last executing test programs: 1m38.688275079s ago: executing program 3 (id=341): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x3, @none, 0x0, 0x1}, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x94) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000004c0)=0xb) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306050000000000000000000000000005000100f7"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1004408, &(0x7f0000000240), 0x1, 0x782, &(0x7f0000000b00)="$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") open(&(0x7f0000000280)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0xc, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000002c0)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m38.265341112s ago: executing program 3 (id=347): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000e00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x29, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) nanosleep(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x20008004) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m38.171393693s ago: executing program 3 (id=349): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20048880}, 0x4008840) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@local, @multicast1}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) fcntl$getown(r0, 0x9) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='sys_enter\x00', r4, 0x0, 0x8}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x8, 0x9, @vifc_lcl_addr=@remote, @rand_addr=0x64010100}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x123c, &(0x7f0000000200)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x2000000, 0x1}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) 1m36.714495082s ago: executing program 3 (id=372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x590, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x52a, &(0x7f0000000a00)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0xffffff19, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000000), 0x4}, 0x50) syz_emit_ethernet(0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa09000000008100230022f0"], 0x0) r8 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) ioctl$SIOCX25SCAUSEDIAG(r8, 0x89ec, &(0x7f00000001c0)={0x3, 0x5}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0xb0, 0x30, 0x400, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x9c, 0x1, [@m_mirred={0x98, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7ec, 0x0, 0xffffffffffffffff, 0x4, 0x20002}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x116a}, 0x4}}]}, {0x2c, 0x6, "d81b33656662376eb3e423d7de3f5e57b0e62b3dfb8b2c7c8809115bb26b4fd396e4c6cdae6fd403"}, {0xc}, {0xc}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x98400, &(0x7f0000001a80)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES16, @ANYBLOB="8d59b4d39b6fc7f8243f709487f52e7112845ed7961e28ee60b15123c00e4e0f85a7106710b4729b2b235cbdd9472f523d7d804e9e991f859e5fed6e656791bd4f2c2053188b2050b234c5ad28370bbaad695e7e5fa3641214d5ccd8b8f0c88b2fa3e5af453df1d2556bbf7ae969f656af47b2c0103b91f967b6c1b1f5843da809e29cd348f8361b23c4b2fe429e08464011521ec947803cb623b3389638ef3e79c00ff35c875e3922b1d564a6e01df6", @ANYRES32=r7], 0x1, 0x2ee, &(0x7f00000006c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000540)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00') dup(r4) 1m35.881540949s ago: executing program 3 (id=389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010700000000000000002000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000240)=0x2, 0x7, 0x3) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0xfc3bd855, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xb6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_bp={0x0, 0x9}, 0x120ca, 0xeb, 0x0, 0x8, 0x59f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone3(&(0x7f0000000900)={0x88a0080, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16=r5, @ANYRES64, @ANYRESOCT=r3], 0x0, 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m35.367468673s ago: executing program 3 (id=396): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$qrtrtun(r5, &(0x7f0000000780)="fb", 0x1) 1m35.340323653s ago: executing program 32 (id=396): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$qrtrtun(r5, &(0x7f0000000780)="fb", 0x1) 3.158399618s ago: executing program 1 (id=1947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 3.091927038s ago: executing program 1 (id=1949): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010700000000000000002000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000240)=0x2, 0x7, 0x3) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0xfc3bd855, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xb6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_bp={0x0, 0x9}, 0x120ca, 0xeb, 0x0, 0x8, 0x59f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone3(&(0x7f0000000900)={0x88a0080, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16=r5, @ANYRES64, @ANYRESOCT=r3], 0x0, 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000300)={0x0, 0x2, 0xcc, 0x9, 0x8f9, 0x4f6e}) 3.038254539s ago: executing program 5 (id=1951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 2.953007919s ago: executing program 5 (id=1954): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@sbsector={'sbsector', 0x3d, 0x9}}, {@block={'block', 0x3d, 0x200}, 0x0}, {}, {@cruft}, {@map_off}, {@dmode={'dmode', 0x3d, 0x4000000000000cf}, 0x41}, {@session={'session', 0x3d, 0x51}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@unhide}, {@gid}, {}, {@map_acorn}, {}]}, 0x0, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") 2.733653251s ago: executing program 2 (id=1957): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000002d40)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$qrtrtun(r4, &(0x7f0000000780)="fb", 0x1) 2.705838331s ago: executing program 1 (id=1958): socket(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@grpid}, {@errors_remount}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e24, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'rr\x00', 0x4, 0x8, 0x7b}, {@remote, 0x4e23, 0x4, 0x3, 0x12d5f, 0x3}}, 0x44) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) 2.572105252s ago: executing program 2 (id=1959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="ce8c", 0x2}], 0x1}}], 0x1, 0xc4000) 2.328292924s ago: executing program 2 (id=1963): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) openat$dir(0xffffffffffffff9c, 0x0, 0x515002, 0xc6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r5, 0x80089203, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.737031028s ago: executing program 2 (id=1966): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x3, 0x300, 0x101, 0x300}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x2000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0x5452, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.134511622s ago: executing program 0 (id=1971): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) utime(0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 836.529115ms ago: executing program 2 (id=1972): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x3}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_usbip_server_init(0x4) 729.037805ms ago: executing program 1 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="ce8c", 0x2}], 0x1}}], 0x1, 0xc4000) 676.550456ms ago: executing program 4 (id=1974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 635.773906ms ago: executing program 4 (id=1975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0xc, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 626.166546ms ago: executing program 5 (id=1976): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 587.665656ms ago: executing program 0 (id=1977): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) openat$dir(0xffffffffffffff9c, 0x0, 0x515002, 0xc6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r5, 0x80089203, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 569.903386ms ago: executing program 1 (id=1978): open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x918d8ecf0d5d0600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') 569.632806ms ago: executing program 5 (id=1979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 569.262606ms ago: executing program 4 (id=1980): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$qrtrtun(r3, &(0x7f0000000780)="fb", 0x1) 486.562707ms ago: executing program 5 (id=1981): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000002d40)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$qrtrtun(r4, &(0x7f0000000780)="fb", 0x1) 440.210817ms ago: executing program 1 (id=1982): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{0x0}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 403.535528ms ago: executing program 4 (id=1983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 355.518138ms ago: executing program 5 (id=1984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x3, 0x300, 0x101, 0x300}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x2000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0x5452, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 344.947528ms ago: executing program 4 (id=1985): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000080)={'system_u:object_r:tzdata_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0xddd6}, 0x47) 331.890038ms ago: executing program 0 (id=1986): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010700000000000000002000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000240)=0x2, 0x7, 0x3) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0xfc3bd855, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xb6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_bp={0x0, 0x9}, 0x120ca, 0xeb, 0x0, 0x8, 0x59f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone3(&(0x7f0000000900)={0x88a0080, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16=r5, @ANYRES64, @ANYRESOCT=r3], 0x0, 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000300)={0x0, 0x2, 0xcc, 0x9, 0x8f9, 0x4f6e}) 211.765269ms ago: executing program 4 (id=1987): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010700000000000000002000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000240)=0x2, 0x7, 0x3) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0xfc3bd855, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone3(&(0x7f0000000900)={0x88a0080, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16=r5, @ANYRES64, @ANYRESOCT=r3], 0x0, 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000300)={0x0, 0x2, 0xcc, 0x9, 0x8f9, 0x4f6e}) 151.825269ms ago: executing program 0 (id=1988): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001000000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x3, @none, 0x0, 0x1}, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0xc, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 149.53969ms ago: executing program 2 (id=1998): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010700000000000000002000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000240)=0x2, 0x7, 0x3) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0xfc3bd855, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xb6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_bp={0x0, 0x9}, 0x120ca, 0xeb, 0x0, 0x8, 0x59f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone3(&(0x7f0000000900)={0x88a0080, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16=r5, @ANYRES64, @ANYRESOCT=r3], 0x0, 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000300)={0x0, 0x2, 0xcc, 0x9, 0x8f9, 0x4f6e}) 63.78344ms ago: executing program 0 (id=1989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0xe0, 0x0, 0x0}) 0s ago: executing program 0 (id=1990): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@sbsector={'sbsector', 0x3d, 0x9}}, {@block={'block', 0x3d, 0x200}, 0x0}, {}, {@cruft}, {@map_off}, {@dmode={'dmode', 0x3d, 0x4000000000000cf}, 0x41}, {@session={'session', 0x3d, 0x51}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@unhide}, {@gid}, {}, {@map_acorn}, {}]}, 0x0, 0x699, &(0x7f0000000140)="$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") kernel console output (not intermixed with test programs): e 0, times 0 [ 74.348523][ T5572] vhci_hcd: connection closed [ 74.357992][ T5568] CPU: 1 UID: 0 PID: 5568 Comm: syz.0.698 Not tainted 6.14.0-rc6-syzkaller #0 [ 74.358024][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.358038][ T5568] Call Trace: [ 74.358048][ T5568] [ 74.358060][ T5568] dump_stack_lvl+0xf2/0x150 [ 74.358096][ T5568] dump_stack+0x15/0x1a [ 74.358126][ T5568] should_fail_ex+0x24a/0x260 [ 74.358169][ T5568] should_failslab+0x8f/0xb0 [ 74.358208][ T5568] kmem_cache_alloc_noprof+0x52/0x320 [ 74.358237][ T5568] ? alloc_empty_file+0xd0/0x200 [ 74.358273][ T5568] ? mntput+0x49/0x70 [ 74.358303][ T5568] alloc_empty_file+0xd0/0x200 [ 74.358330][ T5568] path_openat+0x6a/0x1fc0 [ 74.358360][ T5568] ? _parse_integer_limit+0x167/0x180 [ 74.358397][ T5568] ? _parse_integer+0x27/0x30 [ 74.358508][ T5568] ? kstrtoull+0x110/0x140 [ 74.358545][ T5568] ? kstrtouint+0x77/0xc0 [ 74.358576][ T5568] ? kstrtouint_from_user+0xb0/0xe0 [ 74.358614][ T5568] do_filp_open+0x107/0x230 [ 74.358656][ T5568] do_sys_openat2+0xab/0x120 [ 74.358683][ T5568] __x64_sys_open+0xe6/0x110 [ 74.358785][ T5568] x64_sys_call+0x13e1/0x2dc0 [ 74.358818][ T5568] do_syscall_64+0xc9/0x1c0 [ 74.358859][ T5568] ? clear_bhb_loop+0x55/0xb0 [ 74.358893][ T5568] ? clear_bhb_loop+0x55/0xb0 [ 74.358970][ T5568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.359004][ T5568] RIP: 0033:0x7f356e32d169 [ 74.359025][ T5568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.359087][ T5568] RSP: 002b:00007f356c997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 74.359111][ T5568] RAX: ffffffffffffffda RBX: 00007f356e545fa0 RCX: 00007f356e32d169 [ 74.359126][ T5568] RDX: 0000000000000000 RSI: 0000000000143862 RDI: 0000400000000080 [ 74.359142][ T5568] RBP: 00007f356c997090 R08: 0000000000000000 R09: 0000000000000000 [ 74.359156][ T5568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.359168][ T5568] R13: 0000000000000000 R14: 00007f356e545fa0 R15: 00007fffd21c5978 [ 74.359187][ T5568] [ 74.568818][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.568874][ T3402] vhci_hcd: stop threads [ 74.568884][ T3402] vhci_hcd: release socket [ 74.586734][ T3402] vhci_hcd: disconnect device [ 74.603841][ T30] audit: type=1400 audit(1741602366.843:1192): avc: denied { map } for pid=5574 comm="syz.0.699" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 74.630776][ T3156] vhci_hcd: vhci_device speed not set [ 74.763749][ T5581] vhci_hcd: default hub control req: 6015 v01f5 i0004 l0 [ 74.854370][ T30] audit: type=1400 audit(1741602367.083:1193): avc: denied { write } for pid=5590 comm="syz.5.708" path="socket:[11691]" dev="sockfs" ino=11691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.915143][ T30] audit: type=1326 audit(1741602367.153:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.1.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 74.938588][ T30] audit: type=1326 audit(1741602367.153:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.1.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 74.949080][ T5603] FAULT_INJECTION: forcing a failure. [ 74.949080][ T5603] name failslab, interval 1, probability 0, space 0, times 0 [ 74.961924][ T30] audit: type=1326 audit(1741602367.153:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.1.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 74.974550][ T5603] CPU: 0 UID: 0 PID: 5603 Comm: syz.0.712 Not tainted 6.14.0-rc6-syzkaller #0 [ 74.974642][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.974659][ T5603] Call Trace: [ 74.974669][ T5603] [ 74.974680][ T5603] dump_stack_lvl+0xf2/0x150 [ 74.974725][ T5603] dump_stack+0x15/0x1a [ 74.974753][ T5603] should_fail_ex+0x24a/0x260 [ 74.974792][ T5603] should_failslab+0x8f/0xb0 [ 74.974904][ T5603] kmem_cache_alloc_noprof+0x52/0x320 [ 74.974932][ T5603] ? security_inode_alloc+0x37/0x100 [ 74.974972][ T5603] security_inode_alloc+0x37/0x100 [ 74.975001][ T5603] inode_init_always_gfp+0x4a2/0x4f0 [ 74.975081][ T5603] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 74.975150][ T5603] alloc_inode+0x82/0x160 [ 74.975191][ T5603] new_inode+0x1e/0x100 [ 74.975237][ T5603] shmem_get_inode+0x24e/0x730 [ 74.975318][ T5603] __shmem_file_setup+0x127/0x1f0 [ 74.975429][ T5603] shmem_file_setup+0x3b/0x50 [ 74.975452][ T5603] __se_sys_memfd_create+0x2e1/0x5a0 [ 74.975533][ T5603] __x64_sys_memfd_create+0x31/0x40 [ 74.975633][ T5603] x64_sys_call+0x2d4c/0x2dc0 [ 74.975666][ T5603] do_syscall_64+0xc9/0x1c0 [ 74.975782][ T5603] ? clear_bhb_loop+0x55/0xb0 [ 74.975818][ T5603] ? clear_bhb_loop+0x55/0xb0 [ 74.975851][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.975967][ T5603] RIP: 0033:0x7f356e32d169 [ 74.975986][ T5603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.976008][ T5603] RSP: 002b:00007f356c996e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 74.976033][ T5603] RAX: ffffffffffffffda RBX: 00000000000005fb RCX: 00007f356e32d169 [ 74.976050][ T5603] RDX: 00007f356c996ef0 RSI: 0000000000000000 RDI: 00007f356e3aec3c [ 74.976067][ T5603] RBP: 00004000000004c0 R08: 00007f356c996bb7 R09: 00007f356c996e40 [ 74.976082][ T5603] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000040 [ 74.976098][ T5603] R13: 00007f356c996ef0 R14: 00007f356c996eb0 R15: 0000400000000100 [ 74.976159][ T5603] [ 75.095059][ T5606] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0îƒ&IØü0‚Ñ(|9QûÂMÍ-tãtÈÎÇV¹Kr-j"ž‰ž:²a) [ 75.099682][ T30] audit: type=1326 audit(1741602367.153:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.1.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 75.099719][ T30] audit: type=1326 audit(1741602367.153:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.1.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 75.186756][ T5601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.186944][ T30] audit: type=1326 audit(1741602367.153:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.1.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 75.206532][ T5601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.217219][ T30] audit: type=1326 audit(1741602367.153:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.1.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 75.326394][ T5613] vhci_hcd: default hub control req: 6015 v01f5 i0004 l0 [ 75.326876][ T30] audit: type=1326 audit(1741602367.153:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.1.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 75.357774][ T30] audit: type=1326 audit(1741602367.153:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.1.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 75.436677][ T5625] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 75.438762][ T5623] IPVS: stopping master sync thread 5625 ... [ 75.458740][ T5623] loop4: detected capacity change from 0 to 1024 [ 75.466174][ T5623] EXT4-fs: Mount option(s) incompatible with ext2 [ 75.572604][ T5641] loop4: detected capacity change from 0 to 128 [ 75.587150][ T5641] vfat: Unknown parameter 'nonutail' [ 75.693026][ T5651] loop4: detected capacity change from 0 to 1024 [ 75.704640][ T5651] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.716174][ T5651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.809548][ T5665] FAULT_INJECTION: forcing a failure. [ 75.809548][ T5665] name failslab, interval 1, probability 0, space 0, times 0 [ 75.822281][ T5665] CPU: 1 UID: 0 PID: 5665 Comm: syz.2.738 Not tainted 6.14.0-rc6-syzkaller #0 [ 75.822345][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.822360][ T5665] Call Trace: [ 75.822368][ T5665] [ 75.822377][ T5665] dump_stack_lvl+0xf2/0x150 [ 75.822411][ T5665] dump_stack+0x15/0x1a [ 75.822446][ T5665] should_fail_ex+0x24a/0x260 [ 75.822532][ T5665] ? smc_pnet_add+0x29c/0xd30 [ 75.822564][ T5665] should_failslab+0x8f/0xb0 [ 75.822602][ T5665] __kmalloc_cache_noprof+0x4e/0x320 [ 75.822634][ T5665] smc_pnet_add+0x29c/0xd30 [ 75.822690][ T5665] genl_rcv_msg+0x620/0x6d0 [ 75.822716][ T5665] ? __pfx_smc_pnet_add+0x10/0x10 [ 75.822855][ T5665] ? should_fail_ex+0x31/0x260 [ 75.823004][ T5665] netlink_rcv_skb+0x12c/0x230 [ 75.823044][ T5665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.823083][ T5665] genl_rcv+0x28/0x40 [ 75.823108][ T5665] netlink_unicast+0x599/0x670 [ 75.823140][ T5665] netlink_sendmsg+0x5cc/0x6e0 [ 75.823222][ T5665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.823265][ T5665] __sock_sendmsg+0x140/0x180 [ 75.823305][ T5665] ____sys_sendmsg+0x326/0x4b0 [ 75.823415][ T5665] __sys_sendmsg+0x19d/0x230 [ 75.823599][ T5665] __x64_sys_sendmsg+0x46/0x50 [ 75.823655][ T5665] x64_sys_call+0x2734/0x2dc0 [ 75.823682][ T5665] do_syscall_64+0xc9/0x1c0 [ 75.823718][ T5665] ? clear_bhb_loop+0x55/0xb0 [ 75.823750][ T5665] ? clear_bhb_loop+0x55/0xb0 [ 75.823882][ T5665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.823913][ T5665] RIP: 0033:0x7fcba335d169 [ 75.823932][ T5665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.823967][ T5665] RSP: 002b:00007fcba19c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.823990][ T5665] RAX: ffffffffffffffda RBX: 00007fcba3575fa0 RCX: 00007fcba335d169 [ 75.824005][ T5665] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000004 [ 75.824019][ T5665] RBP: 00007fcba19c7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.824034][ T5665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.824048][ T5665] R13: 0000000000000000 R14: 00007fcba3575fa0 R15: 00007ffe562195f8 [ 75.824070][ T5665] [ 76.090365][ T5674] FAULT_INJECTION: forcing a failure. [ 76.090365][ T5674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.103548][ T5674] CPU: 0 UID: 0 PID: 5674 Comm: syz.1.742 Not tainted 6.14.0-rc6-syzkaller #0 [ 76.103577][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.103619][ T5674] Call Trace: [ 76.103624][ T5674] [ 76.103631][ T5674] dump_stack_lvl+0xf2/0x150 [ 76.103663][ T5674] dump_stack+0x15/0x1a [ 76.103722][ T5674] should_fail_ex+0x24a/0x260 [ 76.103754][ T5674] should_fail+0xb/0x10 [ 76.103823][ T5674] should_fail_usercopy+0x1a/0x20 [ 76.103900][ T5674] _copy_from_user+0x1c/0xa0 [ 76.103921][ T5674] copy_msghdr_from_user+0x54/0x2a0 [ 76.103953][ T5674] ? __fget_files+0x17c/0x1c0 [ 76.104048][ T5674] __sys_sendmsg+0x13e/0x230 [ 76.104092][ T5674] __x64_sys_sendmsg+0x46/0x50 [ 76.104196][ T5674] x64_sys_call+0x2734/0x2dc0 [ 76.104226][ T5674] do_syscall_64+0xc9/0x1c0 [ 76.104263][ T5674] ? clear_bhb_loop+0x55/0xb0 [ 76.104295][ T5674] ? clear_bhb_loop+0x55/0xb0 [ 76.104324][ T5674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.104361][ T5674] RIP: 0033:0x7f1b8ad9d169 [ 76.104455][ T5674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.104513][ T5674] RSP: 002b:00007f1b89407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.104534][ T5674] RAX: ffffffffffffffda RBX: 00007f1b8afb5fa0 RCX: 00007f1b8ad9d169 [ 76.104549][ T5674] RDX: 0000000000000000 RSI: 0000400000001200 RDI: 0000000000000006 [ 76.104621][ T5674] RBP: 00007f1b89407090 R08: 0000000000000000 R09: 0000000000000000 [ 76.104635][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.104649][ T5674] R13: 0000000000000000 R14: 00007f1b8afb5fa0 R15: 00007ffee771a308 [ 76.104672][ T5674] [ 76.306648][ T5680] loop5: detected capacity change from 0 to 2048 [ 76.335567][ T5680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.361407][ T4544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.441140][ T5699] pimreg: entered allmulticast mode [ 76.448573][ T5699] pimreg: left allmulticast mode [ 76.456237][ T5701] FAULT_INJECTION: forcing a failure. [ 76.456237][ T5701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.469420][ T5701] CPU: 1 UID: 0 PID: 5701 Comm: syz.1.754 Not tainted 6.14.0-rc6-syzkaller #0 [ 76.469448][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.469462][ T5701] Call Trace: [ 76.469469][ T5701] [ 76.469478][ T5701] dump_stack_lvl+0xf2/0x150 [ 76.469512][ T5701] dump_stack+0x15/0x1a [ 76.469584][ T5701] should_fail_ex+0x24a/0x260 [ 76.469620][ T5701] should_fail+0xb/0x10 [ 76.469652][ T5701] should_fail_usercopy+0x1a/0x20 [ 76.469753][ T5701] _copy_from_iter+0xd5/0xd00 [ 76.469849][ T5701] ? kmalloc_reserve+0x16e/0x190 [ 76.469886][ T5701] ? __virt_addr_valid+0x1ed/0x250 [ 76.469949][ T5701] ? __check_object_size+0x364/0x520 [ 76.469981][ T5701] pfkey_sendmsg+0x16c/0x970 [ 76.470044][ T5701] ? selinux_socket_sendmsg+0x185/0x1c0 [ 76.470076][ T5701] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 76.470121][ T5701] __sock_sendmsg+0x140/0x180 [ 76.470155][ T5701] ____sys_sendmsg+0x326/0x4b0 [ 76.470184][ T5701] __sys_sendmsg+0x19d/0x230 [ 76.470228][ T5701] __x64_sys_sendmsg+0x46/0x50 [ 76.470270][ T5701] x64_sys_call+0x2734/0x2dc0 [ 76.470357][ T5701] do_syscall_64+0xc9/0x1c0 [ 76.470395][ T5701] ? clear_bhb_loop+0x55/0xb0 [ 76.470428][ T5701] ? clear_bhb_loop+0x55/0xb0 [ 76.470459][ T5701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.470573][ T5701] RIP: 0033:0x7f1b8ad9d169 [ 76.470644][ T5701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.470670][ T5701] RSP: 002b:00007f1b89407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.470692][ T5701] RAX: ffffffffffffffda RBX: 00007f1b8afb5fa0 RCX: 00007f1b8ad9d169 [ 76.470707][ T5701] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 76.470720][ T5701] RBP: 00007f1b89407090 R08: 0000000000000000 R09: 0000000000000000 [ 76.470734][ T5701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.470750][ T5701] R13: 0000000000000000 R14: 00007f1b8afb5fa0 R15: 00007ffee771a308 [ 76.470771][ T5701] [ 76.474351][ T5704] mmap: syz.2.755 (5704) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.588243][ T5705] loop5: detected capacity change from 0 to 512 [ 76.694759][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.721505][ T5705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.748369][ T5705] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.871190][ T4544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.959129][ T5728] __nla_validate_parse: 7 callbacks suppressed [ 76.959148][ T5728] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.761'. [ 76.975351][ T5727] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.761'. [ 77.023658][ T5732] IPv6: Can't replace route, no match found [ 77.032428][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.765'. [ 77.041313][ T5734] netlink: 24 bytes leftover after parsing attributes in process `syz.5.765'. [ 77.133707][ T5747] loop4: detected capacity change from 0 to 128 [ 77.473944][ T5760] loop0: detected capacity change from 0 to 2048 [ 77.524119][ T5760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.588738][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.658009][ T5764] loop0: detected capacity change from 0 to 2048 [ 77.683148][ T5764] EXT4-fs error (device loop0): __ext4_fill_super:5497: inode #2: comm syz.0.773: iget: bad extended attribute block 281474976710655 [ 77.701087][ T5764] EXT4-fs (loop0): get root inode failed [ 77.706840][ T5764] EXT4-fs (loop0): mount failed [ 77.852207][ T5772] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.775'. [ 77.865264][ T5771] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.775'. [ 77.964542][ T5774] loop0: detected capacity change from 0 to 2048 [ 78.025203][ T5774] EXT4-fs error (device loop0): __ext4_fill_super:5497: inode #2: comm syz.0.776: iget: bad extended attribute block 281474976710655 [ 78.054545][ T5780] FAULT_INJECTION: forcing a failure. [ 78.054545][ T5780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.068002][ T5780] CPU: 1 UID: 0 PID: 5780 Comm: syz.4.777 Not tainted 6.14.0-rc6-syzkaller #0 [ 78.068027][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.068050][ T5780] Call Trace: [ 78.068057][ T5780] [ 78.068065][ T5780] dump_stack_lvl+0xf2/0x150 [ 78.068094][ T5780] dump_stack+0x15/0x1a [ 78.068115][ T5780] should_fail_ex+0x24a/0x260 [ 78.068161][ T5780] should_fail+0xb/0x10 [ 78.068189][ T5780] should_fail_usercopy+0x1a/0x20 [ 78.068221][ T5780] _copy_from_iter+0xd5/0xd00 [ 78.068252][ T5780] ? kmalloc_reserve+0x16e/0x190 [ 78.068273][ T5780] ? __build_skb_around+0x196/0x1f0 [ 78.068315][ T5780] ? __alloc_skb+0x21f/0x310 [ 78.068335][ T5780] ? __virt_addr_valid+0x1ed/0x250 [ 78.068361][ T5780] ? __check_object_size+0x364/0x520 [ 78.068387][ T5780] netlink_sendmsg+0x460/0x6e0 [ 78.068502][ T5780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.068536][ T5780] __sock_sendmsg+0x140/0x180 [ 78.068570][ T5780] ____sys_sendmsg+0x326/0x4b0 [ 78.068727][ T5780] __sys_sendmmsg+0x227/0x4b0 [ 78.068780][ T5780] __x64_sys_sendmmsg+0x57/0x70 [ 78.068807][ T5780] x64_sys_call+0x29aa/0x2dc0 [ 78.068834][ T5780] do_syscall_64+0xc9/0x1c0 [ 78.068927][ T5780] ? clear_bhb_loop+0x55/0xb0 [ 78.068956][ T5780] ? clear_bhb_loop+0x55/0xb0 [ 78.068983][ T5780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.069020][ T5780] RIP: 0033:0x7ffbe0fad169 [ 78.069035][ T5780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.069093][ T5780] RSP: 002b:00007ffbdf611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 78.069112][ T5780] RAX: ffffffffffffffda RBX: 00007ffbe11c5fa0 RCX: 00007ffbe0fad169 [ 78.069124][ T5780] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000005 [ 78.069136][ T5780] RBP: 00007ffbdf611090 R08: 0000000000000000 R09: 0000000000000000 [ 78.069218][ T5780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.069230][ T5780] R13: 0000000000000000 R14: 00007ffbe11c5fa0 R15: 00007fffc1055e98 [ 78.069249][ T5780] [ 78.223078][ T5774] EXT4-fs (loop0): get root inode failed [ 78.286704][ T5774] EXT4-fs (loop0): mount failed [ 78.299646][ T5779] loop5: detected capacity change from 0 to 512 [ 78.324601][ T5779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.425028][ T5779] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.479418][ T4544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.522654][ T5812] xt_hashlimit: max too large, truncated to 1048576 [ 78.597017][ T5823] Invalid logical block size (3584) [ 78.597158][ T5819] loop1: detected capacity change from 0 to 2048 [ 78.665460][ T5819] EXT4-fs error (device loop1): __ext4_fill_super:5497: inode #2: comm syz.1.793: iget: bad extended attribute block 281474976710655 [ 78.681493][ T5819] EXT4-fs (loop1): get root inode failed [ 78.687268][ T5819] EXT4-fs (loop1): mount failed [ 78.901576][ T5848] xt_hashlimit: max too large, truncated to 1048576 [ 78.945847][ T5853] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 78.952546][ T5853] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 78.960350][ T5853] vhci_hcd vhci_hcd.0: Device attached [ 78.967648][ T5854] vhci_hcd: connection closed [ 78.967975][ T58] vhci_hcd: stop threads [ 78.977196][ T58] vhci_hcd: release socket [ 78.981637][ T58] vhci_hcd: disconnect device [ 79.122510][ T5867] loop0: detected capacity change from 0 to 2048 [ 79.143417][ T5867] EXT4-fs error (device loop0): __ext4_fill_super:5497: inode #2: comm syz.0.811: iget: bad extended attribute block 281474976710655 [ 79.157803][ T5867] EXT4-fs (loop0): get root inode failed [ 79.163539][ T5867] EXT4-fs (loop0): mount failed [ 79.386944][ T5882] xt_hashlimit: max too large, truncated to 1048576 [ 79.457812][ T5893] loop0: detected capacity change from 0 to 128 [ 79.465981][ T5893] EXT4-fs: Ignoring removed nobh option [ 79.489370][ T5893] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.513546][ T5901] loop4: detected capacity change from 0 to 128 [ 79.536188][ T5893] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.556256][ T5901] EXT4-fs: Ignoring removed nobh option [ 79.569275][ T5893] FAULT_INJECTION: forcing a failure. [ 79.569275][ T5893] name failslab, interval 1, probability 0, space 0, times 0 [ 79.582021][ T5893] CPU: 0 UID: 0 PID: 5893 Comm: syz.0.821 Not tainted 6.14.0-rc6-syzkaller #0 [ 79.582045][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.582130][ T5893] Call Trace: [ 79.582138][ T5893] [ 79.582147][ T5893] dump_stack_lvl+0xf2/0x150 [ 79.582176][ T5893] dump_stack+0x15/0x1a [ 79.582201][ T5893] should_fail_ex+0x24a/0x260 [ 79.582265][ T5893] should_failslab+0x8f/0xb0 [ 79.582363][ T5893] __kmalloc_noprof+0xab/0x3f0 [ 79.582391][ T5893] ? alloc_pipe_info+0x1cb/0x360 [ 79.582430][ T5893] alloc_pipe_info+0x1cb/0x360 [ 79.582507][ T5893] splice_direct_to_actor+0x60f/0x670 [ 79.582540][ T5893] ? __pfx_direct_splice_actor+0x10/0x10 [ 79.582568][ T5893] ? 0xffffffff81000000 [ 79.582580][ T5893] ? selinux_file_permission+0x22a/0x360 [ 79.582613][ T5893] ? __rcu_read_unlock+0x4e/0x70 [ 79.582717][ T5893] ? avc_policy_seqno+0x15/0x20 [ 79.582738][ T5893] ? selinux_file_permission+0x22a/0x360 [ 79.582830][ T5893] do_splice_direct+0xd7/0x150 [ 79.582855][ T5893] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 79.582891][ T5893] do_sendfile+0x398/0x660 [ 79.582961][ T5893] __x64_sys_sendfile64+0x110/0x150 [ 79.582998][ T5893] x64_sys_call+0xfbd/0x2dc0 [ 79.583030][ T5893] do_syscall_64+0xc9/0x1c0 [ 79.583063][ T5893] ? clear_bhb_loop+0x55/0xb0 [ 79.583102][ T5893] ? clear_bhb_loop+0x55/0xb0 [ 79.583133][ T5893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.583164][ T5893] RIP: 0033:0x7f356e32d169 [ 79.583178][ T5893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.583276][ T5893] RSP: 002b:00007f356c997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 79.583296][ T5893] RAX: ffffffffffffffda RBX: 00007f356e545fa0 RCX: 00007f356e32d169 [ 79.583310][ T5893] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 79.583323][ T5893] RBP: 00007f356c997090 R08: 0000000000000000 R09: 0000000000000000 [ 79.583336][ T5893] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000001 [ 79.583390][ T5893] R13: 0000000000000000 R14: 00007f356e545fa0 R15: 00007fffd21c5978 [ 79.583482][ T5893] [ 79.586085][ T5901] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.616988][ T5908] loop5: detected capacity change from 0 to 1024 [ 79.623715][ T5901] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.648671][ T5908] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 79.664369][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.665559][ T5908] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 79.863892][ T5908] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.864014][ T5908] EXT4-fs (loop5): invalid journal inode [ 79.888349][ T5915] xt_hashlimit: max too large, truncated to 1048576 [ 79.898416][ T5908] EXT4-fs (loop5): can't get journal size [ 79.906305][ T5908] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.827: blocks 2-2 from inode overlap system zone [ 79.922909][ T5908] EXT4-fs (loop5): failed to initialize system zone (-117) [ 79.930500][ T5908] EXT4-fs (loop5): mount failed [ 79.937477][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.017944][ T5908] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 80.024535][ T5908] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.032056][ T5908] vhci_hcd vhci_hcd.0: Device attached [ 80.046969][ T5927] vhci_hcd: connection closed [ 80.047129][ T51] vhci_hcd: stop threads [ 80.056252][ T51] vhci_hcd: release socket [ 80.060816][ T51] vhci_hcd: disconnect device [ 80.068737][ T5932] loop0: detected capacity change from 0 to 1024 [ 80.085381][ T5932] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 80.097315][ T5932] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 80.113501][ T5932] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.125394][ T5932] EXT4-fs (loop0): invalid journal inode [ 80.132566][ T5932] EXT4-fs (loop0): can't get journal size [ 80.138753][ T5932] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.834: blocks 2-2 from inode overlap system zone [ 80.154307][ T5932] EXT4-fs (loop0): failed to initialize system zone (-117) [ 80.161779][ T5932] EXT4-fs (loop0): mount failed [ 80.240872][ T5932] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 80.247432][ T5932] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.254935][ T5932] vhci_hcd vhci_hcd.0: Device attached [ 80.262407][ T5935] vhci_hcd: connection closed [ 80.262970][ T58] vhci_hcd: stop threads [ 80.272073][ T58] vhci_hcd: release socket [ 80.276602][ T58] vhci_hcd: disconnect device [ 80.380016][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 80.380068][ T30] audit: type=1400 audit(1741602372.613:1395): avc: denied { read } for pid=5941 comm="syz.4.837" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.411855][ T30] audit: type=1400 audit(1741602372.613:1396): avc: denied { open } for pid=5941 comm="syz.4.837" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.435441][ T30] audit: type=1400 audit(1741602372.613:1397): avc: denied { ioctl } for pid=5941 comm="syz.4.837" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.520045][ T30] audit: type=1400 audit(1741602372.753:1398): avc: denied { execmem } for pid=5949 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 80.632427][ T30] audit: type=1326 audit(1741602372.863:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f78b1d169 code=0x7ffc0000 [ 80.656551][ T30] audit: type=1326 audit(1741602372.863:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f78b1d169 code=0x7ffc0000 [ 80.680293][ T30] audit: type=1326 audit(1741602372.873:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f78b1d169 code=0x7ffc0000 [ 80.703789][ T30] audit: type=1326 audit(1741602372.873:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f78b1d169 code=0x7ffc0000 [ 80.731443][ T30] audit: type=1326 audit(1741602372.893:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f78b1d169 code=0x7ffc0000 [ 80.755193][ T30] audit: type=1326 audit(1741602372.893:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f78b1d169 code=0x7ffc0000 [ 80.829615][ T5974] loop5: detected capacity change from 0 to 128 [ 80.838754][ T5974] EXT4-fs: Ignoring removed nobh option [ 80.857523][ T5972] loop4: detected capacity change from 0 to 8192 [ 80.867304][ T5974] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.925057][ T5974] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.943418][ T5984] loop4: detected capacity change from 0 to 1024 [ 80.969523][ T5974] netlink: 32 bytes leftover after parsing attributes in process `syz.5.851'. [ 80.978700][ T5984] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 80.989721][ T5984] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 81.005223][ T5984] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 81.015810][ T5984] EXT4-fs (loop4): invalid journal inode [ 81.022686][ T5984] EXT4-fs (loop4): can't get journal size [ 81.023079][ T4544] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.037914][ T5984] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.855: blocks 2-2 from inode overlap system zone [ 81.064686][ T5984] EXT4-fs (loop4): failed to initialize system zone (-117) [ 81.078638][ T5984] EXT4-fs (loop4): mount failed [ 81.168625][ T5984] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 81.175558][ T5984] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.183184][ T5984] vhci_hcd vhci_hcd.0: Device attached [ 81.185348][ T5999] loop0: detected capacity change from 0 to 8192 [ 81.197450][ T6001] vhci_hcd: connection closed [ 81.198657][ T3402] vhci_hcd: stop threads [ 81.207797][ T3402] vhci_hcd: release socket [ 81.212266][ T3402] vhci_hcd: disconnect device [ 81.504990][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 81.544915][ T6032] loop1: detected capacity change from 0 to 164 [ 81.558402][ T6032] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=164 [ 81.914365][ T6043] xt_hashlimit: max too large, truncated to 1048576 [ 81.926086][ T6039] loop5: detected capacity change from 0 to 8192 [ 82.011437][ T6051] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.879'. [ 82.326579][ T6071] bond1: entered promiscuous mode [ 82.331814][ T6071] bond1: entered allmulticast mode [ 82.353483][ T6071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.374431][ T6071] bond1 (unregistering): Released all slaves [ 82.437537][ T6074] loop1: detected capacity change from 0 to 2048 [ 82.483110][ T6074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.584840][ T6079] loop0: detected capacity change from 0 to 1024 [ 82.603193][ T6079] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 82.614224][ T6079] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 82.625233][ T6079] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.636236][ T6079] EXT4-fs (loop0): invalid journal inode [ 82.643291][ T6079] EXT4-fs (loop0): can't get journal size [ 82.649757][ T6079] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.888: blocks 2-2 from inode overlap system zone [ 82.664443][ T6079] EXT4-fs (loop0): failed to initialize system zone (-117) [ 82.673162][ T6079] EXT4-fs (loop0): mount failed [ 82.736172][ T6081] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 82.742785][ T6081] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.750296][ T6081] vhci_hcd vhci_hcd.0: Device attached [ 82.758052][ T6082] vhci_hcd: connection closed [ 82.758393][ T51] vhci_hcd: stop threads [ 82.767455][ T51] vhci_hcd: release socket [ 82.771947][ T51] vhci_hcd: disconnect device [ 82.808933][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 82.917915][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 82.981806][ T6089] loop5: detected capacity change from 0 to 8192 [ 82.998439][ T6095] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.892'. [ 83.178457][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.307401][ T6116] netlink: 108 bytes leftover after parsing attributes in process `syz.5.900'. [ 83.324189][ T6111] loop5: detected capacity change from 0 to 1024 [ 83.334877][ T6111] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.363467][ T6111] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 83.385141][ T6111] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.393664][ T6111] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 83.393819][ T6123] loop0: detected capacity change from 0 to 128 [ 83.408422][ T6111] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 83.422246][ T6111] EXT4-fs (loop5): 1 truncate cleaned up [ 83.428407][ T6111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.541279][ T6123] vfat: Unknown parameter 'nonutail' [ 83.558891][ T6123] vhci_hcd: default hub control req: 6015 v01f5 i0004 l0 [ 83.761425][ T6125] loop0: detected capacity change from 0 to 8192 [ 83.781567][ T4544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.996433][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 84.183620][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'. [ 84.221367][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'. [ 84.251359][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'. [ 84.260300][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'. [ 84.276497][ T6147] loop4: detected capacity change from 0 to 1024 [ 84.332456][ T6149] xt_hashlimit: max too large, truncated to 1048576 [ 84.360807][ T6152] loop5: detected capacity change from 0 to 128 [ 84.383228][ T6147] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 84.389719][ T6152] vfat: Unknown parameter 'nonutail' [ 84.394244][ T6147] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 84.414584][ T6152] vhci_hcd: default hub control req: 6015 v01f5 i0004 l0 [ 84.474263][ T6147] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 84.505464][ T6147] EXT4-fs (loop4): invalid journal inode [ 84.528666][ T6147] EXT4-fs (loop4): can't get journal size [ 84.608745][ T6154] loop5: detected capacity change from 0 to 8192 [ 84.739246][ T6147] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.913: blocks 2-2 from inode overlap system zone [ 84.943109][ T6147] EXT4-fs (loop4): failed to initialize system zone (-117) [ 84.962117][ T6147] EXT4-fs (loop4): mount failed [ 85.200589][ T6171] FAULT_INJECTION: forcing a failure. [ 85.200589][ T6171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.214685][ T6171] CPU: 0 UID: 0 PID: 6171 Comm: syz.0.921 Not tainted 6.14.0-rc6-syzkaller #0 [ 85.214712][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.214726][ T6171] Call Trace: [ 85.214734][ T6171] [ 85.214744][ T6171] dump_stack_lvl+0xf2/0x150 [ 85.214831][ T6171] dump_stack+0x15/0x1a [ 85.214856][ T6171] should_fail_ex+0x24a/0x260 [ 85.214890][ T6171] should_fail+0xb/0x10 [ 85.214916][ T6171] should_fail_usercopy+0x1a/0x20 [ 85.215014][ T6171] _copy_from_user+0x1c/0xa0 [ 85.215084][ T6171] __se_sys_mount+0x115/0x2d0 [ 85.215142][ T6171] ? fput+0x1c4/0x200 [ 85.215162][ T6171] ? ksys_write+0x176/0x1b0 [ 85.215189][ T6171] __x64_sys_mount+0x67/0x80 [ 85.215290][ T6171] x64_sys_call+0x2c84/0x2dc0 [ 85.215323][ T6171] do_syscall_64+0xc9/0x1c0 [ 85.215362][ T6171] ? clear_bhb_loop+0x55/0xb0 [ 85.215394][ T6171] ? clear_bhb_loop+0x55/0xb0 [ 85.215477][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.215506][ T6171] RIP: 0033:0x7f356e32d169 [ 85.215522][ T6171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.215580][ T6171] RSP: 002b:00007f356c997038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.215602][ T6171] RAX: ffffffffffffffda RBX: 00007f356e545fa0 RCX: 00007f356e32d169 [ 85.215616][ T6171] RDX: 0000400000002000 RSI: 0000400000001fc0 RDI: 0000000000000000 [ 85.215628][ T6171] RBP: 00007f356c997090 R08: 0000400000002040 R09: 0000000000000000 [ 85.215639][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.215650][ T6171] R13: 0000000000000000 R14: 00007f356e545fa0 R15: 00007fffd21c5978 [ 85.215688][ T6171] [ 85.483221][ T6174] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 85.489875][ T6174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.497523][ T6174] vhci_hcd vhci_hcd.0: Device attached [ 85.537064][ T6178] vhci_hcd: connection closed [ 85.537227][ T58] vhci_hcd: stop threads [ 85.546405][ T58] vhci_hcd: release socket [ 85.550941][ T58] vhci_hcd: disconnect device [ 85.685949][ T6191] loop1: detected capacity change from 0 to 128 [ 85.700028][ T6191] vfat: Unknown parameter 'nonutail' [ 85.834593][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 85.834611][ T30] audit: type=1326 audit(1741602378.073:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 85.864322][ T30] audit: type=1326 audit(1741602378.073:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 85.892363][ T30] audit: type=1326 audit(1741602378.073:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 85.915868][ T30] audit: type=1326 audit(1741602378.073:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 85.939451][ T30] audit: type=1326 audit(1741602378.073:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 85.963010][ T30] audit: type=1326 audit(1741602378.073:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8ad9d169 code=0x7ffc0000 [ 85.986631][ T30] audit: type=1326 audit(1741602378.073:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b8ad9f087 code=0x7ffc0000 [ 86.010082][ T30] audit: type=1326 audit(1741602378.073:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1b8ad9effc code=0x7ffc0000 [ 86.033693][ T30] audit: type=1326 audit(1741602378.073:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1b8ad9ef34 code=0x7ffc0000 [ 86.057710][ T30] audit: type=1326 audit(1741602378.073:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1b8ad9ef34 code=0x7ffc0000 [ 86.152285][ T6211] xt_hashlimit: max too large, truncated to 1048576 [ 86.256075][ T6222] loop4: detected capacity change from 0 to 128 [ 86.263227][ T6222] vfat: Unknown parameter 'nonutail' [ 86.274028][ T6222] vhci_hcd: default hub control req: 6015 v01f5 i0004 l0 [ 86.357037][ T6232] 9pnet_fd: Insufficient options for proto=fd [ 86.395069][ T6236] xt_hashlimit: max too large, truncated to 1048576 [ 86.450151][ T6238] loop4: detected capacity change from 0 to 128 [ 86.457370][ T6238] EXT4-fs: Ignoring removed nobh option [ 86.467000][ T6241] loop5: detected capacity change from 0 to 128 [ 86.476228][ T6238] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.492013][ T6241] EXT4-fs: Ignoring removed nobh option [ 86.507471][ T6241] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.521922][ T6238] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.534767][ T6241] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.548242][ T6238] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.558871][ T6241] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.586691][ T6241] FAULT_INJECTION: forcing a failure. [ 86.586691][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 86.599750][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.5.948 Not tainted 6.14.0-rc6-syzkaller #0 [ 86.599826][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.599842][ T6241] Call Trace: [ 86.599909][ T6241] [ 86.599919][ T6241] dump_stack_lvl+0xf2/0x150 [ 86.599952][ T6241] dump_stack+0x15/0x1a [ 86.600048][ T6241] should_fail_ex+0x24a/0x260 [ 86.600100][ T6241] should_failslab+0x8f/0xb0 [ 86.600134][ T6241] kmem_cache_alloc_noprof+0x52/0x320 [ 86.600158][ T6241] ? getname_flags+0x81/0x3b0 [ 86.600309][ T6241] getname_flags+0x81/0x3b0 [ 86.600343][ T6241] getname+0x17/0x20 [ 86.600360][ T6241] do_sys_openat2+0x67/0x120 [ 86.600386][ T6241] __x64_sys_openat+0xf3/0x120 [ 86.600411][ T6241] x64_sys_call+0x2b30/0x2dc0 [ 86.600473][ T6241] do_syscall_64+0xc9/0x1c0 [ 86.600505][ T6241] ? clear_bhb_loop+0x55/0xb0 [ 86.600561][ T6241] ? clear_bhb_loop+0x55/0xb0 [ 86.600673][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.600706][ T6241] RIP: 0033:0x7f4f78b1d169 [ 86.600725][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.600789][ T6241] RSP: 002b:00007f4f77181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.600812][ T6241] RAX: ffffffffffffffda RBX: 00007f4f78d35fa0 RCX: 00007f4f78b1d169 [ 86.600826][ T6241] RDX: 0000000000101042 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 86.600838][ T6241] RBP: 00007f4f77181090 R08: 0000000000000000 R09: 0000000000000000 [ 86.600849][ T6241] R10: 0000000000000045 R11: 0000000000000246 R12: 0000000000000001 [ 86.600861][ T6241] R13: 0000000000000000 R14: 00007f4f78d35fa0 R15: 00007ffd90b7a988 [ 86.600921][ T6241] [ 86.848094][ T6256] loop0: detected capacity change from 0 to 128 [ 86.855124][ T6256] vfat: Unknown parameter 'nonutail' [ 86.869027][ T6256] vhci_hcd: default hub control req: 6015 v01f5 i0004 l0 [ 87.128575][ T6283] tipc: Started in network mode [ 87.133767][ T6283] tipc: Node identity ac14140f, cluster identity 4711 [ 87.153077][ T6283] tipc: New replicast peer: 255.255.255.255 [ 87.159259][ T6283] tipc: Enabled bearer , priority 10 [ 87.178722][ T6289] vhci_hcd: default hub control req: 6015 v01f5 i0004 l0 [ 87.194935][ T6290] __nla_validate_parse: 32 callbacks suppressed [ 87.194956][ T6290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.967'. [ 87.212111][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 87.317953][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.973'. [ 87.473521][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.977'. [ 87.555945][ T6316] random: crng reseeded on system resumption [ 87.782716][ T6334] FAULT_INJECTION: forcing a failure. [ 87.782716][ T6334] name failslab, interval 1, probability 0, space 0, times 0 [ 87.795726][ T6334] CPU: 0 UID: 0 PID: 6334 Comm: syz.5.984 Not tainted 6.14.0-rc6-syzkaller #0 [ 87.795788][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.795803][ T6334] Call Trace: [ 87.795810][ T6334] [ 87.795817][ T6334] dump_stack_lvl+0xf2/0x150 [ 87.795846][ T6334] dump_stack+0x15/0x1a [ 87.795869][ T6334] should_fail_ex+0x24a/0x260 [ 87.795942][ T6334] should_failslab+0x8f/0xb0 [ 87.795977][ T6334] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 87.796006][ T6334] ? sidtab_sid2str_get+0xb8/0x140 [ 87.796091][ T6334] kmemdup_noprof+0x2b/0x70 [ 87.796145][ T6334] sidtab_sid2str_get+0xb8/0x140 [ 87.796182][ T6334] security_sid_to_context_core+0x1eb/0x2f0 [ 87.796261][ T6334] security_sid_to_context+0x27/0x30 [ 87.796296][ T6334] selinux_lsmprop_to_secctx+0x68/0xf0 [ 87.796334][ T6334] security_lsmprop_to_secctx+0x40/0x80 [ 87.796363][ T6334] audit_log_task_context+0x76/0x180 [ 87.796422][ T6334] audit_log_task+0xf9/0x250 [ 87.796460][ T6334] audit_seccomp+0x68/0x130 [ 87.796495][ T6334] __seccomp_filter+0x6fa/0x1180 [ 87.796525][ T6334] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 87.796675][ T6334] ? vfs_write+0x644/0x920 [ 87.796761][ T6334] __secure_computing+0x9f/0x1c0 [ 87.796790][ T6334] syscall_trace_enter+0xd1/0x1f0 [ 87.796850][ T6334] do_syscall_64+0xaa/0x1c0 [ 87.796888][ T6334] ? clear_bhb_loop+0x55/0xb0 [ 87.796921][ T6334] ? clear_bhb_loop+0x55/0xb0 [ 87.796957][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.796989][ T6334] RIP: 0033:0x7f4f78b1d169 [ 87.797007][ T6334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.797070][ T6334] RSP: 002b:00007f4f77181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 87.797093][ T6334] RAX: ffffffffffffffda RBX: 00007f4f78d35fa0 RCX: 00007f4f78b1d169 [ 87.797107][ T6334] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00004000007d8000 [ 87.797121][ T6334] RBP: 00007f4f77181090 R08: 0000000000000000 R09: 0000000000000000 [ 87.797136][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.797149][ T6334] R13: 0000000000000000 R14: 00007f4f78d35fa0 R15: 00007ffd90b7a988 [ 87.797172][ T6334] [ 88.106382][ T6338] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 88.112944][ T6338] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.120621][ T6338] vhci_hcd vhci_hcd.0: Device attached [ 88.128296][ T6344] vhci_hcd: connection closed [ 88.128944][ T51] vhci_hcd: stop threads [ 88.138122][ T51] vhci_hcd: release socket [ 88.142634][ T51] vhci_hcd: disconnect device [ 88.160743][ T3156] tipc: Node number set to 2886997007 [ 88.252989][ T6358] FAULT_INJECTION: forcing a failure. [ 88.252989][ T6358] name failslab, interval 1, probability 0, space 0, times 0 [ 88.266251][ T6358] CPU: 0 UID: 0 PID: 6358 Comm: syz.0.995 Not tainted 6.14.0-rc6-syzkaller #0 [ 88.266275][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.266289][ T6358] Call Trace: [ 88.266298][ T6358] [ 88.266307][ T6358] dump_stack_lvl+0xf2/0x150 [ 88.266340][ T6358] dump_stack+0x15/0x1a [ 88.266363][ T6358] should_fail_ex+0x24a/0x260 [ 88.266395][ T6358] should_failslab+0x8f/0xb0 [ 88.266425][ T6358] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 88.266455][ T6358] ? sidtab_sid2str_get+0xb8/0x140 [ 88.266606][ T6358] kmemdup_noprof+0x2b/0x70 [ 88.266636][ T6358] sidtab_sid2str_get+0xb8/0x140 [ 88.266668][ T6358] security_sid_to_context_core+0x1eb/0x2f0 [ 88.266761][ T6358] security_sid_to_context+0x27/0x30 [ 88.266797][ T6358] selinux_lsmprop_to_secctx+0x68/0xf0 [ 88.266837][ T6358] security_lsmprop_to_secctx+0x40/0x80 [ 88.266895][ T6358] audit_log_task_context+0x76/0x180 [ 88.267009][ T6358] audit_log_task+0xf9/0x250 [ 88.267090][ T6358] audit_seccomp+0x68/0x130 [ 88.267127][ T6358] __seccomp_filter+0x6fa/0x1180 [ 88.267157][ T6358] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.267188][ T6358] ? vfs_write+0x644/0x920 [ 88.267221][ T6358] __secure_computing+0x9f/0x1c0 [ 88.267257][ T6358] syscall_trace_enter+0xd1/0x1f0 [ 88.267284][ T6358] do_syscall_64+0xaa/0x1c0 [ 88.267319][ T6358] ? clear_bhb_loop+0x55/0xb0 [ 88.267353][ T6358] ? clear_bhb_loop+0x55/0xb0 [ 88.267464][ T6358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.267496][ T6358] RIP: 0033:0x7f356e32d169 [ 88.267511][ T6358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.267531][ T6358] RSP: 002b:00007f356c997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000138 [ 88.267553][ T6358] RAX: ffffffffffffffda RBX: 00007f356e545fa0 RCX: 00007f356e32d169 [ 88.267568][ T6358] RDX: 0000000000000000 RSI: 000000000000021f RDI: 000000000000021f [ 88.267650][ T6358] RBP: 00007f356c997090 R08: 0000000000000006 R09: 0000000000000000 [ 88.267663][ T6358] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 88.267677][ T6358] R13: 0000000000000000 R14: 00007f356e545fa0 R15: 00007fffd21c5978 [ 88.267699][ T6358] [ 88.585299][ T6369] netlink: 'syz.0.998': attribute type 298 has an invalid length. [ 88.593420][ T6367] loop4: detected capacity change from 0 to 1024 [ 88.602988][ T6367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.615150][ T6367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.626165][ T6367] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 88.634982][ T6367] System zones: 0-1, 3-36 [ 88.640148][ T6367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.663541][ T6367] vti0: entered promiscuous mode [ 88.695392][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.762955][ T6376] FAULT_INJECTION: forcing a failure. [ 88.762955][ T6376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.776212][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.2.1002 Not tainted 6.14.0-rc6-syzkaller #0 [ 88.776280][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.776374][ T6376] Call Trace: [ 88.776380][ T6376] [ 88.776390][ T6376] dump_stack_lvl+0xf2/0x150 [ 88.776424][ T6376] dump_stack+0x15/0x1a [ 88.776500][ T6376] should_fail_ex+0x24a/0x260 [ 88.776532][ T6376] should_fail+0xb/0x10 [ 88.776560][ T6376] should_fail_usercopy+0x1a/0x20 [ 88.776598][ T6376] _copy_from_user+0x1c/0xa0 [ 88.776632][ T6376] vt_do_kdsk_ioctl+0x55/0x6f0 [ 88.776665][ T6376] ? security_capable+0x81/0x90 [ 88.776707][ T6376] vt_ioctl+0x8db/0x1810 [ 88.776814][ T6376] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 88.776837][ T6376] tty_ioctl+0x815/0xbe0 [ 88.776931][ T6376] ? __pfx_tty_ioctl+0x10/0x10 [ 88.776965][ T6376] __se_sys_ioctl+0xc9/0x140 [ 88.776995][ T6376] __x64_sys_ioctl+0x43/0x50 [ 88.777090][ T6376] x64_sys_call+0x1690/0x2dc0 [ 88.777123][ T6376] do_syscall_64+0xc9/0x1c0 [ 88.777218][ T6376] ? clear_bhb_loop+0x55/0xb0 [ 88.777250][ T6376] ? clear_bhb_loop+0x55/0xb0 [ 88.777277][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.777321][ T6376] RIP: 0033:0x7fcba335d169 [ 88.777339][ T6376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.777362][ T6376] RSP: 002b:00007fcba19c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.777385][ T6376] RAX: ffffffffffffffda RBX: 00007fcba3575fa0 RCX: 00007fcba335d169 [ 88.777400][ T6376] RDX: 0000400000000400 RSI: 0000000000004b47 RDI: 0000000000000003 [ 88.777414][ T6376] RBP: 00007fcba19c7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.777449][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.777463][ T6376] R13: 0000000000000000 R14: 00007fcba3575fa0 R15: 00007ffe562195f8 [ 88.777481][ T6376] [ 89.357386][ T6404] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 89.364289][ T6404] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.371863][ T6404] vhci_hcd vhci_hcd.0: Device attached [ 89.379894][ T6403] loop1: detected capacity change from 0 to 764 [ 89.420517][ T6403] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 89.550838][ T9] vhci_hcd: vhci_device speed not set [ 89.572322][ T6389] loop4: detected capacity change from 0 to 164 [ 89.603458][ T6389] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=164 [ 89.624235][ T9] usb 5-1: new full-speed USB device number 4 using vhci_hcd [ 89.846271][ T6426] FAULT_INJECTION: forcing a failure. [ 89.846271][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 89.859050][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.5.1021 Not tainted 6.14.0-rc6-syzkaller #0 [ 89.859176][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.859190][ T6426] Call Trace: [ 89.859199][ T6426] [ 89.859209][ T6426] dump_stack_lvl+0xf2/0x150 [ 89.859300][ T6426] dump_stack+0x15/0x1a [ 89.859324][ T6426] should_fail_ex+0x24a/0x260 [ 89.859362][ T6426] should_failslab+0x8f/0xb0 [ 89.859395][ T6426] kmem_cache_alloc_noprof+0x52/0x320 [ 89.859424][ T6426] ? dst_alloc+0xc0/0x100 [ 89.859452][ T6426] dst_alloc+0xc0/0x100 [ 89.859477][ T6426] ip_route_input_rcu+0x1702/0x1c10 [ 89.859516][ T6426] ip_route_input_noref+0x60/0xa0 [ 89.859584][ T6426] ip_rcv_finish_core+0x30d/0xb30 [ 89.859629][ T6426] ? __pfx_ip_rcv+0x10/0x10 [ 89.859666][ T6426] ip_rcv_finish+0xfe/0x1b0 [ 89.859704][ T6426] ? __pfx_ip_rcv+0x10/0x10 [ 89.859779][ T6426] ip_rcv+0x64/0x140 [ 89.859816][ T6426] ? __pfx_ip_rcv_finish+0x10/0x10 [ 89.859899][ T6426] ? __pfx_ip_rcv+0x10/0x10 [ 89.859932][ T6426] __netif_receive_skb+0x10a/0x280 [ 89.859971][ T6426] netif_receive_skb+0x4a/0x320 [ 89.860024][ T6426] ? tun_rx_batched+0xba/0x410 [ 89.860053][ T6426] tun_rx_batched+0xf0/0x410 [ 89.860087][ T6426] tun_get_user+0x1f21/0x25c0 [ 89.860146][ T6426] ? _parse_integer+0x27/0x30 [ 89.860173][ T6426] ? ref_tracker_alloc+0x1f5/0x2f0 [ 89.860212][ T6426] tun_chr_write_iter+0x188/0x240 [ 89.860260][ T6426] vfs_write+0x77b/0x920 [ 89.860290][ T6426] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 89.860318][ T6426] ksys_write+0xe8/0x1b0 [ 89.860348][ T6426] __x64_sys_write+0x42/0x50 [ 89.860450][ T6426] x64_sys_call+0x287e/0x2dc0 [ 89.860601][ T6426] do_syscall_64+0xc9/0x1c0 [ 89.860851][ T6426] ? clear_bhb_loop+0x55/0xb0 [ 89.860883][ T6426] ? clear_bhb_loop+0x55/0xb0 [ 89.860917][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.860949][ T6426] RIP: 0033:0x7f4f78b1bc1f [ 89.860965][ T6426] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 89.860986][ T6426] RSP: 002b:00007f4f77181000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 89.861008][ T6426] RAX: ffffffffffffffda RBX: 00007f4f78d35fa0 RCX: 00007f4f78b1bc1f [ 89.861021][ T6426] RDX: 00000000000000be RSI: 0000400000000080 RDI: 00000000000000c8 [ 89.861034][ T6426] RBP: 00007f4f77181090 R08: 0000000000000000 R09: 0000000000000000 [ 89.861046][ T6426] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000001 [ 89.861057][ T6426] R13: 0000000000000000 R14: 00007f4f78d35fa0 R15: 00007ffd90b7a988 [ 89.861077][ T6426] [ 90.125055][ T6405] vhci_hcd: connection reset by peer [ 90.153383][ T3402] vhci_hcd: stop threads [ 90.157844][ T3402] vhci_hcd: release socket [ 90.162337][ T3402] vhci_hcd: disconnect device [ 90.237019][ T6433] lo speed is unknown, defaulting to 1000 [ 90.391726][ T6443] loop5: detected capacity change from 0 to 8192 [ 90.587483][ T6459] loop4: detected capacity change from 0 to 1024 [ 90.629080][ T6464] lo speed is unknown, defaulting to 1000 [ 90.669340][ T6469] FAULT_INJECTION: forcing a failure. [ 90.669340][ T6469] name failslab, interval 1, probability 0, space 0, times 0 [ 90.682345][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz.2.1039 Not tainted 6.14.0-rc6-syzkaller #0 [ 90.682369][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.682383][ T6469] Call Trace: [ 90.682390][ T6469] [ 90.682397][ T6469] dump_stack_lvl+0xf2/0x150 [ 90.682427][ T6469] dump_stack+0x15/0x1a [ 90.682447][ T6469] should_fail_ex+0x24a/0x260 [ 90.682478][ T6469] ? hugetlb_vm_op_open+0x232/0x3a0 [ 90.682502][ T6469] should_failslab+0x8f/0xb0 [ 90.682533][ T6469] __kmalloc_cache_noprof+0x4e/0x320 [ 90.682561][ T6469] hugetlb_vm_op_open+0x232/0x3a0 [ 90.682591][ T6469] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 90.682622][ T6469] __split_vma+0x374/0x6a0 [ 90.682648][ T6469] vms_gather_munmap_vmas+0x171/0x7a0 [ 90.682682][ T6469] ? mas_walk+0x204/0x320 [ 90.682715][ T6469] mmap_region+0x464/0x1620 [ 90.682737][ T6469] ? mntput_no_expire+0x70/0x3d0 [ 90.682787][ T6469] do_mmap+0x98a/0xc30 [ 90.682823][ T6469] __se_sys_remap_file_pages+0x755/0x7d0 [ 90.682862][ T6469] ? fput+0x1c4/0x200 [ 90.682884][ T6469] ? ksys_write+0x176/0x1b0 [ 90.682914][ T6469] __x64_sys_remap_file_pages+0x67/0x80 [ 90.682948][ T6469] x64_sys_call+0x10b2/0x2dc0 [ 90.682974][ T6469] do_syscall_64+0xc9/0x1c0 [ 90.683005][ T6469] ? clear_bhb_loop+0x55/0xb0 [ 90.683036][ T6469] ? clear_bhb_loop+0x55/0xb0 [ 90.683066][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.683096][ T6469] RIP: 0033:0x7fcba335d169 [ 90.683112][ T6469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.683130][ T6469] RSP: 002b:00007fcba19c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 90.683148][ T6469] RAX: ffffffffffffffda RBX: 00007fcba3575fa0 RCX: 00007fcba335d169 [ 90.683162][ T6469] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000400000800000 [ 90.683176][ T6469] RBP: 00007fcba19c7090 R08: 0000000000000000 R09: 0000000000000000 [ 90.683187][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.683198][ T6469] R13: 0000000000000000 R14: 00007fcba3575fa0 R15: 00007ffe562195f8 [ 90.683215][ T6469] [ 90.683221][ T6469] HugeTLB: unable to allocate vma specific lock [ 90.937198][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 90.937215][ T30] audit: type=1326 audit(1741602383.173:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba335d169 code=0x7ffc0000 [ 90.945690][ T6478] loop4: detected capacity change from 0 to 1024 [ 90.972723][ T30] audit: type=1326 audit(1741602383.213:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba335d169 code=0x7ffc0000 [ 90.997455][ T30] audit: type=1326 audit(1741602383.213:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba335d169 code=0x7ffc0000 [ 91.002885][ T6478] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 91.021024][ T30] audit: type=1326 audit(1741602383.213:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba335d169 code=0x7ffc0000 [ 91.053309][ T30] audit: type=1326 audit(1741602383.213:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba335d169 code=0x7ffc0000 [ 91.053371][ T30] audit: type=1326 audit(1741602383.213:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba335d169 code=0x7ffc0000 [ 91.053469][ T30] audit: type=1326 audit(1741602383.213:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba335d169 code=0x7ffc0000 [ 91.053502][ T30] audit: type=1326 audit(1741602383.213:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba335d169 code=0x7ffc0000 [ 91.053560][ T30] audit: type=1326 audit(1741602383.213:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba335d169 code=0x7ffc0000 [ 91.053587][ T30] audit: type=1326 audit(1741602383.213:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcba335d169 code=0x7ffc0000 [ 91.157672][ T6484] FAULT_INJECTION: forcing a failure. [ 91.157672][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 91.157701][ T6484] CPU: 0 UID: 0 PID: 6484 Comm: syz.1.1045 Not tainted 6.14.0-rc6-syzkaller #0 [ 91.157767][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.157782][ T6484] Call Trace: [ 91.157789][ T6484] [ 91.157797][ T6484] dump_stack_lvl+0xf2/0x150 [ 91.157831][ T6484] dump_stack+0x15/0x1a [ 91.157893][ T6484] should_fail_ex+0x24a/0x260 [ 91.157976][ T6484] ? __scm_send+0x407/0xb80 [ 91.158011][ T6484] should_failslab+0x8f/0xb0 [ 91.158047][ T6484] __kmalloc_cache_noprof+0x4e/0x320 [ 91.158099][ T6484] __scm_send+0x407/0xb80 [ 91.158133][ T6484] unix_stream_sendmsg+0xa9/0x800 [ 91.158157][ T6484] ? selinux_socket_sendmsg+0x185/0x1c0 [ 91.158264][ T6484] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 91.158285][ T6484] __sock_sendmsg+0x140/0x180 [ 91.158321][ T6484] ____sys_sendmsg+0x326/0x4b0 [ 91.158351][ T6484] __sys_sendmsg+0x19d/0x230 [ 91.158480][ T6484] __x64_sys_sendmsg+0x46/0x50 [ 91.158512][ T6484] x64_sys_call+0x2734/0x2dc0 [ 91.158551][ T6484] do_syscall_64+0xc9/0x1c0 [ 91.158588][ T6484] ? clear_bhb_loop+0x55/0xb0 [ 91.158679][ T6484] ? clear_bhb_loop+0x55/0xb0 [ 91.158713][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.158751][ T6484] RIP: 0033:0x7f1b8ad9d169 [ 91.158769][ T6484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.158841][ T6484] RSP: 002b:00007f1b89407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.158862][ T6484] RAX: ffffffffffffffda RBX: 00007f1b8afb5fa0 RCX: 00007f1b8ad9d169 [ 91.158874][ T6484] RDX: 0000000004004881 RSI: 0000400000000600 RDI: 0000000000000006 [ 91.158886][ T6484] RBP: 00007f1b89407090 R08: 0000000000000000 R09: 0000000000000000 [ 91.158954][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.158969][ T6484] R13: 0000000000000000 R14: 00007f1b8afb5fa0 R15: 00007ffee771a308 [ 91.158991][ T6484] [ 91.215316][ T6497] loop1: detected capacity change from 0 to 1024 [ 91.448584][ T6505] FAULT_INJECTION: forcing a failure. [ 91.448584][ T6505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.486474][ T6497] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 91.492142][ T6505] CPU: 0 UID: 0 PID: 6505 Comm: syz.4.1052 Not tainted 6.14.0-rc6-syzkaller #0 [ 91.492239][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.492256][ T6505] Call Trace: [ 91.492265][ T6505] [ 91.492277][ T6505] dump_stack_lvl+0xf2/0x150 [ 91.492314][ T6505] dump_stack+0x15/0x1a [ 91.492360][ T6505] should_fail_ex+0x24a/0x260 [ 91.492447][ T6505] should_fail+0xb/0x10 [ 91.492480][ T6505] should_fail_usercopy+0x1a/0x20 [ 91.492566][ T6505] strncpy_from_user+0x25/0x210 [ 91.492646][ T6505] ? __fget_files+0x17c/0x1c0 [ 91.492692][ T6505] __se_sys_add_key+0x81/0x320 [ 91.492840][ T6505] ? fput+0x1c4/0x200 [ 91.492871][ T6505] __x64_sys_add_key+0x67/0x80 [ 91.492913][ T6505] x64_sys_call+0x2964/0x2dc0 [ 91.492949][ T6505] do_syscall_64+0xc9/0x1c0 [ 91.493067][ T6505] ? clear_bhb_loop+0x55/0xb0 [ 91.493171][ T6505] ? clear_bhb_loop+0x55/0xb0 [ 91.493207][ T6505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.493242][ T6505] RIP: 0033:0x7ffbe0fad169 [ 91.493343][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.493367][ T6505] RSP: 002b:00007ffbdf5f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 91.493407][ T6505] RAX: ffffffffffffffda RBX: 00007ffbe11c6080 RCX: 00007ffbe0fad169 [ 91.493423][ T6505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.493438][ T6505] RBP: 00007ffbdf5f0090 R08: 0000000000000000 R09: 0000000000000000 [ 91.493515][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.493532][ T6505] R13: 0000000000000001 R14: 00007ffbe11c6080 R15: 00007fffc1055e98 [ 91.493557][ T6505] [ 91.717204][ T6497] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 91.728144][ T6497] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 91.739344][ T6499] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 91.756414][ T6501] lo speed is unknown, defaulting to 1000 [ 91.764027][ T6497] EXT4-fs (loop1): invalid journal inode [ 91.769814][ T6497] EXT4-fs (loop1): can't get journal size [ 91.778045][ T6497] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.1049: blocks 2-2 from inode overlap system zone [ 91.794972][ T6497] EXT4-fs (loop1): failed to initialize system zone (-117) [ 91.803894][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 91.814013][ T6497] EXT4-fs (loop1): mount failed [ 91.906258][ T6516] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 91.912934][ T6516] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.921635][ T6516] vhci_hcd vhci_hcd.0: Device attached [ 91.955972][ T6514] loop4: detected capacity change from 0 to 8192 [ 91.969844][ T6521] loop5: detected capacity change from 0 to 1024 [ 91.988264][ T6517] loop0: detected capacity change from 0 to 8192 [ 91.996675][ T6521] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 92.006603][ T6521] EXT4-fs (loop5): group descriptors corrupted! [ 92.059209][ T6518] vhci_hcd: connection closed [ 92.060210][ T3402] vhci_hcd: stop threads [ 92.069766][ T3402] vhci_hcd: release socket [ 92.074301][ T3402] vhci_hcd: disconnect device [ 92.110765][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.111085][ T3368] vhci_hcd: vhci_device speed not set [ 92.119268][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.151177][ T6527] loop5: detected capacity change from 0 to 512 [ 92.185305][ T6527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.198864][ T6527] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.227817][ T6527] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.237666][ T6543] FAULT_INJECTION: forcing a failure. [ 92.237666][ T6543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.251193][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.0.1066 Not tainted 6.14.0-rc6-syzkaller #0 [ 92.251286][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.251299][ T6543] Call Trace: [ 92.251306][ T6543] [ 92.251320][ T6543] dump_stack_lvl+0xf2/0x150 [ 92.251439][ T6543] dump_stack+0x15/0x1a [ 92.251503][ T6543] should_fail_ex+0x24a/0x260 [ 92.251564][ T6543] should_fail+0xb/0x10 [ 92.251612][ T6543] should_fail_usercopy+0x1a/0x20 [ 92.251743][ T6543] _copy_from_user+0x1c/0xa0 [ 92.251762][ T6543] copy_msghdr_from_user+0x54/0x2a0 [ 92.251796][ T6543] ? __fget_files+0x17c/0x1c0 [ 92.251831][ T6543] __sys_sendmsg+0x13e/0x230 [ 92.251960][ T6543] __x64_sys_sendmsg+0x46/0x50 [ 92.251986][ T6543] x64_sys_call+0x2734/0x2dc0 [ 92.252012][ T6543] do_syscall_64+0xc9/0x1c0 [ 92.252103][ T6543] ? clear_bhb_loop+0x55/0xb0 [ 92.252130][ T6543] ? clear_bhb_loop+0x55/0xb0 [ 92.252157][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.252208][ T6543] RIP: 0033:0x7f356e32d169 [ 92.252223][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.252241][ T6543] RSP: 002b:00007f356c997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.252330][ T6543] RAX: ffffffffffffffda RBX: 00007f356e545fa0 RCX: 00007f356e32d169 [ 92.252342][ T6543] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 92.252354][ T6543] RBP: 00007f356c997090 R08: 0000000000000000 R09: 0000000000000000 [ 92.252365][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.252377][ T6543] R13: 0000000000000000 R14: 00007f356e545fa0 R15: 00007fffd21c5978 [ 92.252394][ T6543] [ 92.438888][ T4544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.475019][ T6548] xt_hashlimit: max too large, truncated to 1048576 [ 92.485506][ T6548] Cannot find set identified by id 0 to match [ 92.549654][ T6553] FAULT_INJECTION: forcing a failure. [ 92.549654][ T6553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.562821][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: syz.5.1069 Not tainted 6.14.0-rc6-syzkaller #0 [ 92.562923][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.562962][ T6553] Call Trace: [ 92.562969][ T6553] [ 92.562978][ T6553] dump_stack_lvl+0xf2/0x150 [ 92.563013][ T6553] dump_stack+0x15/0x1a [ 92.563034][ T6553] should_fail_ex+0x24a/0x260 [ 92.563066][ T6553] should_fail+0xb/0x10 [ 92.563118][ T6553] should_fail_usercopy+0x1a/0x20 [ 92.563150][ T6553] _copy_to_user+0x20/0xa0 [ 92.563173][ T6553] simple_read_from_buffer+0xa0/0x110 [ 92.563207][ T6553] proc_fail_nth_read+0xf9/0x140 [ 92.563313][ T6553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.563345][ T6553] vfs_read+0x19b/0x6f0 [ 92.563416][ T6553] ? __rcu_read_unlock+0x4e/0x70 [ 92.563442][ T6553] ? __fget_files+0x17c/0x1c0 [ 92.563477][ T6553] ksys_read+0xe8/0x1b0 [ 92.563505][ T6553] __x64_sys_read+0x42/0x50 [ 92.563533][ T6553] x64_sys_call+0x2874/0x2dc0 [ 92.563592][ T6553] do_syscall_64+0xc9/0x1c0 [ 92.563705][ T6553] ? clear_bhb_loop+0x55/0xb0 [ 92.563737][ T6553] ? clear_bhb_loop+0x55/0xb0 [ 92.563809][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.563842][ T6553] RIP: 0033:0x7f4f78b1bb7c [ 92.563935][ T6553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.563953][ T6553] RSP: 002b:00007f4f77181030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.563972][ T6553] RAX: ffffffffffffffda RBX: 00007f4f78d35fa0 RCX: 00007f4f78b1bb7c [ 92.563987][ T6553] RDX: 000000000000000f RSI: 00007f4f771810a0 RDI: 0000000000000006 [ 92.564001][ T6553] RBP: 00007f4f77181090 R08: 0000000000000000 R09: 0000000000000000 [ 92.564015][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.564069][ T6553] R13: 0000000000000000 R14: 00007f4f78d35fa0 R15: 00007ffd90b7a988 [ 92.564087][ T6553] [ 92.767377][ T6546] xt_hashlimit: max too large, truncated to 1048576 [ 92.782630][ T6546] No such timeout policy "syz1" [ 92.816098][ T6555] loop1: detected capacity change from 0 to 8192 [ 92.833243][ T6557] loop5: detected capacity change from 0 to 2048 [ 92.839912][ T6557] EXT4-fs: Ignoring removed bh option [ 92.852590][ T6557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.892112][ T6561] lo speed is unknown, defaulting to 1000 [ 92.926959][ T6564] FAULT_INJECTION: forcing a failure. [ 92.926959][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 92.939679][ T6564] CPU: 1 UID: 0 PID: 6564 Comm: syz.2.1073 Not tainted 6.14.0-rc6-syzkaller #0 [ 92.939704][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.939718][ T6564] Call Trace: [ 92.939726][ T6564] [ 92.939736][ T6564] dump_stack_lvl+0xf2/0x150 [ 92.939771][ T6564] dump_stack+0x15/0x1a [ 92.939909][ T6564] should_fail_ex+0x24a/0x260 [ 92.939948][ T6564] should_failslab+0x8f/0xb0 [ 92.939983][ T6564] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 92.940035][ T6564] ? sock_alloc_inode+0x34/0xa0 [ 92.940069][ T6564] sock_alloc_inode+0x34/0xa0 [ 92.940106][ T6564] ? __pfx_sock_alloc_inode+0x10/0x10 [ 92.940210][ T6564] alloc_inode+0x3c/0x160 [ 92.940250][ T6564] new_inode_pseudo+0x15/0x20 [ 92.940304][ T6564] __sock_create+0x12b/0x5a0 [ 92.940425][ T6564] __sys_socketpair+0x17c/0x430 [ 92.940450][ T6564] __x64_sys_socketpair+0x52/0x60 [ 92.940540][ T6564] x64_sys_call+0x1cad/0x2dc0 [ 92.940572][ T6564] do_syscall_64+0xc9/0x1c0 [ 92.940651][ T6564] ? clear_bhb_loop+0x55/0xb0 [ 92.940715][ T6564] ? clear_bhb_loop+0x55/0xb0 [ 92.940749][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.940786][ T6564] RIP: 0033:0x7fcba335d169 [ 92.940803][ T6564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.940821][ T6564] RSP: 002b:00007fcba19c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 92.940840][ T6564] RAX: ffffffffffffffda RBX: 00007fcba3575fa0 RCX: 00007fcba335d169 [ 92.940855][ T6564] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 92.940870][ T6564] RBP: 00007fcba19c7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.940884][ T6564] R10: 0000400000004080 R11: 0000000000000246 R12: 0000000000000001 [ 92.940906][ T6564] R13: 0000000000000000 R14: 00007fcba3575fa0 R15: 00007ffe562195f8 [ 92.940923][ T6564] [ 93.136256][ T6564] socket: no more sockets [ 93.161788][ T51] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.184144][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 93.196550][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 93.196550][ T51] [ 93.206924][ T51] EXT4-fs (loop5): Total free blocks count 0 [ 93.213145][ T51] EXT4-fs (loop5): Free/Dirty block details [ 93.219867][ T51] EXT4-fs (loop5): free_blocks=2415919104 [ 93.225968][ T51] EXT4-fs (loop5): dirty_blocks=8224 [ 93.231351][ T51] EXT4-fs (loop5): Block reservation details [ 93.237396][ T51] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 93.255585][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 93.284331][ T6566] siw: device registration error -23 [ 93.296018][ T6571] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1078'. [ 93.361167][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.377216][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.470127][ T6587] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 93.476848][ T6587] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.484613][ T6587] vhci_hcd vhci_hcd.0: Device attached [ 93.533465][ T6592] loop0: detected capacity change from 0 to 8192 [ 93.696572][ T6603] lo speed is unknown, defaulting to 1000 [ 93.996907][ T6615] FAULT_INJECTION: forcing a failure. [ 93.996907][ T6615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.010249][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.4.1091 Not tainted 6.14.0-rc6-syzkaller #0 [ 94.010277][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.010291][ T6615] Call Trace: [ 94.010300][ T6615] [ 94.010308][ T6615] dump_stack_lvl+0xf2/0x150 [ 94.010384][ T6615] dump_stack+0x15/0x1a [ 94.010408][ T6615] should_fail_ex+0x24a/0x260 [ 94.010446][ T6615] should_fail+0xb/0x10 [ 94.010547][ T6615] should_fail_usercopy+0x1a/0x20 [ 94.010579][ T6615] _copy_from_user+0x1c/0xa0 [ 94.010598][ T6615] memdup_user_nul+0x65/0xd0 [ 94.010630][ T6615] sel_write_validatetrans+0x199/0x370 [ 94.010705][ T6615] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 94.010738][ T6615] vfs_write+0x27d/0x920 [ 94.010769][ T6615] ? putname+0xcf/0xf0 [ 94.010790][ T6615] ? __fget_files+0x17c/0x1c0 [ 94.010830][ T6615] ksys_write+0xe8/0x1b0 [ 94.010927][ T6615] __x64_sys_write+0x42/0x50 [ 94.010956][ T6615] x64_sys_call+0x287e/0x2dc0 [ 94.010988][ T6615] do_syscall_64+0xc9/0x1c0 [ 94.011072][ T6615] ? clear_bhb_loop+0x55/0xb0 [ 94.011145][ T6615] ? clear_bhb_loop+0x55/0xb0 [ 94.011217][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.011251][ T6615] RIP: 0033:0x7ffbe0fad169 [ 94.011267][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.011285][ T6615] RSP: 002b:00007ffbdf611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.011303][ T6615] RAX: ffffffffffffffda RBX: 00007ffbe11c5fa0 RCX: 00007ffbe0fad169 [ 94.011337][ T6615] RDX: 000000000000007b RSI: 0000400000000340 RDI: 0000000000000005 [ 94.011393][ T6615] RBP: 00007ffbdf611090 R08: 0000000000000000 R09: 0000000000000000 [ 94.011408][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.011422][ T6615] R13: 0000000000000000 R14: 00007ffbe11c5fa0 R15: 00007fffc1055e98 [ 94.011445][ T6615] [ 94.048958][ T6619] netlink: 'syz.0.1093': attribute type 5 has an invalid length. [ 94.200486][ T6624] loop4: detected capacity change from 0 to 8192 [ 94.227502][ T6588] vhci_hcd: connection closed [ 94.227865][ T37] vhci_hcd: stop threads [ 94.236896][ T37] vhci_hcd: release socket [ 94.241370][ T37] vhci_hcd: disconnect device [ 94.318773][ T6632] lo speed is unknown, defaulting to 1000 [ 94.495425][ T6648] FAULT_INJECTION: forcing a failure. [ 94.495425][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 94.508335][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.5.1105 Not tainted 6.14.0-rc6-syzkaller #0 [ 94.508422][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.508434][ T6648] Call Trace: [ 94.508440][ T6648] [ 94.508448][ T6648] dump_stack_lvl+0xf2/0x150 [ 94.508480][ T6648] dump_stack+0x15/0x1a [ 94.508506][ T6648] should_fail_ex+0x24a/0x260 [ 94.508597][ T6648] should_failslab+0x8f/0xb0 [ 94.508632][ T6648] __kmalloc_cache_node_noprof+0x56/0x320 [ 94.508663][ T6648] ? __get_vm_area_node+0xfb/0x1c0 [ 94.508692][ T6648] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 94.508738][ T6648] __get_vm_area_node+0xfb/0x1c0 [ 94.508766][ T6648] __vmalloc_node_range_noprof+0x280/0xe70 [ 94.508839][ T6648] ? xt_counters_alloc+0x40/0x50 [ 94.508875][ T6648] ? kvfree+0x39/0x40 [ 94.509091][ T6648] ? kfree+0x247/0x2f0 [ 94.509115][ T6648] ? kvfree+0x39/0x40 [ 94.509171][ T6648] ? translate_table+0xeca/0x10c0 [ 94.509209][ T6648] ? xt_counters_alloc+0x40/0x50 [ 94.509249][ T6648] vzalloc_noprof+0x5e/0x70 [ 94.509318][ T6648] ? xt_counters_alloc+0x40/0x50 [ 94.509352][ T6648] xt_counters_alloc+0x40/0x50 [ 94.509397][ T6648] __do_replace+0x50/0x620 [ 94.509504][ T6648] ? should_fail_ex+0xd7/0x260 [ 94.509540][ T6648] ? _copy_from_user+0x89/0xa0 [ 94.509563][ T6648] do_arpt_set_ctl+0x8cd/0xa20 [ 94.509689][ T6648] ? _raw_spin_unlock_bh+0x36/0x40 [ 94.509720][ T6648] nf_setsockopt+0x195/0x1b0 [ 94.509805][ T6648] ip_setsockopt+0xea/0x100 [ 94.509838][ T6648] udp_setsockopt+0x95/0xb0 [ 94.509927][ T6648] sock_common_setsockopt+0x64/0x80 [ 94.510025][ T6648] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 94.510064][ T6648] __sys_setsockopt+0x187/0x200 [ 94.510122][ T6648] __x64_sys_setsockopt+0x66/0x80 [ 94.510152][ T6648] x64_sys_call+0x282e/0x2dc0 [ 94.510254][ T6648] do_syscall_64+0xc9/0x1c0 [ 94.510309][ T6648] ? clear_bhb_loop+0x55/0xb0 [ 94.510337][ T6648] ? clear_bhb_loop+0x55/0xb0 [ 94.510437][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.510470][ T6648] RIP: 0033:0x7f4f78b1d169 [ 94.510489][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.510561][ T6648] RSP: 002b:00007f4f77181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.510582][ T6648] RAX: ffffffffffffffda RBX: 00007f4f78d35fa0 RCX: 00007f4f78b1d169 [ 94.510594][ T6648] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000006 [ 94.510606][ T6648] RBP: 00007f4f77181090 R08: 0000000000000438 R09: 0000000000000000 [ 94.510618][ T6648] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.510678][ T6648] R13: 0000000000000000 R14: 00007f4f78d35fa0 R15: 00007ffd90b7a988 [ 94.510700][ T6648] [ 94.781466][ T6648] syz.5.1105: vmalloc error: size 768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 94.796134][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.5.1105 Not tainted 6.14.0-rc6-syzkaller #0 [ 94.796163][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.796179][ T6648] Call Trace: [ 94.796187][ T6648] [ 94.796195][ T6648] dump_stack_lvl+0xf2/0x150 [ 94.796289][ T6648] dump_stack+0x15/0x1a [ 94.796311][ T6648] warn_alloc+0x145/0x1b0 [ 94.796341][ T6648] ? __get_vm_area_node+0xfb/0x1c0 [ 94.796371][ T6648] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 94.796400][ T6648] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 94.796504][ T6648] ? kvfree+0x39/0x40 [ 94.796539][ T6648] ? kfree+0x247/0x2f0 [ 94.796713][ T6648] ? kvfree+0x39/0x40 [ 94.796745][ T6648] ? translate_table+0xeca/0x10c0 [ 94.796784][ T6648] ? xt_counters_alloc+0x40/0x50 [ 94.796815][ T6648] vzalloc_noprof+0x5e/0x70 [ 94.796841][ T6648] ? xt_counters_alloc+0x40/0x50 [ 94.796984][ T6648] xt_counters_alloc+0x40/0x50 [ 94.797013][ T6648] __do_replace+0x50/0x620 [ 94.797046][ T6648] ? should_fail_ex+0xd7/0x260 [ 94.797083][ T6648] ? _copy_from_user+0x89/0xa0 [ 94.797130][ T6648] do_arpt_set_ctl+0x8cd/0xa20 [ 94.797180][ T6648] ? _raw_spin_unlock_bh+0x36/0x40 [ 94.797213][ T6648] nf_setsockopt+0x195/0x1b0 [ 94.797289][ T6648] ip_setsockopt+0xea/0x100 [ 94.797321][ T6648] udp_setsockopt+0x95/0xb0 [ 94.797405][ T6648] sock_common_setsockopt+0x64/0x80 [ 94.797461][ T6648] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 94.797496][ T6648] __sys_setsockopt+0x187/0x200 [ 94.797605][ T6648] __x64_sys_setsockopt+0x66/0x80 [ 94.797637][ T6648] x64_sys_call+0x282e/0x2dc0 [ 94.797696][ T6648] do_syscall_64+0xc9/0x1c0 [ 94.797734][ T6648] ? clear_bhb_loop+0x55/0xb0 [ 94.797843][ T6648] ? clear_bhb_loop+0x55/0xb0 [ 94.797872][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.797899][ T6648] RIP: 0033:0x7f4f78b1d169 [ 94.797971][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.797993][ T6648] RSP: 002b:00007f4f77181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.798016][ T6648] RAX: ffffffffffffffda RBX: 00007f4f78d35fa0 RCX: 00007f4f78b1d169 [ 94.798031][ T6648] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000006 [ 94.798046][ T6648] RBP: 00007f4f77181090 R08: 0000000000000438 R09: 0000000000000000 [ 94.798058][ T6648] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.798070][ T6648] R13: 0000000000000000 R14: 00007f4f78d35fa0 R15: 00007ffd90b7a988 [ 94.798096][ T6648] [ 94.798103][ T6648] Mem-Info: [ 95.052374][ T6648] active_anon:8225 inactive_anon:14 isolated_anon:0 [ 95.052374][ T6648] active_file:24548 inactive_file:2529 isolated_file:0 [ 95.052374][ T6648] unevictable:0 dirty:772 writeback:0 [ 95.052374][ T6648] slab_reclaimable:3063 slab_unreclaimable:16058 [ 95.052374][ T6648] mapped:32034 shmem:3096 pagetables:1416 [ 95.052374][ T6648] sec_pagetables:0 bounce:0 [ 95.052374][ T6648] kernel_misc_reclaimable:0 [ 95.052374][ T6648] free:1860300 free_pcp:20741 free_cma:0 [ 95.098474][ T6648] Node 0 active_anon:35104kB inactive_anon:56kB active_file:98192kB inactive_file:10116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128136kB dirty:3088kB writeback:0kB shmem:14472kB writeback_tmp:0kB kernel_stack:3136kB pagetables:5664kB sec_pagetables:0kB all_unreclaimable? no [ 95.126883][ T6648] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.154135][ T6648] lowmem_reserve[]: 0 2885 7863 7863 [ 95.159580][ T6648] Node 0 DMA32 free:2950732kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954364kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 95.188259][ T6648] lowmem_reserve[]: 0 0 4978 4978 [ 95.193545][ T6648] Node 0 Normal free:4475108kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:33016kB inactive_anon:56kB active_file:98192kB inactive_file:10116kB unevictable:0kB writepending:3088kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:79000kB local_pcp:22256kB free_cma:0kB [ 95.224576][ T6648] lowmem_reserve[]: 0 0 0 0 [ 95.229235][ T6648] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.242013][ T6648] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950732kB [ 95.258442][ T6648] Node 0 Normal: 2*4kB (UE) 205*8kB (UM) 759*16kB (M) 668*32kB (UM) 403*64kB (M) 235*128kB (UME) 169*256kB (UM) 152*512kB (UME) 125*1024kB (UM) 67*2048kB (UME) 976*4096kB (UM) = 4475040kB [ 95.277328][ T6648] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 95.286707][ T6648] 30192 total pagecache pages [ 95.291415][ T6648] 19 pages in swap cache [ 95.295667][ T6648] Free swap = 124668kB [ 95.299816][ T6648] Total swap = 124996kB [ 95.304019][ T6648] 2097051 pages RAM [ 95.307866][ T6648] 0 pages HighMem/MovableOnly [ 95.312607][ T6648] 80068 pages reserved [ 95.319687][ T9] usb 5-1: enqueue for inactive port 0 [ 95.325259][ T9] usb 5-1: enqueue for inactive port 0 [ 95.401753][ T6663] lo speed is unknown, defaulting to 1000 [ 95.402265][ T9] vhci_hcd: vhci_device speed not set [ 95.442338][ T6671] FAULT_INJECTION: forcing a failure. [ 95.442338][ T6671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.455571][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.2.1116 Not tainted 6.14.0-rc6-syzkaller #0 [ 95.455594][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.455607][ T6671] Call Trace: [ 95.455684][ T6671] [ 95.455692][ T6671] dump_stack_lvl+0xf2/0x150 [ 95.455724][ T6671] dump_stack+0x15/0x1a [ 95.455749][ T6671] should_fail_ex+0x24a/0x260 [ 95.455796][ T6671] should_fail+0xb/0x10 [ 95.455823][ T6671] should_fail_usercopy+0x1a/0x20 [ 95.455895][ T6671] _copy_from_user+0x1c/0xa0 [ 95.456003][ T6671] ____sys_sendmsg+0x1c2/0x4b0 [ 95.456043][ T6671] __sys_sendmsg+0x19d/0x230 [ 95.456097][ T6671] __x64_sys_sendmsg+0x46/0x50 [ 95.456146][ T6671] x64_sys_call+0x2734/0x2dc0 [ 95.456184][ T6671] do_syscall_64+0xc9/0x1c0 [ 95.456295][ T6671] ? clear_bhb_loop+0x55/0xb0 [ 95.456329][ T6671] ? clear_bhb_loop+0x55/0xb0 [ 95.456438][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.456471][ T6671] RIP: 0033:0x7fcba335d169 [ 95.456489][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.456511][ T6671] RSP: 002b:00007fcba19c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.456532][ T6671] RAX: ffffffffffffffda RBX: 00007fcba3575fa0 RCX: 00007fcba335d169 [ 95.456580][ T6671] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 95.456595][ T6671] RBP: 00007fcba19c7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.456609][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.456623][ T6671] R13: 0000000000000000 R14: 00007fcba3575fa0 R15: 00007ffe562195f8 [ 95.456641][ T6671] [ 95.641236][ T6668] loop0: detected capacity change from 0 to 2048 [ 95.718686][ T6668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.758776][ T6688] loop1: detected capacity change from 0 to 1024 [ 95.794497][ T6688] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 95.805500][ T6688] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 95.821626][ T6663] lo speed is unknown, defaulting to 1000 [ 95.829356][ T6688] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 95.843654][ T6688] EXT4-fs (loop1): invalid journal inode [ 95.849409][ T6688] EXT4-fs (loop1): can't get journal size [ 95.856176][ T6688] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.1120: blocks 2-2 from inode overlap system zone [ 95.872667][ T6688] EXT4-fs (loop1): failed to initialize system zone (-117) [ 95.884656][ T6688] EXT4-fs (loop1): mount failed [ 95.939471][ T6694] loop4: detected capacity change from 0 to 512 [ 96.002803][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.014824][ T6694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.027595][ T6694] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.064088][ T6694] lo speed is unknown, defaulting to 1000 [ 96.194388][ T3368] IPVS: starting estimator thread 0... [ 96.281944][ T6699] IPVS: using max 2256 ests per chain, 112800 per kthread [ 96.653156][ T6710] loop5: detected capacity change from 0 to 2048 [ 96.680302][ T6710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.737769][ T4544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.890291][ T6688] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 96.896858][ T6688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 96.904462][ T6688] vhci_hcd vhci_hcd.0: Device attached [ 96.950733][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 96.950750][ T30] audit: type=1400 audit(1741602389.163:1736): avc: denied { create } for pid=6715 comm="syz.5.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.976488][ T30] audit: type=1400 audit(1741602389.183:1737): avc: denied { write } for pid=6715 comm="syz.5.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.010524][ T6713] vhci_hcd: connection closed [ 97.027849][ T3402] vhci_hcd: stop threads [ 97.036943][ T3402] vhci_hcd: release socket [ 97.041470][ T3402] vhci_hcd: disconnect device [ 97.077706][ T6718] loop0: detected capacity change from 0 to 8192 [ 97.091465][ T3368] vhci_hcd: vhci_device speed not set [ 97.183056][ T6732] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1132'. [ 97.192552][ T6731] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1132'. [ 97.203389][ T30] audit: type=1400 audit(1741602389.443:1738): avc: denied { setopt } for pid=6730 comm="syz.0.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.253620][ T6737] FAULT_INJECTION: forcing a failure. [ 97.253620][ T6737] name failslab, interval 1, probability 0, space 0, times 0 [ 97.266352][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.0.1133 Not tainted 6.14.0-rc6-syzkaller #0 [ 97.266380][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.266469][ T6737] Call Trace: [ 97.266477][ T6737] [ 97.266487][ T6737] dump_stack_lvl+0xf2/0x150 [ 97.266520][ T6737] dump_stack+0x15/0x1a [ 97.266545][ T6737] should_fail_ex+0x24a/0x260 [ 97.266584][ T6737] ? __se_sys_mount+0xf2/0x2d0 [ 97.266615][ T6737] should_failslab+0x8f/0xb0 [ 97.266652][ T6737] __kmalloc_cache_noprof+0x4e/0x320 [ 97.266680][ T6737] ? memdup_user+0x9f/0xc0 [ 97.266783][ T6737] __se_sys_mount+0xf2/0x2d0 [ 97.266814][ T6737] ? fput+0x1c4/0x200 [ 97.266835][ T6737] ? ksys_write+0x176/0x1b0 [ 97.266935][ T6737] __x64_sys_mount+0x67/0x80 [ 97.266968][ T6737] x64_sys_call+0x2c84/0x2dc0 [ 97.266994][ T6737] do_syscall_64+0xc9/0x1c0 [ 97.267027][ T6737] ? clear_bhb_loop+0x55/0xb0 [ 97.267077][ T6737] ? clear_bhb_loop+0x55/0xb0 [ 97.267109][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.267139][ T6737] RIP: 0033:0x7f356e32d169 [ 97.267157][ T6737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.267178][ T6737] RSP: 002b:00007f356c997038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.267222][ T6737] RAX: ffffffffffffffda RBX: 00007f356e545fa0 RCX: 00007f356e32d169 [ 97.267234][ T6737] RDX: 00004000000002c0 RSI: 0000400000000080 RDI: 0000000000000000 [ 97.267246][ T6737] RBP: 00007f356c997090 R08: 0000400000000400 R09: 0000000000000000 [ 97.267257][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.267269][ T6737] R13: 0000000000000000 R14: 00007f356e545fa0 R15: 00007fffd21c5978 [ 97.267289][ T6737] [ 97.663984][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.799434][ T30] audit: type=1400 audit(1741602390.033:1739): avc: denied { ioctl } for pid=6746 comm="syz.4.1137" path="socket:[15229]" dev="sockfs" ino=15229 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.877688][ T30] audit: type=1400 audit(1741602390.113:1740): avc: denied { accept } for pid=6751 comm="syz.4.1138" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.099631][ T30] audit: type=1326 audit(1741602390.333:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe0fad169 code=0x7ffc0000 [ 98.124322][ T30] audit: type=1326 audit(1741602390.333:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe0fad169 code=0x7ffc0000 [ 98.147846][ T30] audit: type=1326 audit(1741602390.333:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbe0fad169 code=0x7ffc0000 [ 98.171538][ T30] audit: type=1326 audit(1741602390.333:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe0fad169 code=0x7ffc0000 [ 98.195055][ T30] audit: type=1326 audit(1741602390.333:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbe0fad169 code=0x7ffc0000 [ 98.209089][ T6768] tipc: Started in network mode [ 98.223484][ T6768] tipc: Node identity 4, cluster identity 4711 [ 98.223549][ T6766] loop5: detected capacity change from 0 to 164 [ 98.225248][ T6766] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=164 [ 98.229706][ T6768] tipc: Node number set to 4 [ 98.331853][ T6773] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1145'. [ 98.343814][ T6773] 0ªX¹¦À: renamed from 61ªX¹¦À [ 98.352239][ T6773] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 98.483319][ T6786] loop0: detected capacity change from 0 to 8192 [ 98.925453][ T6811] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1160'. [ 98.936215][ T6811] 0ªX¹¦À: renamed from 61ªX¹¦À [ 98.944012][ T6811] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 99.078121][ T6818] loop5: detected capacity change from 0 to 512 [ 99.170062][ T6818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.182812][ T6818] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.222092][ T6818] lo speed is unknown, defaulting to 1000 [ 99.457372][ T3368] IPVS: starting estimator thread 0... [ 99.550737][ T6823] IPVS: using max 2256 ests per chain, 112800 per kthread [ 100.032049][ T6830] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 100.038939][ T6830] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.046609][ T6830] vhci_hcd vhci_hcd.0: Device attached [ 100.134247][ T6834] vhci_hcd: connection closed [ 100.134652][ T12] vhci_hcd: stop threads [ 100.143746][ T12] vhci_hcd: release socket [ 100.148168][ T12] vhci_hcd: disconnect device [ 100.170187][ T6827] loop4: detected capacity change from 0 to 8192 [ 100.424723][ T6850] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1172'. [ 100.434053][ T6850] 0ªX¹¦À: renamed from 61ªX¹¦À [ 100.445327][ T6850] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 100.571220][ T6856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6856 comm=syz.0.1173 [ 100.628537][ T6857] loop4: detected capacity change from 0 to 164 [ 100.693115][ T6857] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=164 [ 101.034128][ T4544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.341394][ T6872] loop5: detected capacity change from 0 to 164 [ 101.362118][ T6872] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=164 [ 101.506224][ T6878] loop0: detected capacity change from 0 to 8192 [ 101.686668][ T6882] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1184'. [ 101.695911][ T6882] 1ªX¹¦À: renamed from 60ªX¹¦À [ 101.704286][ T6882] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 102.000968][ T6903] lo speed is unknown, defaulting to 1000 [ 102.187956][ T6906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6906 comm=syz.0.1190 [ 102.758753][ T6912] loop5: detected capacity change from 0 to 8192 [ 102.914318][ T6923] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1197'. [ 102.940479][ T6923] 1ªX¹¦À: renamed from 60ªX¹¦À [ 102.964406][ T6923] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 103.238522][ T6944] loop1: detected capacity change from 0 to 164 [ 103.313127][ T6944] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=164 [ 103.744338][ T6953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6953 comm=syz.4.1207 [ 103.941835][ T6964] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1211'. [ 103.950849][ T6964] 0ªX¹¦À: renamed from 61ªX¹¦À [ 103.958099][ T6964] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 104.060773][ T6975] loop1: detected capacity change from 0 to 1024 [ 104.077747][ T6975] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 104.088704][ T6975] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 104.096584][ T6977] 9pnet: bogus RWRITE count (38144 > 1) [ 104.099914][ T6975] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 104.116630][ T6975] EXT4-fs (loop1): invalid journal inode [ 104.122732][ T6975] EXT4-fs (loop1): can't get journal size [ 104.129034][ T6975] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.1217: blocks 2-2 from inode overlap system zone [ 104.143800][ T6975] EXT4-fs (loop1): failed to initialize system zone (-117) [ 104.151132][ T6975] EXT4-fs (loop1): mount failed [ 104.163992][ T6975] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 104.170599][ T6975] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.170711][ T6975] vhci_hcd vhci_hcd.0: Device attached [ 104.171803][ T6980] vhci_hcd: connection closed [ 104.187156][ T37] vhci_hcd: stop threads [ 104.196444][ T37] vhci_hcd: release socket [ 104.201262][ T37] vhci_hcd: disconnect device [ 104.286627][ T6988] loop5: detected capacity change from 0 to 8192 [ 104.426155][ T6994] loop0: detected capacity change from 0 to 512 [ 104.909801][ T6994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.922583][ T6994] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.959740][ T6994] lo speed is unknown, defaulting to 1000 [ 105.244249][ T7006] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1227'. [ 105.292144][ T7006] 0ªX¹¦À: renamed from 61ªX¹¦À [ 105.312890][ T7006] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 105.359156][ T7015] 9pnet: bogus RWRITE count (38144 > 1) [ 106.186859][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.265453][ T7035] loop4: detected capacity change from 0 to 1024 [ 106.272830][ T7035] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 106.283932][ T7035] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 106.295481][ T7035] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 106.306699][ T7035] EXT4-fs (loop4): invalid journal inode [ 106.313926][ T7035] EXT4-fs (loop4): can't get journal size [ 106.330604][ T7040] loop5: detected capacity change from 0 to 164 [ 106.340234][ T7035] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.1238: blocks 2-2 from inode overlap system zone [ 106.388387][ T7040] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=164 [ 106.400170][ T7035] EXT4-fs (loop4): failed to initialize system zone (-117) [ 106.433450][ T7035] EXT4-fs (loop4): mount failed [ 106.534925][ T7053] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1242'. [ 106.547789][ T7053] 1ªX¹¦À: renamed from 60ªX¹¦À [ 106.558522][ T7052] 9pnet: bogus RWRITE count (38144 > 1) [ 106.573964][ T7053] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 106.647017][ T7035] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 106.653645][ T7035] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.661284][ T7035] vhci_hcd vhci_hcd.0: Device attached [ 106.700568][ T7055] vhci_hcd: connection closed [ 106.700972][ T3402] vhci_hcd: stop threads [ 106.710092][ T3402] vhci_hcd: release socket [ 106.714605][ T3402] vhci_hcd: disconnect device [ 107.188069][ T7080] loop5: detected capacity change from 0 to 512 [ 107.286485][ T7080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.299203][ T7080] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.335930][ T7080] lo speed is unknown, defaulting to 1000 [ 107.705517][ T7086] loop4: detected capacity change from 0 to 8192 [ 108.141361][ T7096] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1257'. [ 108.172328][ T7096] 1ªX¹¦À: renamed from 60ªX¹¦À [ 108.178828][ T7096] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 108.278085][ T7110] loop1: detected capacity change from 0 to 1024 [ 108.296304][ T7110] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 108.308026][ T7110] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 108.324259][ T7110] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 108.335651][ T7110] EXT4-fs (loop1): invalid journal inode [ 108.342851][ T7110] EXT4-fs (loop1): can't get journal size [ 108.352781][ T7110] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.1265: blocks 2-2 from inode overlap system zone [ 108.367340][ T7110] EXT4-fs (loop1): failed to initialize system zone (-117) [ 108.375898][ T7110] EXT4-fs (loop1): mount failed [ 108.885726][ T4544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.898021][ T7110] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 108.904654][ T7110] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.912327][ T7110] vhci_hcd vhci_hcd.0: Device attached [ 108.918924][ T7117] vhci_hcd: connection closed [ 108.919199][ T3402] vhci_hcd: stop threads [ 108.928307][ T3402] vhci_hcd: release socket [ 108.932760][ T3402] vhci_hcd: disconnect device [ 109.022406][ T7126] loop0: detected capacity change from 0 to 164 [ 109.032154][ T7126] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=164 [ 109.090574][ T7128] vhci_hcd: default hub control req: 6015 v01f5 i0004 l0 [ 109.116684][ T7130] 9pnet_fd: Insufficient options for proto=fd [ 109.145766][ T7133] xt_hashlimit: max too large, truncated to 1048576 [ 109.192097][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1275'. [ 109.310393][ T7147] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1278'. [ 109.319623][ T7147] 0ªX¹¦À: renamed from 61ªX¹¦À [ 109.326529][ T7147] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 109.415927][ T7152] 9pnet_fd: Insufficient options for proto=fd [ 109.702134][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 109.793552][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1292'. [ 109.891960][ T7189] 9pnet_fd: Insufficient options for proto=fd [ 110.291566][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 110.363899][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 110.384322][ T7216] 9pnet_fd: Insufficient options for proto=fd [ 110.738249][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 111.324593][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 111.905404][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 112.035834][ T7300] loop0: detected capacity change from 0 to 164 [ 112.130569][ T7300] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=164 [ 112.929058][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1358'. [ 112.930015][ T7353] lo speed is unknown, defaulting to 1000 [ 112.975509][ T7359] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 112.982076][ T7359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.989746][ T7359] vhci_hcd vhci_hcd.0: Device attached [ 113.101424][ T7361] vhci_hcd: connection closed [ 113.101591][ T3331] vhci_hcd: stop threads [ 113.110687][ T3331] vhci_hcd: release socket [ 113.115317][ T3331] vhci_hcd: disconnect device [ 113.170724][ T25] vhci_hcd: vhci_device speed not set [ 113.437501][ T7388] loop5: detected capacity change from 0 to 164 [ 113.470934][ T7388] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=164 [ 114.836716][ T7475] __nla_validate_parse: 2 callbacks suppressed [ 114.836737][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 114.863978][ T7476] loop4: detected capacity change from 0 to 164 [ 114.925143][ T7476] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=164 [ 115.429567][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 116.107062][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 116.609743][ T7582] loop5: detected capacity change from 0 to 164 [ 116.690724][ T7582] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=164 [ 116.855167][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1450'. [ 117.455255][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1464'. [ 118.369006][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 119.824406][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 119.863886][ T7779] loop4: detected capacity change from 0 to 164 [ 119.923301][ T7779] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=164 [ 120.801015][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 121.464811][ T7862] loop5: detected capacity change from 0 to 164 [ 121.495769][ T7862] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=164 [ 121.671046][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 122.368498][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 122.694405][ T7931] loop1: detected capacity change from 0 to 164 [ 122.709987][ T7931] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=164 [ 123.252185][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 124.092018][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'. [ 124.775822][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1623'. [ 125.104123][ T8055] loop4: detected capacity change from 0 to 164 [ 125.164922][ T8055] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=164 [ 125.678957][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1636'. [ 126.578753][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 127.206905][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 127.305984][ T8182] loop0: detected capacity change from 0 to 164 [ 127.387397][ T8182] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=164 [ 128.072662][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1687'. [ 129.024299][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 129.496911][ T8286] loop4: detected capacity change from 0 to 164 [ 129.530866][ T8286] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=164 [ 129.838497][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1720'. [ 130.358716][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 131.168436][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 131.225648][ T8369] loop5: detected capacity change from 0 to 164 [ 131.263368][ T8369] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=164 [ 132.129223][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 132.407489][ T8430] loop1: detected capacity change from 0 to 1024 [ 132.438739][ T8430] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 132.449703][ T8430] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 132.480778][ T8430] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 132.494542][ T8430] EXT4-fs (loop1): invalid journal inode [ 132.510384][ T8430] EXT4-fs (loop1): can't get journal size [ 132.534474][ T8430] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.1772: blocks 2-2 from inode overlap system zone [ 132.572469][ T8430] EXT4-fs (loop1): failed to initialize system zone (-117) [ 132.599811][ T8430] EXT4-fs (loop1): mount failed [ 132.710774][ T8430] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 132.717365][ T8430] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 132.725036][ T8430] vhci_hcd vhci_hcd.0: Device attached [ 132.762545][ T8448] vhci_hcd: connection closed [ 132.764450][ T12] vhci_hcd: stop threads [ 132.773636][ T12] vhci_hcd: release socket [ 132.778201][ T12] vhci_hcd: disconnect device [ 132.861575][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 133.041696][ T8464] loop5: detected capacity change from 0 to 164 [ 133.073981][ T8464] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=164 [ 133.431135][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 134.080306][ T8531] lo speed is unknown, defaulting to 1000 [ 134.536775][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1812'. [ 136.123782][ T8573] loop0: detected capacity change from 0 to 164 [ 136.241979][ T8573] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=164 [ 136.521058][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1834'. [ 136.740189][ T8600] loop4: detected capacity change from 0 to 512 [ 136.859803][ T8600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.872660][ T8600] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.907562][ T8600] lo speed is unknown, defaulting to 1000 [ 138.327504][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.378377][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 138.552153][ T8663] loop0: detected capacity change from 0 to 164 [ 138.577092][ T8663] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=164 [ 139.346736][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 140.918838][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 141.149714][ T8761] loop1: detected capacity change from 0 to 1024 [ 141.196173][ T8761] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 141.207150][ T8761] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 141.290298][ T8761] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.442392][ T8775] loop5: detected capacity change from 0 to 512 [ 141.732897][ T8775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.745590][ T8775] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.814209][ T8761] EXT4-fs (loop1): invalid journal inode [ 141.901743][ T8761] EXT4-fs (loop1): can't get journal size [ 141.995493][ T8761] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.1898: blocks 2-2 from inode overlap system zone [ 142.190066][ T8761] EXT4-fs (loop1): failed to initialize system zone (-117) [ 142.248760][ T8761] EXT4-fs (loop1): mount failed [ 142.371605][ T8761] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 142.378165][ T8761] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.385662][ T8761] vhci_hcd vhci_hcd.0: Device attached [ 142.563264][ T8790] vhci_hcd: connection closed [ 142.570741][ T1081] vhci_hcd: vhci_device speed not set [ 142.581065][ T6915] vhci_hcd: stop threads [ 142.585334][ T6915] vhci_hcd: release socket [ 142.589842][ T6915] vhci_hcd: disconnect device [ 142.680853][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 142.690870][ T1081] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 142.698361][ T1081] usb 3-1: enqueue for inactive port 0 [ 142.753578][ T1081] usb 3-1: enqueue for inactive port 0 [ 142.759093][ T1081] usb 3-1: enqueue for inactive port 0 [ 142.870750][ T1081] vhci_hcd: vhci_device speed not set [ 143.289204][ T4544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.808456][ T8837] loop5: detected capacity change from 0 to 1024 [ 143.874529][ T8837] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 143.885633][ T8837] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 143.907282][ T8837] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 143.925396][ T8837] EXT4-fs (loop5): invalid journal inode [ 143.935424][ T8837] EXT4-fs (loop5): can't get journal size [ 143.965825][ T8837] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.1925: blocks 2-2 from inode overlap system zone [ 143.984160][ T8837] EXT4-fs (loop5): failed to initialize system zone (-117) [ 143.991750][ T8837] EXT4-fs (loop5): mount failed [ 144.096802][ T8837] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 144.103371][ T8837] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 144.110906][ T8837] vhci_hcd vhci_hcd.0: Device attached [ 144.146603][ T8840] vhci_hcd: connection closed [ 144.147195][ T3402] vhci_hcd: stop threads [ 144.156336][ T3402] vhci_hcd: release socket [ 144.160849][ T3402] vhci_hcd: disconnect device [ 144.300094][ T8849] loop0: detected capacity change from 0 to 164 [ 144.313479][ T8849] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=164 [ 144.362466][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'. [ 145.941129][ T8894] loop0: detected capacity change from 0 to 1024 [ 145.970075][ T8894] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 145.981522][ T8894] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 146.012869][ T8894] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 146.041017][ T8894] EXT4-fs (loop0): invalid journal inode [ 146.046792][ T8894] EXT4-fs (loop0): can't get journal size [ 146.075604][ T8894] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.1944: blocks 2-2 from inode overlap system zone [ 146.112153][ T8894] EXT4-fs (loop0): failed to initialize system zone (-117) [ 146.136612][ T8894] EXT4-fs (loop0): mount failed [ 146.150075][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 146.185398][ T8894] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 146.191985][ T8894] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 146.199726][ T8894] vhci_hcd vhci_hcd.0: Device attached [ 146.222979][ T8910] vhci_hcd: connection closed [ 146.243352][ T3402] vhci_hcd: stop threads [ 146.252599][ T3402] vhci_hcd: release socket [ 146.257169][ T3402] vhci_hcd: disconnect device [ 146.532014][ T8931] loop5: detected capacity change from 0 to 164 [ 146.602324][ T8931] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=164 [ 146.763406][ T8940] loop1: detected capacity change from 0 to 512 [ 146.914747][ T8940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.927603][ T8940] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.945461][ T3463] IPVS: starting estimator thread 0... [ 147.040780][ T8945] IPVS: using max 2256 ests per chain, 112800 per kthread [ 147.729817][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 148.448330][ T8978] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 148.454921][ T8978] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.462525][ T8978] vhci_hcd vhci_hcd.0: Device attached [ 148.468684][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.522492][ T8979] vhci_hcd: connection closed [ 148.522796][ T58] vhci_hcd: stop threads [ 148.531813][ T58] vhci_hcd: release socket [ 148.536265][ T58] vhci_hcd: disconnect device [ 148.909157][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'. [ 149.033847][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 149.089832][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'. [ 149.222761][ T3306] ================================================================== [ 149.230913][ T3306] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 149.238845][ T3306] [ 149.241204][ T3306] read-write to 0xffff88811889bf50 of 8 bytes by task 9027 on cpu 0: [ 149.249467][ T3306] shmem_add_to_page_cache+0x3b9/0x4b0 [ 149.254956][ T3306] shmem_get_folio_gfp+0x4f6/0xd90 [ 149.260114][ T3306] shmem_write_begin+0xa2/0x180 [ 149.264992][ T3306] generic_perform_write+0x1a8/0x4a0 [ 149.270311][ T3306] shmem_file_write_iter+0xc2/0xe0 [ 149.275455][ T3306] __kernel_write_iter+0x247/0x4c0 [ 149.280620][ T3306] dump_user_range+0x3ac/0x550 [ 149.285452][ T3306] elf_core_dump+0x1d17/0x1ea0 [ 149.290253][ T3306] do_coredump+0x17fe/0x1f40 [ 149.294886][ T3306] get_signal+0xd4f/0x1000 [ 149.299360][ T3306] arch_do_signal_or_restart+0x95/0x4b0 [ 149.304938][ T3306] irqentry_exit_to_user_mode+0xa7/0x120 [ 149.310593][ T3306] irqentry_exit+0x12/0x50 [ 149.315028][ T3306] asm_exc_page_fault+0x26/0x30 [ 149.319890][ T3306] [ 149.322268][ T3306] read to 0xffff88811889bf50 of 8 bytes by task 3306 on cpu 1: [ 149.329813][ T3306] shmem_getattr+0x69/0x200 [ 149.334331][ T3306] vfs_getattr+0x172/0x1b0 [ 149.338754][ T3306] vfs_statx+0x12d/0x320 [ 149.343003][ T3306] vfs_fstatat+0xe4/0x130 [ 149.347338][ T3306] __se_sys_newfstatat+0x58/0x260 [ 149.352372][ T3306] __x64_sys_newfstatat+0x55/0x70 [ 149.357416][ T3306] x64_sys_call+0x236d/0x2dc0 [ 149.362119][ T3306] do_syscall_64+0xc9/0x1c0 [ 149.367173][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.373097][ T3306] [ 149.375421][ T3306] value changed: 0x00000000000003c7 -> 0x00000000000003c8 [ 149.382531][ T3306] [ 149.384856][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 149.391039][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: syz-executor Not tainted 6.14.0-rc6-syzkaller #0 [ 149.400158][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.410229][ T3306] ================================================================== [ 149.874973][ T9039] loop0: detected capacity change from 0 to 164 [ 149.932113][ T9039] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=164