vhci_hcd: disconnect device [ 260.939003][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3596'. [ 261.069226][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3598'. [ 261.099973][T15222] FAULT_INJECTION: forcing a failure. [ 261.099973][T15222] name failslab, interval 1, probability 0, space 0, times 0 [ 261.112809][T15222] CPU: 1 UID: 0 PID: 15222 Comm: syz.5.3599 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 261.112845][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.112858][T15222] Call Trace: [ 261.112864][T15222] [ 261.112871][T15222] dump_stack_lvl+0xf6/0x150 [ 261.112894][T15222] dump_stack+0x15/0x1a [ 261.112969][T15222] should_fail_ex+0x261/0x270 [ 261.113010][T15222] should_failslab+0x8f/0xb0 [ 261.113042][T15222] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 261.113146][T15222] ? __alloc_skb+0x10d/0x320 [ 261.113168][T15222] ? __rtnl_unlock+0x99/0xb0 [ 261.113187][T15222] __alloc_skb+0x10d/0x320 [ 261.113207][T15222] netlink_ack+0xf1/0x4f0 [ 261.113226][T15222] ? ref_tracker_free+0x3b8/0x420 [ 261.113299][T15222] netlink_rcv_skb+0x19f/0x230 [ 261.113318][T15222] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.113353][T15222] rtnetlink_rcv+0x1c/0x30 [ 261.113444][T15222] netlink_unicast+0x605/0x6c0 [ 261.113466][T15222] netlink_sendmsg+0x609/0x720 [ 261.113566][T15222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.113607][T15222] __sock_sendmsg+0x140/0x180 [ 261.113622][T15222] ____sys_sendmsg+0x350/0x4e0 [ 261.113649][T15222] __sys_sendmsg+0x1a0/0x240 [ 261.113687][T15222] __x64_sys_sendmsg+0x46/0x50 [ 261.113782][T15222] x64_sys_call+0x26f3/0x2e10 [ 261.113800][T15222] do_syscall_64+0xc9/0x1c0 [ 261.113825][T15222] ? clear_bhb_loop+0x25/0x80 [ 261.113851][T15222] ? clear_bhb_loop+0x25/0x80 [ 261.113935][T15222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.113956][T15222] RIP: 0033:0x7fe0dd39d169 [ 261.113971][T15222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.113989][T15222] RSP: 002b:00007fe0dba07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.114007][T15222] RAX: ffffffffffffffda RBX: 00007fe0dd5b5fa0 RCX: 00007fe0dd39d169 [ 261.114017][T15222] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 261.114066][T15222] RBP: 00007fe0dba07090 R08: 0000000000000000 R09: 0000000000000000 [ 261.114077][T15222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.114087][T15222] R13: 0000000000000000 R14: 00007fe0dd5b5fa0 R15: 00007ffff65ccd68 [ 261.114103][T15222] [ 261.511873][T15226] FAULT_INJECTION: forcing a failure. [ 261.511873][T15226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.525652][T15226] CPU: 1 UID: 0 PID: 15226 Comm: syz.2.3601 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 261.525680][T15226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.525749][T15226] Call Trace: [ 261.525755][T15226] [ 261.525766][T15226] dump_stack_lvl+0xf6/0x150 [ 261.525794][T15226] dump_stack+0x15/0x1a [ 261.525820][T15226] should_fail_ex+0x261/0x270 [ 261.525855][T15226] should_fail+0xb/0x10 [ 261.525878][T15226] should_fail_usercopy+0x1a/0x20 [ 261.525925][T15226] _copy_from_user+0x1c/0xa0 [ 261.525960][T15226] copy_msghdr_from_user+0x54/0x2b0 [ 261.525994][T15226] ? __fget_files+0x186/0x1c0 [ 261.526016][T15226] __sys_sendmmsg+0x1eb/0x4b0 [ 261.526137][T15226] __x64_sys_sendmmsg+0x57/0x70 [ 261.526169][T15226] x64_sys_call+0x2b53/0x2e10 [ 261.526206][T15226] do_syscall_64+0xc9/0x1c0 [ 261.526316][T15226] ? clear_bhb_loop+0x25/0x80 [ 261.526341][T15226] ? clear_bhb_loop+0x25/0x80 [ 261.526368][T15226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.526433][T15226] RIP: 0033:0x7fdb9396d169 [ 261.526457][T15226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.526491][T15226] RSP: 002b:00007fdb91fd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 261.526512][T15226] RAX: ffffffffffffffda RBX: 00007fdb93b85fa0 RCX: 00007fdb9396d169 [ 261.526525][T15226] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 261.526538][T15226] RBP: 00007fdb91fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.526549][T15226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.526570][T15226] R13: 0000000000000000 R14: 00007fdb93b85fa0 R15: 00007ffd45da4988 [ 261.526590][T15226] [ 261.717465][ T3382] usb 3-1: enqueue for inactive port 0 [ 261.722953][ T3382] usb 3-1: enqueue for inactive port 0 [ 261.723126][T15225] loop5: detected capacity change from 0 to 2048 [ 261.797261][ T3382] vhci_hcd: vhci_device speed not set [ 261.832649][T15238] loop6: detected capacity change from 0 to 512 [ 261.877043][T15246] ip6gre1: entered allmulticast mode [ 261.903182][T15251] loop5: detected capacity change from 0 to 1764 [ 261.915562][T15253] loop7: detected capacity change from 0 to 527 [ 261.938857][T15253] EXT4-fs (loop7): failed to parse options in superblock:  [ 261.951708][T15253] EXT4-fs (loop7): Unsupported encryption level 4 [ 261.959830][T15255] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 261.966535][T15255] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.974594][T15255] vhci_hcd vhci_hcd.0: Device attached [ 261.982809][T15255] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(13) [ 261.989450][T15255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 261.996993][T15255] vhci_hcd vhci_hcd.0: Device attached [ 262.018662][T15255] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.048991][T15255] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(17) [ 262.055680][T15255] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 262.063893][T15255] vhci_hcd vhci_hcd.0: Device attached [ 262.077040][T15255] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(19) [ 262.083737][T15255] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 262.091997][T15255] vhci_hcd vhci_hcd.0: Device attached [ 262.092425][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 262.110413][T15255] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(21) [ 262.117102][T15255] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 262.125461][T15255] vhci_hcd vhci_hcd.0: Device attached [ 262.149199][T15255] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.170671][T15255] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.179437][T15255] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.195428][T15268] vhci_hcd: connection closed [ 262.195468][T15260] vhci_hcd: connection closed [ 262.195601][T15264] vhci_hcd: connection closed [ 262.201323][T15256] vhci_hcd: connection closed [ 262.205036][ T41] vhci_hcd: stop threads [ 262.219108][ T41] vhci_hcd: release socket [ 262.223530][ T41] vhci_hcd: disconnect device [ 262.230210][T15271] vhci_hcd: connection closed [ 262.233067][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 262.233083][ T29] audit: type=1326 audit(1744448142.690:20468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96105bd169 code=0x7ffc0000 [ 262.250976][ T41] vhci_hcd: stop threads [ 262.267848][ T10] vhci_hcd: vhci_device speed not set [ 262.271792][ T41] vhci_hcd: release socket [ 262.282212][ T41] vhci_hcd: disconnect device [ 262.297727][ T41] vhci_hcd: stop threads [ 262.302044][ T41] vhci_hcd: release socket [ 262.306469][ T41] vhci_hcd: disconnect device [ 262.312076][ T29] audit: type=1326 audit(1744448142.690:20469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f96105bd169 code=0x7ffc0000 [ 262.335762][ T29] audit: type=1326 audit(1744448142.690:20470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96105bd169 code=0x7ffc0000 [ 262.360126][ T29] audit: type=1326 audit(1744448142.690:20471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96105bd169 code=0x7ffc0000 [ 262.367217][ T10] usb 13-1: new full-speed USB device number 14 using vhci_hcd [ 262.383763][ T29] audit: type=1326 audit(1744448142.690:20472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96105bd169 code=0x7ffc0000 [ 262.391400][ T41] vhci_hcd: stop threads [ 262.391409][ T41] vhci_hcd: release socket [ 262.391421][ T41] vhci_hcd: disconnect device [ 262.412996][ T10] usb 13-1: enqueue for inactive port 0 [ 262.415526][ T29] audit: type=1326 audit(1744448142.690:20473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96105bd169 code=0x7ffc0000 [ 262.419895][ T41] vhci_hcd: stop threads [ 262.419903][ T41] vhci_hcd: release socket [ 262.419914][ T41] vhci_hcd: disconnect device [ 262.469662][ T10] usb 13-1: enqueue for inactive port 0 [ 262.472676][ T29] audit: type=1326 audit(1744448142.690:20474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96105bd169 code=0x7ffc0000 [ 262.493575][ T10] usb 13-1: enqueue for inactive port 0 [ 262.502446][ T29] audit: type=1326 audit(1744448142.710:20475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96105bd169 code=0x7ffc0000 [ 262.531755][ T29] audit: type=1326 audit(1744448142.710:20476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96105bd169 code=0x7ffc0000 [ 262.555395][ T29] audit: type=1326 audit(1744448142.710:20477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96105bd169 code=0x7ffc0000 [ 262.611854][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3615'. [ 262.621126][ T10] vhci_hcd: vhci_device speed not set [ 262.960256][T15311] xt_CT: No such helper "syz0" [ 263.124902][T15342] netlink: 'syz.6.3636': attribute type 17 has an invalid length. [ 263.137015][T15342] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 263.157634][T15342] team0: Port device batadv1 added [ 263.184140][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x0 [ 263.187654][T15346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3637'. [ 263.191593][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x0 [ 263.191626][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x0 [ 263.191651][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x0 [ 263.191678][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x0 [ 263.191703][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x0 [ 263.191727][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x0 [ 263.246789][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x0 [ 263.254286][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x1 [ 263.261749][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x0 [ 263.269906][ T3684] hid-generic 0091:0005:0005.000A: unknown main item tag 0x0 [ 263.278072][ T3684] hid-generic 0091:0005:0005.000A: item 0 0 0 8 parsing failed [ 263.285785][ T3684] hid-generic 0091:0005:0005.000A: probe with driver hid-generic failed with error -22 [ 263.287570][T15342] loop6: detected capacity change from 0 to 512 [ 263.322142][T15342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.335100][T15342] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.371793][T14995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.397379][ T3381] usb 11-1: enqueue for inactive port 0 [ 263.402954][ T3381] usb 11-1: enqueue for inactive port 0 [ 263.445244][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3647'. [ 263.463190][T15377] bond1: entered promiscuous mode [ 263.468355][T15377] bond1: entered allmulticast mode [ 263.476829][T15377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.478147][ T3381] vhci_hcd: vhci_device speed not set [ 263.499136][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3648'. [ 263.559451][T15377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3647'. [ 263.575065][T15389] 9pnet: p9_errstr2errno: server reported unknown error @ [ 263.598193][T15377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3647'. [ 263.831844][T15424] loop7: detected capacity change from 0 to 512 [ 263.881302][T15424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.980807][T15424] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.009239][T15440] loop6: detected capacity change from 0 to 527 [ 264.016437][T15440] EXT4-fs (loop6): failed to parse options in superblock:  [ 264.029327][T15440] EXT4-fs (loop6): Unsupported encryption level 4 [ 264.040300][T15429] xt_CT: No such helper "syz0" [ 264.100531][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3674'. [ 264.116023][T15450] program syz.1.3674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.152923][T15450] rdma_op ffff888164b51980 conn xmit_rdma 0000000000000000 [ 264.192371][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.201301][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.433125][T15464] FAULT_INJECTION: forcing a failure. [ 264.433125][T15464] name failslab, interval 1, probability 0, space 0, times 0 [ 264.446867][T15464] CPU: 1 UID: 0 PID: 15464 Comm: syz.2.3677 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 264.446895][T15464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.446907][T15464] Call Trace: [ 264.446914][T15464] [ 264.446921][T15464] dump_stack_lvl+0xf6/0x150 [ 264.446945][T15464] dump_stack+0x15/0x1a [ 264.447025][T15464] should_fail_ex+0x261/0x270 [ 264.447057][T15464] should_failslab+0x8f/0xb0 [ 264.447218][T15464] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 264.447243][T15464] ? __alloc_skb+0x10d/0x320 [ 264.447268][T15464] __alloc_skb+0x10d/0x320 [ 264.447349][T15464] netlink_ack+0xf1/0x4f0 [ 264.447431][T15464] netlink_rcv_skb+0x19f/0x230 [ 264.447454][T15464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.447494][T15464] genl_rcv+0x28/0x40 [ 264.447575][T15464] netlink_unicast+0x605/0x6c0 [ 264.447596][T15464] netlink_sendmsg+0x609/0x720 [ 264.447623][T15464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.447648][T15464] __sock_sendmsg+0x140/0x180 [ 264.447667][T15464] __sys_sendto+0x1aa/0x230 [ 264.447720][T15464] __x64_sys_sendto+0x78/0x90 [ 264.447747][T15464] x64_sys_call+0x2bcb/0x2e10 [ 264.447770][T15464] do_syscall_64+0xc9/0x1c0 [ 264.447802][T15464] ? clear_bhb_loop+0x25/0x80 [ 264.447901][T15464] ? clear_bhb_loop+0x25/0x80 [ 264.447922][T15464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.447942][T15464] RIP: 0033:0x7fdb9396effc [ 264.448035][T15464] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 264.448053][T15464] RSP: 002b:00007fdb91fd5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 264.448072][T15464] RAX: ffffffffffffffda RBX: 00007fdb91fd5fc0 RCX: 00007fdb9396effc [ 264.448085][T15464] RDX: 0000000000000020 RSI: 00007fdb91fd6010 RDI: 0000000000000007 [ 264.448098][T15464] RBP: 0000000000000000 R08: 00007fdb91fd5f14 R09: 000000000000000c [ 264.448110][T15464] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 264.448122][T15464] R13: 00007fdb91fd5f68 R14: 00007fdb91fd6010 R15: 0000000000000000 [ 264.448199][T15464] [ 264.683777][T15468] loop6: detected capacity change from 0 to 512 [ 264.699206][T15468] EXT4-fs (loop6): 1 orphan inode deleted [ 264.705526][T15468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.720534][ T4915] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 1 [ 264.732577][T15468] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.818637][T14995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.837296][ T12] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 264.876915][T15476] loop2: detected capacity change from 0 to 1024 [ 264.907218][T15476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.981776][ T9638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.003350][T15482] xt_CT: No such helper "syz0" [ 265.059966][T15485] loop9: detected capacity change from 0 to 7 [ 265.080144][T15485] Buffer I/O error on dev loop9, logical block 0, async page read [ 265.097993][T15485] Buffer I/O error on dev loop9, logical block 0, async page read [ 265.105845][T15485] loop9: unable to read partition table [ 265.134567][T15485] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 265.134567][T15485] U) failed (rc=-5) [ 265.169336][T15491] loop6: detected capacity change from 0 to 512 [ 265.200760][T15491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.294073][T15491] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.313732][T12979] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.344188][T15491] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3687: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 265.364384][T15491] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 265.407176][T15491] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3687: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 265.433314][T15509] 9pnet: p9_errstr2errno: server reported unknown error @ [ 265.445329][T15491] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 265.454587][T15491] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3687: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 265.472588][T15515] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 265.489733][T15491] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 265.500433][T15491] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3687: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 265.530752][T15491] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 265.542815][T15491] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3687: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 265.562795][T15491] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 265.607562][T14995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.642835][T15520] loop6: detected capacity change from 0 to 1764 [ 265.649980][ T985] usb 5-1: enqueue for inactive port 0 [ 265.655477][ T985] usb 5-1: enqueue for inactive port 0 [ 265.738262][ T985] vhci_hcd: vhci_device speed not set [ 265.811455][T15542] loop5: detected capacity change from 0 to 128 [ 265.817897][T15542] EXT4-fs: test_dummy_encryption option not supported [ 266.559744][T15559] loop9: detected capacity change from 0 to 7 [ 266.566045][T15559] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.574632][T15559] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.583098][T15559] loop9: unable to read partition table [ 266.589461][T15559] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 266.589461][T15559] U) failed (rc=-5) [ 266.621474][T15561] __nla_validate_parse: 2 callbacks suppressed [ 266.621488][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3709'. [ 266.646032][T15565] loop6: detected capacity change from 0 to 128 [ 266.652872][T15565] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.666473][T15567] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 266.666785][T15565] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.673080][T15567] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.673192][T15567] vhci_hcd vhci_hcd.0: Device attached [ 266.687491][T15567] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 266.702276][T15567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 266.710158][T15567] vhci_hcd vhci_hcd.0: Device attached [ 266.764235][T15567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 266.788892][T15567] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(17) [ 266.795506][T15567] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.802979][T15567] vhci_hcd vhci_hcd.0: Device attached [ 266.818541][T15582] loop6: detected capacity change from 0 to 527 [ 266.826224][T15582] EXT4-fs (loop6): failed to parse options in superblock:  [ 266.839187][T15582] EXT4-fs (loop6): Unsupported encryption level 4 [ 266.850041][T15567] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(19) [ 266.856733][T15567] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 266.864369][ T10] vhci_hcd: vhci_device speed not set [ 266.869858][T15567] vhci_hcd vhci_hcd.0: Device attached [ 266.899611][T15567] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(21) [ 266.906224][T15567] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 266.913841][T15567] vhci_hcd vhci_hcd.0: Device attached [ 266.920109][T15567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 266.928290][ T10] usb 11-1: new full-speed USB device number 16 using vhci_hcd [ 266.936557][T15567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 266.945290][T15567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 266.958397][T15586] vhci_hcd: connection closed [ 266.958660][T15571] vhci_hcd: connection closed [ 266.959836][T15583] vhci_hcd: connection closed [ 266.963570][T15569] vhci_hcd: connection reset by peer [ 266.968790][ T4915] vhci_hcd: stop threads [ 266.977130][T15589] vhci_hcd: connection closed [ 266.978026][ T4915] vhci_hcd: release socket [ 266.991512][ T4915] vhci_hcd: disconnect device [ 267.007210][ T4915] vhci_hcd: stop threads [ 267.011536][ T4915] vhci_hcd: release socket [ 267.015943][ T4915] vhci_hcd: disconnect device [ 267.027784][ T4915] vhci_hcd: stop threads [ 267.032050][ T4915] vhci_hcd: release socket [ 267.036480][ T4915] vhci_hcd: disconnect device [ 267.043483][ T4915] vhci_hcd: stop threads [ 267.047909][ T4915] vhci_hcd: release socket [ 267.052334][ T4915] vhci_hcd: disconnect device [ 267.060124][ T4915] vhci_hcd: stop threads [ 267.064418][ T4915] vhci_hcd: release socket [ 267.068879][ T4915] vhci_hcd: disconnect device [ 267.143398][T15594] loop6: detected capacity change from 0 to 1764 [ 267.261134][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 267.261147][ T29] audit: type=1326 audit(1744448147.720:20994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 267.290955][ T29] audit: type=1326 audit(1744448147.720:20995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 267.314619][ T29] audit: type=1326 audit(1744448147.720:20996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 267.340033][ T29] audit: type=1326 audit(1744448147.720:20997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 267.364252][ T29] audit: type=1326 audit(1744448147.720:20998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 267.388501][ T29] audit: type=1326 audit(1744448147.720:20999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 267.412120][ T29] audit: type=1326 audit(1744448147.770:21000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 267.436528][ T29] audit: type=1326 audit(1744448147.790:21001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 267.464650][ T29] audit: type=1326 audit(1744448147.800:21002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 267.488802][ T29] audit: type=1326 audit(1744448147.800:21003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 267.567912][T15602] FAULT_INJECTION: forcing a failure. [ 267.567912][T15602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.581792][T15602] CPU: 1 UID: 0 PID: 15602 Comm: syz.2.3727 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 267.581839][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.581852][T15602] Call Trace: [ 267.581859][T15602] [ 267.581867][T15602] dump_stack_lvl+0xf6/0x150 [ 267.581892][T15602] dump_stack+0x15/0x1a [ 267.581908][T15602] should_fail_ex+0x261/0x270 [ 267.582024][T15602] should_fail+0xb/0x10 [ 267.582048][T15602] should_fail_usercopy+0x1a/0x20 [ 267.582078][T15602] _copy_from_user+0x1c/0xa0 [ 267.582148][T15602] kstrtouint_from_user+0x84/0x100 [ 267.582189][T15602] ? 0xffffffff81000000 [ 267.582203][T15602] ? selinux_file_permission+0x22d/0x360 [ 267.582229][T15602] proc_fail_nth_write+0x54/0x160 [ 267.582338][T15602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.582361][T15602] vfs_write+0x295/0x950 [ 267.582388][T15602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.582406][T15602] ? __fget_files+0x186/0x1c0 [ 267.582424][T15602] ksys_write+0xeb/0x1b0 [ 267.582483][T15602] __x64_sys_write+0x42/0x50 [ 267.582579][T15602] x64_sys_call+0x2a45/0x2e10 [ 267.582608][T15602] do_syscall_64+0xc9/0x1c0 [ 267.582704][T15602] ? clear_bhb_loop+0x25/0x80 [ 267.582744][T15602] ? clear_bhb_loop+0x25/0x80 [ 267.582821][T15602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.582843][T15602] RIP: 0033:0x7fdb9396bc1f [ 267.582856][T15602] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 267.582875][T15602] RSP: 002b:00007fdb91fd7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 267.582895][T15602] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb9396bc1f [ 267.582908][T15602] RDX: 0000000000000001 RSI: 00007fdb91fd70a0 RDI: 0000000000000004 [ 267.582922][T15602] RBP: 00007fdb91fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.582935][T15602] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 267.583022][T15602] R13: 0000000000000000 R14: 00007fdb93b85fa0 R15: 00007ffd45da4988 [ 267.583043][T15602] [ 267.868817][T15604] FAULT_INJECTION: forcing a failure. [ 267.868817][T15604] name failslab, interval 1, probability 0, space 0, times 0 [ 267.881769][T15604] CPU: 0 UID: 0 PID: 15604 Comm: syz.5.3728 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 267.881799][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.881813][T15604] Call Trace: [ 267.881819][T15604] [ 267.881826][T15604] dump_stack_lvl+0xf6/0x150 [ 267.881933][T15604] dump_stack+0x15/0x1a [ 267.881967][T15604] should_fail_ex+0x261/0x270 [ 267.881997][T15604] should_failslab+0x8f/0xb0 [ 267.882075][T15604] __kmalloc_noprof+0xad/0x410 [ 267.882095][T15604] ? copy_splice_read+0xb8/0x5d0 [ 267.882151][T15604] copy_splice_read+0xb8/0x5d0 [ 267.882176][T15604] ? file_has_perm+0x334/0x380 [ 267.882201][T15604] sock_splice_read+0xac/0xb0 [ 267.882292][T15604] ? __pfx_sock_splice_read+0x10/0x10 [ 267.882327][T15604] splice_file_to_pipe+0x237/0x390 [ 267.882511][T15604] do_splice+0xcec/0x1160 [ 267.882544][T15604] ? restore_sigcontext+0x1ba/0x230 [ 267.882566][T15604] ? __rcu_read_unlock+0x4e/0x70 [ 267.882663][T15604] ? __fget_files+0x186/0x1c0 [ 267.882681][T15604] ? pipe_clear_nowait+0x60/0x110 [ 267.882708][T15604] __se_sys_splice+0x254/0x3b0 [ 267.882820][T15604] __x64_sys_splice+0x78/0x90 [ 267.882853][T15604] x64_sys_call+0xf5b/0x2e10 [ 267.882908][T15604] do_syscall_64+0xc9/0x1c0 [ 267.882983][T15604] ? clear_bhb_loop+0x25/0x80 [ 267.883001][T15604] ? clear_bhb_loop+0x25/0x80 [ 267.883019][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.883036][T15604] RIP: 0033:0x7fe0dd39d169 [ 267.883051][T15604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.883095][T15604] RSP: 002b:00007fe0dba07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 267.883116][T15604] RAX: ffffffffffffffda RBX: 00007fe0dd5b5fa0 RCX: 00007fe0dd39d169 [ 267.883129][T15604] RDX: 000000000000000f RSI: 0000000000000000 RDI: 000000000000000c [ 267.883143][T15604] RBP: 00007fe0dba07090 R08: 0000000000000007 R09: 0000000000000009 [ 267.883197][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.883210][T15604] R13: 0000000000000000 R14: 00007fe0dd5b5fa0 R15: 00007ffff65ccd68 [ 267.883286][T15604] [ 268.187167][T15628] loop6: detected capacity change from 0 to 512 [ 268.214806][T15628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.240049][T15628] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.279670][T15628] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3737: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 268.301868][T15628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 268.311327][T15628] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3737: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 268.350247][T15628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 268.362454][T15628] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3737: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 268.381820][T15628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 268.392212][T15628] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3737: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 268.411948][T15628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 268.425087][T15647] loop5: detected capacity change from 0 to 512 [ 268.431901][T15628] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3737: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 268.460250][T15628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 268.472137][T15647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.485084][T15647] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.500515][T15647] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #2: comm syz.5.3742: corrupted inode contents [ 268.501101][T14995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.523166][T15647] EXT4-fs error (device loop5): ext4_dirty_inode:6074: inode #2: comm syz.5.3742: mark_inode_dirty error [ 268.535823][T15647] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #2: comm syz.5.3742: corrupted inode contents [ 268.553287][T15647] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #2: comm syz.5.3742: corrupted inode contents [ 268.565556][T15647] EXT4-fs error (device loop5): ext4_dirty_inode:6074: inode #2: comm syz.5.3742: mark_inode_dirty error [ 268.577468][T15647] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #2: comm syz.5.3742: corrupted inode contents [ 268.589916][T15647] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.3742: mark_inode_dirty error [ 268.590830][T15653] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 268.601572][T15647] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #2: comm syz.5.3742: corrupted inode contents [ 268.607602][T15653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.608442][T15653] vhci_hcd vhci_hcd.0: Device attached [ 268.642112][T15647] EXT4-fs error (device loop5): ext4_dirty_inode:6074: inode #2: comm syz.5.3742: mark_inode_dirty error [ 268.647473][T15653] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(14) [ 268.659949][T15653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 268.668122][T15653] vhci_hcd vhci_hcd.0: Device attached [ 268.674101][T15656] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #2: comm syz.5.3742: corrupted inode contents [ 268.678692][T15653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 268.705791][T15653] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(18) [ 268.712478][T15653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.720001][T15653] vhci_hcd vhci_hcd.0: Device attached [ 268.735953][T15653] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(20) [ 268.742663][T15653] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 268.750329][T15653] vhci_hcd vhci_hcd.0: Device attached [ 268.761847][T15653] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(22) [ 268.768451][T15653] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 268.776185][T15653] vhci_hcd vhci_hcd.0: Device attached [ 268.785935][T15653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 268.796323][T15653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 268.807871][T15653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 268.818102][ T3381] vhci_hcd: vhci_device speed not set [ 268.830634][T15663] vhci_hcd: connection closed [ 268.830854][T15661] vhci_hcd: connection closed [ 268.830863][ T5024] vhci_hcd: stop threads [ 268.830874][ T5024] vhci_hcd: release socket [ 268.835730][T15659] vhci_hcd: connection closed [ 268.840228][ T5024] vhci_hcd: disconnect device [ 268.859282][T15654] vhci_hcd: connection closed [ 268.862159][T15657] vhci_hcd: connection closed [ 268.867201][ T5024] vhci_hcd: stop threads [ 268.876143][ T5024] vhci_hcd: release socket [ 268.880336][ T3381] usb 13-1: new full-speed USB device number 15 using vhci_hcd [ 268.880619][ T5024] vhci_hcd: disconnect device [ 268.888503][T15655] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 268.899800][ T5024] vhci_hcd: stop threads [ 268.904076][ T5024] vhci_hcd: release socket [ 268.908517][ T5024] vhci_hcd: disconnect device [ 268.913268][ T5024] vhci_hcd: stop threads [ 268.917528][ T5024] vhci_hcd: release socket [ 268.922016][ T5024] vhci_hcd: disconnect device [ 268.927112][ T5024] vhci_hcd: stop threads [ 268.931363][ T5024] vhci_hcd: release socket [ 268.935806][ T5024] vhci_hcd: disconnect device [ 269.205942][T12644] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.230516][T15667] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 269.270876][T15675] loop5: detected capacity change from 0 to 1764 [ 269.439604][T15686] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.500593][T15687] 9pnet: p9_errstr2errno: server reported unknown error @ [ 269.532084][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3752'. [ 269.550317][T15686] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.632421][T15686] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.679943][T15686] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.733019][T15686] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.743967][T15686] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.755643][T15686] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.766799][T15686] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.887135][T15706] xt_CT: No such helper "syz0" [ 269.988692][T15714] FAULT_INJECTION: forcing a failure. [ 269.988692][T15714] name failslab, interval 1, probability 0, space 0, times 0 [ 270.001507][T15714] CPU: 1 UID: 0 PID: 15714 Comm: +}[@ Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 270.001535][T15714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 270.001557][T15714] Call Trace: [ 270.001563][T15714] [ 270.001571][T15714] dump_stack_lvl+0xf6/0x150 [ 270.001650][T15714] dump_stack+0x15/0x1a [ 270.001664][T15714] should_fail_ex+0x261/0x270 [ 270.001757][T15714] should_failslab+0x8f/0xb0 [ 270.001804][T15714] __kmalloc_noprof+0xad/0x410 [ 270.001822][T15714] ? ip_options_get+0x56/0x380 [ 270.001906][T15714] ? mod_objcg_state+0x3f9/0x530 [ 270.001932][T15714] ip_options_get+0x56/0x380 [ 270.001957][T15714] ? should_fail_ex+0xd7/0x270 [ 270.001985][T15714] ip_cmsg_send+0x3f1/0x5d0 [ 270.002096][T15714] ping_v4_sendmsg+0x3df/0xcb0 [ 270.002153][T15714] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 270.002181][T15714] inet_sendmsg+0xc5/0xd0 [ 270.002204][T15714] __sock_sendmsg+0x102/0x180 [ 270.002223][T15714] ____sys_sendmsg+0x350/0x4e0 [ 270.002254][T15714] __sys_sendmsg+0x1a0/0x240 [ 270.002346][T15714] __x64_sys_sendmsg+0x46/0x50 [ 270.002372][T15714] x64_sys_call+0x26f3/0x2e10 [ 270.002395][T15714] do_syscall_64+0xc9/0x1c0 [ 270.002426][T15714] ? clear_bhb_loop+0x25/0x80 [ 270.002498][T15714] ? clear_bhb_loop+0x25/0x80 [ 270.002521][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.002542][T15714] RIP: 0033:0x7fdb9396d169 [ 270.002555][T15714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.002574][T15714] RSP: 002b:00007fdb91fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.002671][T15714] RAX: ffffffffffffffda RBX: 00007fdb93b85fa0 RCX: 00007fdb9396d169 [ 270.002681][T15714] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 270.002721][T15714] RBP: 00007fdb91fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 270.002733][T15714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.002806][T15714] R13: 0000000000000000 R14: 00007fdb93b85fa0 R15: 00007ffd45da4988 [ 270.002822][T15714] [ 270.337269][T15720] xt_CT: No such helper "syz0" [ 270.561013][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3766'. [ 270.591681][T15729] 9pnet: p9_errstr2errno: server reported unknown error @ [ 270.655901][T15736] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.708987][T15736] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.759366][T15736] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.829041][T15736] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.894587][T15736] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.900414][T15716] syz.5.3762 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 270.910240][T15736] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.913793][T15716] CPU: 0 UID: 0 PID: 15716 Comm: syz.5.3762 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 270.913873][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 270.913888][T15716] Call Trace: [ 270.913895][T15716] [ 270.913936][T15716] dump_stack_lvl+0xf6/0x150 [ 270.914043][T15716] dump_stack+0x15/0x1a [ 270.914124][T15716] dump_header+0x83/0x2d0 [ 270.914233][T15716] oom_kill_process+0x341/0x4c0 [ 270.914271][T15716] out_of_memory+0x9d1/0xc20 [ 270.914311][T15716] mem_cgroup_out_of_memory+0x13f/0x190 [ 270.914381][T15716] try_charge_memcg+0x59f/0x820 [ 270.914422][T15716] charge_memcg+0x50/0xc0 [ 270.914453][T15716] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 270.914502][T15716] __read_swap_cache_async+0x207/0x3b0 [ 270.914542][T15716] swap_cluster_readahead+0x27f/0x400 [ 270.914583][T15716] swapin_readahead+0xe6/0x6f0 [ 270.914616][T15716] ? xfd_validate_state+0x46/0xf0 [ 270.914690][T15716] ? swap_cache_get_folio+0x77/0x210 [ 270.914720][T15716] do_swap_page+0x31c/0x2510 [ 270.914757][T15716] ? __schedule+0x809/0xb70 [ 270.914779][T15716] ? schedule+0x5f/0xd0 [ 270.914861][T15716] ? __rcu_read_lock+0x36/0x50 [ 270.914891][T15716] ? __pfx_default_wake_function+0x10/0x10 [ 270.914960][T15716] handle_mm_fault+0x8ed/0x2e80 [ 270.914997][T15716] ? mas_walk+0x204/0x320 [ 270.915065][T15716] ? __rcu_read_unlock+0x4e/0x70 [ 270.915137][T15716] exc_page_fault+0x3b9/0x6a0 [ 270.915168][T15716] ? do_syscall_64+0xd6/0x1c0 [ 270.915239][T15716] asm_exc_page_fault+0x26/0x30 [ 270.915262][T15716] RIP: 0033:0x7fe0dd273bcc [ 270.915280][T15716] Code: 66 0f 1f 44 00 00 69 3d e6 1a e7 00 e8 03 00 00 48 8d 1d e7 23 34 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 270.915302][T15716] RSP: 002b:00007ffff65cced0 EFLAGS: 00010202 [ 270.915326][T15716] RAX: 0000000000000000 RBX: 00007fe0dd5b5fa0 RCX: 0000000000000000 [ 270.915341][T15716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055559389e808 [ 270.915372][T15716] RBP: 00007fe0dd5b7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 270.915386][T15716] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000422cf [ 270.915402][T15716] R13: 00007fe0dd5b6080 R14: ffffffffffffffff R15: 00007ffff65ccfe0 [ 270.915492][T15716] [ 270.915501][T15716] memory: usage 307200kB, limit 307200kB, failcnt 246 [ 270.930139][T15736] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.934384][T15716] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 270.969283][T15745] loop6: detected capacity change from 0 to 1764 [ 270.973591][T15716] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 270.973644][T15716] Memory cgroup stats for /syz5: [ 270.974023][T15716] cache 0 [ 270.983991][T15736] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.984121][T15716] rss 0 [ 270.984131][T15716] shmem 0 [ 271.205223][T15716] mapped_file 0 [ 271.208680][T15716] dirty 0 [ 271.211674][T15716] writeback 0 [ 271.214941][T15716] workingset_refault_anon 372 [ 271.219662][T15716] workingset_refault_file 601 [ 271.224321][T15716] swap 204800 [ 271.227610][T15716] swapcached 4096 [ 271.231280][T15716] pgpgin 279356 [ 271.234740][T15716] pgpgout 279353 [ 271.238384][T15716] pgfault 239760 [ 271.241925][T15716] pgmajfault 193 [ 271.245489][T15716] inactive_anon 0 [ 271.249206][T15716] active_anon 4096 [ 271.252943][T15716] inactive_file 0 [ 271.256576][T15716] active_file 8192 [ 271.260294][T15716] unevictable 0 [ 271.263910][T15716] hierarchical_memory_limit 314572800 [ 271.269294][T15716] hierarchical_memsw_limit 9223372036854771712 [ 271.275435][T15716] total_cache 0 [ 271.278913][T15716] total_rss 0 [ 271.282211][T15716] total_shmem 0 [ 271.285665][T15716] total_mapped_file 0 [ 271.289657][T15716] total_dirty 0 [ 271.293110][T15716] total_writeback 0 [ 271.296906][T15716] total_workingset_refault_anon 372 [ 271.302100][T15716] total_workingset_refault_file 601 [ 271.307352][T15716] total_swap 204800 [ 271.311260][T15716] total_swapcached 4096 [ 271.315407][T15716] total_pgpgin 279356 [ 271.319403][T15716] total_pgpgout 279353 [ 271.323461][T15716] total_pgfault 239760 [ 271.327529][T15716] total_pgmajfault 193 [ 271.331585][T15716] total_inactive_anon 0 [ 271.335736][T15716] total_active_anon 4096 [ 271.340079][T15716] total_inactive_file 0 [ 271.344250][T15716] total_active_file 8192 [ 271.348516][T15716] total_unevictable 0 [ 271.352583][T15716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3762,pid=15716,uid=0 [ 271.367307][T15716] Memory cgroup out of memory: Killed process 15716 (syz.5.3762) total-vm:93724kB, anon-rss:900kB, file-rss:22384kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 271.762662][T15773] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.785151][T15771] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3782'. [ 271.811895][T15769] xt_CT: No such helper "syz0" [ 271.836636][T15780] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 271.846102][T15773] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.902345][T15773] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.955391][T15794] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 271.962110][T15794] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.969561][T15794] vhci_hcd vhci_hcd.0: Device attached [ 271.975622][ T10] usb 11-1: enqueue for inactive port 0 [ 271.992901][T15773] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.003076][ T10] usb 11-1: enqueue for inactive port 0 [ 272.014946][T15794] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 272.021561][T15794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 272.029182][T15794] vhci_hcd vhci_hcd.0: Device attached [ 272.053565][T15800] 9pnet: p9_errstr2errno: server reported unknown error @ [ 272.068434][T15794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 272.077328][ T10] vhci_hcd: vhci_device speed not set [ 272.083005][T15794] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 272.089696][T15794] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.097134][T15794] vhci_hcd vhci_hcd.0: Device attached [ 272.108263][T15794] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 272.114903][T15794] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 272.122589][T15794] vhci_hcd vhci_hcd.0: Device attached [ 272.131653][T15794] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 272.138276][T15794] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 272.145906][T15794] vhci_hcd vhci_hcd.0: Device attached [ 272.155029][T15794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 272.163185][ T9] vhci_hcd: vhci_device speed not set [ 272.173425][T15794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 272.186190][T15794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 272.204114][T15811] vhci_hcd: connection closed [ 272.204249][ T12] vhci_hcd: stop threads [ 272.213203][ T12] vhci_hcd: release socket [ 272.218272][ T12] vhci_hcd: disconnect device [ 272.226589][T15809] vhci_hcd: connection closed [ 272.226780][ T12] vhci_hcd: stop threads [ 272.235747][ T12] vhci_hcd: release socket [ 272.240294][ T12] vhci_hcd: disconnect device [ 272.245093][ T9] usb 3-1: new full-speed USB device number 20 using vhci_hcd [ 272.249736][T15795] vhci_hcd: connection closed [ 272.252705][T15806] vhci_hcd: connection closed [ 272.252943][ T12] vhci_hcd: stop threads [ 272.257509][T15803] vhci_hcd: connection closed [ 272.266467][ T12] vhci_hcd: release socket [ 272.275612][ T12] vhci_hcd: disconnect device [ 272.283417][ T29] kauditd_printk_skb: 1192 callbacks suppressed [ 272.283430][ T29] audit: type=1326 audit(1744448152.720:22196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb93964127 code=0x7ffc0000 [ 272.313982][ T29] audit: type=1326 audit(1744448152.720:22197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb93909359 code=0x7ffc0000 [ 272.338100][ T29] audit: type=1326 audit(1744448152.720:22198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 272.362078][ T29] audit: type=1326 audit(1744448152.720:22199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb93964127 code=0x7ffc0000 [ 272.386511][ T29] audit: type=1326 audit(1744448152.720:22200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb93909359 code=0x7ffc0000 [ 272.410647][ T29] audit: type=1326 audit(1744448152.720:22201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 272.434209][ T29] audit: type=1326 audit(1744448152.730:22202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb93964127 code=0x7ffc0000 [ 272.458418][ T29] audit: type=1326 audit(1744448152.730:22203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb93909359 code=0x7ffc0000 [ 272.481941][ T29] audit: type=1326 audit(1744448152.730:22204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 272.506433][ T29] audit: type=1326 audit(1744448152.740:22205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.2.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb93964127 code=0x7ffc0000 [ 272.531246][ T12] vhci_hcd: stop threads [ 272.535505][ T12] vhci_hcd: release socket [ 272.540005][ T12] vhci_hcd: disconnect device [ 272.544777][ T12] vhci_hcd: stop threads [ 272.549083][ T12] vhci_hcd: release socket [ 272.553588][ T12] vhci_hcd: disconnect device [ 272.826068][ T5048] bond0: (slave bond_slave_0): interface is now down [ 272.828747][T15830] FAULT_INJECTION: forcing a failure. [ 272.828747][T15830] name failslab, interval 1, probability 0, space 0, times 0 [ 272.832906][ T5048] bond0: (slave bond_slave_1): interface is now down [ 272.845514][T15830] CPU: 1 UID: 0 PID: 15830 Comm: syz.1.3801 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 272.845551][T15830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.845619][T15830] Call Trace: [ 272.845627][T15830] [ 272.845636][T15830] dump_stack_lvl+0xf6/0x150 [ 272.845692][T15830] dump_stack+0x15/0x1a [ 272.845713][T15830] should_fail_ex+0x261/0x270 [ 272.845819][T15830] should_failslab+0x8f/0xb0 [ 272.845860][T15830] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 272.845890][T15830] ? __alloc_skb+0x10d/0x320 [ 272.845921][T15830] __alloc_skb+0x10d/0x320 [ 272.846097][T15830] rtmsg_ifinfo_build_skb+0x63/0x1b0 [ 272.846202][T15830] rtmsg_ifinfo+0x6b/0x100 [ 272.846238][T15830] netif_state_change+0x9e/0xc0 [ 272.846282][T15830] do_setlink+0x6d6/0x2430 [ 272.846308][T15830] ? bond_option_arp_interval_set+0x140/0x1b0 [ 272.846376][T15830] ? __bond_opt_set+0x363/0x980 [ 272.846419][T15830] ? bond_changelink+0x15e6/0x1600 [ 272.846478][T15830] rtnl_newlink+0xe84/0x12d0 [ 272.846533][T15830] ? xa_load+0xbd/0xe0 [ 272.846569][T15830] ? memcg_list_lru_alloc+0xde/0x4a0 [ 272.846611][T15830] ? mod_objcg_state+0x3f9/0x530 [ 272.846679][T15830] ? skb_release_data+0x611/0x630 [ 272.846707][T15830] ? __rcu_read_unlock+0x4e/0x70 [ 272.846739][T15830] ? avc_has_perm_noaudit+0x1cc/0x210 [ 272.846853][T15830] ? selinux_capable+0x1f9/0x260 [ 272.846892][T15830] ? security_capable+0x81/0x90 [ 272.846922][T15830] ? ns_capable+0x7d/0xb0 [ 272.846944][T15830] ? __pfx_rtnl_newlink+0x10/0x10 [ 272.847036][T15830] rtnetlink_rcv_msg+0x65a/0x740 [ 272.847072][T15830] ? should_fail_ex+0xd7/0x270 [ 272.847104][T15830] ? ref_tracker_free+0x3b8/0x420 [ 272.847212][T15830] netlink_rcv_skb+0x12f/0x230 [ 272.847239][T15830] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 272.847284][T15830] rtnetlink_rcv+0x1c/0x30 [ 272.847381][T15830] netlink_unicast+0x605/0x6c0 [ 272.847431][T15830] netlink_sendmsg+0x609/0x720 [ 272.847542][T15830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.847571][T15830] __sock_sendmsg+0x140/0x180 [ 272.847593][T15830] ____sys_sendmsg+0x350/0x4e0 [ 272.847629][T15830] __sys_sendmsg+0x1a0/0x240 [ 272.847713][T15830] __x64_sys_sendmsg+0x46/0x50 [ 272.847806][T15830] x64_sys_call+0x26f3/0x2e10 [ 272.847831][T15830] do_syscall_64+0xc9/0x1c0 [ 272.847865][T15830] ? clear_bhb_loop+0x25/0x80 [ 272.847957][T15830] ? clear_bhb_loop+0x25/0x80 [ 272.847982][T15830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.848006][T15830] RIP: 0033:0x7f96105bd169 [ 272.848023][T15830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.848044][T15830] RSP: 002b:00007f960ec27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.848064][T15830] RAX: ffffffffffffffda RBX: 00007f96107d5fa0 RCX: 00007f96105bd169 [ 272.848090][T15830] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 272.848104][T15830] RBP: 00007f960ec27090 R08: 0000000000000000 R09: 0000000000000000 [ 272.848118][T15830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.848131][T15830] R13: 0000000000000000 R14: 00007f96107d5fa0 R15: 00007ffe11751238 [ 272.848154][T15830] [ 272.869146][T15830] netlink: 'syz.1.3801': attribute type 10 has an invalid length. [ 272.883019][T15796] syz.5.3792 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 272.902409][ T5048] bond0: now running without any active interface! [ 272.904992][T15796] CPU: 0 UID: 0 PID: 15796 Comm: syz.5.3792 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 272.905106][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.905122][T15796] Call Trace: [ 272.905129][T15796] [ 272.905137][T15796] dump_stack_lvl+0xf6/0x150 [ 272.905220][T15796] dump_stack+0x15/0x1a [ 272.905239][T15796] dump_header+0x83/0x2d0 [ 272.905274][T15796] oom_kill_process+0x341/0x4c0 [ 272.905389][T15796] out_of_memory+0x9d1/0xc20 [ 272.905429][T15796] mem_cgroup_out_of_memory+0x13f/0x190 [ 272.905477][T15796] try_charge_memcg+0x59f/0x820 [ 272.905520][T15796] charge_memcg+0x50/0xc0 [ 272.905552][T15796] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 272.905589][T15796] __read_swap_cache_async+0x207/0x3b0 [ 272.905700][T15796] swap_cluster_readahead+0x38b/0x400 [ 272.905821][T15796] swapin_readahead+0xe6/0x6f0 [ 272.905860][T15796] ? swap_cache_get_folio+0x77/0x210 [ 272.905896][T15796] do_swap_page+0x31c/0x2510 [ 272.905986][T15796] ? tracing_record_taskinfo_sched_switch+0x6f/0x270 [ 272.906036][T15796] ? __rcu_read_lock+0x36/0x50 [ 272.906076][T15796] ? __pfx_default_wake_function+0x10/0x10 [ 272.906141][T15796] handle_mm_fault+0x8ed/0x2e80 [ 272.906246][T15796] ? mas_walk+0x204/0x320 [ 272.906284][T15796] ? __rcu_read_unlock+0x4e/0x70 [ 272.906328][T15796] exc_page_fault+0x3b9/0x6a0 [ 272.906374][T15796] asm_exc_page_fault+0x26/0x30 [ 272.906399][T15796] RIP: 0033:0x7fe0dd27d1f0 [ 272.906452][T15796] Code: ce ff ff ff 3f 48 3b 34 c1 0f 84 3b 01 00 00 48 83 c0 01 48 83 f8 04 75 ec 31 f6 80 7c 24 1e 00 0f 85 8e 01 00 00 41 83 c7 01 <45> 3b 78 04 0f 82 6c ff ff ff 80 7b 4e 00 0f 84 17 03 00 00 48 83 [ 272.906477][T15796] RSP: 002b:00007ffff65ccdf0 EFLAGS: 00010206 [ 272.906509][T15796] RAX: 000000110c260000 RBX: 00007fe0de0e5720 RCX: 0000000000000000 [ 272.906594][T15796] RDX: 0000000000000b45 RSI: 000000000000002d RDI: 0000000000000001 [ 272.906619][T15796] RBP: ffffffff81900b44 R08: 00007fe0dd5b6038 R09: 00007fe0dd5a2000 [ 272.906632][T15796] R10: 00007fe0dca0f008 R11: 000000000000000a R12: 000000000000000a [ 272.906644][T15796] R13: 0000000000000000 R14: ffffffff819008cc R15: 00000000000411d2 [ 272.906658][T15796] ? prune_dcache_sb+0x2c/0xb0 [ 272.906682][T15796] ? dentry_lru_isolate+0x1e4/0x220 [ 272.906724][T15796] [ 272.906731][T15796] memory: usage 307200kB, limit 307200kB, failcnt 622 [ 273.052937][T15838] loop7: detected capacity change from 0 to 512 [ 273.057032][T15796] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 273.057048][T15796] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 273.057059][T15796] Memory cgroup stats for /syz5 [ 273.062337][T15838] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 273.066534][T15796] : [ 273.066933][T15796] cache 0 [ 273.078940][T15838] EXT4-fs (loop7): 1 truncate cleaned up [ 273.080494][T15796] rss 0 [ 273.085424][T15838] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.091063][T15796] shmem 0 [ 273.091073][T15796] mapped_file 0 [ 273.091081][T15796] dirty 0 [ 273.091088][T15796] writeback 0 [ 273.091096][T15796] workingset_refault_anon 427 [ 273.091114][T15796] workingset_refault_file 633 [ 273.091123][T15796] swap 208896 [ 273.091131][T15796] swapcached 0 [ 273.510973][T15796] pgpgin 279615 [ 273.514419][T15796] pgpgout 279613 [ 273.517968][T15796] pgfault 240291 [ 273.521550][T15796] pgmajfault 238 [ 273.525121][T15796] inactive_anon 0 [ 273.528771][T15796] active_anon 0 [ 273.532214][T15796] inactive_file 8192 [ 273.536093][T15796] active_file 0 [ 273.539581][T15796] unevictable 0 [ 273.543028][T15796] hierarchical_memory_limit 314572800 [ 273.548425][T15796] hierarchical_memsw_limit 9223372036854771712 [ 273.554591][T15796] total_cache 0 [ 273.558130][T15796] total_rss 0 [ 273.561412][T15796] total_shmem 0 [ 273.564863][T15796] total_mapped_file 0 [ 273.568882][T15796] total_dirty 0 [ 273.572388][T15796] total_writeback 0 [ 273.576220][T15796] total_workingset_refault_anon 427 [ 273.581430][T15796] total_workingset_refault_file 633 [ 273.586664][T15796] total_swap 208896 [ 273.590501][T15796] total_swapcached 0 [ 273.594394][T15796] total_pgpgin 279615 [ 273.598405][T15796] total_pgpgout 279613 [ 273.602527][T15796] total_pgfault 240291 [ 273.606601][T15796] total_pgmajfault 238 [ 273.610672][T15796] total_inactive_anon 0 [ 273.614884][T15796] total_active_anon 0 [ 273.618873][T15796] total_inactive_file 8192 [ 273.623279][T15796] total_active_file 0 [ 273.627339][T15796] total_unevictable 0 [ 273.631312][T15796] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3792,pid=15796,uid=0 [ 273.646153][T15796] Memory cgroup out of memory: Killed process 15796 (syz.5.3792) total-vm:93724kB, anon-rss:916kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 273.687126][T15773] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.712773][T15773] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.729684][T15773] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.745237][T15773] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.808549][T15851] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3808'. [ 273.835101][T15854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.853986][T15854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.957152][ T3381] usb 13-1: enqueue for inactive port 0 [ 273.962788][ T3381] usb 13-1: enqueue for inactive port 0 [ 273.991940][ T9638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.009290][T15851] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 274.037245][ T3381] vhci_hcd: vhci_device speed not set [ 274.116791][T15874] loop9: detected capacity change from 0 to 7 [ 274.132334][T15868] 9pnet: p9_errstr2errno: server reported unknown error @ [ 274.140864][T15874] Buffer I/O error on dev loop9, logical block 0, async page read [ 274.149451][T15874] Buffer I/O error on dev loop9, logical block 0, async page read [ 274.157325][T15874] loop9: unable to read partition table [ 274.163007][T15874] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 274.163007][T15874] U) failed (rc=-5) [ 274.186394][T15879] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.239378][T15879] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.288913][T15879] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.348968][T15879] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.660293][T15914] loop9: detected capacity change from 0 to 7 [ 274.666497][T15914] Buffer I/O error on dev loop9, logical block 0, async page read [ 274.674433][T15914] Buffer I/O error on dev loop9, logical block 0, async page read [ 274.682273][T15914] loop9: unable to read partition table [ 274.688569][T15914] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 274.688569][T15914] U) failed (rc=-5) [ 275.088362][T15888] syz.5.3821 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 275.099386][T15888] CPU: 0 UID: 0 PID: 15888 Comm: syz.5.3821 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 275.099476][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.099489][T15888] Call Trace: [ 275.099494][T15888] [ 275.099500][T15888] dump_stack_lvl+0xf6/0x150 [ 275.099520][T15888] dump_stack+0x15/0x1a [ 275.099534][T15888] dump_header+0x83/0x2d0 [ 275.099624][T15888] oom_kill_process+0x341/0x4c0 [ 275.099660][T15888] out_of_memory+0x9d1/0xc20 [ 275.099704][T15888] mem_cgroup_out_of_memory+0x13f/0x190 [ 275.099767][T15888] try_charge_memcg+0x59f/0x820 [ 275.099794][T15888] charge_memcg+0x50/0xc0 [ 275.099815][T15888] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 275.099912][T15888] __read_swap_cache_async+0x207/0x3b0 [ 275.099939][T15888] swap_cluster_readahead+0x27f/0x400 [ 275.099966][T15888] swapin_readahead+0xe6/0x6f0 [ 275.100035][T15888] ? swap_cache_get_folio+0x77/0x210 [ 275.100063][T15888] do_swap_page+0x31c/0x2510 [ 275.100095][T15888] ? __rcu_read_lock+0x36/0x50 [ 275.100119][T15888] ? __pfx_default_wake_function+0x10/0x10 [ 275.100152][T15888] handle_mm_fault+0x8ed/0x2e80 [ 275.100232][T15888] ? mas_walk+0x204/0x320 [ 275.100257][T15888] ? __rcu_read_unlock+0x4e/0x70 [ 275.100351][T15888] exc_page_fault+0x3b9/0x6a0 [ 275.100379][T15888] asm_exc_page_fault+0x26/0x30 [ 275.100399][T15888] RIP: 0033:0x7fe0dd273bcc [ 275.100414][T15888] Code: 66 0f 1f 44 00 00 69 3d e6 1a e7 00 e8 03 00 00 48 8d 1d e7 23 34 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 275.100431][T15888] RSP: 002b:00007ffff65cced0 EFLAGS: 00010283 [ 275.100443][T15888] RAX: 0000000000000000 RBX: 00007fe0dd5b6080 RCX: 0000000000000000 [ 275.100541][T15888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055559389e808 [ 275.100552][T15888] RBP: 00007fe0dd5b7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 275.100562][T15888] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004328b [ 275.100596][T15888] R13: 00007fe0dd5b6080 R14: ffffffffffffffff R15: 00007ffff65ccfe0 [ 275.100613][T15888] [ 275.100620][T15888] memory: usage 307200kB, limit 307200kB, failcnt 793 [ 275.312488][T15888] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 275.320402][T15888] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 275.327737][T15888] Memory cgroup stats for /syz5: [ 275.328169][T15888] cache 0 [ 275.336397][T15888] rss 4096 [ 275.339456][T15888] shmem 0 [ 275.342396][T15888] mapped_file 0 [ 275.345945][T15888] dirty 0 [ 275.348954][T15888] writeback 4096 [ 275.352503][T15888] workingset_refault_anon 475 [ 275.357256][T15888] workingset_refault_file 633 [ 275.362004][T15888] swap 200704 [ 275.365450][T15888] swapcached 8192 [ 275.369128][T15888] pgpgin 279919 [ 275.372592][T15888] pgpgout 279915 [ 275.376139][T15888] pgfault 241021 [ 275.379815][T15888] pgmajfault 271 [ 275.383366][T15888] inactive_anon 4096 [ 275.387271][T15888] active_anon 4096 [ 275.390994][T15888] inactive_file 0 [ 275.394629][T15888] active_file 8192 [ 275.398411][T15888] unevictable 0 [ 275.401891][T15888] hierarchical_memory_limit 314572800 [ 275.407314][T15888] hierarchical_memsw_limit 9223372036854771712 [ 275.413529][T15888] total_cache 0 [ 275.417033][T15888] total_rss 4096 [ 275.420615][T15888] total_shmem 0 [ 275.424066][T15888] total_mapped_file 0 [ 275.428181][T15888] total_dirty 0 [ 275.431738][T15888] total_writeback 4096 [ 275.435806][T15888] total_workingset_refault_anon 475 [ 275.441051][T15888] total_workingset_refault_file 633 [ 275.446250][T15888] total_swap 200704 [ 275.450100][T15888] total_swapcached 8192 [ 275.454268][T15888] total_pgpgin 279919 [ 275.456342][T15944] FAULT_INJECTION: forcing a failure. [ 275.456342][T15944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.458351][T15888] total_pgpgout 279915 [ 275.472093][T15944] CPU: 1 UID: 0 PID: 15944 Comm: syz.7.3845 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 275.472124][T15944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.472138][T15944] Call Trace: [ 275.472144][T15944] [ 275.472202][T15944] dump_stack_lvl+0xf6/0x150 [ 275.472275][T15944] dump_stack+0x15/0x1a [ 275.472294][T15944] should_fail_ex+0x261/0x270 [ 275.472324][T15944] should_fail+0xb/0x10 [ 275.472349][T15944] should_fail_usercopy+0x1a/0x20 [ 275.472410][T15944] _copy_to_iter+0x24e/0xd10 [ 275.472443][T15944] ? traverse+0x397/0x3c0 [ 275.472514][T15944] ? __virt_addr_valid+0x1ed/0x250 [ 275.472536][T15944] ? __check_object_size+0x367/0x510 [ 275.472565][T15944] seq_read_iter+0x1dd/0x970 [ 275.472656][T15944] seq_read+0x1fa/0x240 [ 275.472712][T15944] ? __pfx_seq_read+0x10/0x10 [ 275.472737][T15944] proc_reg_read+0x13f/0x1d0 [ 275.472764][T15944] vfs_readv+0x3e5/0x660 [ 275.472856][T15944] ? __pfx_proc_reg_read+0x10/0x10 [ 275.472928][T15944] __x64_sys_preadv+0xf9/0x1c0 [ 275.472998][T15944] x64_sys_call+0x1410/0x2e10 [ 275.473039][T15944] do_syscall_64+0xc9/0x1c0 [ 275.473074][T15944] ? clear_bhb_loop+0x25/0x80 [ 275.473097][T15944] ? clear_bhb_loop+0x25/0x80 [ 275.473120][T15944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.473188][T15944] RIP: 0033:0x7f8324f0d169 [ 275.473205][T15944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.473225][T15944] RSP: 002b:00007f832356f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 275.473273][T15944] RAX: ffffffffffffffda RBX: 00007f8325125fa0 RCX: 00007f8324f0d169 [ 275.473286][T15944] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 275.473299][T15944] RBP: 00007f832356f090 R08: 0000000000000000 R09: 0000000000000000 [ 275.473370][T15944] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 275.473384][T15944] R13: 0000000000000000 R14: 00007f8325125fa0 R15: 00007ffdfe10faf8 [ 275.473407][T15944] [ 275.678942][T15888] total_pgfault 241021 [ 275.683078][T15888] total_pgmajfault 271 [ 275.687247][T15888] total_inactive_anon 4096 [ 275.691654][T15888] total_active_anon 4096 [ 275.695892][T15888] total_inactive_file 0 [ 275.700124][T15888] total_active_file 8192 [ 275.704361][T15888] total_unevictable 0 [ 275.708358][T15888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3821,pid=15888,uid=0 [ 275.723183][T15888] Memory cgroup out of memory: Killed process 15888 (syz.5.3821) total-vm:93724kB, anon-rss:916kB, file-rss:22384kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 275.910394][T15954] loop7: detected capacity change from 0 to 1764 [ 275.982469][T15955] 9pnet: p9_errstr2errno: server reported unknown error @ [ 276.064732][T15972] loop7: detected capacity change from 0 to 512 [ 276.097973][T15972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 276.177015][T15972] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.205612][T15972] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.220861][T15991] FAULT_INJECTION: forcing a failure. [ 276.220861][T15991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 276.234184][T15991] CPU: 0 UID: 0 PID: 15991 Comm: syz.2.3861 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 276.234290][T15991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.234304][T15991] Call Trace: [ 276.234311][T15991] [ 276.234348][T15991] dump_stack_lvl+0xf6/0x150 [ 276.234369][T15991] dump_stack+0x15/0x1a [ 276.234383][T15991] should_fail_ex+0x261/0x270 [ 276.234407][T15991] should_fail_alloc_page+0xfd/0x110 [ 276.234435][T15991] __alloc_frozen_pages_noprof+0x11d/0x360 [ 276.234565][T15991] alloc_pages_bulk_noprof+0x3a5/0x580 [ 276.234594][T15991] ? should_failslab+0x8f/0xb0 [ 276.234676][T15991] ? __kmalloc_noprof+0x1eb/0x410 [ 276.234694][T15991] ? copy_splice_read+0xb8/0x5d0 [ 276.234757][T15991] copy_splice_read+0xe7/0x5d0 [ 276.234782][T15991] ? file_has_perm+0x334/0x380 [ 276.234804][T15991] sock_splice_read+0xac/0xb0 [ 276.234834][T15991] ? __pfx_sock_splice_read+0x10/0x10 [ 276.234865][T15991] splice_file_to_pipe+0x237/0x390 [ 276.234893][T15991] do_splice+0xcec/0x1160 [ 276.234918][T15991] ? restore_sigcontext+0x1ba/0x230 [ 276.235001][T15991] ? __rcu_read_unlock+0x4e/0x70 [ 276.235025][T15991] ? __fget_files+0x186/0x1c0 [ 276.235041][T15991] ? pipe_clear_nowait+0x60/0x110 [ 276.235084][T15991] __se_sys_splice+0x254/0x3b0 [ 276.235112][T15991] __x64_sys_splice+0x78/0x90 [ 276.235137][T15991] x64_sys_call+0xf5b/0x2e10 [ 276.235156][T15991] do_syscall_64+0xc9/0x1c0 [ 276.235243][T15991] ? clear_bhb_loop+0x25/0x80 [ 276.235262][T15991] ? clear_bhb_loop+0x25/0x80 [ 276.235341][T15991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.235378][T15991] RIP: 0033:0x7fdb9396d169 [ 276.235392][T15991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.235410][T15991] RSP: 002b:00007fdb91fd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 276.235428][T15991] RAX: ffffffffffffffda RBX: 00007fdb93b85fa0 RCX: 00007fdb9396d169 [ 276.235499][T15991] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 276.235511][T15991] RBP: 00007fdb91fd7090 R08: 0000000000000007 R09: 0000000000000009 [ 276.235585][T15991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.235665][T15991] R13: 0000000000000000 R14: 00007fdb93b85fa0 R15: 00007ffd45da4988 [ 276.235719][T15991] [ 276.236521][T15972] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3856: bg 0: block 304: padding at end of block bitmap is not set [ 276.282581][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3862'. [ 276.294638][T15972] EXT4-fs (loop7): Remounting filesystem read-only [ 276.519090][ T9638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.545178][T16007] 9pnet: p9_errstr2errno: server reported unknown error @ [ 276.638537][T16019] loop7: detected capacity change from 0 to 512 [ 276.650323][T16019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.662984][T16019] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.676923][T16019] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3874: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 276.693657][T16019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 276.702727][T16019] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3874: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 276.720835][T16019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 276.732224][T16019] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3874: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 276.751462][T16019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 276.761308][T16019] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3874: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 276.780396][T16019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 276.790034][T16019] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3874: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 276.809420][T16019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 276.830450][ T9638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.884991][T16023] syz_tun: entered allmulticast mode [ 276.893669][T16023] syz_tun: left allmulticast mode [ 276.948463][T16031] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 276.955005][T16031] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 276.962495][T16031] vhci_hcd vhci_hcd.0: Device attached [ 276.973001][T16032] vhci_hcd: connection closed [ 276.973087][ T5040] vhci_hcd: stop threads [ 276.982297][ T5040] vhci_hcd: release socket [ 276.986800][ T5040] vhci_hcd: disconnect device [ 277.080268][T16037] FAULT_INJECTION: forcing a failure. [ 277.080268][T16037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.093492][T16037] CPU: 0 UID: 0 PID: 16037 Comm: syz.1.3880 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 277.093525][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.093537][T16037] Call Trace: [ 277.093543][T16037] [ 277.093550][T16037] dump_stack_lvl+0xf6/0x150 [ 277.093572][T16037] dump_stack+0x15/0x1a [ 277.093587][T16037] should_fail_ex+0x261/0x270 [ 277.093658][T16037] should_fail+0xb/0x10 [ 277.093683][T16037] should_fail_usercopy+0x1a/0x20 [ 277.093708][T16037] _copy_from_user+0x1c/0xa0 [ 277.093735][T16037] simple_transaction_get+0xef/0x130 [ 277.093763][T16037] selinux_transaction_write+0x86/0x100 [ 277.093851][T16037] ? __pfx_selinux_transaction_write+0x10/0x10 [ 277.093897][T16037] vfs_write+0x295/0x950 [ 277.093977][T16037] ? putname+0xe1/0x100 [ 277.093993][T16037] ? __fget_files+0x186/0x1c0 [ 277.094012][T16037] ksys_write+0xeb/0x1b0 [ 277.094114][T16037] __x64_sys_write+0x42/0x50 [ 277.094138][T16037] x64_sys_call+0x2a45/0x2e10 [ 277.094194][T16037] do_syscall_64+0xc9/0x1c0 [ 277.094223][T16037] ? clear_bhb_loop+0x25/0x80 [ 277.094269][T16037] ? clear_bhb_loop+0x25/0x80 [ 277.094389][T16037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.094410][T16037] RIP: 0033:0x7f96105bd169 [ 277.094424][T16037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.094483][T16037] RSP: 002b:00007f960ec27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.094499][T16037] RAX: ffffffffffffffda RBX: 00007f96107d5fa0 RCX: 00007f96105bd169 [ 277.094519][T16037] RDX: 0000000000000056 RSI: 00002000000004c0 RDI: 0000000000000005 [ 277.094530][T16037] RBP: 00007f960ec27090 R08: 0000000000000000 R09: 0000000000000000 [ 277.094541][T16037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.094552][T16037] R13: 0000000000000000 R14: 00007f96107d5fa0 R15: 00007ffe11751238 [ 277.094577][T16037] [ 277.329780][ T9] usb 3-1: enqueue for inactive port 0 [ 277.335410][ T9] usb 3-1: enqueue for inactive port 0 [ 277.394057][T15879] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.406220][T15879] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.415156][ T9] vhci_hcd: vhci_device speed not set [ 277.427676][T15879] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.441994][T15879] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.463535][T16052] loop5: detected capacity change from 0 to 527 [ 277.483809][ T29] kauditd_printk_skb: 548 callbacks suppressed [ 277.483823][ T29] audit: type=1326 audit(1744448157.940:22752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16053 comm="syz.6.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a329d169 code=0x7ffc0000 [ 277.514236][T16052] EXT4-fs (loop5): failed to parse options in superblock:  [ 277.527222][T16052] EXT4-fs (loop5): Unsupported encryption level 4 [ 277.539167][ T29] audit: type=1326 audit(1744448157.990:22753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16053 comm="syz.6.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f72a329d169 code=0x7ffc0000 [ 277.562900][ T29] audit: type=1326 audit(1744448158.000:22754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16053 comm="syz.6.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a329d169 code=0x7ffc0000 [ 277.587149][ T29] audit: type=1326 audit(1744448158.000:22755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16053 comm="syz.6.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f72a329d169 code=0x7ffc0000 [ 277.611404][ T29] audit: type=1326 audit(1744448158.000:22756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16053 comm="syz.6.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a329d169 code=0x7ffc0000 [ 277.634994][ T29] audit: type=1326 audit(1744448158.000:22757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16053 comm="syz.6.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a329d169 code=0x7ffc0000 [ 277.659131][ T29] audit: type=1326 audit(1744448158.000:22758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16053 comm="syz.6.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f72a329d169 code=0x7ffc0000 [ 277.682761][ T29] audit: type=1326 audit(1744448158.000:22759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16053 comm="syz.6.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a329d169 code=0x7ffc0000 [ 277.707037][ T29] audit: type=1326 audit(1744448158.000:22760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16053 comm="syz.6.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a329d169 code=0x7ffc0000 [ 277.731364][ T29] audit: type=1326 audit(1744448158.000:22761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16053 comm="syz.6.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f72a329d169 code=0x7ffc0000 [ 277.846904][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3890'. [ 277.924916][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3896'. [ 277.939706][T16079] loop7: detected capacity change from 0 to 512 [ 277.947547][T16079] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.959270][T16079] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.3896: Failed to acquire dquot type 0 [ 277.960541][T16083] loop9: detected capacity change from 0 to 7 [ 277.974054][T16079] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 277.992424][T16079] EXT4-fs (loop7): 1 truncate cleaned up [ 277.998427][T16079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.016252][T16083] Buffer I/O error on dev loop9, logical block 0, async page read [ 278.029945][T16079] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 278.040779][T16083] Buffer I/O error on dev loop9, logical block 0, async page read [ 278.048662][T16083] loop9: unable to read partition table [ 278.055153][ T9638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.058252][T16080] loop6: detected capacity change from 0 to 512 [ 278.073291][T16083] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 278.073291][T16083] U) failed (rc=-5) [ 278.100251][T16080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.113123][T16080] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.135348][T16080] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #2: comm syz.6.3894: corrupted inode contents [ 278.149864][T16093] loop7: detected capacity change from 0 to 512 [ 278.167404][T16080] EXT4-fs error (device loop6): ext4_dirty_inode:6074: inode #2: comm syz.6.3894: mark_inode_dirty error [ 278.180138][T16080] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #2: comm syz.6.3894: corrupted inode contents [ 278.195266][T16080] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #2: comm syz.6.3894: corrupted inode contents [ 278.211884][T16093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.224576][T16093] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.226542][T16080] EXT4-fs error (device loop6): ext4_dirty_inode:6074: inode #2: comm syz.6.3894: mark_inode_dirty error [ 278.247326][T16093] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3898: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 278.264025][T16093] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 278.276533][T16093] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3898: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 278.287255][T16080] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #2: comm syz.6.3894: corrupted inode contents [ 278.309885][T16093] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 278.310161][T16080] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.3894: mark_inode_dirty error [ 278.321083][T16093] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3898: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 278.333779][T16080] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #2: comm syz.6.3894: corrupted inode contents [ 278.360888][T16093] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 278.373825][T16103] loop5: detected capacity change from 0 to 8192 [ 278.380313][T16080] EXT4-fs error (device loop6): ext4_dirty_inode:6074: inode #2: comm syz.6.3894: mark_inode_dirty error [ 278.388002][T16093] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3898: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 278.416806][T16097] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #2: comm syz.6.3894: corrupted inode contents [ 278.433324][T16093] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 278.443427][T16093] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3898: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 278.463205][T16093] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 278.512412][ T9638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.632757][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3907'. [ 278.919331][T14995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.008535][T16125] loop6: detected capacity change from 0 to 512 [ 279.031127][T16125] EXT4-fs: Ignoring removed bh option [ 279.050344][T16125] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 279.080519][T16125] EXT4-fs (loop6): 1 truncate cleaned up [ 279.092092][T16125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.119344][T16125] IPv4: Oversized IP packet from 127.202.26.0 [ 279.223151][T14995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.473179][T16152] loop6: detected capacity change from 0 to 512 [ 279.481323][T16153] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 279.487932][T16153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.495530][T16153] vhci_hcd vhci_hcd.0: Device attached [ 279.505544][T16146] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 279.512244][T16146] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 279.520572][T16146] vhci_hcd vhci_hcd.0: Device attached [ 279.530415][T16152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.545089][T16152] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.545448][T16146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 279.559689][T16152] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3919: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 279.571751][T16146] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(17) [ 279.581530][T16152] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 279.587196][T16146] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 279.587938][T16146] vhci_hcd vhci_hcd.0: Device attached [ 279.611788][T16152] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3919: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 279.615952][T16146] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(19) [ 279.634756][T16146] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 279.642491][T16146] vhci_hcd vhci_hcd.0: Device attached [ 279.644526][T16152] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 279.650397][T16146] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(21) [ 279.663485][T16146] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 279.671107][T16146] vhci_hcd vhci_hcd.0: Device attached [ 279.676038][T16152] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3919: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 279.678068][T16146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 279.696698][T16152] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 279.704428][T16146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 279.713687][T16152] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3919: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 279.720961][T16146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 279.740205][T16152] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 279.751933][T16165] vhci_hcd: connection closed [ 279.752039][ T985] usb 11-2: new low-speed USB device number 17 using vhci_hcd [ 279.752185][T16152] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3919: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 279.757014][T16163] vhci_hcd: connection closed [ 279.767796][T16152] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 279.782095][T16160] vhci_hcd: connection closed [ 279.785244][ T41] vhci_hcd: stop threads [ 279.785255][ T41] vhci_hcd: release socket [ 279.785268][ T41] vhci_hcd: disconnect device [ 279.797494][T16154] vhci_hcd: connection reset by peer [ 279.803388][T16149] vhci_hcd: connection closed [ 279.823162][ T41] vhci_hcd: stop threads [ 279.832193][ T41] vhci_hcd: release socket [ 279.836605][ T41] vhci_hcd: disconnect device [ 279.841484][ T41] vhci_hcd: stop threads [ 279.845828][ T41] vhci_hcd: release socket [ 279.850350][ T41] vhci_hcd: disconnect device [ 279.855417][ T41] vhci_hcd: stop threads [ 279.856123][T14995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.859718][ T41] vhci_hcd: release socket [ 279.873105][ T41] vhci_hcd: disconnect device [ 279.878112][ T41] vhci_hcd: stop threads [ 279.882360][ T41] vhci_hcd: release socket [ 279.886780][ T41] vhci_hcd: disconnect device [ 279.899951][T16168] FAULT_INJECTION: forcing a failure. [ 279.899951][T16168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.913047][T16168] CPU: 0 UID: 0 PID: 16168 Comm: syz.6.3921 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 279.913101][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.913123][T16168] Call Trace: [ 279.913129][T16168] [ 279.913136][T16168] dump_stack_lvl+0xf6/0x150 [ 279.913157][T16168] dump_stack+0x15/0x1a [ 279.913194][T16168] should_fail_ex+0x261/0x270 [ 279.913217][T16168] should_fail+0xb/0x10 [ 279.913292][T16168] should_fail_usercopy+0x1a/0x20 [ 279.913315][T16168] _copy_from_user+0x1c/0xa0 [ 279.913345][T16168] copy_msghdr_from_user+0x54/0x2b0 [ 279.913438][T16168] ? __fget_files+0x186/0x1c0 [ 279.913457][T16168] __sys_sendmsg+0x141/0x240 [ 279.913501][T16168] __x64_sys_sendmsg+0x46/0x50 [ 279.913568][T16168] x64_sys_call+0x26f3/0x2e10 [ 279.913586][T16168] do_syscall_64+0xc9/0x1c0 [ 279.913612][T16168] ? clear_bhb_loop+0x25/0x80 [ 279.913635][T16168] ? clear_bhb_loop+0x25/0x80 [ 279.913682][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.913699][T16168] RIP: 0033:0x7f72a329d169 [ 279.913710][T16168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.913726][T16168] RSP: 002b:00007f72a1907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.913746][T16168] RAX: ffffffffffffffda RBX: 00007f72a34b5fa0 RCX: 00007f72a329d169 [ 279.913759][T16168] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000006 [ 279.913841][T16168] RBP: 00007f72a1907090 R08: 0000000000000000 R09: 0000000000000000 [ 279.913857][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.913869][T16168] R13: 0000000000000000 R14: 00007f72a34b5fa0 R15: 00007fffdbd53428 [ 279.913889][T16168] [ 280.140549][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3925'. [ 280.390781][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3934'. [ 280.399781][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3934'. [ 280.408766][T16197] netlink: 'syz.6.3934': attribute type 20 has an invalid length. [ 280.448876][T16198] loop6: detected capacity change from 0 to 1024 [ 280.472101][T16198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.711763][T16197] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 280.768403][T14995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.910219][T16213] loop6: detected capacity change from 0 to 1764 [ 281.086191][T16215] loop6: detected capacity change from 0 to 128 [ 281.252033][T16217] loop6: detected capacity change from 0 to 1024 [ 281.293257][T16217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.317867][T16217] FAULT_INJECTION: forcing a failure. [ 281.317867][T16217] name failslab, interval 1, probability 0, space 0, times 0 [ 281.330519][T16217] CPU: 0 UID: 0 PID: 16217 Comm: syz.6.3941 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 281.330667][T16217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.330677][T16217] Call Trace: [ 281.330682][T16217] [ 281.330688][T16217] dump_stack_lvl+0xf6/0x150 [ 281.330710][T16217] dump_stack+0x15/0x1a [ 281.330726][T16217] should_fail_ex+0x261/0x270 [ 281.330880][T16217] should_failslab+0x8f/0xb0 [ 281.330938][T16217] kmem_cache_alloc_noprof+0x59/0x340 [ 281.330959][T16217] ? getname_flags+0x81/0x3b0 [ 281.330981][T16217] getname_flags+0x81/0x3b0 [ 281.331002][T16217] do_sys_openat2+0x65/0x110 [ 281.331026][T16217] __x64_sys_openat+0xf8/0x120 [ 281.331049][T16217] x64_sys_call+0x1ac/0x2e10 [ 281.331068][T16217] do_syscall_64+0xc9/0x1c0 [ 281.331110][T16217] ? clear_bhb_loop+0x25/0x80 [ 281.331127][T16217] ? clear_bhb_loop+0x25/0x80 [ 281.331147][T16217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.331167][T16217] RIP: 0033:0x7f72a329d169 [ 281.331228][T16217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.331292][T16217] RSP: 002b:00007f72a1907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 281.331310][T16217] RAX: ffffffffffffffda RBX: 00007f72a34b5fa0 RCX: 00007f72a329d169 [ 281.331322][T16217] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 281.331332][T16217] RBP: 00007f72a1907090 R08: 0000000000000000 R09: 0000000000000000 [ 281.331343][T16217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.331353][T16217] R13: 0000000000000000 R14: 00007f72a34b5fa0 R15: 00007fffdbd53428 [ 281.331369][T16217] [ 281.507756][T16226] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 281.567137][T16226] SELinux: failed to load policy [ 281.588159][T14995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.618030][T16228] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 281.618049][T16228] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 281.618101][T16228] vhci_hcd vhci_hcd.0: Device attached [ 281.634745][T16228] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 281.634769][T16228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 281.634794][T16228] vhci_hcd vhci_hcd.0: Device attached [ 281.635154][T16228] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 281.636647][T16228] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 281.636670][T16228] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 281.636701][T16228] vhci_hcd vhci_hcd.0: Device attached [ 281.645583][T16228] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 281.645604][T16228] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 281.645654][T16228] vhci_hcd vhci_hcd.0: Device attached [ 281.662399][T16228] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 281.662419][T16228] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 281.662528][T16228] vhci_hcd vhci_hcd.0: Device attached [ 281.662825][T16228] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 281.663040][T16228] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 281.663313][T16228] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 281.668968][T16235] vhci_hcd: connection closed [ 281.669087][ T5024] vhci_hcd: stop threads [ 281.669099][ T5024] vhci_hcd: release socket [ 281.669103][T16237] vhci_hcd: connection closed [ 281.669107][ T5024] vhci_hcd: disconnect device [ 281.669215][T16231] vhci_hcd: connection closed [ 281.669280][ T5024] vhci_hcd: stop threads [ 281.669287][ T5024] vhci_hcd: release socket [ 281.669292][ T5024] vhci_hcd: disconnect device [ 281.669351][T16233] vhci_hcd: connection closed [ 281.669361][ T5024] vhci_hcd: stop threads [ 281.669369][ T5024] vhci_hcd: release socket [ 281.669375][ T5024] vhci_hcd: disconnect device [ 281.669387][T16229] vhci_hcd: connection closed [ 281.669796][ T5024] vhci_hcd: stop threads [ 281.669804][ T5024] vhci_hcd: release socket [ 281.669875][ T5024] vhci_hcd: disconnect device [ 281.669974][ T5024] vhci_hcd: stop threads [ 281.669980][ T5024] vhci_hcd: release socket [ 281.669986][ T5024] vhci_hcd: disconnect device [ 281.726506][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3945'. [ 282.102207][T16273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3949'. [ 282.411761][T16311] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 282.418479][T16311] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 282.425925][T16311] vhci_hcd vhci_hcd.0: Device attached [ 282.435929][T16311] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 282.442553][T16311] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.450196][T16311] vhci_hcd vhci_hcd.0: Device attached [ 282.459221][T16311] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.467894][T16311] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 282.474504][T16311] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 282.481970][T16311] vhci_hcd vhci_hcd.0: Device attached [ 282.489302][ T29] kauditd_printk_skb: 1095 callbacks suppressed [ 282.489325][ T29] audit: type=1326 audit(1744448162.950:23855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb93964127 code=0x7ffc0000 [ 282.490920][T16311] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 282.495617][ T29] audit: type=1326 audit(1744448162.950:23856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb93909359 code=0x7ffc0000 [ 282.519000][T16311] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 282.519112][T16311] vhci_hcd vhci_hcd.0: Device attached [ 282.523284][T16311] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 282.526261][ T29] audit: type=1326 audit(1744448162.950:23857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 282.549633][T16311] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 282.549784][T16311] vhci_hcd vhci_hcd.0: Device attached [ 282.553676][T16311] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.614864][ T29] audit: type=1326 audit(1744448163.020:23858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb93964127 code=0x7ffc0000 [ 282.614901][ T29] audit: type=1326 audit(1744448163.020:23859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb93909359 code=0x7ffc0000 [ 282.662475][ T29] audit: type=1326 audit(1744448163.020:23860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 282.686927][ T29] audit: type=1326 audit(1744448163.050:23861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb93964127 code=0x7ffc0000 [ 282.711431][ T29] audit: type=1326 audit(1744448163.050:23862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb93909359 code=0x7ffc0000 [ 282.734940][ T29] audit: type=1326 audit(1744448163.050:23863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdb9396d169 code=0x7ffc0000 [ 282.759110][ T29] audit: type=1326 audit(1744448163.060:23864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb93964127 code=0x7ffc0000 [ 282.788119][T16322] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.801016][T16311] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.814476][T16320] vhci_hcd: connection closed [ 282.814648][ T12] vhci_hcd: stop threads [ 282.823650][ T12] vhci_hcd: release socket [ 282.828105][ T12] vhci_hcd: disconnect device [ 282.835772][T16318] vhci_hcd: connection closed [ 282.835890][T16316] vhci_hcd: connection closed [ 282.843492][T16312] vhci_hcd: connection closed [ 282.851393][T16314] vhci_hcd: connection closed [ 282.857182][ T12] vhci_hcd: stop threads [ 282.866091][ T12] vhci_hcd: release socket [ 282.870722][ T12] vhci_hcd: disconnect device [ 282.892851][ T12] vhci_hcd: stop threads [ 282.897172][ T12] vhci_hcd: release socket [ 282.901609][ T12] vhci_hcd: disconnect device [ 282.919391][ T12] vhci_hcd: stop threads [ 282.923667][ T12] vhci_hcd: release socket [ 282.928137][ T12] vhci_hcd: disconnect device [ 282.950581][ T12] vhci_hcd: stop threads [ 282.954879][ T12] vhci_hcd: release socket [ 282.959352][ T12] vhci_hcd: disconnect device [ 283.196770][T16325] vhci_hcd: invalid port number 15 [ 283.264102][T16337] loop6: detected capacity change from 0 to 512 [ 283.282382][T16337] EXT4-fs error (device loop6): ext4_iget_extra_inode:4692: inode #15: comm syz.6.3970: corrupted in-inode xattr: e_value size too large [ 283.320750][T16337] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.3970: couldn't read orphan inode 15 (err -117) [ 283.333912][T16337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.432722][T14995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.499381][T16357] rdma_op ffff88819cfedd80 conn xmit_rdma 0000000000000000 [ 283.591477][T16376] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 283.598111][T16376] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.605646][T16376] vhci_hcd vhci_hcd.0: Device attached [ 283.632608][T16376] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 283.639266][T16376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.646823][T16376] vhci_hcd vhci_hcd.0: Device attached [ 283.653756][T16376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.668876][T16376] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(17) [ 283.675518][T16376] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.683052][T16376] vhci_hcd vhci_hcd.0: Device attached [ 283.690392][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3989'. [ 283.703216][T16376] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(19) [ 283.709835][T16376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 283.717471][T16376] vhci_hcd vhci_hcd.0: Device attached [ 283.730788][T16376] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(21) [ 283.737408][T16376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 283.745047][T16376] vhci_hcd vhci_hcd.0: Device attached [ 283.751092][T16376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.759583][T16376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.768219][T16376] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.787154][ T9] vhci_hcd: vhci_device speed not set [ 283.797003][T16398] loop9: detected capacity change from 0 to 7 [ 283.806027][T16389] vhci_hcd: connection closed [ 283.806212][T16391] vhci_hcd: connection closed [ 283.806260][T16394] vhci_hcd: connection closed [ 283.815957][ T12] vhci_hcd: stop threads [ 283.816937][T16385] vhci_hcd: connection closed [ 283.820674][ T12] vhci_hcd: release socket [ 283.820690][ T12] vhci_hcd: disconnect device [ 283.825888][T16398] Buffer I/O error on dev loop9, logical block 0, async page read [ 283.829752][T16377] vhci_hcd: connection closed [ 283.834299][T16398] Buffer I/O error on dev loop9, logical block 0, async page read [ 283.847615][ T12] vhci_hcd: stop threads [ 283.851584][T16398] loop9: unable to read partition table [ 283.859441][ T12] vhci_hcd: release socket [ 283.859455][ T12] vhci_hcd: disconnect device [ 283.863829][ T9] usb 15-1: new full-speed USB device number 11 using vhci_hcd [ 283.886648][T16378] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 283.892969][T16398] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 283.892969][T16398] U) failed (rc=-5) [ 283.893858][T16400] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 283.913637][T16400] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.921704][T16400] vhci_hcd vhci_hcd.0: Device attached [ 283.937566][T16406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.945719][ T12] vhci_hcd: stop threads [ 283.950078][ T12] vhci_hcd: release socket [ 283.954499][ T12] vhci_hcd: disconnect device [ 283.959569][T16402] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 283.966197][T16402] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.973734][T16402] vhci_hcd vhci_hcd.0: Device attached [ 283.979985][ T12] vhci_hcd: stop threads [ 283.984271][ T12] vhci_hcd: release socket [ 283.988859][ T12] vhci_hcd: disconnect device [ 284.013973][T16400] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(14) [ 284.020735][T16400] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 284.028198][T16400] vhci_hcd vhci_hcd.0: Device attached [ 284.036386][ T12] vhci_hcd: stop threads [ 284.040725][ T12] vhci_hcd: release socket [ 284.045141][ T12] vhci_hcd: disconnect device [ 284.069839][T16400] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17) [ 284.076472][T16400] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.084182][T16400] vhci_hcd vhci_hcd.0: Device attached [ 284.099429][T16400] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(22) [ 284.106045][T16400] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.113685][T16400] vhci_hcd vhci_hcd.0: Device attached [ 284.121004][T16400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.129673][T16400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.156000][T16400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.175454][T16416] vhci_hcd: connection closed [ 284.175475][T16409] vhci_hcd: connection closed [ 284.175620][T16413] vhci_hcd: connection closed [ 284.185638][T16404] vhci_hcd: connection closed [ 284.190541][T16401] vhci_hcd: connection closed [ 284.195370][ T5048] vhci_hcd: stop threads [ 284.204473][ T5048] vhci_hcd: release socket [ 284.208954][ T5048] vhci_hcd: disconnect device [ 284.217003][ T5048] vhci_hcd: stop threads [ 284.221303][ T5048] vhci_hcd: release socket [ 284.225861][ T5048] vhci_hcd: disconnect device [ 284.243933][ T5048] vhci_hcd: stop threads [ 284.248278][ T5048] vhci_hcd: release socket [ 284.252711][ T5048] vhci_hcd: disconnect device [ 284.257669][ T5048] vhci_hcd: stop threads [ 284.261912][ T5048] vhci_hcd: release socket [ 284.266396][ T5048] vhci_hcd: disconnect device [ 284.274317][ T5048] vhci_hcd: stop threads [ 284.278745][ T5048] vhci_hcd: release socket [ 284.283269][ T5048] vhci_hcd: disconnect device [ 284.299848][T16429] loop6: detected capacity change from 0 to 1024 [ 284.306560][T16429] EXT4-fs: Ignoring removed nobh option [ 284.312195][T16429] EXT4-fs: Ignoring removed bh option [ 284.339271][T16429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.356329][T16429] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.4002: Allocating blocks 385-513 which overlap fs metadata [ 284.356382][T16437] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4005'. [ 284.375672][T16429] EXT4-fs (loop6): pa ffff88810613a620: logic 16, phys. 129, len 24 [ 284.387401][T16429] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 284.399079][T16429] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 284.411421][T16429] EXT4-fs (loop6): This should not happen!! Data will be lost [ 284.411421][T16429] [ 284.421260][T16429] EXT4-fs (loop6): Total free blocks count 0 [ 284.427934][T16429] EXT4-fs (loop6): Free/Dirty block details [ 284.433870][T16429] EXT4-fs (loop6): free_blocks=128 [ 284.439036][T16429] EXT4-fs (loop6): dirty_blocks=0 [ 284.444067][T16429] EXT4-fs (loop6): Block reservation details [ 284.450155][T16429] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 284.479761][T16441] loop7: detected capacity change from 0 to 527 [ 284.487764][T16441] EXT4-fs (loop7): failed to parse options in superblock:  [ 284.500591][T16441] EXT4-fs (loop7): Unsupported encryption level 4 [ 284.587199][T16456] FAULT_INJECTION: forcing a failure. [ 284.587199][T16456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.600499][T16456] CPU: 0 UID: 0 PID: 16456 Comm: syz.1.4014 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 284.600524][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.600587][T16456] Call Trace: [ 284.600593][T16456] [ 284.600601][T16456] dump_stack_lvl+0xf6/0x150 [ 284.600623][T16456] dump_stack+0x15/0x1a [ 284.600638][T16456] should_fail_ex+0x261/0x270 [ 284.600663][T16456] should_fail+0xb/0x10 [ 284.600726][T16456] should_fail_usercopy+0x1a/0x20 [ 284.600749][T16456] _copy_to_user+0x20/0xa0 [ 284.600777][T16456] simple_read_from_buffer+0xb2/0x130 [ 284.600837][T16456] proc_fail_nth_read+0x103/0x140 [ 284.600874][T16456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.600889][T16456] vfs_read+0x1b2/0x710 [ 284.601032][T16456] ? __rcu_read_unlock+0x4e/0x70 [ 284.601056][T16456] ? __fget_files+0x186/0x1c0 [ 284.601073][T16456] ksys_read+0xeb/0x1b0 [ 284.601124][T16456] __x64_sys_read+0x42/0x50 [ 284.601153][T16456] x64_sys_call+0x2a3b/0x2e10 [ 284.601176][T16456] do_syscall_64+0xc9/0x1c0 [ 284.601260][T16456] ? clear_bhb_loop+0x25/0x80 [ 284.601283][T16456] ? clear_bhb_loop+0x25/0x80 [ 284.601353][T16456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.601371][T16456] RIP: 0033:0x7f96105bbb7c [ 284.601386][T16456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 284.601404][T16456] RSP: 002b:00007f960ec27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.601420][T16456] RAX: ffffffffffffffda RBX: 00007f96107d5fa0 RCX: 00007f96105bbb7c [ 284.601430][T16456] RDX: 000000000000000f RSI: 00007f960ec270a0 RDI: 0000000000000003 [ 284.601495][T16456] RBP: 00007f960ec27090 R08: 0000000000000000 R09: 0000000000000000 [ 284.601505][T16456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.601514][T16456] R13: 0000000000000000 R14: 00007f96107d5fa0 R15: 00007ffe11751238 [ 284.601530][T16456] [ 284.804027][ T985] usb 11-2: enqueue for inactive port 1 [ 284.810306][ T985] usb 11-2: enqueue for inactive port 1 [ 284.877228][ T985] vhci_hcd: vhci_device speed not set [ 284.885588][T16463] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 284.892214][T16463] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 284.899742][T16463] vhci_hcd vhci_hcd.0: Device attached [ 284.924966][T16463] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 284.931591][T16463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 284.939883][T16463] vhci_hcd vhci_hcd.0: Device attached [ 284.956225][T16474] loop6: detected capacity change from 0 to 1024 [ 284.964895][T16474] EXT4-fs: Ignoring removed nobh option [ 284.971279][T16474] EXT4-fs: Ignoring removed bh option [ 284.980057][T16478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.989711][T16463] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 284.996374][T16463] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 285.004540][T16463] vhci_hcd vhci_hcd.0: Device attached [ 285.012643][T16484] FAULT_INJECTION: forcing a failure. [ 285.012643][T16484] name failslab, interval 1, probability 0, space 0, times 0 [ 285.025333][T16484] CPU: 0 UID: 0 PID: 16484 Comm: syz.1.4024 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 285.025444][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 285.025460][T16484] Call Trace: [ 285.025468][T16484] [ 285.025477][T16484] dump_stack_lvl+0xf6/0x150 [ 285.025505][T16484] dump_stack+0x15/0x1a [ 285.025526][T16484] should_fail_ex+0x261/0x270 [ 285.025581][T16484] should_failslab+0x8f/0xb0 [ 285.025619][T16484] kmem_cache_alloc_noprof+0x59/0x340 [ 285.025646][T16484] ? security_inode_alloc+0x37/0x100 [ 285.025685][T16484] security_inode_alloc+0x37/0x100 [ 285.025820][T16484] inode_init_always_gfp+0x4a2/0x4f0 [ 285.025860][T16484] ? __pfx_proc_alloc_inode+0x10/0x10 [ 285.025948][T16484] alloc_inode+0x86/0x170 [ 285.026037][T16484] new_inode+0x1e/0xe0 [ 285.026061][T16484] proc_get_inode+0x1f/0x380 [ 285.026088][T16484] proc_lookup_de+0x19b/0x210 [ 285.026114][T16484] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 285.026198][T16484] proc_tgid_net_lookup+0x42/0xc0 [ 285.026252][T16463] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(19) [ 285.026228][T16484] path_openat+0xd76/0x2000 [ 285.026388][T16484] do_filp_open+0x115/0x240 [ 285.026427][T16484] ? __pfx_kfree_link+0x10/0x10 [ 285.026477][T16484] do_sys_openat2+0xaa/0x110 [ 285.026507][T16484] __x64_sys_openat+0xf8/0x120 [ 285.026536][T16484] x64_sys_call+0x1ac/0x2e10 [ 285.026574][T16484] do_syscall_64+0xc9/0x1c0 [ 285.026749][T16484] ? clear_bhb_loop+0x25/0x80 [ 285.026772][T16484] ? clear_bhb_loop+0x25/0x80 [ 285.026872][T16484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.026894][T16484] RIP: 0033:0x7f96105bbad0 [ 285.026911][T16484] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 285.026957][T16484] RSP: 002b:00007f960ec26f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 285.026976][T16484] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f96105bbad0 [ 285.026990][T16484] RDX: 0000000000000002 RSI: 00007f960ec26fa0 RDI: 00000000ffffff9c [ 285.027002][T16484] RBP: 00007f960ec26fa0 R08: 0000000000000000 R09: 0000000000000000 [ 285.027015][T16484] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 285.027027][T16484] R13: 0000000000000000 R14: 00007f96107d5fa0 R15: 00007ffe11751238 [ 285.027092][T16484] [ 285.257184][T16463] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 285.266444][T16463] vhci_hcd vhci_hcd.0: Device attached [ 285.284162][T16474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.296372][T16478] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(22) [ 285.303059][T16478] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 285.310709][T16478] vhci_hcd vhci_hcd.0: Device attached [ 285.310899][T16489] loop7: detected capacity change from 0 to 512 [ 285.330559][T16463] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 285.332765][T16474] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.4021: Allocating blocks 385-513 which overlap fs metadata [ 285.339128][T16463] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 285.359134][T16474] EXT4-fs (loop6): pa ffff888104ab69a0: logic 16, phys. 129, len 24 [ 285.369336][T16474] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 285.383467][T16489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.387326][T16463] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 285.396402][T16474] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 285.416387][T16474] EXT4-fs (loop6): This should not happen!! Data will be lost [ 285.416387][T16474] [ 285.417197][T16489] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.426174][T16474] EXT4-fs (loop6): Total free blocks count 0 [ 285.442669][T16474] EXT4-fs (loop6): Free/Dirty block details [ 285.448596][T16474] EXT4-fs (loop6): free_blocks=128 [ 285.453782][T16474] EXT4-fs (loop6): dirty_blocks=0 [ 285.458866][T16492] vhci_hcd: connection closed [ 285.458941][T16474] ================================================================== [ 285.459221][T16468] vhci_hcd: connection reset by peer [ 285.463629][T16474] BUG: KCSAN: data-race in desc_read_finalized_seq / prb_reserve [ 285.472589][T16481] vhci_hcd: connection closed [ 285.476943][T16474] [ 285.476952][T16474] write to 0xffffffff868dcea8 of 8 bytes by task 16492 on cpu 1: [ 285.484806][T16486] vhci_hcd: connection closed [ 285.489307][T16474] prb_reserve+0x750/0xb80 [ 285.489333][T16474] vprintk_store+0x552/0x860 [ 285.495916][ T5048] vhci_hcd: stop threads [ 285.499357][T16474] vprintk_emit+0x1a0/0x6c0 [ 285.499400][T16474] vprintk_default+0x26/0x30 [ 285.499424][T16474] vprintk+0x1d/0x30 [ 285.499456][T16474] _printk+0x7f/0xb0 [ 285.499494][T16474] vhci_rx_loop+0x4d6/0x980 [ 285.499530][T16474] kthread+0x4b7/0x540 [ 285.499567][T16474] ret_from_fork+0x4b/0x60 [ 285.499588][T16474] ret_from_fork_asm+0x1a/0x30 [ 285.499613][T16474] [ 285.499619][T16474] read to 0xffffffff868dcea8 of 8 bytes by task 16474 on cpu 0: [ 285.499636][T16474] desc_read_finalized_seq+0x163/0x280 [ 285.499659][T16474] _prb_read_valid+0x142/0x710 [ 285.499680][T16474] prb_read_valid+0x42/0x70 [ 285.499703][T16474] console_unlock+0x1be/0x350 [ 285.499728][T16474] vprintk_emit+0x470/0x6c0 [ 285.499752][T16474] vprintk_default+0x26/0x30 [ 285.499777][T16474] vprintk+0x1d/0x30 [ 285.499809][T16474] _printk+0x7f/0xb0 [ 285.499829][T16474] __ext4_msg+0x198/0x1b0 [ 285.499852][T16474] ext4_print_free_blocks+0x13c/0x190 [ 285.499881][T16474] ext4_do_writepages+0x1a7f/0x21d0 [ 285.499900][T16474] ext4_writepages+0x183/0x320 [ 285.499924][T16474] do_writepages+0x1d8/0x480 [ 285.499966][T16474] file_write_and_wait_range+0x16e/0x2f0 [ 285.499998][T16474] generic_buffers_fsync_noflush+0x46/0x120 [ 285.500044][T16474] ext4_sync_file+0x1c3/0x6c0 [ 285.500071][T16474] vfs_fsync_range+0x116/0x130 [ 285.500106][T16474] ext4_buffered_write_iter+0x358/0x3c0 [ 285.504802][ T5048] vhci_hcd: release socket [ 285.509158][T16474] ext4_file_write_iter+0x3b2/0xf80 [ 285.509184][T16474] do_iter_readv_writev+0x40d/0x4b0 [ 285.513789][ T5048] vhci_hcd: disconnect device [ 285.518088][T16474] vfs_writev+0x2da/0x880 [ 285.518109][T16474] __se_sys_pwritev2+0x103/0x1d0 [ 285.522682][T16464] vhci_hcd: connection closed [ 285.527166][T16474] __x64_sys_pwritev2+0x78/0x90 [ 285.527201][T16474] x64_sys_call+0x1c86/0x2e10 [ 285.527224][T16474] do_syscall_64+0xc9/0x1c0 [ 285.527254][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.527275][T16474] [ 285.527279][T16474] value changed: 0x0000000000002c3b -> 0x0000000000000000 [ 285.527288][T16474] [ 285.527293][T16474] Reported by Kernel Concurrency Sanitizer on: [ 285.527304][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz.6.4021 Not tainted 6.15.0-rc1-syzkaller-00288-ge618ee89561b #0 PREEMPT(voluntary) [ 285.527331][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 285.527344][T16474] ================================================================== [ 285.527436][T16474] EXT4-fs (loop6): Block reservation details [ 285.527449][T16474] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 285.541326][ T5048] vhci_hcd: stop threads [ 285.548530][T16489] EXT4-fs error (device loop7): ext4_do_update_inode:5182: inode #2: comm syz.7.4020: corrupted inode contents [ 285.548720][ T5048] vhci_hcd: release socket [ 285.553698][T16489] EXT4-fs error (device loop7): ext4_dirty_inode:6074: inode #2: comm syz.7.4020: mark_inode_dirty error [ 285.555712][ T5048] vhci_hcd: disconnect device [ 285.568638][T16489] EXT4-fs error (device loop7): ext4_do_update_inode:5182: inode #2: comm syz.7.4020: corrupted inode contents [ 285.575139][ T5048] vhci_hcd: stop threads [ 285.595311][T16489] EXT4-fs error (device loop7): ext4_do_update_inode:5182: inode #2: comm syz.7.4020: corrupted inode contents [ 285.596010][ T5048] vhci_hcd: release socket [ 285.604792][T16489] EXT4-fs error (device loop7): ext4_dirty_inode:6074: inode #2: comm syz.7.4020: mark_inode_dirty error [ 285.609707][ T5048] vhci_hcd: disconnect device [ 285.609891][ T5048] vhci_hcd: stop threads [ 285.618857][T16489] EXT4-fs error (device loop7): ext4_do_update_inode:5182: inode #2: comm syz.7.4020: corrupted inode contents [ 285.619712][ T5048] vhci_hcd: release socket [ 285.619723][ T5048] vhci_hcd: disconnect device [ 285.620277][ T5048] vhci_hcd: stop threads [ 285.625845][T16489] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.4020: mark_inode_dirty error [ 285.629977][ T5048] vhci_hcd: release socket [ 285.629989][ T5048] vhci_hcd: disconnect device [ 285.906906][T16489] EXT4-fs error (device loop7): ext4_do_update_inode:5182: inode #2: comm syz.7.4020: corrupted inode contents [ 285.919545][T16489] EXT4-fs error (device loop7): ext4_dirty_inode:6074: inode #2: comm syz.7.4020: mark_inode_dirty error [ 285.932131][T16502] EXT4-fs error (device loop7): ext4_do_update_inode:5182: inode #2: comm syz.7.4020: corrupted inode contents [ 285.957925][ T9638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.917133][ T9] usb 15-1: enqueue for inactive port 0 [ 288.922705][ T9] usb 15-1: enqueue for inactive port 0 [ 289.007280][ T9] vhci_hcd: vhci_device speed not set [ 290.517752][ T985] usb 11-2: enqueue for inactive port 1 [ 290.523378][ T985] usb 11-2: enqueue for inactive port 1 [ 290.600975][ T985] vhci_hcd: vhci_device speed not set