ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r0, &(0x7f00000004c0)="d38b445f7d0b5384de06646885a65ff7068856c80adf2ff29b66209e25bb939564ba62f2272bb6e8eab576070d8f5d8aa2ba8e8459bb9800071e9c6ca39bf3a64922ee0f2a838aaa954a617de69d0ce378b01e6ed3c8581d9ea79ff5e5ede754258f1197539d96df1a1467736490be60b2418ce2f0f84afe7a59c63c754bb95b002be205d99d10b41603acdb27a7107c2b3e5136346a2094a95c7946d985ecd81c4c33cd4f3d63c5137a58fcab3b68a2cb852d4b7212bc19613d53a8e3365820d80f105585311d9deeabbc7ed04f14963526045e1534aa4dd7e7b066d77b83508e19f01957", &(0x7f00000005c0)=""/93}, 0x20) sendfile(r4, r4, 0x0, 0x1) 11:04:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 527.099458][T28353] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 527.106010][T28353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.113548][T28353] vhci_hcd vhci_hcd.0: Device attached 11:04:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x7fff, 0xacba, {"aa7c4bb5fc45b56fdcf18de3d9b090c6"}, 0x4, 0x8f5, 0x4}, @in={0x2, 0xfff, @rand_addr=0x64010102}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x80000, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0xe000, 0x6, {"04d2fa90ed67f1ae300000fcffffff00"}, 0x2, 0x200, 0x3}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r6, 0x2723966, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @empty, 0x3}, @ib={0x1b, 0x8, 0x101, {"b375a181f5ca945f9587e786190508f4"}, 0x7, 0x40, 0x10001}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in={0x2, 0x4e21, @empty}}}, 0x90) 11:04:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x16b6905d) [ 527.142854][T28354] vhci_hcd: connection closed [ 527.143197][ T9310] vhci_hcd: stop threads [ 527.152237][ T9310] vhci_hcd: release socket [ 527.156697][ T9310] vhci_hcd: disconnect device [ 527.167358][T28353] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(4) [ 527.173978][T28353] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 527.181477][T28353] vhci_hcd vhci_hcd.0: Device attached [ 527.264242][T28374] vhci_hcd: connection closed [ 527.264471][ T9310] vhci_hcd: stop threads [ 527.273483][ T9310] vhci_hcd: release socket [ 527.277922][ T9310] vhci_hcd: disconnect device 11:04:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x7fff, 0xacba, {"aa7c4bb5fc45b56fdcf18de3d9b090c6"}, 0x4, 0x8f5, 0x4}, @in={0x2, 0xfff, @rand_addr=0x64010102}}}, 0x118) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x80000, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0xe000, 0x6, {"04d2fa90ed67f1ae300000fcffffff00"}, 0x2, 0x200, 0x3}}}, 0x118) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r6, 0x2723966, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @empty, 0x3}, @ib={0x1b, 0x8, 0x101, {"b375a181f5ca945f9587e786190508f4"}, 0x7, 0x40, 0x10001}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in={0x2, 0x4e21, @empty}}}, 0x90) 11:04:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x1020, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x10002, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r7, 0x1f2530a0}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), r10, 0xe12}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:19 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0xfffffeff, {"2d67a89c3cc734750ae94021a3a1e54a"}, 0x8000000000000000, 0x1, 0x7}}}, 0x90) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x3, {0x5, 0x5c, "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", 0x5, 0x0, 0x7, 0x6, 0x8, 0x2, 0x5}}}, 0x128) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x10, 0x9}, {0x0, 0x1}]}, 0x14, 0x0) close(r0) r3 = syz_usbip_server_init(0x4) r4 = getpgid(0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) write$usbip_server(r5, &(0x7f0000000200)=@ret_unlink={{0x4, 0x3ff, 0x0, 0x0, 0x1}, {0x71}}, 0x30) prlimit64(r4, 0xd, &(0x7f0000000180)={0x5, 0x8}, &(0x7f00000002c0)) kcmp(0xffffffffffffffff, r4, 0x5, r3, r1) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0xfffffeff, {"2d67a89c3cc734750ae94021a3a1e54a"}, 0x8000000000000000, 0x1, 0x7}}}, 0x90) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x3, {0x5, 0x5c, "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", 0x5, 0x0, 0x7, 0x6, 0x8, 0x2, 0x5}}}, 0x128) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) syz_usbip_server_init(0x1) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x10, 0x9}, {0x0, 0x1}]}, 0x14, 0x0) (async) close(r0) (async) syz_usbip_server_init(0x4) (async) getpgid(0xffffffffffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) (async) write$usbip_server(r5, &(0x7f0000000200)=@ret_unlink={{0x4, 0x3ff, 0x0, 0x0, 0x1}, {0x71}}, 0x30) (async) prlimit64(r4, 0xd, &(0x7f0000000180)={0x5, 0x8}, &(0x7f00000002c0)) (async) kcmp(0xffffffffffffffff, r4, 0x5, r3, r1) (async) 11:04:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x16b6905d) 11:04:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5200, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3f, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r4, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x2, {"9a3c2073b41893e5e7a87f7ce059e63c"}, 0x0, 0x7fff, 0xc1d}, @in={0x2, 0x4e22, @multicast1}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:19 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x7fff, 0xacba, {"aa7c4bb5fc45b56fdcf18de3d9b090c6"}, 0x4, 0x8f5, 0x4}, @in={0x2, 0xfff, @rand_addr=0x64010102}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x7fff, 0xacba, {"aa7c4bb5fc45b56fdcf18de3d9b090c6"}, 0x4, 0x8f5, 0x4}, @in={0x2, 0xfff, @rand_addr=0x64010102}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x80000, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0xe000, 0x6, {"04d2fa90ed67f1ae300000fcffffff00"}, 0x2, 0x200, 0x3}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x80000, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0xe000, 0x6, {"04d2fa90ed67f1ae300000fcffffff00"}, 0x2, 0x200, 0x3}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) pipe(&(0x7f00000004c0)) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r6, 0x2723966, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @empty, 0x3}, @ib={0x1b, 0x8, 0x101, {"b375a181f5ca945f9587e786190508f4"}, 0x7, 0x40, 0x10001}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in={0x2, 0x4e21, @empty}}}, 0x90) 11:04:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5300, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 527.951901][T28405] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 527.958508][T28405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.966085][T28405] vhci_hcd vhci_hcd.0: Device attached [ 527.974377][T28406] vhci_hcd: connection closed [ 527.974648][ T3085] vhci_hcd: stop threads [ 527.983682][ T3085] vhci_hcd: release socket [ 527.988161][ T3085] vhci_hcd: disconnect device 11:04:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x16b6905d) 11:04:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5400, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3f, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r4, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x2, {"9a3c2073b41893e5e7a87f7ce059e63c"}, 0x0, 0x7fff, 0xc1d}, @in={0x2, 0x4e22, @multicast1}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x103000, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0xffff, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000600)={0x10, 0x30, 0xfa00, {&(0x7f00000005c0), 0x2, {0xa, 0x4e21, 0x8ef2, @private0, 0x7}, r4}}, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000540)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r7, 0xc68f}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {r4, 0x80000001}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x2, "a06f08867addbbf1ae3c1ed814442d31b4bb5a5fccdb2cc5a1f4dce9ea9be882bd6d304ba800ede9e8c3abb3a6e9c8564733c2b71c3da85c9bcdedbe774440de8d2d1241d7669a920890b0083c8ab5a60a73860692609dd433452b7c885b1652fbd2436ce9fe2312c4929376ddc663a681d095b051b5d14656d247ed4095c35a29970fc32893972e6e597de805bc465efd35c4163663ba34b8d56a05006c531d763c9df0d0077ede89eb843391e406e6610755f1ee69cc134686b6c4566d6a6341c818a05682c0e8aa1613dabec932bdec48a96b51ce31357cfc14909d348f776254c3eec0a3bde215d9592df805d9b56753550b07376d7666dd54530c67a773", 0x20, 0x5, 0x6, 0x40, 0x40, 0x50, 0x20, 0x1}, r4}}, 0x128) [ 528.023463][T28405] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(4) [ 528.030105][T28405] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 528.037619][T28405] vhci_hcd vhci_hcd.0: Device attached 11:04:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5600, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:19 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, @ib={0x1b, 0x1ff, 0x7, {"bce6896259c9e414c1d6c6b6c350742b"}, 0x8, 0x4, 0x9d8}, @in={0x2, 0x4e23, @multicast2}}}, 0x118) close(r0) 11:04:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6200, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2010, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3f, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r4, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x2, {"9a3c2073b41893e5e7a87f7ce059e63c"}, 0x0, 0x7fff, 0xc1d}, @in={0x2, 0x4e22, @multicast1}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3000480, &(0x7f0000000000)=ANY=[], 0x1, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) ftruncate(r2, 0x800) lseek(r2, 0x20400, 0x0) r4 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) write$binfmt_elf64(r1, &(0x7f0000001740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x878) dup2(r3, r1) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6400, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 528.152419][T28423] vhci_hcd: connection closed [ 528.153860][ T9310] vhci_hcd: stop threads [ 528.162982][ T9310] vhci_hcd: release socket [ 528.167523][ T9310] vhci_hcd: disconnect device [ 528.212340][T28477] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 528.218954][T28477] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 528.226576][T28477] vhci_hcd vhci_hcd.0: Device attached [ 528.235976][T28478] vhci_hcd: connection closed [ 528.236469][ T3085] vhci_hcd: stop threads [ 528.245614][ T3085] vhci_hcd: release socket [ 528.250067][ T3085] vhci_hcd: disconnect device [ 528.279938][T28483] loop0: detected capacity change from 0 to 2048 [ 528.298164][T28483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.319616][ T3381] udevd[3381]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 528.384191][T28487] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1100: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 528.400627][T28487] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 528.412911][T28487] EXT4-fs (loop0): This should not happen!! Data will be lost [ 528.412911][T28487] [ 528.422610][T28487] EXT4-fs (loop0): Total free blocks count 0 [ 528.428640][T28487] EXT4-fs (loop0): Free/Dirty block details [ 528.434559][T28487] EXT4-fs (loop0): free_blocks=2415919104 [ 528.440317][T28487] EXT4-fs (loop0): dirty_blocks=1568 [ 528.445626][T28487] EXT4-fs (loop0): Block reservation details [ 528.451653][T28487] EXT4-fs (loop0): i_reserved_data_blocks=98 11:04:19 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x82000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r3, 0xdd517000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r5 = syz_io_uring_complete(0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r4, 0x0, 0x4) sendfile(r4, r6, 0x0, 0x3) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000000c0)) openat$cgroup_ro(r5, &(0x7f0000000180)='cgroup.kill\x00', 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) writev(r7, &(0x7f0000000180), 0x0) 11:04:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x80000000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private1, 0x6}, @in={0x2, 0x4e20, @broadcast}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000640)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6700, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2200, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x80000000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private1, 0x6}, @in={0x2, 0x4e20, @broadcast}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000640)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x80000000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private1, 0x6}, @in={0x2, 0x4e20, @broadcast}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1, 0x2}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000640)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 528.674214][ T25] audit: type=1400 audit(837860659.810:458): avc: denied { read } for pid=28505 comm="syz-executor.5" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 11:04:19 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, @ib={0x1b, 0x1ff, 0x7, {"bce6896259c9e414c1d6c6b6c350742b"}, 0x8, 0x4, 0x9d8}, @in={0x2, 0x4e23, @multicast2}}}, 0x118) close(r0) 11:04:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x3f00, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x80000000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private1, 0x6}, @in={0x2, 0x4e20, @broadcast}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1, 0x2}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000640)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7300, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 528.704162][ T25] audit: type=1400 audit(837860659.840:459): avc: denied { open } for pid=28505 comm="syz-executor.5" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 528.728108][ T25] audit: type=1400 audit(837860659.840:460): avc: denied { map } for pid=28505 comm="syz-executor.5" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 528.805377][T28516] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 528.811991][T28516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 528.819605][T28516] vhci_hcd vhci_hcd.0: Device attached [ 528.837041][T28517] vhci_hcd: connection closed [ 528.837189][ T9] vhci_hcd: stop threads [ 528.846329][ T9] vhci_hcd: release socket [ 528.850832][ T9] vhci_hcd: disconnect device 11:04:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7500, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000e3fd3942a8c181d666696c653000"]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000a00)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x40, 0x3, {"375af4fb07e67caefeab7a05333cb84a"}, 0x1, 0x200, 0x10001}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000780)={0x6, 0x118, 0xfa00, {{0x10001, 0x9, "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", 0x93, 0x9, 0x1, 0x4, 0x1}, r5}}, 0x120) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) r10 = syz_open_dev$vcsu(&(0x7f0000000600), 0x8001, 0x44600) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f00000006c0)={0x14, 0x88, 0xfa00, {r11, 0x30, 0x0, @ib={0x1b, 0x4a, 0xc0000000, {"032035fdde887619ce08f772f5d5a868"}, 0x5, 0x5, 0x328}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r13, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r12, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r13, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r12, &(0x7f0000000900)={0x12, 0x10, 0xfa00, {&(0x7f00000008c0), r1, r6}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r7, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x2}}, 0x20) 11:04:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x4900, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:20 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x82000, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x208e24b) (async) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r3, 0xdd517000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r5 = syz_io_uring_complete(0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r4, 0x0, 0x4) (async) sendfile(r6, r4, 0x0, 0x4) sendfile(r4, r6, 0x0, 0x3) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000000c0)) openat$cgroup_ro(r5, &(0x7f0000000180)='cgroup.kill\x00', 0x0, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000180)='cgroup.kill\x00', 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) writev(r7, &(0x7f0000000180), 0x0) 11:04:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7700, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:20 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x82000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x208e24b) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) (rerun: 64) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r3, 0xdd517000) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r5 = syz_io_uring_complete(0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r4, 0x0, 0x4) (async, rerun: 32) sendfile(r4, r6, 0x0, 0x3) (rerun: 32) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000000c0)) (async, rerun: 64) openat$cgroup_ro(r5, &(0x7f0000000180)='cgroup.kill\x00', 0x0, 0x0) (rerun: 64) r7 = socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 32) writev(r7, &(0x7f0000000180), 0x0) (rerun: 32) 11:04:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000e3fd3942a8c181d666696c653000"]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000a00)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x40, 0x3, {"375af4fb07e67caefeab7a05333cb84a"}, 0x1, 0x200, 0x10001}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000780)={0x6, 0x118, 0xfa00, {{0x10001, 0x9, "105af643225adf76c8bc32032949cf9b6131bc2c05c52e3f0a457850083fc7f14b0e501b2187319632d8e697d36cf126d442d214dc0a8a3596c22a22b7554ae212b89eb5c2f5c730109d687d1817d0321ba29505b0e6b710a822a4638f388aaeb031739f95d077cd891edc2e9650d9df68e1da85e529315e67828104f757ffcf2622f2d53def1759f674991d7352894b45faa790ce142a0fe3cf4c936e3fa8c437f7c9c26d496957223c24e6b6a9cdad72cc278c995eeab48c2b3591b385520a9b27210c8b9c6712d0bcbcde6f2336fe00c165548ed4730d9a495c8bad7bdf3488fc3af6bc807f63cfca8cbdfe1a710f2a0758624a05780989ac0d90d0fd098c", 0x93, 0x9, 0x1, 0x4, 0x1}, r5}}, 0x120) (async) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) r10 = syz_open_dev$vcsu(&(0x7f0000000600), 0x8001, 0x44600) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f00000006c0)={0x14, 0x88, 0xfa00, {r11, 0x30, 0x0, @ib={0x1b, 0x4a, 0xc0000000, {"032035fdde887619ce08f772f5d5a868"}, 0x5, 0x5, 0x328}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r13, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r12, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r13, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r12, &(0x7f0000000900)={0x12, 0x10, 0xfa00, {&(0x7f00000008c0), r1, r6}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r7, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x2}}, 0x20) [ 529.124766][ T33] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 11:04:20 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, @ib={0x1b, 0x1ff, 0x7, {"bce6896259c9e414c1d6c6b6c350742b"}, 0x8, 0x4, 0x9d8}, @in={0x2, 0x4e23, @multicast2}}}, 0x118) close(r0) 11:04:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000e3fd3942a8c181d666696c653000"]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000980)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000a00)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x40, 0x3, {"375af4fb07e67caefeab7a05333cb84a"}, 0x1, 0x200, 0x10001}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000780)={0x6, 0x118, 0xfa00, {{0x10001, 0x9, "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", 0x93, 0x9, 0x1, 0x4, 0x1}, r5}}, 0x120) (async) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) r10 = syz_open_dev$vcsu(&(0x7f0000000600), 0x8001, 0x44600) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f00000006c0)={0x14, 0x88, 0xfa00, {r11, 0x30, 0x0, @ib={0x1b, 0x4a, 0xc0000000, {"032035fdde887619ce08f772f5d5a868"}, 0x5, 0x5, 0x328}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r12, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r13, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r12, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r13, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r12, &(0x7f0000000900)={0x12, 0x10, 0xfa00, {&(0x7f00000008c0), r1, r6}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r7, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x2}}, 0x20) 11:04:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xedc0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x400440) write$binfmt_misc(r4, &(0x7f0000000180)={'syz0', "4d56a84935f71804d00e469da7c683e2f1be332ed1e2c9e6a75bb10867994ea3397698f37f1f1fa36367cbca98c45f2a36b3b3cbfe90ef6e939027f44034a7055334ebd841f65fa879ad7511be09ccc6fcd39d90df708d5893f670d69af8a852996c5cdbb11f71fff6c278aad290b02a98032248ffd703cf861cf650dcc9bdd674549e43152c0db9a9a3aebf1150383e47d0b6b2f7665b6baa5163ab643a142f996dd16b09f7cdff7a4939a0cb6e8659233753b6c462624e39ce2b50d426624d3093360c1dc7c9530c29"}, 0xce) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) 11:04:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x6, @mcast2, 0x3f}, {0xa, 0x4e22, 0x5, @empty, 0x8}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2}}, 0x20) 11:04:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x1000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000600)={0x4, 0x8, 0xfa00, {r6, 0x2}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x98, 0xfa00, {{0xa, 0x0, 0x8000, @remote, 0x1}, {0xa, 0x0, 0xfffffff8, @remote}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x28000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {r9, 0xe4, "49ffed", "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"}}, 0x110) [ 529.416389][T28549] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 529.422942][T28549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 529.430589][T28549] vhci_hcd vhci_hcd.0: Device attached [ 529.444659][T28552] vhci_hcd: connection closed [ 529.444939][ T25] audit: type=1400 audit(837860660.580:461): avc: denied { write } for pid=28539 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 529.445893][ T9] vhci_hcd: stop threads [ 529.474306][ T9] vhci_hcd: release socket [ 529.478785][ T9] vhci_hcd: disconnect device 11:04:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 1) 11:04:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000600)={0x4, 0x8, 0xfa00, {r6, 0x2}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x98, 0xfa00, {{0xa, 0x0, 0x8000, @remote, 0x1}, {0xa, 0x0, 0xfffffff8, @remote}, r7}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x28000, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {r9, 0xe4, "49ffed", "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"}}, 0x110) 11:04:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async, rerun: 32) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x400440) write$binfmt_misc(r4, &(0x7f0000000180)={'syz0', "4d56a84935f71804d00e469da7c683e2f1be332ed1e2c9e6a75bb10867994ea3397698f37f1f1fa36367cbca98c45f2a36b3b3cbfe90ef6e939027f44034a7055334ebd841f65fa879ad7511be09ccc6fcd39d90df708d5893f670d69af8a852996c5cdbb11f71fff6c278aad290b02a98032248ffd703cf861cf650dcc9bdd674549e43152c0db9a9a3aebf1150383e47d0b6b2f7665b6baa5163ab643a142f996dd16b09f7cdff7a4939a0cb6e8659233753b6c462624e39ce2b50d426624d3093360c1dc7c9530c29"}, 0xce) (async) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) 11:04:21 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x201}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELSET={0x84, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2169}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf29}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xefb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}, @NFT_MSG_DELRULE={0x1f4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffb}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x35, 0x7, 0x1, 0x0, "5468861176119d595811845b01ddb5e142284e6818ed8e0716e5eb3fc84ebb63e81d93048c9bb0dfbc713ec8fc0821e8c6"}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x36e}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x80000000}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0xe0, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_USERDATA={0x80, 0xd, 0x1, 0x0, "cb341925638ec9b1764e8386a8338b32911d640e3e7c64e314509fd80fb67882175f52cb887e7202b031d4e24afa625502f0f6745da7d9dc3df46dfb4c19ad86a737297b6365b3a8b9377fd61f2f727f44ccb8ef4820fae40e609b7e479399bfd119853bb5b60999bc50246aa6a18299acc085c39f621a3987cfe992"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfff}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x3d4}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x250, 0x1, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CT={0x54, 0xb, 0x0, 0x1, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x204a}, @NFQA_CT={0xfc, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xbfb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x87f}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8e0}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}]}]}, @NFQA_PAYLOAD={0x30, 0xa, "b521f022d6fe61889a3d92d709a2fe6b9884feac7fc4eba0d9a136e872da4252e08e19b93ba40dd0dc3cb446"}, @NFQA_PAYLOAD={0xb3, 0xa, "dc6b282b0031224fceca1b91bba1d1bf7af0e2956b2dfe5e36e05652636e0039a0f9ca22e7e38c8ee5ea4f5090fa938b749aabb0fb34784522e2e648138d9894b80e52f4eef9da48a20c90ca24a63a7d8e0a60597aebf3eaf29af2935527253ac44ab7d66d9d4453d3f16d53f835b2df8cd50e3bc2d73e04029f75a0bf35627c05c4794286f09a0a6e969d8cdce966ad8f9669f3f03c3204082ab7280f7e218843dcd671c209429b08c8a0d709d2fe"}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x40080) r2 = syz_usbip_server_init(0x1) close(r2) 11:04:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000600)={0x4, 0x8, 0xfa00, {r6, 0x2}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x98, 0xfa00, {{0xa, 0x0, 0x8000, @remote, 0x1}, {0xa, 0x0, 0xfffffff8, @remote}, r7}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x98, 0xfa00, {{0xa, 0x0, 0x8000, @remote, 0x1}, {0xa, 0x0, 0xfffffff8, @remote}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x28000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {r9, 0xe4, "49ffed", "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"}}, 0x110) [ 529.972695][T28564] loop0: detected capacity change from 0 to 128 11:04:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x400440) write$binfmt_misc(r4, &(0x7f0000000180)={'syz0', "4d56a84935f71804d00e469da7c683e2f1be332ed1e2c9e6a75bb10867994ea3397698f37f1f1fa36367cbca98c45f2a36b3b3cbfe90ef6e939027f44034a7055334ebd841f65fa879ad7511be09ccc6fcd39d90df708d5893f670d69af8a852996c5cdbb11f71fff6c278aad290b02a98032248ffd703cf861cf650dcc9bdd674549e43152c0db9a9a3aebf1150383e47d0b6b2f7665b6baa5163ab643a142f996dd16b09f7cdff7a4939a0cb6e8659233753b6c462624e39ce2b50d426624d3093360c1dc7c9530c29"}, 0xce) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) 11:04:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5200, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000000}, @in={0x2, 0x800, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x3f, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0xd5, {"9638ba8fb99824a200460e976c2a7c90"}, 0x3, 0x5, 0xd2}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) 11:04:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5300, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000000}, @in={0x2, 0x800, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x3f, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0xd5, {"9638ba8fb99824a200460e976c2a7c90"}, 0x3, 0x5, 0xd2}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000000}, @in={0x2, 0x800, @remote}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x3f, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0xd5, {"9638ba8fb99824a200460e976c2a7c90"}, 0x3, 0x5, 0xd2}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) (async) [ 530.143192][T28573] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 530.149754][T28573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 530.157414][T28573] vhci_hcd vhci_hcd.0: Device attached [ 530.169416][T28587] vhci_hcd: connection closed [ 530.171289][ T9310] vhci_hcd: stop threads [ 530.180290][ T9310] vhci_hcd: release socket [ 530.184764][ T9310] vhci_hcd: disconnect device [ 530.190721][T28602] FAULT_INJECTION: forcing a failure. [ 530.190721][T28602] name failslab, interval 1, probability 0, space 0, times 0 [ 530.203569][T28602] CPU: 1 PID: 28602 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 530.214016][T28602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 530.224109][T28602] Call Trace: [ 530.227401][T28602] [ 530.230351][T28602] dump_stack_lvl+0xda/0x130 [ 530.235122][T28602] dump_stack+0x15/0x20 11:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x100) [ 530.239316][T28602] should_fail_ex+0x21f/0x230 [ 530.244170][T28602] __should_failslab+0x92/0xa0 [ 530.248968][T28602] should_failslab+0x9/0x20 [ 530.253571][T28602] slab_pre_alloc_hook+0x38/0x180 [ 530.258717][T28602] kmem_cache_alloc+0x58/0x260 [ 530.263605][T28602] ? getname_flags+0x85/0x360 [ 530.268311][T28602] getname_flags+0x85/0x360 [ 530.272830][T28602] getname+0x19/0x20 [ 530.276749][T28602] do_sys_openat2+0x6d/0x2a0 [ 530.281365][T28602] ? mutex_lock+0xd/0x30 [ 530.285629][T28602] ? fput+0x112/0x140 [ 530.289632][T28602] __x64_sys_openat+0xf3/0x120 [ 530.294650][T28602] do_syscall_64+0x41/0xc0 [ 530.299252][T28602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 530.305239][T28602] RIP: 0033:0x7fcf93783169 [ 530.309731][T28602] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 530.329359][T28602] RSP: 002b:00007fcf8a6c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 530.337838][T28602] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93783169 [ 530.345824][T28602] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 530.353840][T28602] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 530.361844][T28602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.369834][T28602] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 530.377858][T28602] 11:04:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEniYlJRJPDsssuLL7sXnYvg7p7XHYNiy7LBlZcs/QHFEad2JBpIjNBmyLVnnot/SN6EHvzJrT+A156ay+99OalUEo9SKdkMmM0jjVqYqx+PyDzZt7nmXnfmSjPhLxuX3t0p5i3tbxekXBcSUhEZEckLWHxhbxt2G3HZL8V+bnv3cuV/67f+CeTzY5NKjWemfplRCk1MPh+cSnhhW30ylb61vbbkTdbX299u/1x6nbBVgVblcoVpavp8uuKPm0aarZgFzWlJkxDtw1VKNmGVe8v1/vzZnl+vqr00mx/ct4ybFvppaoqGlVVKauKVVX6nF4oKU3TVH9ScJzc6uSknjll8kybB4MOsayMHhGRxKGe3GpXBgQAALqquf4P10r6E9f/3wfW/88Wl9Z+2Kz0/b8+4NX/G7Gg+v/XV/VjHaj/4yLSvvp/7u5vfwXM/nBFdLWcqf7HxTAYO7QrdOBVrf5Per+/rgc314bcBvU/AAAAAAAAAAAAAAAAAAAAAABfgh3HSTmOk/K3/k+viMRFxHGc5uUErBe5RFq4/+7rbo8TndFYuNczIGI+XMgt5OpbL2BTREwxZEhSsuu+HzwiTtRfeaRq0vLcXPbylxdyEbcnk5eCmz8sKUk35TuOM/53dmxY1R3Mj0rSzc+IRN1DpeSr4PyRwPyY/PTjvvNrkpIXM1IWU2bd93Uj//6wUn/+m23KT7hxAAAAAABcBpraE/j8rmlH9dfz956vgz4f8J6vhwKfz3vku57uzh0AAAAAgKvCrt4r6qZpWJ9pJOT4mPY2nh7VNeoNu4Xj+DP093hfYlppCrYi3kXwv8twyjFHWg2OB115/+TFP/ZN0I88zyvfaiPcyi1oNEK7jmNY9mBtNuqsZ/c/NjoqRiZOfuTYSe97SAK6vnn85EP7rvPv6/FjZtqxRrSDf3IAAAAAdEmj6Pf3jHZ3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEHn8e/Euj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KL4FAAA//8X6PzU") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 2) 11:04:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000000}, @in={0x2, 0x800, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x3f, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0xd5, {"9638ba8fb99824a200460e976c2a7c90"}, 0x3, 0x5, 0xd2}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000000}, @in={0x2, 0x800, @remote}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x3f, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0xd5, {"9638ba8fb99824a200460e976c2a7c90"}, 0x3, 0x5, 0xd2}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) (async) 11:04:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x100) 11:04:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5400, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:21 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x201}, 0x14}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELSET={0x84, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2169}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf29}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xefb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}, @NFT_MSG_DELRULE={0x1f4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffb}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x35, 0x7, 0x1, 0x0, "5468861176119d595811845b01ddb5e142284e6818ed8e0716e5eb3fc84ebb63e81d93048c9bb0dfbc713ec8fc0821e8c6"}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x36e}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x80000000}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0xe0, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_USERDATA={0x80, 0xd, 0x1, 0x0, "cb341925638ec9b1764e8386a8338b32911d640e3e7c64e314509fd80fb67882175f52cb887e7202b031d4e24afa625502f0f6745da7d9dc3df46dfb4c19ad86a737297b6365b3a8b9377fd61f2f727f44ccb8ef4820fae40e609b7e479399bfd119853bb5b60999bc50246aa6a18299acc085c39f621a3987cfe992"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfff}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x3d4}}, 0x40) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x250, 0x1, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CT={0x54, 0xb, 0x0, 0x1, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x204a}, @NFQA_CT={0xfc, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xbfb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x87f}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8e0}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}]}]}, @NFQA_PAYLOAD={0x30, 0xa, "b521f022d6fe61889a3d92d709a2fe6b9884feac7fc4eba0d9a136e872da4252e08e19b93ba40dd0dc3cb446"}, @NFQA_PAYLOAD={0xb3, 0xa, "dc6b282b0031224fceca1b91bba1d1bf7af0e2956b2dfe5e36e05652636e0039a0f9ca22e7e38c8ee5ea4f5090fa938b749aabb0fb34784522e2e648138d9894b80e52f4eef9da48a20c90ca24a63a7d8e0a60597aebf3eaf29af2935527253ac44ab7d66d9d4453d3f16d53f835b2df8cd50e3bc2d73e04029f75a0bf35627c05c4794286f09a0a6e969d8cdce966ad8f9669f3f03c3204082ab7280f7e218843dcd671c209429b08c8a0d709d2fe"}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x40080) (async) r2 = syz_usbip_server_init(0x1) close(r2) 11:04:22 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x201}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELSET={0x84, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2169}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf29}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xefb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}, @NFT_MSG_DELRULE={0x1f4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffb}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x35, 0x7, 0x1, 0x0, "5468861176119d595811845b01ddb5e142284e6818ed8e0716e5eb3fc84ebb63e81d93048c9bb0dfbc713ec8fc0821e8c6"}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x36e}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x80000000}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0xe0, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_USERDATA={0x80, 0xd, 0x1, 0x0, "cb341925638ec9b1764e8386a8338b32911d640e3e7c64e314509fd80fb67882175f52cb887e7202b031d4e24afa625502f0f6745da7d9dc3df46dfb4c19ad86a737297b6365b3a8b9377fd61f2f727f44ccb8ef4820fae40e609b7e479399bfd119853bb5b60999bc50246aa6a18299acc085c39f621a3987cfe992"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfff}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x3d4}}, 0x40) (rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x250, 0x1, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CT={0x54, 0xb, 0x0, 0x1, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x204a}, @NFQA_CT={0xfc, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xbfb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x87f}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8e0}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}]}]}, @NFQA_PAYLOAD={0x30, 0xa, "b521f022d6fe61889a3d92d709a2fe6b9884feac7fc4eba0d9a136e872da4252e08e19b93ba40dd0dc3cb446"}, @NFQA_PAYLOAD={0xb3, 0xa, "dc6b282b0031224fceca1b91bba1d1bf7af0e2956b2dfe5e36e05652636e0039a0f9ca22e7e38c8ee5ea4f5090fa938b749aabb0fb34784522e2e648138d9894b80e52f4eef9da48a20c90ca24a63a7d8e0a60597aebf3eaf29af2935527253ac44ab7d66d9d4453d3f16d53f835b2df8cd50e3bc2d73e04029f75a0bf35627c05c4794286f09a0a6e969d8cdce966ad8f9669f3f03c3204082ab7280f7e218843dcd671c209429b08c8a0d709d2fe"}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x40080) (async) r2 = syz_usbip_server_init(0x1) close(r2) 11:04:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000400)={0x15, 0x110, 0xfa08, {r5, 0x3, 0x10, 0x10, 0x0, @in={0x2, 0x0, @local}, @ib={0x1b, 0x400, 0x8, {"c60acdb4e583767e05a28f70c9328166"}, 0x4eaa, 0x4, 0x1}}}, 0x118) 11:04:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5600, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 530.903105][T28630] loop0: detected capacity change from 0 to 128 11:04:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6200, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x100) [ 531.007611][T28639] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 531.014338][T28639] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.021928][T28639] vhci_hcd vhci_hcd.0: Device attached [ 531.037749][T28640] vhci_hcd: connection closed [ 531.037850][ T3085] vhci_hcd: stop threads [ 531.046922][ T3085] vhci_hcd: release socket [ 531.051347][ T3085] vhci_hcd: disconnect device [ 531.107762][T28649] FAULT_INJECTION: forcing a failure. [ 531.107762][T28649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.120981][T28649] CPU: 1 PID: 28649 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 531.131498][T28649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 531.141571][T28649] Call Trace: [ 531.144883][T28649] [ 531.147888][T28649] dump_stack_lvl+0xda/0x130 [ 531.152497][T28649] dump_stack+0x15/0x20 [ 531.156718][T28649] should_fail_ex+0x21f/0x230 [ 531.161436][T28649] should_fail+0xb/0x10 [ 531.165657][T28649] should_fail_usercopy+0x1a/0x20 [ 531.170788][T28649] strncpy_from_user+0x25/0x270 [ 531.175673][T28649] ? getname_flags+0x85/0x360 [ 531.180428][T28649] getname_flags+0xb3/0x360 [ 531.184951][T28649] getname+0x19/0x20 [ 531.188915][T28649] do_sys_openat2+0x6d/0x2a0 [ 531.193594][T28649] ? mutex_lock+0xd/0x30 [ 531.197863][T28649] ? fput+0x112/0x140 [ 531.201911][T28649] __x64_sys_openat+0xf3/0x120 [ 531.206731][T28649] do_syscall_64+0x41/0xc0 [ 531.211286][T28649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 531.217221][T28649] RIP: 0033:0x7fcf93783169 [ 531.221647][T28649] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 531.241288][T28649] RSP: 002b:00007fcf8a6c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 531.249732][T28649] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93783169 11:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000400)={0x15, 0x110, 0xfa08, {r5, 0x3, 0x10, 0x10, 0x0, @in={0x2, 0x0, @local}, @ib={0x1b, 0x400, 0x8, {"c60acdb4e583767e05a28f70c9328166"}, 0x4eaa, 0x4, 0x1}}}, 0x118) 11:04:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6400, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 531.257762][T28649] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 531.265805][T28649] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 531.273873][T28649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.281884][T28649] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 531.289915][T28649] 11:04:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 3) 11:04:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000400)={0x15, 0x110, 0xfa08, {r5, 0x3, 0x10, 0x10, 0x0, @in={0x2, 0x0, @local}, @ib={0x1b, 0x400, 0x8, {"c60acdb4e583767e05a28f70c9328166"}, 0x4eaa, 0x4, 0x1}}}, 0x118) 11:04:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6700, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:23 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x3) 11:04:23 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x13f}}, 0x20) 11:04:23 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) (async) sendfile(r3, r4, 0x0, 0x3) 11:04:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:23 executing program 1: write(0xffffffffffffffff, &(0x7f00000005c0)="bc7a741a8e43058e1b4081b4d19e3c6416e5f0ec37da46d3f2d6ef0a17813ce47cbe05f74a378c934311d51e62c048c28733a268dc0f78b159c781ac3cf8b8100c7f943efd1c43f05b7b62ed09c60722f8f63b8c4da5d943578b32de45d57635e96825a0f5d0129ad11ed17a7bda3f79bb8f1a0f3860efe739d9cf6bb4f7aca71e760672c553e0f8a1719d71", 0x8c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r6 = fsopen(&(0x7f0000000400)='nfs\x00', 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000440)='}\xd2{-)%!-\x00', 0x0, r7) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffff}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) r10 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0, 0xc0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r12, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r11, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r12, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r10, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {&(0x7f00000004c0), r12, 0x9}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e23, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r9, 0x101, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x400, {"61245a08c5e0b2d404fcc67e577cddfe"}, 0x200000101, 0x8000, 0x1}, @ib={0x1b, 0x5, 0xa01, {"dea1504f9c67a80d0ec05cffcfe0b511"}, 0x1, 0x10001, 0x3}}}, 0x118) 11:04:23 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) (async) sendfile(r3, r4, 0x0, 0x3) [ 531.924464][T28665] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 531.931046][T28665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.938693][T28665] vhci_hcd vhci_hcd.0: Device attached [ 531.947731][T28672] loop0: detected capacity change from 0 to 128 [ 531.964886][T28669] vhci_hcd: connection closed [ 531.965037][ T9] vhci_hcd: stop threads [ 531.974124][ T9] vhci_hcd: release socket [ 531.978752][ T9] vhci_hcd: disconnect device 11:04:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7300, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:23 executing program 1: write(0xffffffffffffffff, &(0x7f00000005c0)="bc7a741a8e43058e1b4081b4d19e3c6416e5f0ec37da46d3f2d6ef0a17813ce47cbe05f74a378c934311d51e62c048c28733a268dc0f78b159c781ac3cf8b8100c7f943efd1c43f05b7b62ed09c60722f8f63b8c4da5d943578b32de45d57635e96825a0f5d0129ad11ed17a7bda3f79bb8f1a0f3860efe739d9cf6bb4f7aca71e760672c553e0f8a1719d71", 0x8c) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r6 = fsopen(&(0x7f0000000400)='nfs\x00', 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000440)='}\xd2{-)%!-\x00', 0x0, r7) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) r10 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0, 0xc0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r12, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r11, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r12, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r10, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {&(0x7f00000004c0), r12, 0x9}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e23, @empty}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r9, 0x101, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x400, {"61245a08c5e0b2d404fcc67e577cddfe"}, 0x200000101, 0x8000, 0x1}, @ib={0x1b, 0x5, 0xa01, {"dea1504f9c67a80d0ec05cffcfe0b511"}, 0x1, 0x10001, 0x3}}}, 0x118) 11:04:23 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xa000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 532.162838][T28696] FAULT_INJECTION: forcing a failure. [ 532.162838][T28696] name failslab, interval 1, probability 0, space 0, times 0 [ 532.175556][T28696] CPU: 1 PID: 28696 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 532.186007][T28696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 532.196083][T28696] Call Trace: [ 532.199420][T28696] [ 532.202388][T28696] dump_stack_lvl+0xda/0x130 [ 532.207072][T28696] dump_stack+0x15/0x20 [ 532.211269][T28696] should_fail_ex+0x21f/0x230 [ 532.216008][T28696] __should_failslab+0x92/0xa0 [ 532.220811][T28696] should_failslab+0x9/0x20 [ 532.225380][T28696] slab_pre_alloc_hook+0x38/0x180 [ 532.230486][T28696] kmem_cache_alloc+0x58/0x260 [ 532.235280][T28696] ? __alloc_file+0x2e/0x150 [ 532.239938][T28696] __alloc_file+0x2e/0x150 [ 532.244595][T28696] alloc_empty_file+0xba/0x1a0 [ 532.249414][T28696] path_openat+0x64/0x1d00 [ 532.253874][T28696] ? plist_del+0x1f5/0x200 [ 532.258394][T28696] ? finish_task_switch+0xac/0x280 [ 532.263603][T28696] ? _parse_integer_limit+0x163/0x180 [ 532.269031][T28696] ? _parse_integer+0x27/0x30 [ 532.273761][T28696] ? kstrtoull+0x110/0x140 [ 532.278221][T28696] do_filp_open+0xf6/0x200 [ 532.282710][T28696] do_sys_openat2+0xb5/0x2a0 [ 532.287321][T28696] __x64_sys_openat+0xf3/0x120 [ 532.292109][T28696] do_syscall_64+0x41/0xc0 [ 532.296565][T28696] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 532.302491][T28696] RIP: 0033:0x7fcf93783169 [ 532.306923][T28696] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 532.326587][T28696] RSP: 002b:00007fcf8a6c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 532.335062][T28696] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93783169 [ 532.343150][T28696] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 532.351233][T28696] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.359277][T28696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.367313][T28696] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 532.375413][T28696] 11:04:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 4) 11:04:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) r4 = syz_io_uring_complete(0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x3) 11:04:23 executing program 1: write(0xffffffffffffffff, &(0x7f00000005c0)="bc7a741a8e43058e1b4081b4d19e3c6416e5f0ec37da46d3f2d6ef0a17813ce47cbe05f74a378c934311d51e62c048c28733a268dc0f78b159c781ac3cf8b8100c7f943efd1c43f05b7b62ed09c60722f8f63b8c4da5d943578b32de45d57635e96825a0f5d0129ad11ed17a7bda3f79bb8f1a0f3860efe739d9cf6bb4f7aca71e760672c553e0f8a1719d71", 0x8c) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async, rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (rerun: 64) r6 = fsopen(&(0x7f0000000400)='nfs\x00', 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000440)='}\xd2{-)%!-\x00', 0x0, r7) (async, rerun: 64) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffff}}, 0x10) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async, rerun: 32) r10 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0, 0xc0) (async, rerun: 32) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r12, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r11, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r12, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r10, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {&(0x7f00000004c0), r12, 0x9}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e23, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r9, 0x101, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x400, {"61245a08c5e0b2d404fcc67e577cddfe"}, 0x200000101, 0x8000, 0x1}, @ib={0x1b, 0x5, 0xa01, {"dea1504f9c67a80d0ec05cffcfe0b511"}, 0x1, 0x10001, 0x3}}}, 0x118) 11:04:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7500, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:23 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x13f}}, 0x20) [ 532.826778][T28702] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 532.833379][T28702] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.841010][T28702] vhci_hcd vhci_hcd.0: Device attached [ 532.851782][T28713] loop0: detected capacity change from 0 to 128 [ 532.869334][T28706] vhci_hcd: connection closed [ 532.871714][ T9310] vhci_hcd: stop threads [ 532.880784][ T9310] vhci_hcd: release socket [ 532.885253][ T9310] vhci_hcd: disconnect device 11:04:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7700, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0xffffffffffffffff, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = gettid() r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0), 0x2, 0x1}}, 0x20) signalfd(r5, &(0x7f0000000680)={[0x3]}, 0x8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r9, 0x0, 0x0) r10 = getpgid(0xffffffffffffffff) prlimit64(r10, 0xd, &(0x7f0000000180)={0x5, 0x8}, &(0x7f00000002c0)) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c, 0x800) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="bca6fe96399797ee6616443470c5737eeb3199593c38450ea2174742f58a3cb6e8", 0x21}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r11, r0]}}], 0x58, 0x2400c880}, 0x4008) 11:04:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xedc0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0xffffffffffffffff, 0x2}}, 0x48) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = gettid() (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0), 0x2, 0x1}}, 0x20) signalfd(r5, &(0x7f0000000680)={[0x3]}, 0x8) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r9, 0x0, 0x0) (async) r10 = getpgid(0xffffffffffffffff) prlimit64(r10, 0xd, &(0x7f0000000180)={0x5, 0x8}, &(0x7f00000002c0)) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c, 0x800) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="bca6fe96399797ee6616443470c5737eeb3199593c38450ea2174742f58a3cb6e8", 0x21}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r11, r0]}}], 0x58, 0x2400c880}, 0x4008) 11:04:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x10000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x1000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0xffffffffffffffff, 0x2}}, 0x48) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = gettid() (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0), 0x2, 0x1}}, 0x20) (async) signalfd(r5, &(0x7f0000000680)={[0x3]}, 0x8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r9, 0x0, 0x0) (async) r10 = getpgid(0xffffffffffffffff) prlimit64(r10, 0xd, &(0x7f0000000180)={0x5, 0x8}, &(0x7f00000002c0)) (async) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c, 0x800) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="bca6fe96399797ee6616443470c5737eeb3199593c38450ea2174742f58a3cb6e8", 0x21}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r11, r0]}}], 0x58, 0x2400c880}, 0x4008) [ 533.071219][T28737] FAULT_INJECTION: forcing a failure. [ 533.071219][T28737] name failslab, interval 1, probability 0, space 0, times 0 [ 533.083947][T28737] CPU: 1 PID: 28737 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 533.094393][T28737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 533.104563][T28737] Call Trace: [ 533.107895][T28737] [ 533.110856][T28737] dump_stack_lvl+0xda/0x130 [ 533.115466][T28737] dump_stack+0x15/0x20 [ 533.119729][T28737] should_fail_ex+0x21f/0x230 [ 533.124548][T28737] __should_failslab+0x92/0xa0 [ 533.129399][T28737] should_failslab+0x9/0x20 [ 533.133919][T28737] slab_pre_alloc_hook+0x38/0x180 [ 533.138978][T28737] kmem_cache_alloc+0x58/0x260 [ 533.143777][T28737] ? security_file_alloc+0x32/0xd0 [ 533.148921][T28737] ? kmem_cache_alloc+0x17b/0x260 [ 533.153974][T28737] security_file_alloc+0x32/0xd0 [ 533.159003][T28737] __alloc_file+0x81/0x150 [ 533.163461][T28737] alloc_empty_file+0xba/0x1a0 [ 533.168251][T28737] path_openat+0x64/0x1d00 [ 533.172698][T28737] ? _parse_integer_limit+0x163/0x180 [ 533.178109][T28737] ? _parse_integer+0x27/0x30 [ 533.182907][T28737] ? kstrtoull+0x110/0x140 [ 533.187355][T28737] do_filp_open+0xf6/0x200 [ 533.191907][T28737] do_sys_openat2+0xb5/0x2a0 [ 533.196522][T28737] ? mutex_lock+0xd/0x30 [ 533.200773][T28737] ? fput+0x112/0x140 [ 533.204784][T28737] __x64_sys_openat+0xf3/0x120 [ 533.209575][T28737] do_syscall_64+0x41/0xc0 [ 533.214076][T28737] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 533.220075][T28737] RIP: 0033:0x7fcf93783169 [ 533.224533][T28737] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 533.244321][T28737] RSP: 002b:00007fcf8a6c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.252752][T28737] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93783169 [ 533.260753][T28737] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 533.268750][T28737] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 533.276736][T28737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.284742][T28737] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 533.292748][T28737] 11:04:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 5) 11:04:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = dup3(r0, r0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e20, 0x20, @empty, 0x4}, @ib={0x1b, 0xff80, 0x2, {"1245bca7312dae34d909ac42b8c3c662"}, 0x7, 0xff, 0x8cff}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x111400, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0x80, r5, 0x0, 0x0, 0x1}}, 0x20) 11:04:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) r4 = syz_io_uring_complete(0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x3) 11:04:24 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async, rerun: 64) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r0 = syz_usbip_server_init(0x1) close(r0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x13f}}, 0x20) 11:04:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = dup3(r0, r0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e20, 0x20, @empty, 0x4}, @ib={0x1b, 0xff80, 0x2, {"1245bca7312dae34d909ac42b8c3c662"}, 0x7, 0xff, 0x8cff}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x111400, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0x80, r5, 0x0, 0x0, 0x1}}, 0x20) [ 533.753850][T28745] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 533.760394][T28745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 533.767916][T28745] vhci_hcd vhci_hcd.0: Device attached [ 533.785619][T28750] loop0: detected capacity change from 0 to 128 [ 533.794146][T28746] vhci_hcd: connection closed [ 533.794310][ T3085] vhci_hcd: stop threads [ 533.803331][ T3085] vhci_hcd: release socket [ 533.807814][ T3085] vhci_hcd: disconnect device 11:04:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = dup3(r0, r0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e20, 0x20, @empty, 0x4}, @ib={0x1b, 0xff80, 0x2, {"1245bca7312dae34d909ac42b8c3c662"}, 0x7, 0xff, 0x8cff}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x111400, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0x80, r5, 0x0, 0x0, 0x1}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) dup3(r0, r0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e20, 0x20, @empty, 0x4}, @ib={0x1b, 0xff80, 0x2, {"1245bca7312dae34d909ac42b8c3c662"}, 0x7, 0xff, 0x8cff}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x111400, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0x80, r5, 0x0, 0x0, 0x1}}, 0x20) (async) 11:04:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async) r4 = syz_io_uring_complete(0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0x3) 11:04:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x20000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x4800000}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x4800000}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x4800000}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x4800000}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 533.999913][T28783] FAULT_INJECTION: forcing a failure. [ 533.999913][T28783] name failslab, interval 1, probability 0, space 0, times 0 [ 534.014008][T28783] CPU: 0 PID: 28783 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 534.024454][T28783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 534.034577][T28783] Call Trace: [ 534.038009][T28783] [ 534.040952][T28783] dump_stack_lvl+0xda/0x130 [ 534.045586][T28783] dump_stack+0x15/0x20 [ 534.049778][T28783] should_fail_ex+0x21f/0x230 [ 534.054497][T28783] __should_failslab+0x92/0xa0 [ 534.059364][T28783] should_failslab+0x9/0x20 [ 534.064005][T28783] slab_pre_alloc_hook+0x38/0x180 [ 534.069115][T28783] kmem_cache_alloc_lru+0x54/0x260 [ 534.074352][T28783] ? __d_alloc+0x3d/0x380 [ 534.079336][T28783] __d_alloc+0x3d/0x380 [ 534.083534][T28783] d_alloc_parallel+0x54/0xc90 [ 534.088407][T28783] ? __rcu_read_unlock+0x4d/0x70 [ 534.093530][T28783] ? __d_lookup+0x357/0x380 [ 534.098200][T28783] ? link_path_walk+0x743/0x7e0 [ 534.103092][T28783] ? __rcu_read_unlock+0x4d/0x70 [ 534.108059][T28783] path_openat+0x65c/0x1d00 [ 534.112729][T28783] ? kstrtoull+0x110/0x140 [ 534.117264][T28783] do_filp_open+0xf6/0x200 [ 534.121710][T28783] do_sys_openat2+0xb5/0x2a0 [ 534.126401][T28783] ? mutex_lock+0xd/0x30 [ 534.130653][T28783] ? fput+0x112/0x140 [ 534.134755][T28783] __x64_sys_openat+0xf3/0x120 [ 534.139617][T28783] do_syscall_64+0x41/0xc0 [ 534.144206][T28783] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 534.150159][T28783] RIP: 0033:0x7fcf93783169 [ 534.154598][T28783] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 534.174297][T28783] RSP: 002b:00007fcf8a6c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.182820][T28783] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93783169 [ 534.190815][T28783] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 534.198867][T28783] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.206907][T28783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.215053][T28783] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 534.223085][T28783] 11:04:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 6) 11:04:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x4, 0x10, 0x10, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x118) 11:04:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r0, 0x2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05ceffb4ed555ae108f49c7880fdf4fa2a8f06ac2c5352509e3c51d672eb0ec0dd3b1c96e98016382e166e2ca4c353d3d4d316daf522556a16cab12d75a852bc680da7e010400009c101c78130d6ef7480feb2e60a1e30a59b7745235b33bc18c4ed0351cd2c51b7b02f8a78993b5b416ba1c5721bcd87be4a338392f831637ee8c35bb2183794afff0a9eed63b1226b18c4b455ab20000000000000000000092652f79b7f3fb65162ee98900"/193, @ANYRES16, @ANYRES8=r2, @ANYBLOB="373092aa29e2127671f87f0a00ebae5693495a917b2906e31fd9486a5a5bd5ead164be9992f5776cc8fe4867703dd33350f75c29c48d53222ed800301220dededafc95708f9253563b1284cd07b32fd5c265416455e3ad2250eba709e696700aa4cd2b473efb1f7a0a19bde4399140135e71d5352fb04595fcac2f43be5bfa35f30daf1b94aadfeb7fc3e5924d23cd0fbb1d9b9abdc9", @ANYRES8=0x0], 0x1, 0x11d4, &(0x7f00000012c0)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000029c0)={0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in6=@empty, @in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000014c0)=ANY=[@ANYRES64=r3, @ANYBLOB="0700000000000000060000000000000067a200000000000003000000000000000000008000000000030000240f0000000200000004000000f7ffffff0400000006000000000000006a0a000000000000060000000000000002000000000000001800"/128]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000380)={r2, r3, "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", "7bb9a0a370f8476fc52c1f18cf276372ddd23b756260088240cc25a4a85277db8f12de7c6ac935d46b7ae68ed7fb513048c92b81892ba3896102d621696bab19138c6569d0bb03a7a4aa3e6c1d6a1b6ebb596351f0896ff99d5232515cf855c34aab2940d4a4f48884f5a8bd70d67849c79a08b83658985a3d3897b0d5e7f68dc0fac0ab8491ba0b0d42dd283795c47419b26a382798ea4b673871de5426baf4373a19ee6f64da9de9cf45db22fc40d127e3bb328b69cdec0c3c86bcbb149f9084a53a1da66950a442a351a6d00b879a624eb4fac7a7b0961d8b933244d85ff7127148f6ce146ce726e81e02a291fd6a66b65bffce20abd2e5dd70d3c49e877cbab1f8c1d26e6ea9b59dc20e490446093826537245c70e6813f7259427d35418f322a8501f9b6fb71e0de8fd9ba9349251ece1a649ccd7f930b10f2ba3e0a913468149f8a6edc3b7d12d41b5901e27c2f9c06206d70a9d011f08805ae925c8b7bee6c07346f410dbc9cb1a6e41a1c6b355f0eba847bc2c8e93efe6708cd48b97766faf7234388c3f2bb8190e145bbba82a984ea8a1fa2a2a8623b513eeb92223a363c60e7ab562ea16801fe15b6595196b86431e7c28e3baa81836f8205bb2517621305d57de42bbf9eb4c282c172da047f9dc06db52dda943afd6616344f8dacce96d825458af8256c702d64e651bd014e07c8e02a728dffd2e4a0a46cddd91ebaf4bc2295d32f3433e57b1ee3eff0b5c4dc78daf564288546f35b415fe15d2415df81dc50d889b2669dba737a22fac79faffca008a7538a5537889fa2902a61fb22b92d627bad59dc473ec50dea74137489976aa6d3267a3369031519326a27c9a64d2fe1e79622d3f214f824c98a589fa5b22d44f7750a8ef6fc2c1b87d55c6336c55727c919708797ebe6bde05d361a1f1399ed7c1ed4102d9837abf75ce348f021f64a5a1ced4c58fd27e0927de7d06b4b798e9aeff3d49d17cdab029e0c594c617c271b068b050d5a6ce99a479ec7fda67b5ef387ff4909c210f23a5ee9b07a56098965eeaeb20d80ef628b9118d3721941a3ea317bbc7a657fc085a520a2eceebf2dd4412ae420a6c07869f0574a7e2d72bf64a3e30cafa13c58dce84b1966b6ef7fffb842ca51606bf9c987720f557bfc476a4a526ba9c20809799421ec1f0cede6d719b20c4561b1af794695c7bb1f9b381faa0b20d97378ad85a62f32f0a6ce51917e7056645d935989d5ec8cf0daa990c878d5a53d34923d6658bc8314b7bbe4406965e90ec0b6cf54bce42a7dab6224a75c14818a5219e15f24b54aa9a9826628e921b83b76aa2a1826f8f9796d92901a6c0d7542078f846c1e6c43e79fbaba8c578cb57b7131da0647fd0b03c0dd4eeff445797c0627b5a301ae99cf20e9f412e64380e9fb07dcbcccf86eab0465bc3c0e50da134c7c7194b5c7553469b4a7c29ba97daa901bc9222c5d84e4c4b13d697ec2be53b2bc7b9d81626a50439b56eb243297cf2272af22e167d8d9d47c0d4a83e3402067a4ab87765618d78ac1874f9fa6d2991ea859b67ad229a4ff275074c6eca6ace9ce8f7897f18a83dda57e5743dde0abe85768ae3b7afbabdb9c228a26b573b1b5bd84b6adebcc1ecd3b821a8aef635fb0beb5283de85c8fc4b05337cace9d619e7356e9c6a806d39b0dddc1f1285bc04f50046572a94ee21440559ca32c9acb409fec844ff0af46994f8a363d400f8a4a2c590ec4ae120614e4a22f96d673a1a78cc9af62ab33d06af8a668607bdd6552c41812d91bbdad590e5612f70661291196ff39a015f890914ebfc9195aa9d74b2d0eef7c962290bde85f97c6604685683b2e673e75a9e660fbdc33e483d018c0ac46b33c495000cba28edeea7d3c59e024bcfe1ca1e23ee35dd1ebf945e0c10fda204c9049d822292eabc8bb4c213808ef3e0ed72dcf18642cfba1afbb1d4d6d52388fdfd27fa7f69d0a124a507d91e8413450e944d1b28b5b8bdacce116d41daf871c28ad41480b14a5cc7cf6893557ba28495a1a07596dab977cf9d703ff234dec9d7f8e63267ed32d77dd2201df48fce5ba84a599e5a065e1d41cf980f85eaa29b270dce189f03a17f30be27d441c7792a1bb47c2c9b1f9250b857fe5446866e176938d28df428f90028cf2063f8f44133cd823c5572fbf374f44bf41e7c34bbf2622998f562331592bd69e9cb156cf991d5bb08dc24b6874a7147bdbb7c73241665449897ac3bfebc0796dffe630864f5861d61880eabfc575226b572761bce189f67b4ce6a49f89e04cc3692d3d816ee603f58e31e6c0f1377228e6b153c2115a5c5c1283c991967a745e0ec009e8ffc9f23a22b3334d783e44d21fa014976425b8c22ea62e98961fce1d017e78c936fd623184dc09925435634f8f97ddb160a32b73cf0680ce205e599083edbda2c6749f0a1230cbfd2a7155bdcdfa26a19b112580517581d2e0088980ab46a5d350c7ae4cebbeb57254a2d26f322df2c1afc09a17c7877a1530ffca22e183b7cf50a82eaa60b3ed1041913ad8b2459f83a985d62715d9a7854bda7bdf7a9287afdfff16d1e028a5bd67966bd618e6ddbfce5dcb6dc692a6ed980b8d982d834480e1a4118829e4637a184c4c56d352aa589928741f83619f40c2bc8b938478be60e6819fff1bde355458a34ae69aa45a4c70db7c36863c2a3658b797b8be4eec72394fd00642738fa5d58afe4466cf6c409c3c03424afe55c22c62ab813bffd4d18580c79b01120400848f65beee11489905d7473a63adfab55b1f71947798871bb037c0ea9c23337c6fc01976edf14ff63296571ea208cdd60f64c1d35fb63b6af28465f732ecc11dbdbce99064c8e62cff8974ff84f6d35b3ec1a96ba499d82b1af9eaa171353311822ac6ce1204d1a46cd03681c0ef870a982eb33ca80b42753e3e3b701cb64f895958c40cc7c93ca15250dc085bd052cdb06388d91a355e706189a59e27888bdbf92d7b62dc95ea360785213a576c64037c953e42965296cd85714c4976b320c680177bcd7b57b47d87192b1f453f1f9e803f31d797f173f369cc9bf9f8d1a49edd7d33737085813de88d89597116336b665ee8fe3aa745aba8fe022bd335be1b475eddf2b8adbcb65b8bfc1481a5b19df0c152ceec2b92a77f19ccc57c5a7efbecdd485845cb6a98761c93e37e65b4c9e6e42e1836e7da4fb024d089c1e55646045446d183744daf90bb5694ad6175672d7bd9fb1eed922d1a51caf9cb8e892790a2013903724b38ce466da9b7f203536febcb4abbdfa79828fbda48c29cdcb17bfdec8126deaced9653be9cf59e993f91e2e97f436dac9d68f09db7c71152a77082d2bb071d06fe310ba17d25a19dbccbc3405cf694554aee362f91fe348cb594a77df09825d640536b9852131e386c90fbe6e65002f7947cadfb0b47faec7724ec055ace75a14251352a528cafcf3c9a5b0560f6b50672d1fa05a33dd4805ba7b2a5cc40d4ffeec41d1d858d627680d7c2e2527b770ea337eb7b17e2b70a1a313bb7fd7336680382fb4053019680c7b384860697324d93d84612e666fe0b9a44e52894e79338767bc3771b7827a782b8bfe582d15845d320585657a6a161f9f6933ab81c578697f4519c2ea7c643e447023688c18a9dfb709f30f9cceb7e63237952b94c0bc5ea2e700a7c519072ec263dd13c375249af620c4ae179c6ac56fc8b735e48399aac16ede012ae9a7c917919fe7744ef4811e82bad12a258b32fe792816251c848b21b14b7f071854f24d447e425fbdaab147e8eeba51862a791c564f8bebf9cb459e548b646ebaab89ceaadc52f801ce602cbf6d351eb188bb86a15cde1f6e0fb1df803346d0fa1d7fce0e5f54c1ee7a2855010568438ae29069843906dba3fe485bc530ac04702458a4973135feee729d1d02ef54924a6256e44e707f68c28602611519f83fc9a5961e93dd3534c3d4ee1748def4a412642eed186a29e208e1e915f2c6cd80d683f62cb495216d3af0f05b1c127087916b220b18f6a8c442c1304180482af6f81a56547419199a1164b761eff09dc51a7e687406d1f54a074f1da5ac890f852ff2dd9d2c676823bda56a4fdd1d7bba137c20d338a42f1f99028166855c55514a5bc231bb2ed4d32095061bde56d8a9d4e36bb12b0c90b04a8b831682d1bd133b1a24974bee43c2c6c2a2d5a72f07d684e42392fbd68dc4c870b270e7d73f8f388d5477bba62c4865c2bd944279522a19c677ca46ee69d61f527f5f0f86279a2711ac9f28f39f060b1c45133a76e42bb33797a764eddd1c590397b16fa8181e8f3e2cfc95a57febb929b42202704dd687ce601249efa24384c2c130e92136cbcc7b71ab1b3e91e052f21567cda345f8f0772709e7346d55d4bb29200f21428af09ee65b53785f1ce81bfeb4a2aeae9ad6b1bfa4a7fe6793ce99cc739861a71f4092a9f3725ffe0bce6481232b1204799b4e9246d0d8e92e9b2725b069a008f71e51c091f7a03047c878b98b5995f92409318efac7e7c2948f7f38ee1c861bf2b003a5cf8f3fd006d4e482a3db31e9597e008aec4f80d2c65b708410b4a95af07d4dfcb432e34bdbb84a8f342bb902651b6a8bcea0d1cc48ccf0e36fe0c2806a7e0b13bc48894e2781d09a684dc9d8aec5a12e02efb3de98d150ba9a9e9fe59ed73d064283b7e5dfebb930571ea5c6caa64bc4cd5874c5edfa6a093455494148f4079d6f719db190bdac17c2365165c1ad5ce4f6e4211935df9b4edb9879a7b61d481bbf3b1c325bc772d82b0f63b48cec468235cbd3e121a3eb7d14ce9aee783f6cd05282dd322b67bcb015518d06ba846f7fc15d9c4107ecb87a74eaf892dafd927b47dcf145241f8c8241c2da289962415dd987a0657209f9b93ad3848bf13e60860313e081d4f846e028deb94c35701877aca0848ad756f28a2e2deab6184c5c9eb754b7a48f6cc6c0612d2f646e6c9d2134586103e4dd39b01491810b4dc1dd9c47fc74a4edded20cc2c5b86b554deabd3fc8d93998b205e61d390bdd13c9e93879f03376a45b742562caa5756983fad00119107bae509d2a172e5e34fe57fbc37f7485bc2ab0b8ff4baea7735a0e6bd1e45edb74d0e33d0c26495eec8dd25afc0ce98428245125af89517ca55bedb4ef80ac19398b5f5f2348d3288243cb194217da4bbf9a4b570d7f851c717546a07e19422421b6ed28ec99368859d335f51a9bffef7d94fa0120471730f18251249b627b49461adf48ac926205641837489db152e7bc4e8e08ae5ce9811e61a3fd042e017b74506dc5ba798a86d98dc81a0be90b9f8f593cd816b54131645267dfa26e8f3de640b691762902362683c02d2f18d489a9cc5d97c50aa98aa5147e4fd7642ebe08346c17c12848e0ab"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r6, 0x0, 0x4) sendfile(r6, r7, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000140)) 11:04:25 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) syz_usbip_server_init(0x2) 11:04:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x20100000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x106, 0x3}}, 0x20) (async, rerun: 64) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x4, 0x10, 0x10, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x118) 11:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x22000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 534.833890][T28792] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 534.840444][T28792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 534.847986][T28792] vhci_hcd vhci_hcd.0: Device attached [ 534.862795][T28792] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 534.869423][T28792] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 534.877051][T28792] vhci_hcd vhci_hcd.0: Device attached [ 534.883021][T28793] vhci_hcd: connection closed [ 534.883064][T28803] vhci_hcd: connection closed [ 534.883341][ T9310] vhci_hcd: stop threads [ 534.896741][ T9310] vhci_hcd: release socket [ 534.901217][ T9310] vhci_hcd: disconnect device [ 534.906352][ T9310] vhci_hcd: stop threads [ 534.910631][ T9310] vhci_hcd: release socket [ 534.915067][ T9310] vhci_hcd: disconnect device [ 534.941608][T28805] loop5: detected capacity change from 0 to 8192 11:04:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x106, 0x3}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x4, 0x10, 0x10, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x118) [ 534.986275][T28808] loop0: detected capacity change from 0 to 128 [ 535.004312][ T4119] udevd[4119]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system [ 535.019897][ T4119] udevd[4119]: symlink '../../loop5' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:5' failed: Read-only file system 11:04:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0x3, r1, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0x3, r1, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0x3, r1, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 535.215729][T28826] FAULT_INJECTION: forcing a failure. [ 535.215729][T28826] name failslab, interval 1, probability 0, space 0, times 0 [ 535.228455][T28826] CPU: 1 PID: 28826 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 535.239028][T28826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 535.249097][T28826] Call Trace: [ 535.252458][T28826] [ 535.255406][T28826] dump_stack_lvl+0xda/0x130 [ 535.260088][T28826] dump_stack+0x15/0x20 [ 535.264266][T28826] should_fail_ex+0x21f/0x230 [ 535.269054][T28826] __should_failslab+0x92/0xa0 [ 535.273973][T28826] should_failslab+0x9/0x20 [ 535.278491][T28826] slab_pre_alloc_hook+0x38/0x180 [ 535.283608][T28826] kmem_cache_alloc+0x58/0x260 [ 535.288413][T28826] ? fat_parse_long+0x5d/0x400 [ 535.293240][T28826] fat_parse_long+0x5d/0x400 [ 535.297947][T28826] fat_search_long+0x1ff/0x970 [ 535.302757][T28826] ? avc_has_perm_noaudit+0x1c8/0x210 [ 535.308226][T28826] vfat_lookup+0xd6/0x2d0 [ 535.312623][T28826] ? setup+0xa0/0xa0 [ 535.316534][T28826] path_openat+0xc43/0x1d00 [ 535.321098][T28826] ? kstrtoull+0x110/0x140 [ 535.325556][T28826] do_filp_open+0xf6/0x200 [ 535.330041][T28826] do_sys_openat2+0xb5/0x2a0 [ 535.334648][T28826] ? mutex_lock+0xd/0x30 [ 535.338909][T28826] ? fput+0x112/0x140 [ 535.342986][T28826] __x64_sys_openat+0xf3/0x120 [ 535.347793][T28826] do_syscall_64+0x41/0xc0 [ 535.352440][T28826] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 535.358380][T28826] RIP: 0033:0x7fcf93783169 [ 535.362871][T28826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 535.382676][T28826] RSP: 002b:00007fcf8a6c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.391098][T28826] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93783169 [ 535.399092][T28826] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 535.407072][T28826] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 535.415141][T28826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.423134][T28826] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 535.431167][T28826] 11:04:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 7) 11:04:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x1c, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:27 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) syz_usbip_server_init(0x2) 11:04:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r0, 0x2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05ceffb4ed555ae108f49c7880fdf4fa2a8f06ac2c5352509e3c51d672eb0ec0dd3b1c96e98016382e166e2ca4c353d3d4d316daf522556a16cab12d75a852bc680da7e010400009c101c78130d6ef7480feb2e60a1e30a59b7745235b33bc18c4ed0351cd2c51b7b02f8a78993b5b416ba1c5721bcd87be4a338392f831637ee8c35bb2183794afff0a9eed63b1226b18c4b455ab20000000000000000000092652f79b7f3fb65162ee98900"/193, @ANYRES16, @ANYRES8=r2, @ANYBLOB="373092aa29e2127671f87f0a00ebae5693495a917b2906e31fd9486a5a5bd5ead164be9992f5776cc8fe4867703dd33350f75c29c48d53222ed800301220dededafc95708f9253563b1284cd07b32fd5c265416455e3ad2250eba709e696700aa4cd2b473efb1f7a0a19bde4399140135e71d5352fb04595fcac2f43be5bfa35f30daf1b94aadfeb7fc3e5924d23cd0fbb1d9b9abdc9", @ANYRES8=0x0], 0x1, 0x11d4, &(0x7f00000012c0)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000029c0)={0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in6=@empty, @in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000014c0)=ANY=[@ANYRES64=r3, @ANYBLOB="0700000000000000060000000000000067a200000000000003000000000000000000008000000000030000240f0000000200000004000000f7ffffff0400000006000000000000006a0a000000000000060000000000000002000000000000001800"/128]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000380)={r2, r3, "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", "7bb9a0a370f8476fc52c1f18cf276372ddd23b756260088240cc25a4a85277db8f12de7c6ac935d46b7ae68ed7fb513048c92b81892ba3896102d621696bab19138c6569d0bb03a7a4aa3e6c1d6a1b6ebb596351f0896ff99d5232515cf855c34aab2940d4a4f48884f5a8bd70d67849c79a08b83658985a3d3897b0d5e7f68dc0fac0ab8491ba0b0d42dd283795c47419b26a382798ea4b673871de5426baf4373a19ee6f64da9de9cf45db22fc40d127e3bb328b69cdec0c3c86bcbb149f9084a53a1da66950a442a351a6d00b879a624eb4fac7a7b0961d8b933244d85ff7127148f6ce146ce726e81e02a291fd6a66b65bffce20abd2e5dd70d3c49e877cbab1f8c1d26e6ea9b59dc20e490446093826537245c70e6813f7259427d35418f322a8501f9b6fb71e0de8fd9ba9349251ece1a649ccd7f930b10f2ba3e0a913468149f8a6edc3b7d12d41b5901e27c2f9c06206d70a9d011f08805ae925c8b7bee6c07346f410dbc9cb1a6e41a1c6b355f0eba847bc2c8e93efe6708cd48b97766faf7234388c3f2bb8190e145bbba82a984ea8a1fa2a2a8623b513eeb92223a363c60e7ab562ea16801fe15b6595196b86431e7c28e3baa81836f8205bb2517621305d57de42bbf9eb4c282c172da047f9dc06db52dda943afd6616344f8dacce96d825458af8256c702d64e651bd014e07c8e02a728dffd2e4a0a46cddd91ebaf4bc2295d32f3433e57b1ee3eff0b5c4dc78daf564288546f35b415fe15d2415df81dc50d889b2669dba737a22fac79faffca008a7538a5537889fa2902a61fb22b92d627bad59dc473ec50dea74137489976aa6d3267a3369031519326a27c9a64d2fe1e79622d3f214f824c98a589fa5b22d44f7750a8ef6fc2c1b87d55c6336c55727c919708797ebe6bde05d361a1f1399ed7c1ed4102d9837abf75ce348f021f64a5a1ced4c58fd27e0927de7d06b4b798e9aeff3d49d17cdab029e0c594c617c271b068b050d5a6ce99a479ec7fda67b5ef387ff4909c210f23a5ee9b07a56098965eeaeb20d80ef628b9118d3721941a3ea317bbc7a657fc085a520a2eceebf2dd4412ae420a6c07869f0574a7e2d72bf64a3e30cafa13c58dce84b1966b6ef7fffb842ca51606bf9c987720f557bfc476a4a526ba9c20809799421ec1f0cede6d719b20c4561b1af794695c7bb1f9b381faa0b20d97378ad85a62f32f0a6ce51917e7056645d935989d5ec8cf0daa990c878d5a53d34923d6658bc8314b7bbe4406965e90ec0b6cf54bce42a7dab6224a75c14818a5219e15f24b54aa9a9826628e921b83b76aa2a1826f8f9796d92901a6c0d7542078f846c1e6c43e79fbaba8c578cb57b7131da0647fd0b03c0dd4eeff445797c0627b5a301ae99cf20e9f412e64380e9fb07dcbcccf86eab0465bc3c0e50da134c7c7194b5c7553469b4a7c29ba97daa901bc9222c5d84e4c4b13d697ec2be53b2bc7b9d81626a50439b56eb243297cf2272af22e167d8d9d47c0d4a83e3402067a4ab87765618d78ac1874f9fa6d2991ea859b67ad229a4ff275074c6eca6ace9ce8f7897f18a83dda57e5743dde0abe85768ae3b7afbabdb9c228a26b573b1b5bd84b6adebcc1ecd3b821a8aef635fb0beb5283de85c8fc4b05337cace9d619e7356e9c6a806d39b0dddc1f1285bc04f50046572a94ee21440559ca32c9acb409fec844ff0af46994f8a363d400f8a4a2c590ec4ae120614e4a22f96d673a1a78cc9af62ab33d06af8a668607bdd6552c41812d91bbdad590e5612f70661291196ff39a015f890914ebfc9195aa9d74b2d0eef7c962290bde85f97c6604685683b2e673e75a9e660fbdc33e483d018c0ac46b33c495000cba28edeea7d3c59e024bcfe1ca1e23ee35dd1ebf945e0c10fda204c9049d822292eabc8bb4c213808ef3e0ed72dcf18642cfba1afbb1d4d6d52388fdfd27fa7f69d0a124a507d91e8413450e944d1b28b5b8bdacce116d41daf871c28ad41480b14a5cc7cf6893557ba28495a1a07596dab977cf9d703ff234dec9d7f8e63267ed32d77dd2201df48fce5ba84a599e5a065e1d41cf980f85eaa29b270dce189f03a17f30be27d441c7792a1bb47c2c9b1f9250b857fe5446866e176938d28df428f90028cf2063f8f44133cd823c5572fbf374f44bf41e7c34bbf2622998f562331592bd69e9cb156cf991d5bb08dc24b6874a7147bdbb7c73241665449897ac3bfebc0796dffe630864f5861d61880eabfc575226b572761bce189f67b4ce6a49f89e04cc3692d3d816ee603f58e31e6c0f1377228e6b153c2115a5c5c1283c991967a745e0ec009e8ffc9f23a22b3334d783e44d21fa014976425b8c22ea62e98961fce1d017e78c936fd623184dc09925435634f8f97ddb160a32b73cf0680ce205e599083edbda2c6749f0a1230cbfd2a7155bdcdfa26a19b112580517581d2e0088980ab46a5d350c7ae4cebbeb57254a2d26f322df2c1afc09a17c7877a1530ffca22e183b7cf50a82eaa60b3ed1041913ad8b2459f83a985d62715d9a7854bda7bdf7a9287afdfff16d1e028a5bd67966bd618e6ddbfce5dcb6dc692a6ed980b8d982d834480e1a4118829e4637a184c4c56d352aa589928741f83619f40c2bc8b938478be60e6819fff1bde355458a34ae69aa45a4c70db7c36863c2a3658b797b8be4eec72394fd00642738fa5d58afe4466cf6c409c3c03424afe55c22c62ab813bffd4d18580c79b01120400848f65beee11489905d7473a63adfab55b1f71947798871bb037c0ea9c23337c6fc01976edf14ff63296571ea208cdd60f64c1d35fb63b6af28465f732ecc11dbdbce99064c8e62cff8974ff84f6d35b3ec1a96ba499d82b1af9eaa171353311822ac6ce1204d1a46cd03681c0ef870a982eb33ca80b42753e3e3b701cb64f895958c40cc7c93ca15250dc085bd052cdb06388d91a355e706189a59e27888bdbf92d7b62dc95ea360785213a576c64037c953e42965296cd85714c4976b320c680177bcd7b57b47d87192b1f453f1f9e803f31d797f173f369cc9bf9f8d1a49edd7d33737085813de88d89597116336b665ee8fe3aa745aba8fe022bd335be1b475eddf2b8adbcb65b8bfc1481a5b19df0c152ceec2b92a77f19ccc57c5a7efbecdd485845cb6a98761c93e37e65b4c9e6e42e1836e7da4fb024d089c1e55646045446d183744daf90bb5694ad6175672d7bd9fb1eed922d1a51caf9cb8e892790a2013903724b38ce466da9b7f203536febcb4abbdfa79828fbda48c29cdcb17bfdec8126deaced9653be9cf59e993f91e2e97f436dac9d68f09db7c71152a77082d2bb071d06fe310ba17d25a19dbccbc3405cf694554aee362f91fe348cb594a77df09825d640536b9852131e386c90fbe6e65002f7947cadfb0b47faec7724ec055ace75a14251352a528cafcf3c9a5b0560f6b50672d1fa05a33dd4805ba7b2a5cc40d4ffeec41d1d858d627680d7c2e2527b770ea337eb7b17e2b70a1a313bb7fd7336680382fb4053019680c7b384860697324d93d84612e666fe0b9a44e52894e79338767bc3771b7827a782b8bfe582d15845d320585657a6a161f9f6933ab81c578697f4519c2ea7c643e447023688c18a9dfb709f30f9cceb7e63237952b94c0bc5ea2e700a7c519072ec263dd13c375249af620c4ae179c6ac56fc8b735e48399aac16ede012ae9a7c917919fe7744ef4811e82bad12a258b32fe792816251c848b21b14b7f071854f24d447e425fbdaab147e8eeba51862a791c564f8bebf9cb459e548b646ebaab89ceaadc52f801ce602cbf6d351eb188bb86a15cde1f6e0fb1df803346d0fa1d7fce0e5f54c1ee7a2855010568438ae29069843906dba3fe485bc530ac04702458a4973135feee729d1d02ef54924a6256e44e707f68c28602611519f83fc9a5961e93dd3534c3d4ee1748def4a412642eed186a29e208e1e915f2c6cd80d683f62cb495216d3af0f05b1c127087916b220b18f6a8c442c1304180482af6f81a56547419199a1164b761eff09dc51a7e687406d1f54a074f1da5ac890f852ff2dd9d2c676823bda56a4fdd1d7bba137c20d338a42f1f99028166855c55514a5bc231bb2ed4d32095061bde56d8a9d4e36bb12b0c90b04a8b831682d1bd133b1a24974bee43c2c6c2a2d5a72f07d684e42392fbd68dc4c870b270e7d73f8f388d5477bba62c4865c2bd944279522a19c677ca46ee69d61f527f5f0f86279a2711ac9f28f39f060b1c45133a76e42bb33797a764eddd1c590397b16fa8181e8f3e2cfc95a57febb929b42202704dd687ce601249efa24384c2c130e92136cbcc7b71ab1b3e91e052f21567cda345f8f0772709e7346d55d4bb29200f21428af09ee65b53785f1ce81bfeb4a2aeae9ad6b1bfa4a7fe6793ce99cc739861a71f4092a9f3725ffe0bce6481232b1204799b4e9246d0d8e92e9b2725b069a008f71e51c091f7a03047c878b98b5995f92409318efac7e7c2948f7f38ee1c861bf2b003a5cf8f3fd006d4e482a3db31e9597e008aec4f80d2c65b708410b4a95af07d4dfcb432e34bdbb84a8f342bb902651b6a8bcea0d1cc48ccf0e36fe0c2806a7e0b13bc48894e2781d09a684dc9d8aec5a12e02efb3de98d150ba9a9e9fe59ed73d064283b7e5dfebb930571ea5c6caa64bc4cd5874c5edfa6a093455494148f4079d6f719db190bdac17c2365165c1ad5ce4f6e4211935df9b4edb9879a7b61d481bbf3b1c325bc772d82b0f63b48cec468235cbd3e121a3eb7d14ce9aee783f6cd05282dd322b67bcb015518d06ba846f7fc15d9c4107ecb87a74eaf892dafd927b47dcf145241f8c8241c2da289962415dd987a0657209f9b93ad3848bf13e60860313e081d4f846e028deb94c35701877aca0848ad756f28a2e2deab6184c5c9eb754b7a48f6cc6c0612d2f646e6c9d2134586103e4dd39b01491810b4dc1dd9c47fc74a4edded20cc2c5b86b554deabd3fc8d93998b205e61d390bdd13c9e93879f03376a45b742562caa5756983fad00119107bae509d2a172e5e34fe57fbc37f7485bc2ab0b8ff4baea7735a0e6bd1e45edb74d0e33d0c26495eec8dd25afc0ce98428245125af89517ca55bedb4ef80ac19398b5f5f2348d3288243cb194217da4bbf9a4b570d7f851c717546a07e19422421b6ed28ec99368859d335f51a9bffef7d94fa0120471730f18251249b627b49461adf48ac926205641837489db152e7bc4e8e08ae5ce9811e61a3fd042e017b74506dc5ba798a86d98dc81a0be90b9f8f593cd816b54131645267dfa26e8f3de640b691762902362683c02d2f18d489a9cc5d97c50aa98aa5147e4fd7642ebe08346c17c12848e0ab"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r6, 0x0, 0x4) sendfile(r6, r7, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r0, 0x2}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) (async) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05ceffb4ed555ae108f49c7880fdf4fa2a8f06ac2c5352509e3c51d672eb0ec0dd3b1c96e98016382e166e2ca4c353d3d4d316daf522556a16cab12d75a852bc680da7e010400009c101c78130d6ef7480feb2e60a1e30a59b7745235b33bc18c4ed0351cd2c51b7b02f8a78993b5b416ba1c5721bcd87be4a338392f831637ee8c35bb2183794afff0a9eed63b1226b18c4b455ab20000000000000000000092652f79b7f3fb65162ee98900"/193, @ANYRES16, @ANYRES8=r2, @ANYBLOB="373092aa29e2127671f87f0a00ebae5693495a917b2906e31fd9486a5a5bd5ead164be9992f5776cc8fe4867703dd33350f75c29c48d53222ed800301220dededafc95708f9253563b1284cd07b32fd5c265416455e3ad2250eba709e696700aa4cd2b473efb1f7a0a19bde4399140135e71d5352fb04595fcac2f43be5bfa35f30daf1b94aadfeb7fc3e5924d23cd0fbb1d9b9abdc9", @ANYRES8=0x0], 0x1, 0x11d4, &(0x7f00000012c0)="$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") (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000029c0)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in6=@empty, @in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000014c0)=ANY=[@ANYRES64=r3, @ANYBLOB="0700000000000000060000000000000067a200000000000003000000000000000000008000000000030000240f0000000200000004000000f7ffffff0400000006000000000000006a0a000000000000060000000000000002000000000000001800"/128]) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000380)={r2, r3, "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", "7bb9a0a370f8476fc52c1f18cf276372ddd23b756260088240cc25a4a85277db8f12de7c6ac935d46b7ae68ed7fb513048c92b81892ba3896102d621696bab19138c6569d0bb03a7a4aa3e6c1d6a1b6ebb596351f0896ff99d5232515cf855c34aab2940d4a4f48884f5a8bd70d67849c79a08b83658985a3d3897b0d5e7f68dc0fac0ab8491ba0b0d42dd283795c47419b26a382798ea4b673871de5426baf4373a19ee6f64da9de9cf45db22fc40d127e3bb328b69cdec0c3c86bcbb149f9084a53a1da66950a442a351a6d00b879a624eb4fac7a7b0961d8b933244d85ff7127148f6ce146ce726e81e02a291fd6a66b65bffce20abd2e5dd70d3c49e877cbab1f8c1d26e6ea9b59dc20e490446093826537245c70e6813f7259427d35418f322a8501f9b6fb71e0de8fd9ba9349251ece1a649ccd7f930b10f2ba3e0a913468149f8a6edc3b7d12d41b5901e27c2f9c06206d70a9d011f08805ae925c8b7bee6c07346f410dbc9cb1a6e41a1c6b355f0eba847bc2c8e93efe6708cd48b97766faf7234388c3f2bb8190e145bbba82a984ea8a1fa2a2a8623b513eeb92223a363c60e7ab562ea16801fe15b6595196b86431e7c28e3baa81836f8205bb2517621305d57de42bbf9eb4c282c172da047f9dc06db52dda943afd6616344f8dacce96d825458af8256c702d64e651bd014e07c8e02a728dffd2e4a0a46cddd91ebaf4bc2295d32f3433e57b1ee3eff0b5c4dc78daf564288546f35b415fe15d2415df81dc50d889b2669dba737a22fac79faffca008a7538a5537889fa2902a61fb22b92d627bad59dc473ec50dea74137489976aa6d3267a3369031519326a27c9a64d2fe1e79622d3f214f824c98a589fa5b22d44f7750a8ef6fc2c1b87d55c6336c55727c919708797ebe6bde05d361a1f1399ed7c1ed4102d9837abf75ce348f021f64a5a1ced4c58fd27e0927de7d06b4b798e9aeff3d49d17cdab029e0c594c617c271b068b050d5a6ce99a479ec7fda67b5ef387ff4909c210f23a5ee9b07a56098965eeaeb20d80ef628b9118d3721941a3ea317bbc7a657fc085a520a2eceebf2dd4412ae420a6c07869f0574a7e2d72bf64a3e30cafa13c58dce84b1966b6ef7fffb842ca51606bf9c987720f557bfc476a4a526ba9c20809799421ec1f0cede6d719b20c4561b1af794695c7bb1f9b381faa0b20d97378ad85a62f32f0a6ce51917e7056645d935989d5ec8cf0daa990c878d5a53d34923d6658bc8314b7bbe4406965e90ec0b6cf54bce42a7dab6224a75c14818a5219e15f24b54aa9a9826628e921b83b76aa2a1826f8f9796d92901a6c0d7542078f846c1e6c43e79fbaba8c578cb57b7131da0647fd0b03c0dd4eeff445797c0627b5a301ae99cf20e9f412e64380e9fb07dcbcccf86eab0465bc3c0e50da134c7c7194b5c7553469b4a7c29ba97daa901bc9222c5d84e4c4b13d697ec2be53b2bc7b9d81626a50439b56eb243297cf2272af22e167d8d9d47c0d4a83e3402067a4ab87765618d78ac1874f9fa6d2991ea859b67ad229a4ff275074c6eca6ace9ce8f7897f18a83dda57e5743dde0abe85768ae3b7afbabdb9c228a26b573b1b5bd84b6adebcc1ecd3b821a8aef635fb0beb5283de85c8fc4b05337cace9d619e7356e9c6a806d39b0dddc1f1285bc04f50046572a94ee21440559ca32c9acb409fec844ff0af46994f8a363d400f8a4a2c590ec4ae120614e4a22f96d673a1a78cc9af62ab33d06af8a668607bdd6552c41812d91bbdad590e5612f70661291196ff39a015f890914ebfc9195aa9d74b2d0eef7c962290bde85f97c6604685683b2e673e75a9e660fbdc33e483d018c0ac46b33c495000cba28edeea7d3c59e024bcfe1ca1e23ee35dd1ebf945e0c10fda204c9049d822292eabc8bb4c213808ef3e0ed72dcf18642cfba1afbb1d4d6d52388fdfd27fa7f69d0a124a507d91e8413450e944d1b28b5b8bdacce116d41daf871c28ad41480b14a5cc7cf6893557ba28495a1a07596dab977cf9d703ff234dec9d7f8e63267ed32d77dd2201df48fce5ba84a599e5a065e1d41cf980f85eaa29b270dce189f03a17f30be27d441c7792a1bb47c2c9b1f9250b857fe5446866e176938d28df428f90028cf2063f8f44133cd823c5572fbf374f44bf41e7c34bbf2622998f562331592bd69e9cb156cf991d5bb08dc24b6874a7147bdbb7c73241665449897ac3bfebc0796dffe630864f5861d61880eabfc575226b572761bce189f67b4ce6a49f89e04cc3692d3d816ee603f58e31e6c0f1377228e6b153c2115a5c5c1283c991967a745e0ec009e8ffc9f23a22b3334d783e44d21fa014976425b8c22ea62e98961fce1d017e78c936fd623184dc09925435634f8f97ddb160a32b73cf0680ce205e599083edbda2c6749f0a1230cbfd2a7155bdcdfa26a19b112580517581d2e0088980ab46a5d350c7ae4cebbeb57254a2d26f322df2c1afc09a17c7877a1530ffca22e183b7cf50a82eaa60b3ed1041913ad8b2459f83a985d62715d9a7854bda7bdf7a9287afdfff16d1e028a5bd67966bd618e6ddbfce5dcb6dc692a6ed980b8d982d834480e1a4118829e4637a184c4c56d352aa589928741f83619f40c2bc8b938478be60e6819fff1bde355458a34ae69aa45a4c70db7c36863c2a3658b797b8be4eec72394fd00642738fa5d58afe4466cf6c409c3c03424afe55c22c62ab813bffd4d18580c79b01120400848f65beee11489905d7473a63adfab55b1f71947798871bb037c0ea9c23337c6fc01976edf14ff63296571ea208cdd60f64c1d35fb63b6af28465f732ecc11dbdbce99064c8e62cff8974ff84f6d35b3ec1a96ba499d82b1af9eaa171353311822ac6ce1204d1a46cd03681c0ef870a982eb33ca80b42753e3e3b701cb64f895958c40cc7c93ca15250dc085bd052cdb06388d91a355e706189a59e27888bdbf92d7b62dc95ea360785213a576c64037c953e42965296cd85714c4976b320c680177bcd7b57b47d87192b1f453f1f9e803f31d797f173f369cc9bf9f8d1a49edd7d33737085813de88d89597116336b665ee8fe3aa745aba8fe022bd335be1b475eddf2b8adbcb65b8bfc1481a5b19df0c152ceec2b92a77f19ccc57c5a7efbecdd485845cb6a98761c93e37e65b4c9e6e42e1836e7da4fb024d089c1e55646045446d183744daf90bb5694ad6175672d7bd9fb1eed922d1a51caf9cb8e892790a2013903724b38ce466da9b7f203536febcb4abbdfa79828fbda48c29cdcb17bfdec8126deaced9653be9cf59e993f91e2e97f436dac9d68f09db7c71152a77082d2bb071d06fe310ba17d25a19dbccbc3405cf694554aee362f91fe348cb594a77df09825d640536b9852131e386c90fbe6e65002f7947cadfb0b47faec7724ec055ace75a14251352a528cafcf3c9a5b0560f6b50672d1fa05a33dd4805ba7b2a5cc40d4ffeec41d1d858d627680d7c2e2527b770ea337eb7b17e2b70a1a313bb7fd7336680382fb4053019680c7b384860697324d93d84612e666fe0b9a44e52894e79338767bc3771b7827a782b8bfe582d15845d320585657a6a161f9f6933ab81c578697f4519c2ea7c643e447023688c18a9dfb709f30f9cceb7e63237952b94c0bc5ea2e700a7c519072ec263dd13c375249af620c4ae179c6ac56fc8b735e48399aac16ede012ae9a7c917919fe7744ef4811e82bad12a258b32fe792816251c848b21b14b7f071854f24d447e425fbdaab147e8eeba51862a791c564f8bebf9cb459e548b646ebaab89ceaadc52f801ce602cbf6d351eb188bb86a15cde1f6e0fb1df803346d0fa1d7fce0e5f54c1ee7a2855010568438ae29069843906dba3fe485bc530ac04702458a4973135feee729d1d02ef54924a6256e44e707f68c28602611519f83fc9a5961e93dd3534c3d4ee1748def4a412642eed186a29e208e1e915f2c6cd80d683f62cb495216d3af0f05b1c127087916b220b18f6a8c442c1304180482af6f81a56547419199a1164b761eff09dc51a7e687406d1f54a074f1da5ac890f852ff2dd9d2c676823bda56a4fdd1d7bba137c20d338a42f1f99028166855c55514a5bc231bb2ed4d32095061bde56d8a9d4e36bb12b0c90b04a8b831682d1bd133b1a24974bee43c2c6c2a2d5a72f07d684e42392fbd68dc4c870b270e7d73f8f388d5477bba62c4865c2bd944279522a19c677ca46ee69d61f527f5f0f86279a2711ac9f28f39f060b1c45133a76e42bb33797a764eddd1c590397b16fa8181e8f3e2cfc95a57febb929b42202704dd687ce601249efa24384c2c130e92136cbcc7b71ab1b3e91e052f21567cda345f8f0772709e7346d55d4bb29200f21428af09ee65b53785f1ce81bfeb4a2aeae9ad6b1bfa4a7fe6793ce99cc739861a71f4092a9f3725ffe0bce6481232b1204799b4e9246d0d8e92e9b2725b069a008f71e51c091f7a03047c878b98b5995f92409318efac7e7c2948f7f38ee1c861bf2b003a5cf8f3fd006d4e482a3db31e9597e008aec4f80d2c65b708410b4a95af07d4dfcb432e34bdbb84a8f342bb902651b6a8bcea0d1cc48ccf0e36fe0c2806a7e0b13bc48894e2781d09a684dc9d8aec5a12e02efb3de98d150ba9a9e9fe59ed73d064283b7e5dfebb930571ea5c6caa64bc4cd5874c5edfa6a093455494148f4079d6f719db190bdac17c2365165c1ad5ce4f6e4211935df9b4edb9879a7b61d481bbf3b1c325bc772d82b0f63b48cec468235cbd3e121a3eb7d14ce9aee783f6cd05282dd322b67bcb015518d06ba846f7fc15d9c4107ecb87a74eaf892dafd927b47dcf145241f8c8241c2da289962415dd987a0657209f9b93ad3848bf13e60860313e081d4f846e028deb94c35701877aca0848ad756f28a2e2deab6184c5c9eb754b7a48f6cc6c0612d2f646e6c9d2134586103e4dd39b01491810b4dc1dd9c47fc74a4edded20cc2c5b86b554deabd3fc8d93998b205e61d390bdd13c9e93879f03376a45b742562caa5756983fad00119107bae509d2a172e5e34fe57fbc37f7485bc2ab0b8ff4baea7735a0e6bd1e45edb74d0e33d0c26495eec8dd25afc0ce98428245125af89517ca55bedb4ef80ac19398b5f5f2348d3288243cb194217da4bbf9a4b570d7f851c717546a07e19422421b6ed28ec99368859d335f51a9bffef7d94fa0120471730f18251249b627b49461adf48ac926205641837489db152e7bc4e8e08ae5ce9811e61a3fd042e017b74506dc5ba798a86d98dc81a0be90b9f8f593cd816b54131645267dfa26e8f3de640b691762902362683c02d2f18d489a9cc5d97c50aa98aa5147e4fd7642ebe08346c17c12848e0ab"}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r7, r6, 0x0, 0x4) (async) sendfile(r6, r7, 0x0, 0x3) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000140)) (async) 11:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xa000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x3f000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x1c, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x1c, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 535.986504][T28831] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 535.993062][T28831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.000695][T28831] vhci_hcd vhci_hcd.0: Device attached [ 536.017871][T28842] loop0: detected capacity change from 0 to 128 [ 536.047825][T28831] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 536.054379][T28831] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 536.062077][T28831] vhci_hcd vhci_hcd.0: Device attached [ 536.069123][T28847] vhci_hcd: connection closed [ 536.069648][ T3085] vhci_hcd: stop threads [ 536.078798][ T3085] vhci_hcd: release socket [ 536.083223][ T3085] vhci_hcd: disconnect device [ 536.090319][T28836] vhci_hcd: connection closed [ 536.103860][ T3085] vhci_hcd: stop threads [ 536.112899][ T3085] vhci_hcd: release socket [ 536.117349][ T3085] vhci_hcd: disconnect device [ 536.132585][T28849] loop5: detected capacity change from 0 to 8192 11:04:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 536.151255][ T3381] udevd[3381]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system [ 536.186118][ T3381] udevd[3381]: symlink '../../loop5' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:5' failed: Read-only file system [ 536.218085][T28862] FAULT_INJECTION: forcing a failure. [ 536.218085][T28862] name failslab, interval 1, probability 0, space 0, times 0 [ 536.230885][T28862] CPU: 1 PID: 28862 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 536.241368][T28862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 536.251458][T28862] Call Trace: [ 536.254755][T28862] [ 536.257699][T28862] dump_stack_lvl+0xda/0x130 [ 536.262309][T28862] dump_stack+0x15/0x20 [ 536.266573][T28862] should_fail_ex+0x21f/0x230 [ 536.271309][T28862] __should_failslab+0x92/0xa0 [ 536.276160][T28862] should_failslab+0x9/0x20 [ 536.280714][T28862] slab_pre_alloc_hook+0x38/0x180 [ 536.285811][T28862] __kmem_cache_alloc_node+0x46/0x250 [ 536.291345][T28862] ? vfat_add_entry+0xd6/0x1b60 [ 536.296220][T28862] kmalloc_trace+0x2a/0xa0 [ 536.300746][T28862] vfat_add_entry+0xd6/0x1b60 [ 536.305470][T28862] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 536.311312][T28862] ? __wake_up+0x8b/0xc0 [ 536.315587][T28862] ? _raw_spin_unlock+0x26/0x40 [ 536.320537][T28862] ? ktime_get_coarse_real_ts64+0xf3/0x100 [ 536.326378][T28862] ? current_time+0x103/0x1d0 [ 536.331088][T28862] vfat_create+0xa9/0x190 [ 536.337688][T28862] ? vfat_lookup+0x2d0/0x2d0 [ 536.342328][T28862] path_openat+0xd96/0x1d00 [ 536.347027][T28862] do_filp_open+0xf6/0x200 [ 536.351477][T28862] do_sys_openat2+0xb5/0x2a0 [ 536.356098][T28862] ? mutex_lock+0xd/0x30 [ 536.360362][T28862] ? fput+0x112/0x140 [ 536.364375][T28862] __x64_sys_openat+0xf3/0x120 [ 536.369165][T28862] do_syscall_64+0x41/0xc0 [ 536.373624][T28862] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 536.379573][T28862] RIP: 0033:0x7fcf93783169 [ 536.384154][T28862] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 536.404010][T28862] RSP: 002b:00007fcf8a6c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 11:04:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r0, 0x2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05ceffb4ed555ae108f49c7880fdf4fa2a8f06ac2c5352509e3c51d672eb0ec0dd3b1c96e98016382e166e2ca4c353d3d4d316daf522556a16cab12d75a852bc680da7e010400009c101c78130d6ef7480feb2e60a1e30a59b7745235b33bc18c4ed0351cd2c51b7b02f8a78993b5b416ba1c5721bcd87be4a338392f831637ee8c35bb2183794afff0a9eed63b1226b18c4b455ab20000000000000000000092652f79b7f3fb65162ee98900"/193, @ANYRES16, @ANYRES8=r2, @ANYBLOB="373092aa29e2127671f87f0a00ebae5693495a917b2906e31fd9486a5a5bd5ead164be9992f5776cc8fe4867703dd33350f75c29c48d53222ed800301220dededafc95708f9253563b1284cd07b32fd5c265416455e3ad2250eba709e696700aa4cd2b473efb1f7a0a19bde4399140135e71d5352fb04595fcac2f43be5bfa35f30daf1b94aadfeb7fc3e5924d23cd0fbb1d9b9abdc9", @ANYRES8=0x0], 0x1, 0x11d4, &(0x7f00000012c0)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000029c0)={0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in6=@empty, @in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000014c0)=ANY=[@ANYRES64=r3, @ANYBLOB="0700000000000000060000000000000067a200000000000003000000000000000000008000000000030000240f0000000200000004000000f7ffffff0400000006000000000000006a0a000000000000060000000000000002000000000000001800"/128]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000380)={r2, r3, "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", "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r6, 0x0, 0x4) sendfile(r6, r7, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r0, 0x2}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) (async) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05ceffb4ed555ae108f49c7880fdf4fa2a8f06ac2c5352509e3c51d672eb0ec0dd3b1c96e98016382e166e2ca4c353d3d4d316daf522556a16cab12d75a852bc680da7e010400009c101c78130d6ef7480feb2e60a1e30a59b7745235b33bc18c4ed0351cd2c51b7b02f8a78993b5b416ba1c5721bcd87be4a338392f831637ee8c35bb2183794afff0a9eed63b1226b18c4b455ab20000000000000000000092652f79b7f3fb65162ee98900"/193, @ANYRES16, @ANYRES8=r2, @ANYBLOB="373092aa29e2127671f87f0a00ebae5693495a917b2906e31fd9486a5a5bd5ead164be9992f5776cc8fe4867703dd33350f75c29c48d53222ed800301220dededafc95708f9253563b1284cd07b32fd5c265416455e3ad2250eba709e696700aa4cd2b473efb1f7a0a19bde4399140135e71d5352fb04595fcac2f43be5bfa35f30daf1b94aadfeb7fc3e5924d23cd0fbb1d9b9abdc9", @ANYRES8=0x0], 0x1, 0x11d4, &(0x7f00000012c0)="$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") (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000029c0)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in6=@empty, @in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000014c0)=ANY=[@ANYRES64=r3, @ANYBLOB="0700000000000000060000000000000067a200000000000003000000000000000000008000000000030000240f0000000200000004000000f7ffffff0400000006000000000000006a0a000000000000060000000000000002000000000000001800"/128]) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000380)={r2, r3, "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", "7bb9a0a370f8476fc52c1f18cf276372ddd23b756260088240cc25a4a85277db8f12de7c6ac935d46b7ae68ed7fb513048c92b81892ba3896102d621696bab19138c6569d0bb03a7a4aa3e6c1d6a1b6ebb596351f0896ff99d5232515cf855c34aab2940d4a4f48884f5a8bd70d67849c79a08b83658985a3d3897b0d5e7f68dc0fac0ab8491ba0b0d42dd283795c47419b26a382798ea4b673871de5426baf4373a19ee6f64da9de9cf45db22fc40d127e3bb328b69cdec0c3c86bcbb149f9084a53a1da66950a442a351a6d00b879a624eb4fac7a7b0961d8b933244d85ff7127148f6ce146ce726e81e02a291fd6a66b65bffce20abd2e5dd70d3c49e877cbab1f8c1d26e6ea9b59dc20e490446093826537245c70e6813f7259427d35418f322a8501f9b6fb71e0de8fd9ba9349251ece1a649ccd7f930b10f2ba3e0a913468149f8a6edc3b7d12d41b5901e27c2f9c06206d70a9d011f08805ae925c8b7bee6c07346f410dbc9cb1a6e41a1c6b355f0eba847bc2c8e93efe6708cd48b97766faf7234388c3f2bb8190e145bbba82a984ea8a1fa2a2a8623b513eeb92223a363c60e7ab562ea16801fe15b6595196b86431e7c28e3baa81836f8205bb2517621305d57de42bbf9eb4c282c172da047f9dc06db52dda943afd6616344f8dacce96d825458af8256c702d64e651bd014e07c8e02a728dffd2e4a0a46cddd91ebaf4bc2295d32f3433e57b1ee3eff0b5c4dc78daf564288546f35b415fe15d2415df81dc50d889b2669dba737a22fac79faffca008a7538a5537889fa2902a61fb22b92d627bad59dc473ec50dea74137489976aa6d3267a3369031519326a27c9a64d2fe1e79622d3f214f824c98a589fa5b22d44f7750a8ef6fc2c1b87d55c6336c55727c919708797ebe6bde05d361a1f1399ed7c1ed4102d9837abf75ce348f021f64a5a1ced4c58fd27e0927de7d06b4b798e9aeff3d49d17cdab029e0c594c617c271b068b050d5a6ce99a479ec7fda67b5ef387ff4909c210f23a5ee9b07a56098965eeaeb20d80ef628b9118d3721941a3ea317bbc7a657fc085a520a2eceebf2dd4412ae420a6c07869f0574a7e2d72bf64a3e30cafa13c58dce84b1966b6ef7fffb842ca51606bf9c987720f557bfc476a4a526ba9c20809799421ec1f0cede6d719b20c4561b1af794695c7bb1f9b381faa0b20d97378ad85a62f32f0a6ce51917e7056645d935989d5ec8cf0daa990c878d5a53d34923d6658bc8314b7bbe4406965e90ec0b6cf54bce42a7dab6224a75c14818a5219e15f24b54aa9a9826628e921b83b76aa2a1826f8f9796d92901a6c0d7542078f846c1e6c43e79fbaba8c578cb57b7131da0647fd0b03c0dd4eeff445797c0627b5a301ae99cf20e9f412e64380e9fb07dcbcccf86eab0465bc3c0e50da134c7c7194b5c7553469b4a7c29ba97daa901bc9222c5d84e4c4b13d697ec2be53b2bc7b9d81626a50439b56eb243297cf2272af22e167d8d9d47c0d4a83e3402067a4ab87765618d78ac1874f9fa6d2991ea859b67ad229a4ff275074c6eca6ace9ce8f7897f18a83dda57e5743dde0abe85768ae3b7afbabdb9c228a26b573b1b5bd84b6adebcc1ecd3b821a8aef635fb0beb5283de85c8fc4b05337cace9d619e7356e9c6a806d39b0dddc1f1285bc04f50046572a94ee21440559ca32c9acb409fec844ff0af46994f8a363d400f8a4a2c590ec4ae120614e4a22f96d673a1a78cc9af62ab33d06af8a668607bdd6552c41812d91bbdad590e5612f70661291196ff39a015f890914ebfc9195aa9d74b2d0eef7c962290bde85f97c6604685683b2e673e75a9e660fbdc33e483d018c0ac46b33c495000cba28edeea7d3c59e024bcfe1ca1e23ee35dd1ebf945e0c10fda204c9049d822292eabc8bb4c213808ef3e0ed72dcf18642cfba1afbb1d4d6d52388fdfd27fa7f69d0a124a507d91e8413450e944d1b28b5b8bdacce116d41daf871c28ad41480b14a5cc7cf6893557ba28495a1a07596dab977cf9d703ff234dec9d7f8e63267ed32d77dd2201df48fce5ba84a599e5a065e1d41cf980f85eaa29b270dce189f03a17f30be27d441c7792a1bb47c2c9b1f9250b857fe5446866e176938d28df428f90028cf2063f8f44133cd823c5572fbf374f44bf41e7c34bbf2622998f562331592bd69e9cb156cf991d5bb08dc24b6874a7147bdbb7c73241665449897ac3bfebc0796dffe630864f5861d61880eabfc575226b572761bce189f67b4ce6a49f89e04cc3692d3d816ee603f58e31e6c0f1377228e6b153c2115a5c5c1283c991967a745e0ec009e8ffc9f23a22b3334d783e44d21fa014976425b8c22ea62e98961fce1d017e78c936fd623184dc09925435634f8f97ddb160a32b73cf0680ce205e599083edbda2c6749f0a1230cbfd2a7155bdcdfa26a19b112580517581d2e0088980ab46a5d350c7ae4cebbeb57254a2d26f322df2c1afc09a17c7877a1530ffca22e183b7cf50a82eaa60b3ed1041913ad8b2459f83a985d62715d9a7854bda7bdf7a9287afdfff16d1e028a5bd67966bd618e6ddbfce5dcb6dc692a6ed980b8d982d834480e1a4118829e4637a184c4c56d352aa589928741f83619f40c2bc8b938478be60e6819fff1bde355458a34ae69aa45a4c70db7c36863c2a3658b797b8be4eec72394fd00642738fa5d58afe4466cf6c409c3c03424afe55c22c62ab813bffd4d18580c79b01120400848f65beee11489905d7473a63adfab55b1f71947798871bb037c0ea9c23337c6fc01976edf14ff63296571ea208cdd60f64c1d35fb63b6af28465f732ecc11dbdbce99064c8e62cff8974ff84f6d35b3ec1a96ba499d82b1af9eaa171353311822ac6ce1204d1a46cd03681c0ef870a982eb33ca80b42753e3e3b701cb64f895958c40cc7c93ca15250dc085bd052cdb06388d91a355e706189a59e27888bdbf92d7b62dc95ea360785213a576c64037c953e42965296cd85714c4976b320c680177bcd7b57b47d87192b1f453f1f9e803f31d797f173f369cc9bf9f8d1a49edd7d33737085813de88d89597116336b665ee8fe3aa745aba8fe022bd335be1b475eddf2b8adbcb65b8bfc1481a5b19df0c152ceec2b92a77f19ccc57c5a7efbecdd485845cb6a98761c93e37e65b4c9e6e42e1836e7da4fb024d089c1e55646045446d183744daf90bb5694ad6175672d7bd9fb1eed922d1a51caf9cb8e892790a2013903724b38ce466da9b7f203536febcb4abbdfa79828fbda48c29cdcb17bfdec8126deaced9653be9cf59e993f91e2e97f436dac9d68f09db7c71152a77082d2bb071d06fe310ba17d25a19dbccbc3405cf694554aee362f91fe348cb594a77df09825d640536b9852131e386c90fbe6e65002f7947cadfb0b47faec7724ec055ace75a14251352a528cafcf3c9a5b0560f6b50672d1fa05a33dd4805ba7b2a5cc40d4ffeec41d1d858d627680d7c2e2527b770ea337eb7b17e2b70a1a313bb7fd7336680382fb4053019680c7b384860697324d93d84612e666fe0b9a44e52894e79338767bc3771b7827a782b8bfe582d15845d320585657a6a161f9f6933ab81c578697f4519c2ea7c643e447023688c18a9dfb709f30f9cceb7e63237952b94c0bc5ea2e700a7c519072ec263dd13c375249af620c4ae179c6ac56fc8b735e48399aac16ede012ae9a7c917919fe7744ef4811e82bad12a258b32fe792816251c848b21b14b7f071854f24d447e425fbdaab147e8eeba51862a791c564f8bebf9cb459e548b646ebaab89ceaadc52f801ce602cbf6d351eb188bb86a15cde1f6e0fb1df803346d0fa1d7fce0e5f54c1ee7a2855010568438ae29069843906dba3fe485bc530ac04702458a4973135feee729d1d02ef54924a6256e44e707f68c28602611519f83fc9a5961e93dd3534c3d4ee1748def4a412642eed186a29e208e1e915f2c6cd80d683f62cb495216d3af0f05b1c127087916b220b18f6a8c442c1304180482af6f81a56547419199a1164b761eff09dc51a7e687406d1f54a074f1da5ac890f852ff2dd9d2c676823bda56a4fdd1d7bba137c20d338a42f1f99028166855c55514a5bc231bb2ed4d32095061bde56d8a9d4e36bb12b0c90b04a8b831682d1bd133b1a24974bee43c2c6c2a2d5a72f07d684e42392fbd68dc4c870b270e7d73f8f388d5477bba62c4865c2bd944279522a19c677ca46ee69d61f527f5f0f86279a2711ac9f28f39f060b1c45133a76e42bb33797a764eddd1c590397b16fa8181e8f3e2cfc95a57febb929b42202704dd687ce601249efa24384c2c130e92136cbcc7b71ab1b3e91e052f21567cda345f8f0772709e7346d55d4bb29200f21428af09ee65b53785f1ce81bfeb4a2aeae9ad6b1bfa4a7fe6793ce99cc739861a71f4092a9f3725ffe0bce6481232b1204799b4e9246d0d8e92e9b2725b069a008f71e51c091f7a03047c878b98b5995f92409318efac7e7c2948f7f38ee1c861bf2b003a5cf8f3fd006d4e482a3db31e9597e008aec4f80d2c65b708410b4a95af07d4dfcb432e34bdbb84a8f342bb902651b6a8bcea0d1cc48ccf0e36fe0c2806a7e0b13bc48894e2781d09a684dc9d8aec5a12e02efb3de98d150ba9a9e9fe59ed73d064283b7e5dfebb930571ea5c6caa64bc4cd5874c5edfa6a093455494148f4079d6f719db190bdac17c2365165c1ad5ce4f6e4211935df9b4edb9879a7b61d481bbf3b1c325bc772d82b0f63b48cec468235cbd3e121a3eb7d14ce9aee783f6cd05282dd322b67bcb015518d06ba846f7fc15d9c4107ecb87a74eaf892dafd927b47dcf145241f8c8241c2da289962415dd987a0657209f9b93ad3848bf13e60860313e081d4f846e028deb94c35701877aca0848ad756f28a2e2deab6184c5c9eb754b7a48f6cc6c0612d2f646e6c9d2134586103e4dd39b01491810b4dc1dd9c47fc74a4edded20cc2c5b86b554deabd3fc8d93998b205e61d390bdd13c9e93879f03376a45b742562caa5756983fad00119107bae509d2a172e5e34fe57fbc37f7485bc2ab0b8ff4baea7735a0e6bd1e45edb74d0e33d0c26495eec8dd25afc0ce98428245125af89517ca55bedb4ef80ac19398b5f5f2348d3288243cb194217da4bbf9a4b570d7f851c717546a07e19422421b6ed28ec99368859d335f51a9bffef7d94fa0120471730f18251249b627b49461adf48ac926205641837489db152e7bc4e8e08ae5ce9811e61a3fd042e017b74506dc5ba798a86d98dc81a0be90b9f8f593cd816b54131645267dfa26e8f3de640b691762902362683c02d2f18d489a9cc5d97c50aa98aa5147e4fd7642ebe08346c17c12848e0ab"}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r7, r6, 0x0, 0x4) (async) sendfile(r6, r7, 0x0, 0x3) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000140)) (async) 11:04:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 536.412445][T28862] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93783169 [ 536.420446][T28862] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 536.428506][T28862] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 536.436498][T28862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.444537][T28862] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 536.452593][T28862] 11:04:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) [ 536.673196][T28875] loop5: detected capacity change from 0 to 8192 [ 536.704553][ T3381] udevd[3381]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system [ 536.727918][ T3381] udevd[3381]: symlink '../../loop5' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:5' failed: Read-only file system 11:04:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 8) 11:04:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) 11:04:28 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r0 = syz_usbip_server_init(0x1) close(r0) (async) syz_usbip_server_init(0x2) 11:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x10000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x49000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 537.023074][T28896] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 537.029689][T28896] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 537.037324][T28896] vhci_hcd vhci_hcd.0: Device attached [ 537.060178][T28903] loop0: detected capacity change from 0 to 128 [ 537.070547][T28897] vhci_hcd: connection closed [ 537.070822][ T3085] vhci_hcd: stop threads [ 537.079958][ T3085] vhci_hcd: release socket [ 537.084400][ T3085] vhci_hcd: disconnect device 11:04:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x6, 0x90002) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20410408}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="74b3f800240000052abd7000fedb480000000000", @ANYRES32=0x0, @ANYBLOB="f2ff0b000900f3fff2ff0700500008801c000100020018dc09000000000000000100000008000000030000000a00020047a3ff07020000001c0001008106030002000000010000000700000054000000020000000800020031f00104"], 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:28 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x6, 0x90002) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20410408}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="74b3f800240000052abd7000fedb480000000000", @ANYRES32=0x0, @ANYBLOB="f2ff0b000900f3fff2ff0700500008801c000100020018dc09000000000000000100000008000000030000000a00020047a3ff07020000001c0001008106030002000000010000000700000054000000020000000800020031f00104"], 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20410408}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="74b3f800240000052abd7000fedb480000000000", @ANYRES32=0x0, @ANYBLOB="f2ff0b000900f3fff2ff0700500008801c000100020018dc09000000000000000100000008000000030000000a00020047a3ff07020000001c0001008106030002000000010000000700000054000000020000000800020031f00104"], 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x6, 0x90002) (async, rerun: 32) pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20410408}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="74b3f800240000052abd7000fedb480000000000", @ANYRES32=0x0, @ANYBLOB="f2ff0b000900f3fff2ff0700500008801c000100020018dc09000000000000000100000008000000030000000a00020047a3ff07020000001c0001008106030002000000010000000700000054000000020000000800020031f00104"], 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 537.165951][T28896] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(4) [ 537.172510][T28896] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 537.180133][T28896] vhci_hcd vhci_hcd.0: Device attached [ 537.196917][T28905] vhci_hcd: connection closed [ 537.198029][ T3085] vhci_hcd: stop threads [ 537.207026][ T3085] vhci_hcd: release socket [ 537.211446][ T3085] vhci_hcd: disconnect device 11:04:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r4, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x7, {"90efd2290c16a5a01f5d54d0a7a7fbf9"}, 0x3, 0x7f, 0xffffffff}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x1}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 537.267707][T28921] FAULT_INJECTION: forcing a failure. [ 537.267707][T28921] name failslab, interval 1, probability 0, space 0, times 0 [ 537.280413][T28921] CPU: 1 PID: 28921 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 537.290924][T28921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 537.301027][T28921] Call Trace: [ 537.304316][T28921] [ 537.307248][T28921] dump_stack_lvl+0xda/0x130 [ 537.311904][T28921] dump_stack+0x15/0x20 [ 537.316127][T28921] should_fail_ex+0x21f/0x230 [ 537.320826][T28921] __should_failslab+0x92/0xa0 [ 537.325626][T28921] should_failslab+0x9/0x20 [ 537.330156][T28921] slab_pre_alloc_hook+0x38/0x180 [ 537.335279][T28921] kmem_cache_alloc+0x58/0x260 [ 537.340078][T28921] ? vfat_add_entry+0x18b/0x1b60 [ 537.345054][T28921] vfat_add_entry+0x18b/0x1b60 [ 537.349858][T28921] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 537.355756][T28921] ? ktime_get_coarse_real_ts64+0xf3/0x100 [ 537.361601][T28921] vfat_create+0xa9/0x190 [ 537.366130][T28921] ? vfat_lookup+0x2d0/0x2d0 [ 537.370782][T28921] path_openat+0xd96/0x1d00 [ 537.375321][T28921] do_filp_open+0xf6/0x200 [ 537.379815][T28921] do_sys_openat2+0xb5/0x2a0 [ 537.384469][T28921] ? mutex_lock+0xd/0x30 [ 537.388776][T28921] ? fput+0x112/0x140 [ 537.392794][T28921] __x64_sys_openat+0xf3/0x120 [ 537.397664][T28921] do_syscall_64+0x41/0xc0 [ 537.402155][T28921] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 537.408252][T28921] RIP: 0033:0x7fcf93783169 [ 537.412808][T28921] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 537.432514][T28921] RSP: 002b:00007fcf8a6c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.440995][T28921] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93783169 [ 537.448989][T28921] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 537.456998][T28921] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 537.464990][T28921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.473587][T28921] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 537.481633][T28921] 11:04:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 9) 11:04:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x51000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r4, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x7, {"90efd2290c16a5a01f5d54d0a7a7fbf9"}, 0x3, 0x7f, 0xffffffff}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x1}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x20000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) (async) 11:04:29 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x40000, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x106, 0xa}}, 0x20) close(r0) 11:04:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r4, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x7, {"90efd2290c16a5a01f5d54d0a7a7fbf9"}, 0x3, 0x7f, 0xffffffff}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x1}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r5}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x218000, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x80000001, 0xffff11a1, "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", 0x0, 0x5, 0xff, 0x2, 0x81, 0x7, 0xf7}}}, 0x120) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @local, 0x1}, {0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x401}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 537.955173][T28931] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 537.961728][T28931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 537.969424][T28931] vhci_hcd vhci_hcd.0: Device attached [ 537.983768][T28933] vhci_hcd: connection closed [ 537.983962][ T9310] vhci_hcd: stop threads [ 537.992972][ T9310] vhci_hcd: release socket [ 537.997507][ T9310] vhci_hcd: disconnect device 11:04:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x218000, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x80000001, 0xffff11a1, "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", 0x0, 0x5, 0xff, 0x2, 0x81, 0x7, 0xf7}}}, 0x120) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @local, 0x1}, {0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x401}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x218000, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x80000001, 0xffff11a1, "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", 0x0, 0x5, 0xff, 0x2, 0x81, 0x7, 0xf7}}}, 0x120) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x2, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @local, 0x1}, {0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x401}, r5}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x218000, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x80000001, 0xffff11a1, "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", 0x0, 0x5, 0xff, 0x2, 0x81, 0x7, 0xf7}}}, 0x120) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @local, 0x1}, {0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x401}, r5}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async, rerun: 64) sendfile(r2, r3, 0x0, 0x3) (rerun: 64) [ 538.016980][T28943] loop0: detected capacity change from 0 to 128 11:04:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000000c0)={0x5, 0x160fc00}) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) 11:04:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r5, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 10) 11:04:30 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x40000, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x106, 0xa}}, 0x20) close(r0) 11:04:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000000c0)={0x5, 0x160fc00}) (async) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) 11:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x52000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:30 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r5, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x20100000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r5, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r5, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x22000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3ff, @mcast1, 0x5cd}, {0xa, 0x4e23, 0xf4a8, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, r1, 0x2}}, 0x48) [ 538.924565][T28990] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 538.931137][T28990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 538.938810][T28990] vhci_hcd vhci_hcd.0: Device attached [ 538.955496][T29004] loop0: detected capacity change from 0 to 128 [ 538.969755][T28998] vhci_hcd: connection closed 11:04:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000000c0)={0x5, 0x160fc00}) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) [ 538.969914][ T33] vhci_hcd: stop threads [ 538.978973][ T33] vhci_hcd: release socket [ 538.983493][ T33] vhci_hcd: disconnect device 11:04:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3ff, @mcast1, 0x5cd}, {0xa, 0x4e23, 0xf4a8, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, r1, 0x2}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3ff, @mcast1, 0x5cd}, {0xa, 0x4e23, 0xf4a8, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, r1, 0x2}}, 0x48) (async) [ 539.055100][ T25] audit: type=1400 audit(837860670.190:462): avc: denied { ioctl } for pid=29017 comm="syz-executor.1" path="socket:[79539]" dev="sockfs" ino=79539 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 11:04:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3ff, @mcast1, 0x5cd}, {0xa, 0x4e23, 0xf4a8, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, r1, 0x2}}, 0x48) (rerun: 64) [ 539.189141][T29036] FAULT_INJECTION: forcing a failure. [ 539.189141][T29036] name failslab, interval 1, probability 0, space 0, times 0 [ 539.202014][T29036] CPU: 1 PID: 29036 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 539.212566][T29036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 539.222665][T29036] Call Trace: [ 539.225979][T29036] [ 539.229006][T29036] dump_stack_lvl+0xda/0x130 [ 539.233752][T29036] dump_stack+0x15/0x20 [ 539.238037][T29036] should_fail_ex+0x21f/0x230 [ 539.242910][T29036] __should_failslab+0x92/0xa0 [ 539.247722][T29036] should_failslab+0x9/0x20 [ 539.252244][T29036] slab_pre_alloc_hook+0x38/0x180 [ 539.257316][T29036] kmem_cache_alloc_lru+0x54/0x260 [ 539.262474][T29036] ? fat_alloc_inode+0x38/0xb0 [ 539.267268][T29036] fat_alloc_inode+0x38/0xb0 [ 539.272017][T29036] ? fat_get_block_bmap+0x1f0/0x1f0 [ 539.277327][T29036] alloc_inode+0x38/0x150 [ 539.281724][T29036] new_inode+0x24/0x130 [ 539.285957][T29036] fat_build_inode+0x156/0x280 [ 539.290748][T29036] vfat_create+0xf0/0x190 [ 539.295213][T29036] ? vfat_lookup+0x2d0/0x2d0 [ 539.299835][T29036] path_openat+0xd96/0x1d00 [ 539.304381][T29036] do_filp_open+0xf6/0x200 [ 539.308866][T29036] do_sys_openat2+0xb5/0x2a0 [ 539.313487][T29036] ? mutex_lock+0xd/0x30 [ 539.317752][T29036] ? fput+0x112/0x140 [ 539.321758][T29036] __x64_sys_openat+0xf3/0x120 [ 539.326542][T29036] do_syscall_64+0x41/0xc0 [ 539.331201][T29036] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 539.337125][T29036] RIP: 0033:0x7fcf93783169 [ 539.341635][T29036] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 539.361301][T29036] RSP: 002b:00007fcf8a6c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 539.369798][T29036] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93783169 [ 539.377784][T29036] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 539.386044][T29036] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 539.394043][T29036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.402034][T29036] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 539.410029][T29036] 11:04:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEniYlJRJPDsssuLL7sXnYvg7p7XHYNiy7LBlZcs/QHFEad2JBpIjNBmyLVnnot/SN6EHvzJrT+A156ay+99OalUEo9SKdkMmM0jjVqYqx+PyDzZt7nmXnfmSjPhLxuX3t0p5i3tbxekXBcSUhEZEckLWHxhbxt2G3HZL8V+bnv3cuV/67f+CeTzY5NKjWemfplRCk1MPh+cSnhhW30ylb61vbbkTdbX299u/1x6nbBVgVblcoVpavp8uuKPm0aarZgFzWlJkxDtw1VKNmGVe8v1/vzZnl+vqr00mx/ct4ybFvppaoqGlVVKauKVVX6nF4oKU3TVH9ScJzc6uSknjll8kybB4MOsayMHhGRxKGe3GpXBgQAALqquf4P10r6E9f/3wfW/88Wl9Z+2Kz0/b8+4NX/G7Gg+v/XV/VjHaj/4yLSvvp/7u5vfwXM/nBFdLWcqf7HxTAYO7QrdOBVrf5Per+/rgc314bcBvU/AAAAAAAAAAAAAAAAAAAAAABfgh3HSTmOk/K3/k+viMRFxHGc5uUErBe5RFq4/+7rbo8TndFYuNczIGI+XMgt5OpbL2BTREwxZEhSsuu+HzwiTtRfeaRq0vLcXPbylxdyEbcnk5eCmz8sKUk35TuOM/53dmxY1R3Mj0rSzc+IRN1DpeSr4PyRwPyY/PTjvvNrkpIXM1IWU2bd93Uj//6wUn/+m23KT7hxAAAAAABcBpraE/j8rmlH9dfz956vgz4f8J6vhwKfz3vku57uzh0AAAAAgKvCrt4r6qZpWJ9pJOT4mPY2nh7VNeoNu4Xj+DP093hfYlppCrYi3kXwv8twyjFHWg2OB115/+TFP/ZN0I88zyvfaiPcyi1oNEK7jmNY9mBtNuqsZ/c/NjoqRiZOfuTYSe97SAK6vnn85EP7rvPv6/FjZtqxRrSDf3IAAAAAdEmj6Pf3jHZ3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEHn8e/Euj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KL4FAAA//8X6PzU") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 11) 11:04:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xfffffffe, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:31 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x40000, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x106, 0xa}}, 0x20) (async) close(r0) 11:04:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x53000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x3f000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:31 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$binfmt_aout(r0, &(0x7f0000000280)={{0xcc, 0x81, 0x53, 0x3ba, 0x365, 0x10000, 0x12a, 0x1f}, "83c243a6bc2d364280d2e89e5f8dbc8f55ce43342a8c4acdac2ff2ee803ee7d22a4c3540b14152717641f021932e28f9ce6518c1c9ea6792c441f12374", ['\x00', '\x00']}, 0x25d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r8}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000891) r9 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r9, r4, 0x0, 0x4) sendfile(r4, r9, 0x0, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) 11:04:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xfffffffe, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xfffffffe, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 540.014064][T29042] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 540.020622][T29042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 540.028245][T29042] vhci_hcd vhci_hcd.0: Device attached [ 540.041570][T29052] loop0: detected capacity change from 0 to 128 [ 540.043704][T29043] vhci_hcd: connection closed [ 540.048245][ T9310] vhci_hcd: stop threads [ 540.057275][ T9310] vhci_hcd: release socket [ 540.061781][ T9310] vhci_hcd: disconnect device 11:04:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r2, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x5, {"f0169ebea8728e2ba586d2a216cb06ee"}, 0x6, 0x100000000, 0x101}, @in={0x2, 0x4e23, @multicast1}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r2, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x5, {"f0169ebea8728e2ba586d2a216cb06ee"}, 0x6, 0x100000000, 0x101}, @in={0x2, 0x4e23, @multicast1}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (rerun: 64) 11:04:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r2, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x5, {"f0169ebea8728e2ba586d2a216cb06ee"}, 0x6, 0x100000000, 0x101}, @in={0x2, 0x4e23, @multicast1}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r2, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x5, {"f0169ebea8728e2ba586d2a216cb06ee"}, 0x6, 0x100000000, 0x101}, @in={0x2, 0x4e23, @multicast1}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x7, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x118) [ 540.263308][T29075] FAULT_INJECTION: forcing a failure. [ 540.263308][T29075] name failslab, interval 1, probability 0, space 0, times 0 [ 540.275996][T29075] CPU: 0 PID: 29075 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 540.286536][T29075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 540.296659][T29075] Call Trace: [ 540.299966][T29075] [ 540.302982][T29075] dump_stack_lvl+0xda/0x130 [ 540.307674][T29075] dump_stack+0x15/0x20 [ 540.311866][T29075] should_fail_ex+0x21f/0x230 [ 540.317627][T29075] __should_failslab+0x92/0xa0 [ 540.322439][T29075] should_failslab+0x9/0x20 [ 540.327336][T29075] slab_pre_alloc_hook+0x38/0x180 [ 540.333482][T29075] kmem_cache_alloc+0x58/0x260 [ 540.338280][T29075] ? security_inode_alloc+0x32/0xd0 [ 540.343681][T29075] security_inode_alloc+0x32/0xd0 [ 540.348762][T29075] inode_init_always+0x3ff/0x440 [ 540.353790][T29075] ? fat_get_block_bmap+0x1f0/0x1f0 [ 540.359094][T29075] alloc_inode+0x77/0x150 [ 540.363584][T29075] new_inode+0x24/0x130 [ 540.367851][T29075] fat_build_inode+0x156/0x280 [ 540.372780][T29075] vfat_create+0xf0/0x190 [ 540.377304][T29075] ? vfat_lookup+0x2d0/0x2d0 [ 540.381918][T29075] path_openat+0xd96/0x1d00 [ 540.386600][T29075] do_filp_open+0xf6/0x200 [ 540.391058][T29075] do_sys_openat2+0xb5/0x2a0 [ 540.395671][T29075] ? mutex_lock+0xd/0x30 [ 540.399954][T29075] ? fput+0x112/0x140 [ 540.403967][T29075] __x64_sys_openat+0xf3/0x120 [ 540.408740][T29075] do_syscall_64+0x41/0xc0 [ 540.413194][T29075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 540.419225][T29075] RIP: 0033:0x7fcf93783169 [ 540.423660][T29075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 540.443403][T29075] RSP: 002b:00007fcf8a6c4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 540.451915][T29075] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93783169 [ 540.459942][T29075] RDX: 000000000000275a RSI: 0000000020000180 RDI: ffffffffffffff9c [ 540.467943][T29075] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 540.476018][T29075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.484009][T29075] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 540.492007][T29075] 11:04:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 12) 11:04:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x7, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x118) 11:04:32 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$binfmt_aout(r0, &(0x7f0000000280)={{0xcc, 0x81, 0x53, 0x3ba, 0x365, 0x10000, 0x12a, 0x1f}, "83c243a6bc2d364280d2e89e5f8dbc8f55ce43342a8c4acdac2ff2ee803ee7d22a4c3540b14152717641f021932e28f9ce6518c1c9ea6792c441f12374", ['\x00', '\x00']}, 0x25d) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r8}]}, 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000891) r9 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r9, r4, 0x0, 0x4) (async) sendfile(r4, r9, 0x0, 0x3) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) 11:04:32 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xff}}, 0x10) close(r0) 11:04:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x54000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x49000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x7, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r3, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x7, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x118) (async) 11:04:32 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$binfmt_aout(r0, &(0x7f0000000280)={{0xcc, 0x81, 0x53, 0x3ba, 0x365, 0x10000, 0x12a, 0x1f}, "83c243a6bc2d364280d2e89e5f8dbc8f55ce43342a8c4acdac2ff2ee803ee7d22a4c3540b14152717641f021932e28f9ce6518c1c9ea6792c441f12374", ['\x00', '\x00']}, 0x25d) (async) write$binfmt_aout(r0, &(0x7f0000000280)={{0xcc, 0x81, 0x53, 0x3ba, 0x365, 0x10000, 0x12a, 0x1f}, "83c243a6bc2d364280d2e89e5f8dbc8f55ce43342a8c4acdac2ff2ee803ee7d22a4c3540b14152717641f021932e28f9ce6518c1c9ea6792c441f12374", ['\x00', '\x00']}, 0x25d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r8}]}, 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r8}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000891) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000891) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r9 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r9, r4, 0x0, 0x4) (async) sendfile(r9, r4, 0x0, 0x4) sendfile(r4, r9, 0x0, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 541.067213][T29083] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 541.073804][T29083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.081386][T29083] vhci_hcd vhci_hcd.0: Device attached 11:04:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = signalfd4(r0, &(0x7f0000000180)={[0x6]}, 0x8, 0xc0800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), r3, 0x0, 0x1, 0x4}}, 0x20) [ 541.109923][T29095] loop0: detected capacity change from 0 to 128 [ 541.120299][T29108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 541.126867][T29108] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 541.134625][T29108] vhci_hcd vhci_hcd.0: Device attached [ 541.142618][T29109] vhci_hcd: connection closed [ 541.142875][ T3085] vhci_hcd: stop threads [ 541.146241][T29084] vhci_hcd: connection closed [ 541.147851][ T3085] vhci_hcd: release socket [ 541.161275][ T3085] vhci_hcd: disconnect device [ 541.169637][ T3085] vhci_hcd: stop threads [ 541.173998][ T3085] vhci_hcd: release socket [ 541.178452][ T3085] vhci_hcd: disconnect device 11:04:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = signalfd4(r0, &(0x7f0000000180)={[0x6]}, 0x8, 0xc0800) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), r3, 0x0, 0x1, 0x4}}, 0x20) 11:04:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = signalfd4(r0, &(0x7f0000000180)={[0x6]}, 0x8, 0xc0800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), r3, 0x0, 0x1, 0x4}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) signalfd4(r0, &(0x7f0000000180)={[0x6]}, 0x8, 0xc0800) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x13f, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), r3, 0x0, 0x1, 0x4}}, 0x20) (async) 11:04:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="010000ffff00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000400)={0x15, 0x110, 0xfa08, {r1, 0x2, 0x10, 0x10, 0x0, @in6={0xa, 0x8, 0x3, @empty, 0x4}, @in={0x2, 0x4e21, @private=0xa010102}}}, 0x118) [ 541.338720][T29124] FAULT_INJECTION: forcing a failure. [ 541.338720][T29124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.351861][T29124] CPU: 0 PID: 29124 Comm: syz-executor.0 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 541.362470][T29124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 541.372671][T29124] Call Trace: [ 541.376000][T29124] [ 541.378964][T29124] dump_stack_lvl+0xda/0x130 [ 541.383610][T29124] dump_stack+0x15/0x20 [ 541.387794][T29124] should_fail_ex+0x21f/0x230 [ 541.392675][T29124] should_fail+0xb/0x10 [ 541.396861][T29124] should_fail_usercopy+0x1a/0x20 [ 541.401966][T29124] _copy_to_user+0x1e/0x90 [ 541.406443][T29124] simple_read_from_buffer+0xa0/0x110 [ 541.411838][T29124] proc_fail_nth_read+0xf6/0x140 [ 541.416864][T29124] ? proc_fault_inject_write+0x200/0x200 [ 541.422577][T29124] vfs_read+0x19e/0x580 [ 541.426759][T29124] ? __fget_files+0x1c4/0x200 [ 541.431460][T29124] ? mutex_lock+0xd/0x30 [ 541.435834][T29124] ksys_read+0xeb/0x1a0 [ 541.440014][T29124] __x64_sys_read+0x42/0x50 [ 541.444544][T29124] do_syscall_64+0x41/0xc0 [ 541.449053][T29124] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 541.454986][T29124] RIP: 0033:0x7fcf93734f8c [ 541.459413][T29124] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 541.479254][T29124] RSP: 002b:00007fcf8a6c4160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 541.487938][T29124] RAX: ffffffffffffffda RBX: 00007fcf938a3120 RCX: 00007fcf93734f8c [ 541.495934][T29124] RDX: 000000000000000f RSI: 00007fcf8a6c41e0 RDI: 0000000000000006 [ 541.503971][T29124] RBP: 00007fcf8a6c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 541.511966][T29124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.519963][T29124] R13: 00007ffe12b839ff R14: 00007fcf8a6c4300 R15: 0000000000022000 [ 541.528052][T29124] 11:04:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 11:04:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="010000ffff00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000400)={0x15, 0x110, 0xfa08, {r1, 0x2, 0x10, 0x10, 0x0, @in6={0xa, 0x8, 0x3, @empty, 0x4}, @in={0x2, 0x4e21, @private=0xa010102}}}, 0x118) 11:04:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000500), 0x9) sendfile(r3, r2, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000c1253a5e3438129ec43819d41444ff66381d94a496fe4119d249480bee1ca0efd65123f6", @ANYRES32=r2, @ANYBLOB="f8ffffff000000002e2f66696c653000"]) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000100)="c8b83bb6b483189f9da6576b3a82b1e4525167968fd4670aa8f49a71d7379534f409acababc80690b299a7f341aa00b68df0410f6d4af23475a13a8ec6", 0x3d}, {&(0x7f0000000140)="95ecde9b9ff08e03d0aa97d1a92b7d4870bbe92e7cfb3e236167b13ebfef0afee01d9e05f1", 0x25}, {&(0x7f0000000180)="bea8f09024eb478ff09cfd3592888b7b8dd309bfd14a91dcbbf69945d9a1b49072702d7d10342c1cb64ba98d72a915811c5b8afc8e3f4750e6ae1aaccefd2b607903b1e287117797afd75ce1e303e5e1daa886b4444c1e10dbf35b256e243f26bb79784e90464d", 0x67}, {&(0x7f0000000200)="96c0fd65f2425b8fdf1e35567b1790b550300116201f21cc7f9e3028f59107cc66fa482bc913daa29a2a1e085b6b9ff00836ee1dd7ff81f791af62f42382a39e87c5da7ca83be9b12e84c13c3b11dc4e3153b721256e62191364179135210f7bbedd605d427412c9ad9f2ea14abf9fb71fe487b4c4b1ea81d7de56f4b09995d1202ed93f0c16e07171481a0b6f5ee7e27dde7de7196db0ba22b193c208495d8ad215c300b6ce7cc831", 0xa9}, {&(0x7f00000002c0)="475078bd8838e0fabba517805f0daed1b8f82e7b3813d589bcd98d4d7a61aa767141d7b2b7e5677633a3c5e2a12f43f5c78d7717d306b7b3bbbfad8fedeb59b2258ccfb02ffbe0595a399607d5c4380790c4cd08299ea5410ddd85483508a45e898165f1f3", 0x65}, {&(0x7f0000000340)="58e0c39a76b148818bbcc9d107c1a7430641b350f4786d9641b65af233f8bf891dec870ce0ed3f235d1e439fc9", 0x2d}, {&(0x7f0000000380)="8886eee98c4e575a9a9883124be218abc01110b71ccd7ada273f54db3c6d5309e2f0be4be41ae0a5065958bd7139762b79e79acb4c7f320e1dbe29b3d992e131958dd7d9d6af4ef0317951d088d4b2f1dea9bd37dcaccaccefc1af4f780db3e4f2c1624a2bfae928f6fd5209367eddca91696724bb73e24e1cd441baccf582d22f3147510e255393f74ee40c17d803648c8c84241f248c27bfe2fcc1e034e1a599940b7621611e4df4a8aa161cc4846b1a79689d2012d6a0421629cce5c2836bd4e70c9fc7a70ec9e34bba664e033f59d27f4db3c6453dd07b40cc0f7e650d82af753c4d9704f090d2726be37ed6", 0xee}], 0x7) sendfile(r2, r3, 0x0, 0x3) 11:04:32 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xff}}, 0x10) close(r0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) syz_usbip_server_init(0x1) (async) syz_usbip_server_init(0x5) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xff}}, 0x10) (async) close(r0) (async) [ 541.835262][T29130] loop0: detected capacity change from 0 to 128 11:04:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x56000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x51000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="010000ffff00000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000400)={0x15, 0x110, 0xfa08, {r1, 0x2, 0x10, 0x10, 0x0, @in6={0xa, 0x8, 0x3, @empty, 0x4}, @in={0x2, 0x4e21, @private=0xa010102}}}, 0x118) 11:04:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0x7, 0x3, {"a610834378b823f4ad06dd8ad0e323df"}, 0x70dc, 0x4, 0x1d}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0xc334, 0x0, 0x0, 0x0, @ib={0x1b, 0xf000, 0x80000001, {"77529c3ae6674ea34da5069772fa66ad"}, 0x2, 0x4, 0x1}, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x5}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0x7, 0x3, {"a610834378b823f4ad06dd8ad0e323df"}, 0x70dc, 0x4, 0x1d}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0xc334, 0x0, 0x0, 0x0, @ib={0x1b, 0xf000, 0x80000001, {"77529c3ae6674ea34da5069772fa66ad"}, 0x2, 0x4, 0x1}, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x5}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 541.957518][T29135] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 541.964163][T29135] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.971782][T29135] vhci_hcd vhci_hcd.0: Device attached [ 541.993312][T29146] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 541.999862][T29146] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) 11:04:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0x7, 0x3, {"a610834378b823f4ad06dd8ad0e323df"}, 0x70dc, 0x4, 0x1d}}}, 0x118) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0xc334, 0x0, 0x0, 0x0, @ib={0x1b, 0xf000, 0x80000001, {"77529c3ae6674ea34da5069772fa66ad"}, 0x2, 0x4, 0x1}, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x5}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:33 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xff}}, 0x10) close(r0) (async) close(r0) 11:04:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0x3, 0x5, {"feab274c9cc1a40c2bf1825d2ab6768a"}, 0xacae, 0x6, 0x5}}}, 0x118) [ 542.007682][T29146] vhci_hcd vhci_hcd.0: Device attached [ 542.037332][T29136] vhci_hcd: connection closed [ 542.037694][ T9] vhci_hcd: stop threads [ 542.046705][ T9] vhci_hcd: release socket [ 542.051128][ T9] vhci_hcd: disconnect device [ 542.065927][T29147] vhci_hcd: connection closed [ 542.092931][T29168] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 542.104167][T29168] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 542.111745][T29168] vhci_hcd vhci_hcd.0: Device attached [ 542.123793][ T9] vhci_hcd: stop threads [ 542.128114][ T9] vhci_hcd: release socket [ 542.132541][ T9] vhci_hcd: disconnect device [ 542.169442][T29173] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 542.175986][T29173] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 542.183720][T29173] vhci_hcd vhci_hcd.0: Device attached [ 542.204970][T29169] vhci_hcd: connection closed [ 542.205129][ T9310] vhci_hcd: stop threads [ 542.205262][T29174] vhci_hcd: connection closed [ 542.209924][ T9310] vhci_hcd: release socket [ 542.223211][ T9310] vhci_hcd: disconnect device [ 542.259181][ T9310] vhci_hcd: stop threads [ 542.263597][ T9310] vhci_hcd: release socket [ 542.268048][ T9310] vhci_hcd: disconnect device 11:04:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0x3, 0x5, {"feab274c9cc1a40c2bf1825d2ab6768a"}, 0xacae, 0x6, 0x5}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0x3, 0x5, {"feab274c9cc1a40c2bf1825d2ab6768a"}, 0xacae, 0x6, 0x5}}}, 0x118) (async) 11:04:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEniYlJRJPDsssuLL7sXnYvg7p7XHYNiy7LBlZcs/QHFEad2JBpIjNBmyLVnnot/SN6EHvzJrT+A156ay+99OalUEo9SKdkMmM0jjVqYqx+PyDzZt7nmXnfmSjPhLxuX3t0p5i3tbxekXBcSUhEZEckLWHxhbxt2G3HZL8V+bnv3cuV/67f+CeTzY5NKjWemfplRCk1MPh+cSnhhW30ylb61vbbkTdbX299u/1x6nbBVgVblcoVpavp8uuKPm0aarZgFzWlJkxDtw1VKNmGVe8v1/vzZnl+vqr00mx/ct4ybFvppaoqGlVVKauKVVX6nF4oKU3TVH9ScJzc6uSknjll8kybB4MOsayMHhGRxKGe3GpXBgQAALqquf4P10r6E9f/3wfW/88Wl9Z+2Kz0/b8+4NX/G7Gg+v/XV/VjHaj/4yLSvvp/7u5vfwXM/nBFdLWcqf7HxTAYO7QrdOBVrf5Per+/rgc314bcBvU/AAAAAAAAAAAAAAAAAAAAAABfgh3HSTmOk/K3/k+viMRFxHGc5uUErBe5RFq4/+7rbo8TndFYuNczIGI+XMgt5OpbL2BTREwxZEhSsuu+HzwiTtRfeaRq0vLcXPbylxdyEbcnk5eCmz8sKUk35TuOM/53dmxY1R3Mj0rSzc+IRN1DpeSr4PyRwPyY/PTjvvNrkpIXM1IWU2bd93Uj//6wUn/+m23KT7hxAAAAAABcBpraE/j8rmlH9dfz956vgz4f8J6vhwKfz3vku57uzh0AAAAAgKvCrt4r6qZpWJ9pJOT4mPY2nh7VNeoNu4Xj+DP093hfYlppCrYi3kXwv8twyjFHWg2OB115/+TFP/ZN0I88zyvfaiPcyi1oNEK7jmNY9mBtNuqsZ/c/NjoqRiZOfuTYSe97SAK6vnn85EP7rvPv6/FjZtqxRrSDf3IAAAAAdEmj6Pf3jHZ3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEHn8e/Euj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KL4FAAA//8X6PzU") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x2) 11:04:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000500), 0x9) sendfile(r3, r2, 0x0, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000c1253a5e3438129ec43819d41444ff66381d94a496fe4119d249480bee1ca0efd65123f6", @ANYRES32=r2, @ANYBLOB="f8ffffff000000002e2f66696c653000"]) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000100)="c8b83bb6b483189f9da6576b3a82b1e4525167968fd4670aa8f49a71d7379534f409acababc80690b299a7f341aa00b68df0410f6d4af23475a13a8ec6", 0x3d}, {&(0x7f0000000140)="95ecde9b9ff08e03d0aa97d1a92b7d4870bbe92e7cfb3e236167b13ebfef0afee01d9e05f1", 0x25}, {&(0x7f0000000180)="bea8f09024eb478ff09cfd3592888b7b8dd309bfd14a91dcbbf69945d9a1b49072702d7d10342c1cb64ba98d72a915811c5b8afc8e3f4750e6ae1aaccefd2b607903b1e287117797afd75ce1e303e5e1daa886b4444c1e10dbf35b256e243f26bb79784e90464d", 0x67}, {&(0x7f0000000200)="96c0fd65f2425b8fdf1e35567b1790b550300116201f21cc7f9e3028f59107cc66fa482bc913daa29a2a1e085b6b9ff00836ee1dd7ff81f791af62f42382a39e87c5da7ca83be9b12e84c13c3b11dc4e3153b721256e62191364179135210f7bbedd605d427412c9ad9f2ea14abf9fb71fe487b4c4b1ea81d7de56f4b09995d1202ed93f0c16e07171481a0b6f5ee7e27dde7de7196db0ba22b193c208495d8ad215c300b6ce7cc831", 0xa9}, {&(0x7f00000002c0)="475078bd8838e0fabba517805f0daed1b8f82e7b3813d589bcd98d4d7a61aa767141d7b2b7e5677633a3c5e2a12f43f5c78d7717d306b7b3bbbfad8fedeb59b2258ccfb02ffbe0595a399607d5c4380790c4cd08299ea5410ddd85483508a45e898165f1f3", 0x65}, {&(0x7f0000000340)="58e0c39a76b148818bbcc9d107c1a7430641b350f4786d9641b65af233f8bf891dec870ce0ed3f235d1e439fc9", 0x2d}, {&(0x7f0000000380)="8886eee98c4e575a9a9883124be218abc01110b71ccd7ada273f54db3c6d5309e2f0be4be41ae0a5065958bd7139762b79e79acb4c7f320e1dbe29b3d992e131958dd7d9d6af4ef0317951d088d4b2f1dea9bd37dcaccaccefc1af4f780db3e4f2c1624a2bfae928f6fd5209367eddca91696724bb73e24e1cd441baccf582d22f3147510e255393f74ee40c17d803648c8c84241f248c27bfe2fcc1e034e1a599940b7621611e4df4a8aa161cc4846b1a79689d2012d6a0421629cce5c2836bd4e70c9fc7a70ec9e34bba664e033f59d27f4db3c6453dd07b40cc0f7e650d82af753c4d9704f090d2726be37ed6", 0xee}], 0x7) sendfile(r2, r3, 0x0, 0x3) 11:04:33 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x18a00, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffa28, 0x0, 0x0, 0x0, @ib={0x1b, 0xd35, 0x4a01, {"cd152aeefcae9f9bcac253bb7564c192"}, 0x0, 0xffffffff, 0x101}, @in={0x2, 0x4e20, @remote}}}, 0x118) r1 = syz_usbip_server_init(0x1) close(r1) fchmod(r1, 0x42) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000020000002e2f66696c653000"]) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 542.744206][T29188] loop0: detected capacity change from 0 to 128 11:04:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x62000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 542.791969][T29190] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 542.798518][T29190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 542.806178][T29190] vhci_hcd vhci_hcd.0: Device attached 11:04:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x52000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000500), 0x9) sendfile(r3, r2, 0x0, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000c1253a5e3438129ec43819d41444ff66381d94a496fe4119d249480bee1ca0efd65123f6", @ANYRES32=r2, @ANYBLOB="f8ffffff000000002e2f66696c653000"]) (async) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000100)="c8b83bb6b483189f9da6576b3a82b1e4525167968fd4670aa8f49a71d7379534f409acababc80690b299a7f341aa00b68df0410f6d4af23475a13a8ec6", 0x3d}, {&(0x7f0000000140)="95ecde9b9ff08e03d0aa97d1a92b7d4870bbe92e7cfb3e236167b13ebfef0afee01d9e05f1", 0x25}, {&(0x7f0000000180)="bea8f09024eb478ff09cfd3592888b7b8dd309bfd14a91dcbbf69945d9a1b49072702d7d10342c1cb64ba98d72a915811c5b8afc8e3f4750e6ae1aaccefd2b607903b1e287117797afd75ce1e303e5e1daa886b4444c1e10dbf35b256e243f26bb79784e90464d", 0x67}, {&(0x7f0000000200)="96c0fd65f2425b8fdf1e35567b1790b550300116201f21cc7f9e3028f59107cc66fa482bc913daa29a2a1e085b6b9ff00836ee1dd7ff81f791af62f42382a39e87c5da7ca83be9b12e84c13c3b11dc4e3153b721256e62191364179135210f7bbedd605d427412c9ad9f2ea14abf9fb71fe487b4c4b1ea81d7de56f4b09995d1202ed93f0c16e07171481a0b6f5ee7e27dde7de7196db0ba22b193c208495d8ad215c300b6ce7cc831", 0xa9}, {&(0x7f00000002c0)="475078bd8838e0fabba517805f0daed1b8f82e7b3813d589bcd98d4d7a61aa767141d7b2b7e5677633a3c5e2a12f43f5c78d7717d306b7b3bbbfad8fedeb59b2258ccfb02ffbe0595a399607d5c4380790c4cd08299ea5410ddd85483508a45e898165f1f3", 0x65}, {&(0x7f0000000340)="58e0c39a76b148818bbcc9d107c1a7430641b350f4786d9641b65af233f8bf891dec870ce0ed3f235d1e439fc9", 0x2d}, {&(0x7f0000000380)="8886eee98c4e575a9a9883124be218abc01110b71ccd7ada273f54db3c6d5309e2f0be4be41ae0a5065958bd7139762b79e79acb4c7f320e1dbe29b3d992e131958dd7d9d6af4ef0317951d088d4b2f1dea9bd37dcaccaccefc1af4f780db3e4f2c1624a2bfae928f6fd5209367eddca91696724bb73e24e1cd441baccf582d22f3147510e255393f74ee40c17d803648c8c84241f248c27bfe2fcc1e034e1a599940b7621611e4df4a8aa161cc4846b1a79689d2012d6a0421629cce5c2836bd4e70c9fc7a70ec9e34bba664e033f59d27f4db3c6453dd07b40cc0f7e650d82af753c4d9704f090d2726be37ed6", 0xee}], 0x7) sendfile(r2, r3, 0x0, 0x3) 11:04:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @ib={0x1b, 0x3, 0x5, {"feab274c9cc1a40c2bf1825d2ab6768a"}, 0xacae, 0x6, 0x5}}}, 0x118) (rerun: 32) 11:04:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x3, 0x8, 0xfffffffffffffffc, 0x2, 0xffffffff, 0x8}, {0x9, 0x7, 0xdb5f, 0x0, 0xf1, 0x5}], ['\x00', '\x00']}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 542.833896][T29191] vhci_hcd: connection closed [ 542.838292][ T9] vhci_hcd: stop threads [ 542.847392][ T9] vhci_hcd: release socket [ 542.851819][ T9] vhci_hcd: disconnect device 11:04:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x3, 0x8, 0xfffffffffffffffc, 0x2, 0xffffffff, 0x8}, {0x9, 0x7, 0xdb5f, 0x0, 0xf1, 0x5}], ['\x00', '\x00']}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 542.889280][ T25] audit: type=1400 audit(837860674.030:463): avc: denied { ioctl } for pid=29203 comm="syz-executor.1" path="socket:[80003]" dev="sockfs" ino=80003 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 11:04:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x3, 0x8, 0xfffffffffffffffc, 0x2, 0xffffffff, 0x8}, {0x9, 0x7, 0xdb5f, 0x0, 0xf1, 0x5}], ['\x00', '\x00']}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x3, 0x8, 0xfffffffffffffffc, 0x2, 0xffffffff, 0x8}, {0x9, 0x7, 0xdb5f, 0x0, 0xf1, 0x5}], ['\x00', '\x00']}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:34 executing program 5: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ec0f005155fd8070f1a35b35314964f3f2e429f71bead83987d973b5712475f00a420a0b2d3ac96f22680a939cbf74912c8a564452f7a0de55fef6b8e89bdbcf943c532a2807df567b016d04a1a2f973a0597aa389a1263e84aec6fea360fe747ffb69ee06604b402983f25e9f6f160e4e1a4aedcb9ad01865a2b71a18eaaeb1f319e21a2d8545c78f822e059285b40e7a50ee38a2cc7cb2af7a2f2dcf81ad0c6cba1327a01781a00e3618a0c4f402587703d3d7cdff11b350d975508881e273e61d227ac275e594", @ANYRES32=0x0, @ANYBLOB="000325bd7000fedbdf253a00000008000300", @ANYRES32, @ANYBLOB="ae005b007a97e2fa3975712454410e9c1f9ec5fc5c6a423ee04164179729a24bce2655ccb42cd5e5cf1607e389ee7cf40d4bb5449208b23537812742aa59a2d3a2b2e1ce9a876a67461daee3005923c7af176034ae5722482f68287c9590681ace0f339927067e8aeeba499da989bda9ddecc3953cc05d258c0eb027356d655d794f08d5974feb9d311844659626dbcfb4757591365d6f5332ff01899c682d20fc906ff83b700201c118a73455a8000006006500cd4b000006006500030000000600650002000000060065007fff0000"], 0xec}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x329040, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000008c0)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYBLOB="efbb4ad3792670fa0313defd6dec71ffba65bd965748ee2af073ce5fc0f6553f3b28705d3a3565204642cbc8354d60d511e10a3d8d316fb3ea00922e2434e5afd9f09fb53f594c6b2cba5d1c5dc98682f2ab9b3e88945976512d018ae70018a5ed2ba758e6e4ccdc4faff2bfafcc0901b081aa4c5906f3df9233ba26122a98aa13eb6ed56fe4c4aebbb125c0c404800b3040e24140d897939391522e7296f5381e34843e2c1531a3396abfa71ccda934bfcc4d222fd936c43bbd0027f8a85e1cb670f9ccd2bc5e51485c6a7b9312e328865018b11634e9", @ANYRES8, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r5, @ANYRES32=r2, @ANYRES32=0x0], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r11, r10, 0x0, 0x100000000000004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r12, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r12, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000a00)={0x15, 0x110, 0xfa00, {r12, 0xfff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4a, @mcast1, 0x8}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) sendfile(r10, r11, 0x0, 0x3) 11:04:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000038000900000000000000800001000000fdff9e42b5caf8f900000c000180060000090000000070e4dab90007204a67906277178853c52634fd3210430b7457e25d85f32a6e2ed0d8a8a84107a8a153311e8678cd767bbe4cbc7ab90d46f9b35f66aa704693"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001900)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, {0xa, 0x4e22, 0x9, @private0, 0x2}, 0xffffffffffffffff, 0x3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x7c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @ib={0x1b, 0x1f, 0x9, {"ab399f0a13f3b6f0ad080b582150ef5d"}, 0xfffffffffffffffc, 0x9, 0x8}}}, 0x118) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000200)={r8}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r11, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) r12 = dup2(r8, r5) sendmsg$nl_generic(r12, &(0x7f00000018c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12dc}, 0x1, 0x0, 0x0, 0x20004045}, 0x48c5) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f00000004c0)={0x4, 0x8, 0xfa00, {r9, 0x80000006}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000400)=[{0x0, 0x0, [0x401, 0x401, 0x1, 0x8000, 0x24000000, 0x8, 0x0, 0x9a, 0x4ab1, 0xffffffff, 0x59f, 0x5, 0x0, 0x89, 0x7f]}], r11, 0x1, 0x1, 0x48}}, 0x20) [ 543.067276][T29223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:04:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x3) 11:04:34 executing program 5: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ec0f005155fd8070f1a35b35314964f3f2e429f71bead83987d973b5712475f00a420a0b2d3ac96f22680a939cbf74912c8a564452f7a0de55fef6b8e89bdbcf943c532a2807df567b016d04a1a2f973a0597aa389a1263e84aec6fea360fe747ffb69ee06604b402983f25e9f6f160e4e1a4aedcb9ad01865a2b71a18eaaeb1f319e21a2d8545c78f822e059285b40e7a50ee38a2cc7cb2af7a2f2dcf81ad0c6cba1327a01781a00e3618a0c4f402587703d3d7cdff11b350d975508881e273e61d227ac275e594", @ANYRES32=0x0, @ANYBLOB="000325bd7000fedbdf253a00000008000300", @ANYRES32, @ANYBLOB="ae005b007a97e2fa3975712454410e9c1f9ec5fc5c6a423ee04164179729a24bce2655ccb42cd5e5cf1607e389ee7cf40d4bb5449208b23537812742aa59a2d3a2b2e1ce9a876a67461daee3005923c7af176034ae5722482f68287c9590681ace0f339927067e8aeeba499da989bda9ddecc3953cc05d258c0eb027356d655d794f08d5974feb9d311844659626dbcfb4757591365d6f5332ff01899c682d20fc906ff83b700201c118a73455a8000006006500cd4b000006006500030000000600650002000000060065007fff0000"], 0xec}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x329040, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x329040, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000008c0)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYBLOB="efbb4ad3792670fa0313defd6dec71ffba65bd965748ee2af073ce5fc0f6553f3b28705d3a3565204642cbc8354d60d511e10a3d8d316fb3ea00922e2434e5afd9f09fb53f594c6b2cba5d1c5dc98682f2ab9b3e88945976512d018ae70018a5ed2ba758e6e4ccdc4faff2bfafcc0901b081aa4c5906f3df9233ba26122a98aa13eb6ed56fe4c4aebbb125c0c404800b3040e24140d897939391522e7296f5381e34843e2c1531a3396abfa71ccda934bfcc4d222fd936c43bbd0027f8a85e1cb670f9ccd2bc5e51485c6a7b9312e328865018b11634e9", @ANYRES8, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r5, @ANYRES32=r2, @ANYRES32=0x0], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYBLOB="efbb4ad3792670fa0313defd6dec71ffba65bd965748ee2af073ce5fc0f6553f3b28705d3a3565204642cbc8354d60d511e10a3d8d316fb3ea00922e2434e5afd9f09fb53f594c6b2cba5d1c5dc98682f2ab9b3e88945976512d018ae70018a5ed2ba758e6e4ccdc4faff2bfafcc0901b081aa4c5906f3df9233ba26122a98aa13eb6ed56fe4c4aebbb125c0c404800b3040e24140d897939391522e7296f5381e34843e2c1531a3396abfa71ccda934bfcc4d222fd936c43bbd0027f8a85e1cb670f9ccd2bc5e51485c6a7b9312e328865018b11634e9", @ANYRES8, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r5, @ANYRES32=r2, @ANYRES32=0x0], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r11, r10, 0x0, 0x100000000000004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r12, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r12, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r12, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000a00)={0x15, 0x110, 0xfa00, {r12, 0xfff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4a, @mcast1, 0x8}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000a00)={0x15, 0x110, 0xfa00, {r12, 0xfff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4a, @mcast1, 0x8}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) sendfile(r10, r11, 0x0, 0x3) 11:04:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000038000900000000000000800001000000fdff9e42b5caf8f900000c000180060000090000000070e4dab90007204a67906277178853c52634fd3210430b7457e25d85f32a6e2ed0d8a8a84107a8a153311e8678cd767bbe4cbc7ab90d46f9b35f66aa704693"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001900)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, {0xa, 0x4e22, 0x9, @private0, 0x2}, 0xffffffffffffffff, 0x3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x7c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @ib={0x1b, 0x1f, 0x9, {"ab399f0a13f3b6f0ad080b582150ef5d"}, 0xfffffffffffffffc, 0x9, 0x8}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x7c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @ib={0x1b, 0x1f, 0x9, {"ab399f0a13f3b6f0ad080b582150ef5d"}, 0xfffffffffffffffc, 0x9, 0x8}}}, 0x118) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000200)={r8}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r11, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r11, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) r12 = dup2(r8, r5) sendmsg$nl_generic(r12, &(0x7f00000018c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12dc}, 0x1, 0x0, 0x0, 0x20004045}, 0x48c5) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f00000004c0)={0x4, 0x8, 0xfa00, {r9, 0x80000006}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f00000004c0)={0x4, 0x8, 0xfa00, {r9, 0x80000006}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000400)=[{0x0, 0x0, [0x401, 0x401, 0x1, 0x8000, 0x24000000, 0x8, 0x0, 0x9a, 0x4ab1, 0xffffffff, 0x59f, 0x5, 0x0, 0x89, 0x7f]}], r11, 0x1, 0x1, 0x48}}, 0x20) 11:04:34 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x64000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:34 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x18a00, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffa28, 0x0, 0x0, 0x0, @ib={0x1b, 0xd35, 0x4a01, {"cd152aeefcae9f9bcac253bb7564c192"}, 0x0, 0xffffffff, 0x101}, @in={0x2, 0x4e20, @remote}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffa28, 0x0, 0x0, 0x0, @ib={0x1b, 0xd35, 0x4a01, {"cd152aeefcae9f9bcac253bb7564c192"}, 0x0, 0xffffffff, 0x101}, @in={0x2, 0x4e20, @remote}}}, 0x118) syz_usbip_server_init(0x1) (async) r1 = syz_usbip_server_init(0x1) close(r1) (async) close(r1) fchmod(r1, 0x42) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000020000002e2f66696c653000"]) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 11:04:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x53000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 543.716238][T29229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 543.739197][T29235] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(3) [ 543.745746][T29235] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 543.753386][T29235] vhci_hcd vhci_hcd.0: Device attached [ 543.758897][T29232] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) 11:04:34 executing program 5: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ec0f005155fd8070f1a35b35314964f3f2e429f71bead83987d973b5712475f00a420a0b2d3ac96f22680a939cbf74912c8a564452f7a0de55fef6b8e89bdbcf943c532a2807df567b016d04a1a2f973a0597aa389a1263e84aec6fea360fe747ffb69ee06604b402983f25e9f6f160e4e1a4aedcb9ad01865a2b71a18eaaeb1f319e21a2d8545c78f822e059285b40e7a50ee38a2cc7cb2af7a2f2dcf81ad0c6cba1327a01781a00e3618a0c4f402587703d3d7cdff11b350d975508881e273e61d227ac275e594", @ANYRES32=0x0, @ANYBLOB="000325bd7000fedbdf253a00000008000300", @ANYRES32, @ANYBLOB="ae005b007a97e2fa3975712454410e9c1f9ec5fc5c6a423ee04164179729a24bce2655ccb42cd5e5cf1607e389ee7cf40d4bb5449208b23537812742aa59a2d3a2b2e1ce9a876a67461daee3005923c7af176034ae5722482f68287c9590681ace0f339927067e8aeeba499da989bda9ddecc3953cc05d258c0eb027356d655d794f08d5974feb9d311844659626dbcfb4757591365d6f5332ff01899c682d20fc906ff83b700201c118a73455a8000006006500cd4b000006006500030000000600650002000000060065007fff0000"], 0xec}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x329040, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000008c0)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYBLOB="efbb4ad3792670fa0313defd6dec71ffba65bd965748ee2af073ce5fc0f6553f3b28705d3a3565204642cbc8354d60d511e10a3d8d316fb3ea00922e2434e5afd9f09fb53f594c6b2cba5d1c5dc98682f2ab9b3e88945976512d018ae70018a5ed2ba758e6e4ccdc4faff2bfafcc0901b081aa4c5906f3df9233ba26122a98aa13eb6ed56fe4c4aebbb125c0c404800b3040e24140d897939391522e7296f5381e34843e2c1531a3396abfa71ccda934bfcc4d222fd936c43bbd0027f8a85e1cb670f9ccd2bc5e51485c6a7b9312e328865018b11634e9", @ANYRES8, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r5, @ANYRES32=r2, @ANYRES32=0x0], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r11, r10, 0x0, 0x100000000000004) (async) sendfile(r11, r10, 0x0, 0x100000000000004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r12, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r12, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000a00)={0x15, 0x110, 0xfa00, {r12, 0xfff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4a, @mcast1, 0x8}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) sendfile(r10, r11, 0x0, 0x3) [ 543.765584][T29232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 543.773103][T29232] vhci_hcd vhci_hcd.0: Device attached [ 543.775254][T29237] vhci_hcd: connection closed [ 543.778967][ T9310] vhci_hcd: stop threads [ 543.788042][ T9310] vhci_hcd: release socket [ 543.792509][ T9310] vhci_hcd: disconnect device [ 543.793477][T29236] vhci_hcd: connection closed [ 543.802926][T29247] loop0: detected capacity change from 0 to 128 11:04:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000038000900000000000000800001000000fdff9e42b5caf8f900000c000180060000090000000070e4dab90007204a67906277178853c52634fd3210430b7457e25d85f32a6e2ed0d8a8a84107a8a153311e8678cd767bbe4cbc7ab90d46f9b35f66aa704693"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001900)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, {0xa, 0x4e22, 0x9, @private0, 0x2}, 0xffffffffffffffff, 0x3}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001900)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}, {0xa, 0x4e22, 0x9, @private0, 0x2}, 0xffffffffffffffff, 0x3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x7c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @ib={0x1b, 0x1f, 0x9, {"ab399f0a13f3b6f0ad080b582150ef5d"}, 0xfffffffffffffffc, 0x9, 0x8}}}, 0x118) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000200)={r8}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r11, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) dup2(r8, r5) (async) r12 = dup2(r8, r5) sendmsg$nl_generic(r12, &(0x7f00000018c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12dc}, 0x1, 0x0, 0x0, 0x20004045}, 0x48c5) (async) sendmsg$nl_generic(r12, &(0x7f00000018c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000000580)=ANY=[@ANYBLOB="dc1200001b00100029bd7000fedbdf251a0000006b554f3a2357965458ec336b7805e77d39e10e8c86c0897350638217dbf211efe0302959748716cac6ec2d7031af080073007f000001232607604cda02008de8a30bb2761a92fa7ec0c06be6b2fa5030fb3ac3ba0a4415d523ed18846679b5bbcbdb8720cbc527566d690843b34ebc63af07edcddcb381e0e8102a806421be42c5dd24dd38632f590032fe94ce844c61a745ee1f13db2b14a2462f302428427d86166310d56e81bdddf4f37013d6f375f8031ba69821274c47b539ca9283a8ac328baa6d376b5864362870308bf48b3aaff8add75fa61d4e2e673955878dfb0eec797df33aa6bb287511729017f41db50699ef9c5a17f79dd91e25fe42d7a70837bf7420131fe2d5bc965c74e7f80066a76e8372786b07b7eacd32a5e9f2d7dd33978ad9b6845999e5ed217a0f3ae56a77cbbc50196e674d9fb7e1f9445eba56bb6190981ecfd2af8faa0ca838c9243a8f809dc68f5b030627006fc382ebdd6c1ca85e73b175d987131489c096a682940a6f4ca0f324148db72d79fe0895202296128b75031a3d453b14e4ba88c08131b5ccb5fe388bcf6103dacdeb8eeb74277b479c9473912569198fda82377a988b4e86279cc13760bcb29ba739b72e63bd3eba8944b2a1920c2701c641eaddea390ea9a232c1fc928d616839b43bff4c6e9734ebd7458d77f6f6d6a841fe29e12c2d72f14a6ab66508e5f0ca7fd611a77c1cb10a352f6227c8fb90c6413832fa3b62c1380da70c52ad87fc2d267b92133e41da05e8bb82080e0dca27a5fdf03ba36a12c6ef5b95be0e4b548c255c1e0b57435e9dd09669e95fe47f706268528c25ab0a9cb4efb4242a9bc31684ae20465d1b9e0d248719ce5369aa184ab694dbbe9c4602d2fbc73f9f744184bb70812a00c87552c6d89043b2a23d6bbc212e9d806f70158b03ebbe48f7b22e77b40681429d9b7eb04f69860925bee51200630f614000ad154a2f5c00f13a5a9faa8de70193923a755824e767a980785aba980fac6fe3779d2c100eac69257d2a62a920b0163387db96f05692c05ffc08388860f3b48653ffb271a2193c2607cd6a40a667439083c7b8ec7343fdd861dd55ca869f7f3857a25757ae6f7d355b59c4e1df2dc70d2e6f79007089d6f72cb81a07ccc336eeb2648ed9d036754620af33f8ff271ce706009617be341fbde4a41979d412f132faf7e78e07c37d097eb2390f5ac4e51f2ab0d3d18ae1c0f837fd7daf86eecb9f10858f8ed0b8209b4f023c8e720e56271fb9575460258d96bb94f555eba2cb84c56b3540dde2698437af1adc8458e2ff08335bd59a4df3045b6740d84111c33b620d0b526fae0a948268feded02c0a9e735e8b24b76f157bfaf0462c22f271e0332d9a6db19e94237e81f0dbbba5bffb597ab869564ac14edf06eae4dbd57ccc32bf666552596d8d4a8bf4acb0db3a501ac790d8dabca917a83e4702cbf5ee6b2d44ff18a826dea411180cb987c559097c0a44e964d67143764636af1aedd76940ef6c0b8ed1f10fab68b7667564f721c6f8f205cfc70d1e881ed814252c9a0e3171b7fb20a324ea3dbab5c0f5f1c3fb6729590f560253444ab7e5344bbd851d2dd2bc267f11deee1eb39091edc7c9d088cc07979dde8347414df37831dc201c177b4e1563ac7919bb17b301ad2f0069555bd41e9fc262dae7a001a70230627eb3f8e780ff361009890a8787355dafd15fe927daa5d85823df38fcd99c6d720d716f26cbc32bb19a366b72702deb67c3a60bbedd1f54dcffdfa0b08d5b2a16d4865c6676b24efdefc5930d6c277871fa7c8129ed6f7818529f4bef030ef0dce86565f6ecd8ccf604b652cc2f045f8829e18669e67f52a657feccb11b66f7a8d1a6a81b5296cdfbef6ed8ef565f31215e44d6e0c39e4e31ee37e4f0185929ea4b217969951f0ced14ebf35e7f7c68bd1dd6e95d2a3e1d7b85c893853c6074291b9ebf81087fd437ae9d0f98c46112cab48da7d22caf55080aa639ba5d5423b67b3517a5d8ce1225a3f67445f29f4ec3271dad930c4a826a5ebdd59187139e61fa613ce9dbe11dcce08d20af5c6ce7508d2e87c97162c02f480706b90e7501fcc057ef77f893c573a8251cc66ee7f29592c6c8c387f051c16d2e2bc15d12f96f2c2fdc4c9bc089d914aefa7c34e53d2a1f08e13101c4a5525857066b4e7eeab3d30888d3989c7a0d9abb9d29bf2f188e5046f189ad5cee47f1f4fc7fee21763fbb577bf31b85147525d9efa76dc125f2014c5f12719d571bdaf559bdcb2bdcfd531eab3b321d0cdb7b790b91a0f4947a0512b1514451c823955232f62a756bd3eb62d50205511dc28d9ed44c0c01b97da526e2a8e5def018adf4d3bfb3b2397c0aa4fab360fea164b4725e9f2fc14b457d73281d749fdb30adc2cf896b1f395df598d4a9b3b06e6ca71972968679d79ac924bb4c40de356116977255fb19f1057d5feaad498340af4dfb9797a7d63ed2858c5e8615d6170db5f51994f84b080fac0d15de27336a6a7d85e22d6e8c1363c58803faeb5e2363c0b4b0a27f6548bcdd17f0623138d4aedc63de8da1ab2dbb13bc30637870f49decd2b877c62da26143bf6dbc4dd80e887d5c666dadd9883ae6c71559136f611355c5897d0398d7fa795eb2d6c4bf9a47e16d02c5e4439dd67ad54798aaaa355f7bc7690f9f91d07ce06a089e2a1048ccdae81e61fa8afe94b471cbbc8257f875c15950efb304a98b244e41353eb3dadf8686e42a1fe4d497c0e184bd51ae2f8f7c996376f959ac9666f6dcbd3c808cef1ca0214f05d3dc5734dff5ffe8d12cf4343b9eaef6faa2f33888a5c3cb1415e3fe263037b70ee3a6932532165d9e8c4a5587b6f4ebca8dba079c31365427fbba04293b0b33470e302c5aa02228a99ec928521669400dee0dc40272dfdc082a04f0e1640c0e67b5d6ea65e162c4f2671db5e21ded03a3a8ed13023428f63ee49dc30899265fb9c234ecc983f4ad9e9a7bb7a91ec47fa749b569c214b11a9c4975c25042be6241c2f6025b8fb39a6a12f39ee7d95043cef770df03a8df3425b7cf1a19f0283fb82020c3d1f3b5fb195739c1d7680d8371c9b9eb3065e74196cd1d4eb001bdb0d8f6abd78460b3d296cfb4d5df43af56fbe128b66b1db6db5d8aab09882a046b8dd4b1a91848210f04a422424e974bc570a7c7ba0ae1fb500693b9920988abafb07848191a318ba2bc2cc3d8d2e5e3eaf08aee4a8dd89315fe0240bdb326e5b637100a2d30b9a6d63058a97dd4b2a62a6da404c8010354d2971646e29be89ce318a7b7327f4eb2bd116a419c63365f25006c3336d4122ae504a1b5194d7ac4c442752d7a718949ff0d4b9993dc9d927167c86e4201a7aa281808170099d68c51920a0e3d6dbdff0f3dff092a72f2c223abfda00ef3bdc1ec6f18ee567d757bfc718a0a2d0f66215029c2a4a2d290b655e2de20e0308d408e09a2d596284415e70babb081008a7856a3aa23e3d72d045588d36f0a895a25726cddb021d8a527f3f3d25cfdfd04c86110bc05727297ca953c0ab41cb1b7733157d17e0a61b091d5c3055c3985c66453497b5413e2f83baf593b9d975a4f703e7c9cb249bdfc05c7be874bd0ce4b2942448e7fd9212a203f62ce77010aedf527621f744a9e23b87a07c4d8e3be00ec25fe8b4b81804ade97850bdf40d8421ac6d3f56968cc9bed6e09a7005868eb6fc8714ff73ccf41668f51fc7dc9aca8de71fbc850c3cee8d0d98098f5c8e323d054c6e1316a160317993fa0ce11b04d99083a42f0ea8e7e0129d981e705ef5581b4538cced0736a781ea45f9e0c61385d5f35c686ac3cf9ef6f1816cae963253bdf2984597eb4edc4bc30c0157395b2a4149f196c7326959045177fd5ca993df58f855f7b98fb29e9f6eb63b15fa5dd38ed19e0d71f639bd683b65dcd851067b28c89909356726e33039f7df08d9e6c08fa2066ca04149fa913a5051322f80e22060d3171928d6d5200a9e63db7ed852687ccf09707042596ae1314778f492bfcfacb8461c3e1eae82822cf7fe2c5b951f2b8b81d54092cfa8f10ce24fa7163e5d6f396ce3b4db085ddf8f8f18d31fb006ecbb10dab63b5f89d9f5b2aad83527f0ec9a446247575133e7d8460f6cc37f5676a0cc4cc52b2e62f41f7d34d5f620aab737bde5421eea402960db7bc000000005509a51c4b382fba93d2d91096aa376babce5a6349ce6b57388659cc910d4d53e74185f355413e57c63ffe833195c1e214a943de65e8b93b43b88dc8875b2a64a873b6f90d76255a81f590c1c5c72d61b0bd82a9af19f1b961d63dfd1351f6bc2e5e27bb9a88553faf50fef11716c3aba4434aa23218f532e7150f9c7c1d818ee3be534937b46145d206e43bbbb5e63744d2620a9ecebbd2b8c7312947bc5d53cc4a8fc27373c0ac2e7f0904a9290c9a6e0ccb004d44db54caae657f4ae1a16272a5df8b385378446543c8bfd85a3d45fd4a8b2ed683f45b6c165d349a787ae12e3eefe4472df01b0356681ef7b95cf4f2b68d4517314a6c3b2038ab907a29dda0dce3aaf00e5cada9966620a888e2abd44d46755eb1c780b7109b85b9741b3334fc92284c1aa7ebef2d4f3cef6162143519ab9bf76ddb7ef89550aed0ca9efc240594d25d671192bd2abd7c1e090f7df177442a648594cab91f02f2f923276228366abfa29f8909cf2cc0a1234e301f4187dddba95f4586ffc5c494a3bc2b63c411b67037c25e0db1bce0a9da72ad06ee5f564e7320ab4ca984658918f3a3ff171bf1c5a675517130864d4190f948e6e45fa10231a7765f291e0da771b1242c013811e0a0f7588159ddd05d8d6ce8af93e3386cf88a53222ba3fab544ffe20a3595528f546c32086fe3a6a660977345669001d0ce305613ea82392dd748ab14ad100b977111c05a3b5f1baa0e75501c746e18315b76ec55a69a23971ca9f6ad5de2f8a92a564e66dce1bd1ed83882e5d77a20079e5f58257050231c73e5c9cc21f9e6fe4ede9c1c76cbe2b011db761177025ab6c00269a8a075e7d596588e658797939062933f289c932f989d318ed231829ab38d0ef6c19029f851af71a21860c67b331ce7b60cc5fe48f529659e400d08f01c58f1fea1c53f85680504d6557aa45863c5987b2d423a452b51455553bd9ac5a0df972eb3486d84609286b677450b1b3b8a87e626b0271024be355dc9704bda43f895293f96697a4d7b0efbcb6de72d6f2159d026280fdeb66b2b3626dc989ff15e0f3fead0a10ced63bdeb3f90f55274448fdc8493f387e357e3e31921791158dc4c658b08a0df668cb0d8c2c253f95084d3ba52996e5afcf25aeef3f8e910ce2d1fb1ba7d391658975219b023c75f68358f7b5c7cd96e1bd5cfd9bc83ae3efd30984ad73dae76722a3ab916ed5bad4ac51db0133e06958f5d790463b2cd0cf1412913f6383818e80db964c2cfc3abe6ce35f9e6eedf65e8b31185d7310c6172a0f766aea116ad19c0c761c245a2da4d836a84bbcc83bba4711582c8cdbfcebce85a62354d442d3f4e78a87d892759684068a0fee0090fa7afc2a5f7ff22e7c49bcf0de5eb74bcb4e1ea9921da27bc120657a3dbfc761255bf2815e92ac435a090cda57aab8e99f7a90e2b4d42ce5e4566b0816f701ee29ce7aca4d09f31f7841bbaef06a3a09bf9947c10e5523259b15034cdbe69d8fe6dd274606ca6fac0f2dbd8f5e5f594249ffbd46424884a78643a5f27219e23e076ef0b977f4124972e998ca366deb507466481e487cc8e46af0ef1f28637585885e87b572d85058c08c0b17256ad629db13954266245ab7636479090f0d8f657f020909e3c3defcb4a46275b6a3612fbd9cd7cdea6d1170ab0513d14dc7a83c6bef436d8d9c4a0589b50ed132431b35952fcff7a0a5f604f314f2882fec87dddca70dd4bd90024dae77637293028d95bbe1852da06be7a5604ab51336ae51a7f2aa62aca43150304f8681a82de175a967e8f8d8327fb390cfbe8b5f1b9ea3dff61e8e7076f3ddd9563c9ddf47f75239e23e9dbba6d820b02e19f2db4c55a2ef14581312d7552477a746428e4257a7bcd3fce53d46ae14cabff1df5d44a90ca32fb41bd283bd7747a4af8c2aa114434db4a28749399dbbd7610365a65985e2a479a0500dee722fc737cfb2617bee436c03e19817e5611db7b040cc4085f900b27481f4b5679a455f94a0d29ee4eee423a40c1039c5801d9c183d743a52dd1a8a73861550f143b489c14518af1f6f1f9ae4dc63471ea1db90000522ac643b7cb905a631fba36e166eb83d5a01a9dab0aa91d701d18108dc10ecf9d290c1220edf6fc11007de9914d2aad7c4170480418c77f87c0c4ecd6264f2ddd5e4c4e5c3f10559b41482ce2300862e57ceb0f416fafa608007800e00000014400148014009000000000000000000000000000000000012a008800aaac8eccf49ff67f3e0f1b6ea287f5e9bb16a547f8f0d8abe95a6c18b596ac7cb4d6f55e2dda000032e5d325849158962ce414417131ead161f9a0e9a75b65704cd16ac4bab4047d1ae9310a643ef9daba82e69bcaf18d7c27618c4bec91528d2e05ef9bbf222c3b224ca9e276de6c50dbd2ccc179abce2c57aeb4c8787c0bf263a9d84ea29a20ea53f7b18dd2877b2211dd0968f551d078da542a0c678f8bad44fa231dd03e3310ed7b00b050416186550510a0a068b593acf1784528234fa7e7bdad9e8d8f38d79a0ac50aada0e5adbf7d10ea29e5e6d0afbc1d2daab48012cf549d62c72a5a2eeccc007ecf83256e6e00"], 0x12dc}, 0x1, 0x0, 0x0, 0x20004045}, 0x48c5) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f00000004c0)={0x4, 0x8, 0xfa00, {r9, 0x80000006}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000400)=[{0x0, 0x0, [0x401, 0x401, 0x1, 0x8000, 0x24000000, 0x8, 0x0, 0x9a, 0x4ab1, 0xffffffff, 0x59f, 0x5, 0x0, 0x89, 0x7f]}], r11, 0x1, 0x1, 0x48}}, 0x20) 11:04:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c040000000000000075b67e0180c2a06b87a5bb60ac34abefb54f82e84df378fc3624b757226312b06a33f580e6b43dcaf5312909613f49d06ac101f81823b7f380bf06b204c816622f98bfe72b7a39c91b3da6209c6e017f2ff307fc7593b8394b71811532fd6f570f21a0609d33d428d7fb67f235be", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003800800010000000000140002007663616e300000000000000000000000080003000000000014000600fec0ffff000000000000000000000001"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x104, r1, 0xa00, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffd}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdd}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5a}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000004}, 0x48004) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FITHAW(r5, 0xc0045878) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000000c0)) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000500)={0x7, 0x7fffffff, 0xc78}) r9 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r10, r9, 0x0, 0x4) sendfile(r9, r10, 0x0, 0x3) [ 543.817596][ T9310] vhci_hcd: stop threads [ 543.822000][ T9310] vhci_hcd: release socket [ 543.826495][ T9310] vhci_hcd: disconnect device [ 543.847409][T29250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 11:04:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8d, 0x125100) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x9, 0x8, {"e0e1eba106ac34c40bbfbc1cad6efa46"}, 0x8, 0x40c, 0x1000}, @in6={0xa, 0x4e21, 0x6d, @mcast2, 0x9}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8d, 0x125100) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x9, 0x8, {"e0e1eba106ac34c40bbfbc1cad6efa46"}, 0x8, 0x40c, 0x1000}, @in6={0xa, 0x4e21, 0x6d, @mcast2, 0x9}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) syz_open_dev$vcsu(&(0x7f0000000180), 0x8d, 0x125100) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x9, 0x8, {"e0e1eba106ac34c40bbfbc1cad6efa46"}, 0x8, 0x40c, 0x1000}, @in6={0xa, 0x4e21, 0x6d, @mcast2, 0x9}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8d, 0x125100) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x9, 0x8, {"e0e1eba106ac34c40bbfbc1cad6efa46"}, 0x8, 0x40c, 0x1000}, @in6={0xa, 0x4e21, 0x6d, @mcast2, 0x9}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 543.952051][ T25] audit: type=1400 audit(837860675.090:464): avc: denied { ioctl } for pid=29252 comm="syz-executor.5" path="socket:[80064]" dev="sockfs" ino=80064 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 11:04:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x4) 11:04:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c040000000000000075b67e0180c2a06b87a5bb60ac34abefb54f82e84df378fc3624b757226312b06a33f580e6b43dcaf5312909613f49d06ac101f81823b7f380bf06b204c816622f98bfe72b7a39c91b3da6209c6e017f2ff307fc7593b8394b71811532fd6f570f21a0609d33d428d7fb67f235be", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003800800010000000000140002007663616e300000000000000000000000080003000000000014000600fec0ffff000000000000000000000001"], 0x50}}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x104, r1, 0xa00, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffd}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdd}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5a}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000004}, 0x48004) (rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FITHAW(r5, 0xc0045878) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000000c0)) (async) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r8, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000500)={0x7, 0x7fffffff, 0xc78}) (async, rerun: 32) r9 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async, rerun: 32) r10 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r10, r9, 0x0, 0x4) (async) sendfile(r9, r10, 0x0, 0x3) 11:04:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000006c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000600), r4, 0x1}}, 0x18) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x121000, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940), 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x200, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r6, 0x2}}, 0x18) r7 = open_tree(r5, &(0x7f0000000740)='./file0\x00', 0x1800) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000007c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) r9 = open_tree(r7, &(0x7f0000000880)='./file0\x00', 0x1000) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000900)={0x1, 0x10, 0xfa00, {&(0x7f00000008c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f0000000840)={0x10, 0x30, 0xfa00, {&(0x7f0000000780), 0x2, {0xa, 0x4e24, 0x4091, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, r8}}, 0x38) 11:04:35 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x18a00, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffa28, 0x0, 0x0, 0x0, @ib={0x1b, 0xd35, 0x4a01, {"cd152aeefcae9f9bcac253bb7564c192"}, 0x0, 0xffffffff, 0x101}, @in={0x2, 0x4e20, @remote}}}, 0x118) r1 = syz_usbip_server_init(0x1) close(r1) fchmod(r1, 0x42) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000020000002e2f66696c653000"]) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 11:04:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x54000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:35 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x67000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c040000000000000075b67e0180c2a06b87a5bb60ac34abefb54f82e84df378fc3624b757226312b06a33f580e6b43dcaf5312909613f49d06ac101f81823b7f380bf06b204c816622f98bfe72b7a39c91b3da6209c6e017f2ff307fc7593b8394b71811532fd6f570f21a0609d33d428d7fb67f235be", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003800800010000000000140002007663616e300000000000000000000000080003000000000014000600fec0ffff000000000000000000000001"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x104, r1, 0xa00, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffd}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdd}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5a}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000004}, 0x48004) (async) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x104, r1, 0xa00, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffd}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdd}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5a}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000004}, 0x48004) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FITHAW(r5, 0xc0045878) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000000c0)) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r8, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000500)={0x7, 0x7fffffff, 0xc78}) r9 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r10, r9, 0x0, 0x4) sendfile(r9, r10, 0x0, 0x3) (async) sendfile(r9, r10, 0x0, 0x3) 11:04:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000006c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000006c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000600), r4, 0x1}}, 0x18) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x121000, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940), 0x111, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940), 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x200, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r6, 0x2}}, 0x18) r7 = open_tree(r5, &(0x7f0000000740)='./file0\x00', 0x1800) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000007c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) open_tree(r7, &(0x7f0000000880)='./file0\x00', 0x1000) (async) r9 = open_tree(r7, &(0x7f0000000880)='./file0\x00', 0x1000) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000900)={0x1, 0x10, 0xfa00, {&(0x7f00000008c0), r6}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000900)={0x1, 0x10, 0xfa00, {&(0x7f00000008c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f0000000840)={0x10, 0x30, 0xfa00, {&(0x7f0000000780), 0x2, {0xa, 0x4e24, 0x4091, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, r8}}, 0x38) [ 544.710501][T29271] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 544.717062][T29271] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 544.724682][T29271] vhci_hcd vhci_hcd.0: Device attached 11:04:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000006c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000600), r4, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000600), r4, 0x1}}, 0x18) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x121000, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940), 0x111, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940), 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x200, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r6, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r6, 0x2}}, 0x18) r7 = open_tree(r5, &(0x7f0000000740)='./file0\x00', 0x1800) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000007c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) open_tree(r7, &(0x7f0000000880)='./file0\x00', 0x1000) (async) r9 = open_tree(r7, &(0x7f0000000880)='./file0\x00', 0x1000) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000900)={0x1, 0x10, 0xfa00, {&(0x7f00000008c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f0000000840)={0x10, 0x30, 0xfa00, {&(0x7f0000000780), 0x2, {0xa, 0x4e24, 0x4091, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, r8}}, 0x38) [ 544.751716][T29273] vhci_hcd: connection closed [ 544.751870][ T3085] vhci_hcd: stop threads [ 544.760909][ T3085] vhci_hcd: release socket [ 544.765366][ T3085] vhci_hcd: disconnect device [ 544.771716][T29294] loop0: detected capacity change from 0 to 128 11:04:36 executing program 1: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000002c0)=0xfffffffffffffffa) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @mcast2, 0x1}, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:36 executing program 1: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000002c0)=0xfffffffffffffffa) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @mcast2, 0x1}, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x2}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r2, r0}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:36 executing program 1: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000002c0)=0xfffffffffffffffa) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @mcast2, 0x1}, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x2}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r2, r0}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x5) 11:04:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) write$cgroup_type(r0, &(0x7f0000000100), 0x9) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', './cgroup.cpu/syz0\x00'}, &(0x7f00000001c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x24, 0x1) 11:04:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x71000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:36 executing program 3: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x0, @remote}}}, 0x90) mmap(&(0x7f00002a2000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x8379e000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) dup(r1) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0x10}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0803000012001000aabd7000fbdbdf2507000069ec0000000000009ebaa0766af4d64ae65b4e89f96263196de9e4967e02a1c34f66dfd71718506f8b7201bf3d1b040be7ecae55a10fe482c2b2f1f94de1a2cf30d75512b00bc3ace06e9cc7cee2aad51a008a3d0a3efd4b4f2f84bffeda410bc710e2a6cbf5980c7f32a2e86e9980e04bd2a7b3089a966de4bf96ea6fac02ade8278f42ba3e8d1bf7cdf6f2a24391fa6f5c9aa79c3c81efe3b2f4ef9e5a", @ANYRES32=r5, @ANYBLOB="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"], 0x308}, 0x1, 0x0, 0x0, 0x8000050}, 0x45) close(0xffffffffffffffff) r6 = openat$incfs(r0, &(0x7f0000000200)='.log\x00', 0x80000, 0x151) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@remote}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) 11:04:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x56000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000200)=0x1) 11:04:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000200)=0x1) 11:04:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000200)=0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000200)=0x1) (async) 11:04:36 executing program 3: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x0, @remote}}}, 0x90) (async, rerun: 32) mmap(&(0x7f00002a2000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x8379e000) (rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) (rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async, rerun: 64) dup(r1) r3 = socket(0x200000100000011, 0x3, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0x10}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0803000012001000aabd7000fbdbdf2507000069ec0000000000009ebaa0766af4d64ae65b4e89f96263196de9e4967e02a1c34f66dfd71718506f8b7201bf3d1b040be7ecae55a10fe482c2b2f1f94de1a2cf30d75512b00bc3ace06e9cc7cee2aad51a008a3d0a3efd4b4f2f84bffeda410bc710e2a6cbf5980c7f32a2e86e9980e04bd2a7b3089a966de4bf96ea6fac02ade8278f42ba3e8d1bf7cdf6f2a24391fa6f5c9aa79c3c81efe3b2f4ef9e5a", @ANYRES32=r5, @ANYBLOB="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"], 0x308}, 0x1, 0x0, 0x0, 0x8000050}, 0x45) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) r6 = openat$incfs(r0, &(0x7f0000000200)='.log\x00', 0x80000, 0x151) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@remote}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) [ 545.688003][T29324] loop0: detected capacity change from 0 to 128 11:04:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r6, 0x80000001}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r3, 0x3}}, 0x18) 11:04:36 executing program 3: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x0, @remote}}}, 0x90) mmap(&(0x7f00002a2000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x8379e000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async, rerun: 64) dup(r1) (async, rerun: 64) r3 = socket(0x200000100000011, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0x10}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0803000012001000aabd7000fbdbdf2507000069ec0000000000009ebaa0766af4d64ae65b4e89f96263196de9e4967e02a1c34f66dfd71718506f8b7201bf3d1b040be7ecae55a10fe482c2b2f1f94de1a2cf30d75512b00bc3ace06e9cc7cee2aad51a008a3d0a3efd4b4f2f84bffeda410bc710e2a6cbf5980c7f32a2e86e9980e04bd2a7b3089a966de4bf96ea6fac02ade8278f42ba3e8d1bf7cdf6f2a24391fa6f5c9aa79c3c81efe3b2f4ef9e5a", @ANYRES32=r5, @ANYBLOB="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"], 0x308}, 0x1, 0x0, 0x0, 0x8000050}, 0x45) close(0xffffffffffffffff) (async, rerun: 32) r6 = openat$incfs(r0, &(0x7f0000000200)='.log\x00', 0x80000, 0x151) (rerun: 32) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@remote}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) 11:04:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x3) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) (async, rerun: 32) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r6, 0x80000001}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r3, 0x3}}, 0x18) 11:04:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x6) 11:04:37 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x1ef167b9, @private0, 0x8ef4}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) 11:04:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r6, 0x80000001}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r3, 0x3}}, 0x18) 11:04:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) write$cgroup_type(r0, &(0x7f0000000100), 0x9) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', './cgroup.cpu/syz0\x00'}, &(0x7f00000001c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x24, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) (async) write$cgroup_type(r0, &(0x7f0000000100), 0x9) (async) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', './cgroup.cpu/syz0\x00'}, &(0x7f00000001c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x24, 0x1) (async) 11:04:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x73000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x62000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r3, 0x0) recvmsg$unix(r3, &(0x7f0000000800)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/67, 0x43}], 0x6, &(0x7f0000000700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7fffffff, @empty, 0x7}, @in6={0xa, 0x4e22, 0xff, @mcast2, 0x5}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 546.731003][T29365] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 546.737661][T29365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 546.745245][T29365] vhci_hcd vhci_hcd.0: Device attached [ 546.772932][T29373] loop0: detected capacity change from 0 to 128 [ 546.794712][T29370] vhci_hcd: connection closed [ 546.798901][ T9310] vhci_hcd: stop threads [ 546.808049][ T9310] vhci_hcd: release socket [ 546.812475][ T9310] vhci_hcd: disconnect device 11:04:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) write$cgroup_type(r0, &(0x7f0000000100), 0x9) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', './cgroup.cpu/syz0\x00'}, &(0x7f00000001c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x24, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) (async) write$cgroup_type(r0, &(0x7f0000000100), 0x9) (async) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', './cgroup.cpu/syz0\x00'}, &(0x7f00000001c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x24, 0x1) (async) 11:04:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r3, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000800)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/67, 0x43}], 0x6, &(0x7f0000000700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7fffffff, @empty, 0x7}, @in6={0xa, 0x4e22, 0xff, @mcast2, 0x5}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r3, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000800)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/67, 0x43}], 0x6, &(0x7f0000000700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x100) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7fffffff, @empty, 0x7}, @in6={0xa, 0x4e22, 0xff, @mcast2, 0x5}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x7}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r4}}, 0x18) r5 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FICLONE(r5, 0x40049409, r6) 11:04:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x7}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r4}}, 0x18) (async) r5 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FICLONE(r5, 0x40049409, r6) 11:04:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEniYlJRJPDsssuLL7sXnYvg7p7XHYNiy7LBlZcs/QHFEad2JBpIjNBmyLVnnot/SN6EHvzJrT+A156ay+99OalUEo9SKdkMmM0jjVqYqx+PyDzZt7nmXnfmSjPhLxuX3t0p5i3tbxekXBcSUhEZEckLWHxhbxt2G3HZL8V+bnv3cuV/67f+CeTzY5NKjWemfplRCk1MPh+cSnhhW30ylb61vbbkTdbX299u/1x6nbBVgVblcoVpavp8uuKPm0aarZgFzWlJkxDtw1VKNmGVe8v1/vzZnl+vqr00mx/ct4ybFvppaoqGlVVKauKVVX6nF4oKU3TVH9ScJzc6uSknjll8kybB4MOsayMHhGRxKGe3GpXBgQAALqquf4P10r6E9f/3wfW/88Wl9Z+2Kz0/b8+4NX/G7Gg+v/XV/VjHaj/4yLSvvp/7u5vfwXM/nBFdLWcqf7HxTAYO7QrdOBVrf5Per+/rgc314bcBvU/AAAAAAAAAAAAAAAAAAAAAABfgh3HSTmOk/K3/k+viMRFxHGc5uUErBe5RFq4/+7rbo8TndFYuNczIGI+XMgt5OpbL2BTREwxZEhSsuu+HzwiTtRfeaRq0vLcXPbylxdyEbcnk5eCmz8sKUk35TuOM/53dmxY1R3Mj0rSzc+IRN1DpeSr4PyRwPyY/PTjvvNrkpIXM1IWU2bd93Uj//6wUn/+m23KT7hxAAAAAABcBpraE/j8rmlH9dfz956vgz4f8J6vhwKfz3vku57uzh0AAAAAgKvCrt4r6qZpWJ9pJOT4mPY2nh7VNeoNu4Xj+DP093hfYlppCrYi3kXwv8twyjFHWg2OB115/+TFP/ZN0I88zyvfaiPcyi1oNEK7jmNY9mBtNuqsZ/c/NjoqRiZOfuTYSe97SAK6vnn85EP7rvPv6/FjZtqxRrSDf3IAAAAAdEmj6Pf3jHZ3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEHn8e/Euj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KL4FAAA//8X6PzU") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x7) 11:04:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x7}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r4}}, 0x18) r5 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FICLONE(r5, 0x40049409, r6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x106}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x7}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r4}}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) ioctl$FICLONE(r5, 0x40049409, r6) (async) 11:04:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, r0, 0x0) r2 = syz_io_uring_complete(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x4) sendfile(r4, r5, 0x0, 0x3) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r6) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000140)={{r2}, "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"}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) 11:04:38 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x1ef167b9, @private0, 0x8ef4}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r0 = syz_usbip_server_init(0x1) close(r0) 11:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x64000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x75000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x6, @local, 0x3c}, @ib={0x1b, 0xff80, 0x446, {"730582a1b40d129f8287cf77d2cb9feb"}, 0x5, 0x5, 0x8}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r6 = syz_open_dev$vcsu(&(0x7f0000000180), 0x5, 0x10000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, r0}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) [ 547.728574][T29435] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 547.735162][T29435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 547.742690][T29435] vhci_hcd vhci_hcd.0: Device attached [ 547.758530][T29436] vhci_hcd: connection closed [ 547.761172][T29450] loop0: detected capacity change from 0 to 128 [ 547.772243][ T9310] vhci_hcd: stop threads [ 547.776579][ T9310] vhci_hcd: release socket [ 547.781011][ T9310] vhci_hcd: disconnect device 11:04:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x6, @local, 0x3c}, @ib={0x1b, 0xff80, 0x446, {"730582a1b40d129f8287cf77d2cb9feb"}, 0x5, 0x5, 0x8}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r6 = syz_open_dev$vcsu(&(0x7f0000000180), 0x5, 0x10000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, r0}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x6, @local, 0x3c}, @ib={0x1b, 0xff80, 0x446, {"730582a1b40d129f8287cf77d2cb9feb"}, 0x5, 0x5, 0x8}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) syz_open_dev$vcsu(&(0x7f0000000180), 0x5, 0x10000) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, r0}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) (async) 11:04:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x6, @local, 0x3c}, @ib={0x1b, 0xff80, 0x446, {"730582a1b40d129f8287cf77d2cb9feb"}, 0x5, 0x5, 0x8}}}, 0x118) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (async, rerun: 32) r6 = syz_open_dev$vcsu(&(0x7f0000000180), 0x5, 0x10000) (rerun: 32) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, r0}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 11:04:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x8) 11:04:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x406400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), r3, 0x7}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:39 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x1ef167b9, @private0, 0x8ef4}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r0 = syz_usbip_server_init(0x1) close(r0) 11:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x77000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x67000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, r0, 0x0) r2 = syz_io_uring_complete(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x4) sendfile(r4, r5, 0x0, 0x3) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r6) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000140)={{r2}, "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"}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, r0, 0x0) (async) syz_io_uring_complete(r1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r5, r4, 0x0, 0x4) (async) sendfile(r4, r5, 0x0, 0x3) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) close(r6) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000140)={{r2}, "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"}) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) (async) 11:04:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x406400, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), r3, 0x7}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 548.746331][T29485] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 548.752906][T29485] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 548.758637][T29495] loop0: detected capacity change from 0 to 128 [ 548.760480][T29485] vhci_hcd vhci_hcd.0: Device attached [ 548.784469][T29486] vhci_hcd: connection closed [ 548.784711][ T3085] vhci_hcd: stop threads [ 548.793729][ T3085] vhci_hcd: release socket [ 548.798199][ T3085] vhci_hcd: disconnect device 11:04:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x406400, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), r3, 0x7}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, r0, 0x0) syz_io_uring_complete(r1) (async) r2 = syz_io_uring_complete(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x4) sendfile(r4, r5, 0x0, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r6) (async) close(r6) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000140)={{r2}, "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"}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) 11:04:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @empty, 0x800000}, {0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x54b6}, r3, 0x5}}, 0x48) 11:04:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @empty, 0x800000}, {0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x54b6}, r3, 0x5}}, 0x48) 11:04:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @empty, 0x800000}, {0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x54b6}, r3, 0x5}}, 0x48) 11:04:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x9) 11:04:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000400)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x7ff}}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000440)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x4, @mcast2, 0x1}}}, 0x90) 11:04:40 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x9, 0x0, [0x6, 0x7, 0xf7dc, 0x5, 0x1, 0xfffff8a4, 0x6, 0x8, 0x6f, 0x0, 0x0, 0x2, 0x8, 0xbe, 0x6, 0x1]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) 11:04:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04006c653000c30a22437b3d6b572dfd49e277d5"]) r5 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x5, 0xff, 0x9, 0x0, 0xc3, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xab8, 0x8000000000000000}, 0x26, 0x7c, 0x8, 0x8, 0xffffffffffffffb1, 0x5, 0x8, 0x0, 0x35, 0x0, 0x2}, r0, 0x4, r0, 0x1) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000000100)="86c999575f10c63ba309b43f3b0c2cadb700dcb2cf50c5dd425bc3c2a0374b70386441cabfe085ed4b8afd67fa78e69d7b9b688bb034a1a0de68335133c35e66b092674b81e21ba9b76365d972f767fb3e6aff6610e0df7356db13b6d8bbcef394b9901917c910c226bd89ec5fbfc6a95bb6b3794f28a24cf69676cbce7d3a2bd0d1423865d1b46dddfccc4aa0", 0x8d, 0x8, 0x0, 0x3, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x401, r5, &(0x7f00000002c0)="e5f38b32f397686b83dc707f8e793d3d552a11282b2465b75cc9f8db023667f4e931bfb2b2d69ca4d7406d374433d26b5fa4d8f3e46634b9ec4670bfcb874e1a5bbf76196a7cbd73d5aa6887021ad061e6a6d99a9a8cfd429d27dbe395c321d44f225dbe4f4dcfcff0f89dfe137f8f6487639c5078176d108b", 0x79, 0x3a4b, 0x0, 0x3, r0}]) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x4) sendfile(r7, r8, 0x0, 0x3) 11:04:40 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x8cffffff, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x71000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 549.636538][T29538] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 549.643877][T29538] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 549.651494][T29538] vhci_hcd vhci_hcd.0: Device attached [ 549.666150][T29539] vhci_hcd: connection closed [ 549.668332][T29547] loop0: detected capacity change from 0 to 128 [ 549.679851][ T3085] vhci_hcd: stop threads 11:04:40 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xc0ed0000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 549.684149][ T3085] vhci_hcd: release socket [ 549.688653][ T3085] vhci_hcd: disconnect device 11:04:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000400)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x7ff}}, 0x10) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000440)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x4, @mcast2, 0x1}}}, 0x90) 11:04:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000400)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x7ff}}, 0x10) (async, rerun: 32) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000440)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x4, @mcast2, 0x1}}}, 0x90) 11:04:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r3, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r3, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r3, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r3, r0}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:41 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x9, 0x0, [0x6, 0x7, 0xf7dc, 0x5, 0x1, 0xfffff8a4, 0x6, 0x8, 0x6f, 0x0, 0x0, 0x2, 0x8, 0xbe, 0x6, 0x1]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) 11:04:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r3, 0x800}}, 0x10) 11:04:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04006c653000c30a22437b3d6b572dfd49e277d5"]) r5 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x5, 0xff, 0x9, 0x0, 0xc3, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xab8, 0x8000000000000000}, 0x26, 0x7c, 0x8, 0x8, 0xffffffffffffffb1, 0x5, 0x8, 0x0, 0x35, 0x0, 0x2}, r0, 0x4, r0, 0x1) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000000100)="86c999575f10c63ba309b43f3b0c2cadb700dcb2cf50c5dd425bc3c2a0374b70386441cabfe085ed4b8afd67fa78e69d7b9b688bb034a1a0de68335133c35e66b092674b81e21ba9b76365d972f767fb3e6aff6610e0df7356db13b6d8bbcef394b9901917c910c226bd89ec5fbfc6a95bb6b3794f28a24cf69676cbce7d3a2bd0d1423865d1b46dddfccc4aa0", 0x8d, 0x8, 0x0, 0x3, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x401, r5, &(0x7f00000002c0)="e5f38b32f397686b83dc707f8e793d3d552a11282b2465b75cc9f8db023667f4e931bfb2b2d69ca4d7406d374433d26b5fa4d8f3e46634b9ec4670bfcb874e1a5bbf76196a7cbd73d5aa6887021ad061e6a6d99a9a8cfd429d27dbe395c321d44f225dbe4f4dcfcff0f89dfe137f8f6487639c5078176d108b", 0x79, 0x3a4b, 0x0, 0x3, r0}]) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(0xffffffffffffffff, r7, 0x0, 0x4) sendfile(r7, r8, 0x0, 0x3) 11:04:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0xd) 11:04:41 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x73000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xf6ffffff, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r3, 0x800}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) creat(&(0x7f0000000180)='./file0\x00', 0x90) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x106, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r3, 0x800}}, 0x10) (async) [ 550.568942][T29581] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 550.575523][T29581] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 550.583213][T29581] vhci_hcd vhci_hcd.0: Device attached [ 550.600403][T29584] vhci_hcd: connection closed [ 550.600755][ T3085] vhci_hcd: stop threads [ 550.609778][ T3085] vhci_hcd: release socket [ 550.614202][ T3085] vhci_hcd: disconnect device 11:04:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xffff0000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) creat(&(0x7f0000000180)='./file0\x00', 0x90) (async) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x106, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r3, 0x800}}, 0x10) 11:04:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04006c653000c30a22437b3d6b572dfd49e277d5"]) r5 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x5, 0xff, 0x9, 0x0, 0xc3, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xab8, 0x8000000000000000}, 0x26, 0x7c, 0x8, 0x8, 0xffffffffffffffb1, 0x5, 0x8, 0x0, 0x35, 0x0, 0x2}, r0, 0x4, r0, 0x1) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000000100)="86c999575f10c63ba309b43f3b0c2cadb700dcb2cf50c5dd425bc3c2a0374b70386441cabfe085ed4b8afd67fa78e69d7b9b688bb034a1a0de68335133c35e66b092674b81e21ba9b76365d972f767fb3e6aff6610e0df7356db13b6d8bbcef394b9901917c910c226bd89ec5fbfc6a95bb6b3794f28a24cf69676cbce7d3a2bd0d1423865d1b46dddfccc4aa0", 0x8d, 0x8, 0x0, 0x3, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x401, r5, &(0x7f00000002c0)="e5f38b32f397686b83dc707f8e793d3d552a11282b2465b75cc9f8db023667f4e931bfb2b2d69ca4d7406d374433d26b5fa4d8f3e46634b9ec4670bfcb874e1a5bbf76196a7cbd73d5aa6887021ad061e6a6d99a9a8cfd429d27dbe395c321d44f225dbe4f4dcfcff0f89dfe137f8f6487639c5078176d108b", 0x79, 0x3a4b, 0x0, 0x3, r0}]) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x4) sendfile(r7, r8, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) io_setup(0x7, &(0x7f00000000c0)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04006c653000c30a22437b3d6b572dfd49e277d5"]) (async) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x5, 0xff, 0x9, 0x0, 0xc3, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xab8, 0x8000000000000000}, 0x26, 0x7c, 0x8, 0x8, 0xffffffffffffffb1, 0x5, 0x8, 0x0, 0x35, 0x0, 0x2}, r0, 0x4, r0, 0x1) (async) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000000100)="86c999575f10c63ba309b43f3b0c2cadb700dcb2cf50c5dd425bc3c2a0374b70386441cabfe085ed4b8afd67fa78e69d7b9b688bb034a1a0de68335133c35e66b092674b81e21ba9b76365d972f767fb3e6aff6610e0df7356db13b6d8bbcef394b9901917c910c226bd89ec5fbfc6a95bb6b3794f28a24cf69676cbce7d3a2bd0d1423865d1b46dddfccc4aa0", 0x8d, 0x8, 0x0, 0x3, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x401, r5, &(0x7f00000002c0)="e5f38b32f397686b83dc707f8e793d3d552a11282b2465b75cc9f8db023667f4e931bfb2b2d69ca4d7406d374433d26b5fa4d8f3e46634b9ec4670bfcb874e1a5bbf76196a7cbd73d5aa6887021ad061e6a6d99a9a8cfd429d27dbe395c321d44f225dbe4f4dcfcff0f89dfe137f8f6487639c5078176d108b", 0x79, 0x3a4b, 0x0, 0x3, r0}]) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(0xffffffffffffffff, r7, 0x0, 0x4) (async) sendfile(r7, r8, 0x0, 0x3) (async) [ 550.620872][T29591] loop0: detected capacity change from 0 to 128 11:04:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @local, 0x1}, {0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xffffff8c, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @local, 0x1}, {0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, r1, 0x1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @local, 0x1}, {0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xfffffff6, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:42 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x9, 0x0, [0x6, 0x7, 0xf7dc, 0x5, 0x1, 0xfffff8a4, 0x6, 0x8, 0x6f, 0x0, 0x0, 0x2, 0x8, 0xbe, 0x6, 0x1]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) syz_usbip_server_init(0x1) (async) close(r0) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x9, 0x0, [0x6, 0x7, 0xf7dc, 0x5, 0x1, 0xfffff8a4, 0x6, 0x8, 0x6f, 0x0, 0x0, 0x2, 0x8, 0xbe, 0x6, 0x1]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) (async) [ 551.168494][T29623] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 551.175151][T29623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 551.182741][T29623] vhci_hcd vhci_hcd.0: Device attached [ 551.188665][T29624] vhci_hcd: connection closed [ 551.188923][ T9310] vhci_hcd: stop threads [ 551.198043][ T9310] vhci_hcd: release socket [ 551.202469][ T9310] vhci_hcd: disconnect device 11:04:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0xf) 11:04:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x220002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r1, 0x0, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'nicvf0\x00', {0x3}, 0x2}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0xd, 0x0, 0x4) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_SET_STATION(r7, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r8, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x100, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r11, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r9], 0xc63b9e35) sendfile(r3, r4, 0x0, 0x3) 11:04:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x8000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @local, 0x1}, {0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @local, 0x1}, {0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, r1, 0x1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:42 executing program 3: ptrace$setsig(0x4203, 0xffffffffffffffff, 0xaada, &(0x7f0000000400)={0x2f, 0x8, 0x2}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x40, 0x0, [0x5, 0x164, 0xd7d, 0x7, 0x8000, 0x1f, 0x1, 0x3, 0x8, 0xfffff800, 0x1, 0x8, 0x1ff, 0x8, 0x1, 0x9]}, {0x1, 0x0, [0x3, 0x5, 0x6, 0x3, 0x1, 0x5efc, 0x80000001, 0x5, 0x101, 0x9, 0xfff, 0x80000000, 0x5, 0x80000000, 0x3f, 0x5]}, {0x20, 0x0, [0x7, 0x6a30, 0x3, 0x7, 0x5, 0x9, 0x80000000, 0x0, 0x200, 0x69f6bfda, 0x80000001, 0x1, 0x4, 0x6, 0xff, 0x2]}, {0x33, 0x0, [0x0, 0x2, 0xc6, 0x84, 0xfffffff9, 0x2, 0x9f, 0x100, 0x10001, 0x401, 0x0, 0x3, 0x3, 0x3ff, 0x3, 0x7]}, {0x22, 0x0, [0x9, 0x2, 0x401, 0x80000000, 0x8, 0x400, 0x1000, 0x7fff, 0x80000001, 0x4, 0x400, 0x724ae8ae, 0xfffffffe, 0x9, 0x9ef, 0xffffffff]}, {0x8, 0x0, [0x8, 0x2, 0x1, 0x0, 0x6, 0x6, 0x3, 0x3, 0x1, 0x8000, 0x9, 0x1, 0x1, 0x400, 0x6, 0xffff]}, {0x4, 0x0, [0x10001, 0x5, 0xfff, 0x400, 0x8, 0x1, 0xffffff83, 0x1, 0x3, 0x6, 0x6, 0x7, 0x7ff, 0x6e6, 0x4a4, 0x5]}], r0, 0x1, 0x1, 0x1f8}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r1 = syz_usbip_server_init(0x1) close(r1) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) sendfile(r1, r2, &(0x7f00000003c0)=0x2, 0x8000) 11:04:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x75000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xedc000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x294, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3ff}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x4, 0x8b8d, "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", 0x40, 0x8, 0x50, 0x8a, 0x1, 0x6, 0x80, 0x1}, r3}}, 0x120) [ 551.540643][T29637] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 551.547204][T29637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 551.554774][T29637] vhci_hcd vhci_hcd.0: Device attached [ 551.573506][T29648] loop0: detected capacity change from 0 to 128 [ 551.590218][T29644] vhci_hcd: connection closed [ 551.590365][ T9310] vhci_hcd: stop threads [ 551.599406][ T9310] vhci_hcd: release socket [ 551.604081][ T9310] vhci_hcd: disconnect device 11:04:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x100000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x200000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x700000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x294, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3ff}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x4, 0x8b8d, "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", 0x40, 0x8, 0x50, 0x8a, 0x1, 0x6, 0x80, 0x1}, r3}}, 0x120) 11:04:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x294, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3ff}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x4, 0x8b8d, "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", 0x40, 0x8, 0x50, 0x8a, 0x1, 0x6, 0x80, 0x1}, r3}}, 0x120) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x294, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3ff}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x4, 0x8b8d, "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", 0x40, 0x8, 0x50, 0x8a, 0x1, 0x6, 0x80, 0x1}, r3}}, 0x120) (async) 11:04:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xa00000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x10) 11:04:43 executing program 3: ptrace$setsig(0x4203, 0xffffffffffffffff, 0xaada, &(0x7f0000000400)={0x2f, 0x8, 0x2}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x40, 0x0, [0x5, 0x164, 0xd7d, 0x7, 0x8000, 0x1f, 0x1, 0x3, 0x8, 0xfffff800, 0x1, 0x8, 0x1ff, 0x8, 0x1, 0x9]}, {0x1, 0x0, [0x3, 0x5, 0x6, 0x3, 0x1, 0x5efc, 0x80000001, 0x5, 0x101, 0x9, 0xfff, 0x80000000, 0x5, 0x80000000, 0x3f, 0x5]}, {0x20, 0x0, [0x7, 0x6a30, 0x3, 0x7, 0x5, 0x9, 0x80000000, 0x0, 0x200, 0x69f6bfda, 0x80000001, 0x1, 0x4, 0x6, 0xff, 0x2]}, {0x33, 0x0, [0x0, 0x2, 0xc6, 0x84, 0xfffffff9, 0x2, 0x9f, 0x100, 0x10001, 0x401, 0x0, 0x3, 0x3, 0x3ff, 0x3, 0x7]}, {0x22, 0x0, [0x9, 0x2, 0x401, 0x80000000, 0x8, 0x400, 0x1000, 0x7fff, 0x80000001, 0x4, 0x400, 0x724ae8ae, 0xfffffffe, 0x9, 0x9ef, 0xffffffff]}, {0x8, 0x0, [0x8, 0x2, 0x1, 0x0, 0x6, 0x6, 0x3, 0x3, 0x1, 0x8000, 0x9, 0x1, 0x1, 0x400, 0x6, 0xffff]}, {0x4, 0x0, [0x10001, 0x5, 0xfff, 0x400, 0x8, 0x1, 0xffffff83, 0x1, 0x3, 0x6, 0x6, 0x7, 0x7ff, 0x6e6, 0x4a4, 0x5]}], r0, 0x1, 0x1, 0x1f8}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r1 = syz_usbip_server_init(0x1) close(r1) (async) close(r1) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) sendfile(r1, r2, &(0x7f00000003c0)=0x2, 0x8000) (async) sendfile(r1, r2, &(0x7f00000003c0)=0x2, 0x8000) 11:04:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x220002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async, rerun: 64) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (rerun: 64) sendfile(r4, r1, 0x0, 0x6) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'nicvf0\x00', {0x3}, 0x2}) (rerun: 32) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0xd, 0x0, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_SET_STATION(r7, 0x0, 0x0) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='illinois\x00', 0x9) (async, rerun: 32) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) (rerun: 32) bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (rerun: 64) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) recvmmsg(r8, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x100, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_PORT_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r11, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r9], 0xc63b9e35) (async) sendfile(r3, r4, 0x0, 0x3) 11:04:43 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x77000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x1000000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r2}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 552.467933][T29675] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 552.474490][T29675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.482107][T29675] vhci_hcd vhci_hcd.0: Device attached [ 552.496181][T29677] vhci_hcd: connection closed [ 552.496414][ T9310] vhci_hcd: stop threads [ 552.505526][ T9310] vhci_hcd: release socket [ 552.509939][ T9310] vhci_hcd: disconnect device 11:04:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (rerun: 32) 11:04:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2000000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 552.543338][T29697] loop0: detected capacity change from 0 to 128 11:04:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2010000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:43 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2200000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x18) 11:04:44 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r0}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r0, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x220002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r1, 0x0, 0x6) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'nicvf0\x00', {0x3}, 0x2}) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0xd, 0x0, 0x4) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_SET_STATION(r7, 0x0, 0x0) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='illinois\x00', 0x9) (async, rerun: 64) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) (rerun: 64) bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) recvmmsg(r8, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x100, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r11, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) write$binfmt_elf64(r8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r9], 0xc63b9e35) (async) sendfile(r3, r4, 0x0, 0x3) 11:04:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x3f00000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:44 executing program 3: ptrace$setsig(0x4203, 0xffffffffffffffff, 0xaada, &(0x7f0000000400)={0x2f, 0x8, 0x2}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x40, 0x0, [0x5, 0x164, 0xd7d, 0x7, 0x8000, 0x1f, 0x1, 0x3, 0x8, 0xfffff800, 0x1, 0x8, 0x1ff, 0x8, 0x1, 0x9]}, {0x1, 0x0, [0x3, 0x5, 0x6, 0x3, 0x1, 0x5efc, 0x80000001, 0x5, 0x101, 0x9, 0xfff, 0x80000000, 0x5, 0x80000000, 0x3f, 0x5]}, {0x20, 0x0, [0x7, 0x6a30, 0x3, 0x7, 0x5, 0x9, 0x80000000, 0x0, 0x200, 0x69f6bfda, 0x80000001, 0x1, 0x4, 0x6, 0xff, 0x2]}, {0x33, 0x0, [0x0, 0x2, 0xc6, 0x84, 0xfffffff9, 0x2, 0x9f, 0x100, 0x10001, 0x401, 0x0, 0x3, 0x3, 0x3ff, 0x3, 0x7]}, {0x22, 0x0, [0x9, 0x2, 0x401, 0x80000000, 0x8, 0x400, 0x1000, 0x7fff, 0x80000001, 0x4, 0x400, 0x724ae8ae, 0xfffffffe, 0x9, 0x9ef, 0xffffffff]}, {0x8, 0x0, [0x8, 0x2, 0x1, 0x0, 0x6, 0x6, 0x3, 0x3, 0x1, 0x8000, 0x9, 0x1, 0x1, 0x400, 0x6, 0xffff]}, {0x4, 0x0, [0x10001, 0x5, 0xfff, 0x400, 0x8, 0x1, 0xffffff83, 0x1, 0x3, 0x6, 0x6, 0x7, 0x7ff, 0x6e6, 0x4a4, 0x5]}], r0, 0x1, 0x1, 0x1f8}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x40, 0x0, [0x5, 0x164, 0xd7d, 0x7, 0x8000, 0x1f, 0x1, 0x3, 0x8, 0xfffff800, 0x1, 0x8, 0x1ff, 0x8, 0x1, 0x9]}, {0x1, 0x0, [0x3, 0x5, 0x6, 0x3, 0x1, 0x5efc, 0x80000001, 0x5, 0x101, 0x9, 0xfff, 0x80000000, 0x5, 0x80000000, 0x3f, 0x5]}, {0x20, 0x0, [0x7, 0x6a30, 0x3, 0x7, 0x5, 0x9, 0x80000000, 0x0, 0x200, 0x69f6bfda, 0x80000001, 0x1, 0x4, 0x6, 0xff, 0x2]}, {0x33, 0x0, [0x0, 0x2, 0xc6, 0x84, 0xfffffff9, 0x2, 0x9f, 0x100, 0x10001, 0x401, 0x0, 0x3, 0x3, 0x3ff, 0x3, 0x7]}, {0x22, 0x0, [0x9, 0x2, 0x401, 0x80000000, 0x8, 0x400, 0x1000, 0x7fff, 0x80000001, 0x4, 0x400, 0x724ae8ae, 0xfffffffe, 0x9, 0x9ef, 0xffffffff]}, {0x8, 0x0, [0x8, 0x2, 0x1, 0x0, 0x6, 0x6, 0x3, 0x3, 0x1, 0x8000, 0x9, 0x1, 0x1, 0x400, 0x6, 0xffff]}, {0x4, 0x0, [0x10001, 0x5, 0xfff, 0x400, 0x8, 0x1, 0xffffff83, 0x1, 0x3, 0x6, 0x6, 0x7, 0x7ff, 0x6e6, 0x4a4, 0x5]}], r0, 0x1, 0x1, 0x1f8}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r1 = syz_usbip_server_init(0x1) close(r1) (async) close(r1) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) sendfile(r1, r2, &(0x7f00000003c0)=0x2, 0x8000) 11:04:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x8cffffff, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x4900000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000618000000a2cd12d0ac1aeb1199565bcdb6e7cd6e1c6506c9abcd2679126f6708641f80fd5049bb39c5988382ad123837040cd5003da068114531186e4cd7ea7fa9b8b911ac26b6e0086543c188b416c5c2c641b239663f291e2254a5ed4310a27be664c5602747dc14313af3559a70b611ccd68c58e42aefde23ea86bd8ab29031c9232cc936daeff11b4a4a60f0f2bfe57c5b2650c4", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000100)=0x7, 0x4) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r2, 0x0, 0x4) sendfile(r2, r4, 0x0, 0x3) 11:04:44 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r0}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r0, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r0, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 553.435848][T29731] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 553.442409][T29731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 553.449997][T29731] vhci_hcd vhci_hcd.0: Device attached [ 553.460131][T29733] vhci_hcd: connection closed [ 553.470639][ T3085] vhci_hcd: stop threads [ 553.479676][ T3085] vhci_hcd: release socket 11:04:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xc0ed0000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:44 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r0}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r0, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5100000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 553.484097][ T3085] vhci_hcd: disconnect device [ 553.489895][T29739] loop0: detected capacity change from 0 to 128 11:04:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x22) 11:04:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5200000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) dup3(r0, r2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e23, @local}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) dup(r2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) 11:04:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000618000000a2cd12d0ac1aeb1199565bcdb6e7cd6e1c6506c9abcd2679126f6708641f80fd5049bb39c5988382ad123837040cd5003da068114531186e4cd7ea7fa9b8b911ac26b6e0086543c188b416c5c2c641b239663f291e2254a5ed4310a27be664c5602747dc14313af3559a70b611ccd68c58e42aefde23ea86bd8ab29031c9232cc936daeff11b4a4a60f0f2bfe57c5b2650c4", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000100)=0x7, 0x4) (async) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r2, 0x0, 0x4) sendfile(r2, r4, 0x0, 0x3) 11:04:45 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x0, @private1}}}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000900)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0xe1, r2, 0x0, 0x0, 0x1}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000380)="d77361a0275136a2a70da6e8c701ba013c81690d8137f7fe854f7db73e9aa806b5a168fc22e7cf121513fa22516d63260186c9c116690f5da76dc931351336da62829ae5de353e0fa546e8598632108d8bd039b9737d88b4c1d1765cf09597f58c727e4f475cd01a4b97b6a31ec87563", 0x70}, {&(0x7f0000000400)="bc9c691b65fbd2447389e18c88a06dc56322fa0885e975e3acd37cf42c01ee55aaedf596a7b35ba585a551fd074948d136dd0b4a124730ded18558ae3e8ced9f4261350d9b523e565d62d40e93a1d817d46cf08b", 0x54}, {&(0x7f0000000480)="6165daae961415d1398d6439b8df0480df32d788022bd25c9ca673077f3cc21cf571218a0d856ef1eb960967de23f85d5a925ef319c7158dea7bc55f680522a2b9c1a84f3d78bfb61417288b4b288a680a8ecb26f90cf529d50a0ff5b16d7f282083c26da3897cfabe0c56668be0b6267745aa11ed34bd08156f9855d36408c7b4cc268905e2bdd458eeb703650b74bbcf1591c1f99ffed453805d5a9a2522a18ed5614ea54d4d2f8374e19c7e9afaa5362e909a78730f4322cb52e83cf38773216da1b498dfec545208bd88cb992826ad3337", 0xd3}, {&(0x7f0000000580)="1a4da58ccdb6817f7ca3e946d14e0cdf673d2beb4a282dca962879cecfe493724e704e01277455d3c476aaf8f51b5d1441f27d084a3b02135a9972905f4c247b43d97551473e7f1657a578540c903cbff0af219e59291c2eca3db818718101a959e402b95c080985512fb3299596055f79821399527aa32e1d8254381de98114387c2883d970db0b64186e98f78e3e9c81ac664b5acfaf08bf83991c3954fc59ff885be444a8d755", 0xa8}, {&(0x7f0000000640)="0025bfcaceea5376a9d56b6f95cb7c971181b3f9dc551e747f3feea60c191aa496164cc2362068e1d4b7545820749f59cd6f09545aeeb62ca65cb0af93aef4c8889cf3c17afad80539346246e46151a45680d88efa62863a303efc9770df11803466476cff7954061809566a4350f300dadb68439852e58c72481a4378624ccc97964547b742a22deb6b43da50a509e934d981a3fd8107559f0352c1ec893e45460d5479256a99846247dee63372fc2a1ea60a988508c1e5fea9a43b645ea90e3d7020c08e96f826", 0xc8}], 0x5, 0x5, 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000009c0)={0x7, 0x8, 0xfa00, {r4, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r5 = syz_usbip_server_init(0x1) close(r5) r6 = fcntl$dupfd(r5, 0x0, r3) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5b12, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @ib={0x1b, 0x800, 0xfffffff9, {"3f87e05bd5cf3b093e719137843d3f60"}, 0x7, 0x0, 0xfffffffffffffa9e}}}, 0x118) r7 = openat$incfs(r6, &(0x7f0000000940)='.log\x00', 0x10c441, 0x2) write$usbip_server(r7, &(0x7f0000000980)=@ret_unlink={{0x4, 0x5, 0x0, 0x1, 0xc15}}, 0x30) 11:04:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xf6ffffff, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5300000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 554.409419][T29765] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 554.416045][T29765] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 554.418672][T29773] loop0: detected capacity change from 0 to 128 [ 554.423601][T29765] vhci_hcd vhci_hcd.0: Device attached 11:04:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5400000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:45 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) dup3(r0, r2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e23, @local}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) dup(r2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) 11:04:45 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000618000000a2cd12d0ac1aeb1199565bcdb6e7cd6e1c6506c9abcd2679126f6708641f80fd5049bb39c5988382ad123837040cd5003da068114531186e4cd7ea7fa9b8b911ac26b6e0086543c188b416c5c2c641b239663f291e2254a5ed4310a27be664c5602747dc14313af3559a70b611ccd68c58e42aefde23ea86bd8ab29031c9232cc936daeff11b4a4a60f0f2bfe57c5b2650c4", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000100)=0x7, 0x4) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r2, 0x0, 0x4) sendfile(r2, r4, 0x0, 0x3) 11:04:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xffff0000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (async) dup3(r0, r2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e23, @local}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) dup(r2) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) [ 554.509707][T29766] usbip_core: unknown command [ 554.514427][T29766] vhci_hcd: unknown pdu 352321536 [ 554.519585][T29766] usbip_core: unknown command [ 554.532708][ T3085] vhci_hcd: stop threads [ 554.537016][ T3085] vhci_hcd: release socket [ 554.541441][ T3085] vhci_hcd: disconnect device 11:04:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEniYlJRJPDsssuLL7sXnYvg7p7XHYNiy7LBlZcs/QHFEad2JBpIjNBmyLVnnot/SN6EHvzJrT+A156ay+99OalUEo9SKdkMmM0jjVqYqx+PyDzZt7nmXnfmSjPhLxuX3t0p5i3tbxekXBcSUhEZEckLWHxhbxt2G3HZL8V+bnv3cuV/67f+CeTzY5NKjWemfplRCk1MPh+cSnhhW30ylb61vbbkTdbX299u/1x6nbBVgVblcoVpavp8uuKPm0aarZgFzWlJkxDtw1VKNmGVe8v1/vzZnl+vqr00mx/ct4ybFvppaoqGlVVKauKVVX6nF4oKU3TVH9ScJzc6uSknjll8kybB4MOsayMHhGRxKGe3GpXBgQAALqquf4P10r6E9f/3wfW/88Wl9Z+2Kz0/b8+4NX/G7Gg+v/XV/VjHaj/4yLSvvp/7u5vfwXM/nBFdLWcqf7HxTAYO7QrdOBVrf5Per+/rgc314bcBvU/AAAAAAAAAAAAAAAAAAAAAABfgh3HSTmOk/K3/k+viMRFxHGc5uUErBe5RFq4/+7rbo8TndFYuNczIGI+XMgt5OpbL2BTREwxZEhSsuu+HzwiTtRfeaRq0vLcXPbylxdyEbcnk5eCmz8sKUk35TuOM/53dmxY1R3Mj0rSzc+IRN1DpeSr4PyRwPyY/PTjvvNrkpIXM1IWU2bd93Uj//6wUn/+m23KT7hxAAAAAABcBpraE/j8rmlH9dfz956vgz4f8J6vhwKfz3vku57uzh0AAAAAgKvCrt4r6qZpWJ9pJOT4mPY2nh7VNeoNu4Xj+DP093hfYlppCrYi3kXwv8twyjFHWg2OB115/+TFP/ZN0I88zyvfaiPcyi1oNEK7jmNY9mBtNuqsZ/c/NjoqRiZOfuTYSe97SAK6vnn85EP7rvPv6/FjZtqxRrSDf3IAAAAAdEmj6Pf3jHZ3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEHn8e/Euj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KL4FAAA//8X6PzU") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x225) 11:04:46 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xffffff8c, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5600000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:46 executing program 1: r0 = socket(0x18, 0x3, 0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x3, 0x80, 0x8, 0x9, 0x2, 0xb3, 0x2, {0x0, @in6={{0xa, 0x4e22, 0xf04, @private2={0xfc, 0x2, '\x00', 0x3}, 0x36}}, 0x9, 0x214, 0x3, 0x3, 0x2}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x3c34}, &(0x7f0000000300)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) 11:04:46 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x0, @private1}}}, 0x90) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000900)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0xe1, r2, 0x0, 0x0, 0x1}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000380)="d77361a0275136a2a70da6e8c701ba013c81690d8137f7fe854f7db73e9aa806b5a168fc22e7cf121513fa22516d63260186c9c116690f5da76dc931351336da62829ae5de353e0fa546e8598632108d8bd039b9737d88b4c1d1765cf09597f58c727e4f475cd01a4b97b6a31ec87563", 0x70}, {&(0x7f0000000400)="bc9c691b65fbd2447389e18c88a06dc56322fa0885e975e3acd37cf42c01ee55aaedf596a7b35ba585a551fd074948d136dd0b4a124730ded18558ae3e8ced9f4261350d9b523e565d62d40e93a1d817d46cf08b", 0x54}, {&(0x7f0000000480)="6165daae961415d1398d6439b8df0480df32d788022bd25c9ca673077f3cc21cf571218a0d856ef1eb960967de23f85d5a925ef319c7158dea7bc55f680522a2b9c1a84f3d78bfb61417288b4b288a680a8ecb26f90cf529d50a0ff5b16d7f282083c26da3897cfabe0c56668be0b6267745aa11ed34bd08156f9855d36408c7b4cc268905e2bdd458eeb703650b74bbcf1591c1f99ffed453805d5a9a2522a18ed5614ea54d4d2f8374e19c7e9afaa5362e909a78730f4322cb52e83cf38773216da1b498dfec545208bd88cb992826ad3337", 0xd3}, {&(0x7f0000000580)="1a4da58ccdb6817f7ca3e946d14e0cdf673d2beb4a282dca962879cecfe493724e704e01277455d3c476aaf8f51b5d1441f27d084a3b02135a9972905f4c247b43d97551473e7f1657a578540c903cbff0af219e59291c2eca3db818718101a959e402b95c080985512fb3299596055f79821399527aa32e1d8254381de98114387c2883d970db0b64186e98f78e3e9c81ac664b5acfaf08bf83991c3954fc59ff885be444a8d755", 0xa8}, {&(0x7f0000000640)="0025bfcaceea5376a9d56b6f95cb7c971181b3f9dc551e747f3feea60c191aa496164cc2362068e1d4b7545820749f59cd6f09545aeeb62ca65cb0af93aef4c8889cf3c17afad80539346246e46151a45680d88efa62863a303efc9770df11803466476cff7954061809566a4350f300dadb68439852e58c72481a4378624ccc97964547b742a22deb6b43da50a509e934d981a3fd8107559f0352c1ec893e45460d5479256a99846247dee63372fc2a1ea60a988508c1e5fea9a43b645ea90e3d7020c08e96f826", 0xc8}], 0x5, 0x5, 0x8) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000009c0)={0x7, 0x8, 0xfa00, {r4, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) r5 = syz_usbip_server_init(0x1) close(r5) (async) r6 = fcntl$dupfd(r5, 0x0, r3) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5b12, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @ib={0x1b, 0x800, 0xfffffff9, {"3f87e05bd5cf3b093e719137843d3f60"}, 0x7, 0x0, 0xfffffffffffffa9e}}}, 0x118) (async) r7 = openat$incfs(r6, &(0x7f0000000940)='.log\x00', 0x10c441, 0x2) write$usbip_server(r7, &(0x7f0000000980)=@ret_unlink={{0x4, 0x5, 0x0, 0x1, 0xc15}}, 0x30) 11:04:46 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x0, @private1}}}, 0x90) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000900)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000180)=0xe1, r2, 0x0, 0x0, 0x1}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000380)="d77361a0275136a2a70da6e8c701ba013c81690d8137f7fe854f7db73e9aa806b5a168fc22e7cf121513fa22516d63260186c9c116690f5da76dc931351336da62829ae5de353e0fa546e8598632108d8bd039b9737d88b4c1d1765cf09597f58c727e4f475cd01a4b97b6a31ec87563", 0x70}, {&(0x7f0000000400)="bc9c691b65fbd2447389e18c88a06dc56322fa0885e975e3acd37cf42c01ee55aaedf596a7b35ba585a551fd074948d136dd0b4a124730ded18558ae3e8ced9f4261350d9b523e565d62d40e93a1d817d46cf08b", 0x54}, {&(0x7f0000000480)="6165daae961415d1398d6439b8df0480df32d788022bd25c9ca673077f3cc21cf571218a0d856ef1eb960967de23f85d5a925ef319c7158dea7bc55f680522a2b9c1a84f3d78bfb61417288b4b288a680a8ecb26f90cf529d50a0ff5b16d7f282083c26da3897cfabe0c56668be0b6267745aa11ed34bd08156f9855d36408c7b4cc268905e2bdd458eeb703650b74bbcf1591c1f99ffed453805d5a9a2522a18ed5614ea54d4d2f8374e19c7e9afaa5362e909a78730f4322cb52e83cf38773216da1b498dfec545208bd88cb992826ad3337", 0xd3}, {&(0x7f0000000580)="1a4da58ccdb6817f7ca3e946d14e0cdf673d2beb4a282dca962879cecfe493724e704e01277455d3c476aaf8f51b5d1441f27d084a3b02135a9972905f4c247b43d97551473e7f1657a578540c903cbff0af219e59291c2eca3db818718101a959e402b95c080985512fb3299596055f79821399527aa32e1d8254381de98114387c2883d970db0b64186e98f78e3e9c81ac664b5acfaf08bf83991c3954fc59ff885be444a8d755", 0xa8}, {&(0x7f0000000640)="0025bfcaceea5376a9d56b6f95cb7c971181b3f9dc551e747f3feea60c191aa496164cc2362068e1d4b7545820749f59cd6f09545aeeb62ca65cb0af93aef4c8889cf3c17afad80539346246e46151a45680d88efa62863a303efc9770df11803466476cff7954061809566a4350f300dadb68439852e58c72481a4378624ccc97964547b742a22deb6b43da50a509e934d981a3fd8107559f0352c1ec893e45460d5479256a99846247dee63372fc2a1ea60a988508c1e5fea9a43b645ea90e3d7020c08e96f826", 0xc8}], 0x5, 0x5, 0x8) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000009c0)={0x7, 0x8, 0xfa00, {r4, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) r5 = syz_usbip_server_init(0x1) close(r5) (async) r6 = fcntl$dupfd(r5, 0x0, r3) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5b12, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @ib={0x1b, 0x800, 0xfffffff9, {"3f87e05bd5cf3b093e719137843d3f60"}, 0x7, 0x0, 0xfffffffffffffa9e}}}, 0x118) r7 = openat$incfs(r6, &(0x7f0000000940)='.log\x00', 0x10c441, 0x2) write$usbip_server(r7, &(0x7f0000000980)=@ret_unlink={{0x4, 0x5, 0x0, 0x1, 0xc15}}, 0x30) 11:04:46 executing program 1: r0 = socket(0x18, 0x3, 0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x3, 0x80, 0x8, 0x9, 0x2, 0xb3, 0x2, {0x0, @in6={{0xa, 0x4e22, 0xf04, @private2={0xfc, 0x2, '\x00', 0x3}, 0x36}}, 0x9, 0x214, 0x3, 0x3, 0x2}}, &(0x7f0000000180)=0xb0) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x3, 0x80, 0x8, 0x9, 0x2, 0xb3, 0x2, {0x0, @in6={{0xa, 0x4e22, 0xf04, @private2={0xfc, 0x2, '\x00', 0x3}, 0x36}}, 0x9, 0x214, 0x3, 0x3, 0x2}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x3c34}, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x3c34}, &(0x7f0000000300)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6200000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:46 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xfffffff6, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:46 executing program 1: socket(0x18, 0x3, 0x5) (async) r0 = socket(0x18, 0x3, 0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x3, 0x80, 0x8, 0x9, 0x2, 0xb3, 0x2, {0x0, @in6={{0xa, 0x4e22, 0xf04, @private2={0xfc, 0x2, '\x00', 0x3}, 0x36}}, 0x9, 0x214, 0x3, 0x3, 0x2}}, &(0x7f0000000180)=0xb0) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x3, 0x80, 0x8, 0x9, 0x2, 0xb3, 0x2, {0x0, @in6={{0xa, 0x4e22, 0xf04, @private2={0xfc, 0x2, '\x00', 0x3}, 0x36}}, 0x9, 0x214, 0x3, 0x3, 0x2}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x3c34}, &(0x7f0000000300)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) [ 555.393796][T29808] loop0: detected capacity change from 0 to 128 11:04:46 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) r0 = memfd_secret(0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0xa}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @remote}, @in6={0xa, 0x4e21, 0x4, @private0, 0x6}}}, 0x118) r2 = syz_usbip_server_init(0x1) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8400) close(r2) [ 555.514804][T29824] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 555.521361][T29824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 555.528923][T29824] vhci_hcd vhci_hcd.0: Device attached [ 555.538083][T29825] vhci_hcd: connection closed [ 555.541431][ T3085] vhci_hcd: stop threads [ 555.550499][ T3085] vhci_hcd: release socket [ 555.554978][ T3085] vhci_hcd: disconnect device 11:04:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEniYlJRJPDsssuLL7sXnYvg7p7XHYNiy7LBlZcs/QHFEad2JBpIjNBmyLVnnot/SN6EHvzJrT+A156ay+99OalUEo9SKdkMmM0jjVqYqx+PyDzZt7nmXnfmSjPhLxuX3t0p5i3tbxekXBcSUhEZEckLWHxhbxt2G3HZL8V+bnv3cuV/67f+CeTzY5NKjWemfplRCk1MPh+cSnhhW30ylb61vbbkTdbX299u/1x6nbBVgVblcoVpavp8uuKPm0aarZgFzWlJkxDtw1VKNmGVe8v1/vzZnl+vqr00mx/ct4ybFvppaoqGlVVKauKVVX6nF4oKU3TVH9ScJzc6uSknjll8kybB4MOsayMHhGRxKGe3GpXBgQAALqquf4P10r6E9f/3wfW/88Wl9Z+2Kz0/b8+4NX/G7Gg+v/XV/VjHaj/4yLSvvp/7u5vfwXM/nBFdLWcqf7HxTAYO7QrdOBVrf5Per+/rgc314bcBvU/AAAAAAAAAAAAAAAAAAAAAABfgh3HSTmOk/K3/k+viMRFxHGc5uUErBe5RFq4/+7rbo8TndFYuNczIGI+XMgt5OpbL2BTREwxZEhSsuu+HzwiTtRfeaRq0vLcXPbylxdyEbcnk5eCmz8sKUk35TuOM/53dmxY1R3Mj0rSzc+IRN1DpeSr4PyRwPyY/PTjvvNrkpIXM1IWU2bd93Uj//6wUn/+m23KT7hxAAAAAABcBpraE/j8rmlH9dfz956vgz4f8J6vhwKfz3vku57uzh0AAAAAgKvCrt4r6qZpWJ9pJOT4mPY2nh7VNeoNu4Xj+DP093hfYlppCrYi3kXwv8twyjFHWg2OB115/+TFP/ZN0I88zyvfaiPcyi1oNEK7jmNY9mBtNuqsZ/c/NjoqRiZOfuTYSe97SAK6vnn85EP7rvPv6/FjZtqxRrSDf3IAAAAAdEmj6Pf3jHZ3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEHn8e/Euj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KL4FAAA//8X6PzU") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x300) 11:04:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6400000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) pipe2$watch_queue(&(0x7f0000000300), 0x80) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000780)={0x15, 0x110, 0xfa08, {r5, 0x6, 0x10, 0x10, 0x0, @in6={0xa, 0x4e20, 0x9998, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x6917}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}}}, 0x118) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="0701024075030000f6000000000000002d030000fffffeff0000000000000000bf9f6387b44788d11e26f109b84b54374db6bd06305c6c7e0a2fde47383b8a1bcbab4bc436488b34da30f371490000000000000000000000000000000000000000000000eeff00"/845], 0x34d) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0xad, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4c23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x90) 11:04:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x8000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) 11:04:47 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async, rerun: 32) r0 = memfd_secret(0x80000) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0xa}}, 0x20) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @remote}, @in6={0xa, 0x4e21, 0x4, @private0, 0x6}}}, 0x118) (async, rerun: 32) r2 = syz_usbip_server_init(0x1) (async, rerun: 32) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8400) close(r2) 11:04:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6700000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000780)={0x15, 0x110, 0xfa08, {r5, 0x6, 0x10, 0x10, 0x0, @in6={0xa, 0x4e20, 0x9998, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x6917}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}}}, 0x118) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="0701024075030000f6000000000000002d030000fffffeff0000000000000000bf9f6387b44788d11e26f109b84b54374db6bd06305c6c7e0a2fde47383b8a1bcbab4bc436488b34da30f371490000000000000000000000000000000000000000000000eeff00"/845], 0x34d) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0xad, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4c23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x90) 11:04:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7100000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) dup2(r0, r0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x2, 0x4}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000780)={0x15, 0x110, 0xfa08, {r5, 0x6, 0x10, 0x10, 0x0, @in6={0xa, 0x4e20, 0x9998, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x6917}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}}}, 0x118) (async, rerun: 32) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="0701024075030000f6000000000000002d030000fffffeff0000000000000000bf9f6387b44788d11e26f109b84b54374db6bd06305c6c7e0a2fde47383b8a1bcbab4bc436488b34da30f371490000000000000000000000000000000000000000000000eeff00"/845], 0x34d) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async, rerun: 32) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000240)={0x14, 0xad, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4c23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x90) (rerun: 32) 11:04:47 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xedc000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 556.384741][T29850] loop0: detected capacity change from 0 to 128 11:04:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1, 0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x4, {0xa, 0x4e24, 0x0, @empty, 0x6}, r3}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x408) 11:04:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7300000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x100000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async, rerun: 32) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (rerun: 32) sendfile(r3, r2, 0x0, 0x4) (async, rerun: 32) sendfile(r2, r3, 0x0, 0x3) (rerun: 32) 11:04:48 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) r0 = memfd_secret(0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0xa}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @remote}, @in6={0xa, 0x4e21, 0x4, @private0, 0x6}}}, 0x118) r2 = syz_usbip_server_init(0x1) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8400) close(r2) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) memfd_secret(0x80000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0xa}}, 0x20) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @remote}, @in6={0xa, 0x4e21, 0x4, @private0, 0x6}}}, 0x118) (async) syz_usbip_server_init(0x1) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8400) (async) close(r2) (async) 11:04:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1, 0x6}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x4, {0xa, 0x4e24, 0x0, @empty, 0x6}, r3}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7500000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1, 0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x4, {0xa, 0x4e24, 0x0, @empty, 0x6}, r3}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:48 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x200000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x420001, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x4, 0x0, 0x401, 0xff}) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x3) [ 557.350669][T29879] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 557.357224][T29879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 557.364834][T29879] vhci_hcd vhci_hcd.0: Device attached [ 557.390168][T29903] loop0: detected capacity change from 0 to 128 11:04:48 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7700000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) [ 557.449334][T29888] vhci_hcd: connection closed [ 557.483488][ T24] vhci_hcd: stop threads [ 557.492538][ T24] vhci_hcd: release socket [ 557.497015][ T24] vhci_hcd: disconnect device 11:04:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x500) 11:04:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xffff, 0x8, {"587b8a31fd1a9108163a35571cb3722b"}, 0x2, 0x3, 0xffffffffffffff80}}}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {&(0x7f0000000700), r5, 0x1d}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7ff}, {0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, r6, 0x200}}, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r7, 0x0, 0x2, 0x4}}, 0x20) r9 = syz_usbip_server_init(0x1) close(r9) 11:04:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x8cffffff00000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) (async) 11:04:49 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x700000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x420001, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x4, 0x0, 0x401, 0xff}) (async) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) (async) sendfile(r3, r4, 0x0, 0x3) 11:04:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) (async) 11:04:49 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xa00000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x420001, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x4, 0x0, 0x401, 0xff}) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x420001, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x4, 0x0, 0x401, 0xff}) (async) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r4, r3, 0x0, 0x4) (async) sendfile(r3, r4, 0x0, 0x3) (async) 11:04:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xf6ffffff00000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 558.354285][T29921] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 558.360874][T29921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 558.368505][T29921] vhci_hcd vhci_hcd.0: Device attached 11:04:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x2, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:49 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x1000000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 558.396269][T29944] loop0: detected capacity change from 0 to 128 [ 558.416482][T29935] vhci_hcd: connection closed [ 558.416699][ T9310] vhci_hcd: stop threads [ 558.425799][ T9310] vhci_hcd: release socket [ 558.430226][ T9310] vhci_hcd: disconnect device 11:04:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x600) 11:04:50 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xffff000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x2, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x2, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2000000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:50 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, "c265165335c4b083e40c3568f8e5864439c5a84186553a75528606083abe603a643ae2419ab1b4580dfab55a1168ceb18e3052c741bddb142e1e84d5eb33dc", 0x1e}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000140)="4473527f87ae369b828e08b49d4c098396552f87e65f0164b02747b85ea47eb3dd92219b1b9ef1a2d366a9e1034699daafa2cd382d3f9dfd8719ea1bca5262a7ee0a72063467dac02239d433d7e63f0726872b77e4b047022820f2c2e662771d80d6b551e593c17684bfb9de77275d3359d5972aaff060ac441a93487cb49d0eebe21ddd18597f21", 0x88}, {&(0x7f0000000200)="c0308d4520d2f4815d014bf0425b6005ae2c9d0f05139fca63214cce2ee883d3444a03faa8f7decd1ce63ef1b26dd21985f7b2467c9ebaa594feada8e56a", 0x3e}, {&(0x7f0000000240)="c04a083017855a2edf17abcbe354670a226c7218a2911a2df14c07515dffb87d04db202f6d80d0d715adb04f178a7915dac6a10683fd6c1349816e733e116e4a12d11ed1d51c5dd1283f684848a845e9bd028fcb0b4b6bf449ada0b49e176670d6", 0x61}, {&(0x7f00000002c0)="a121a2c3160202b702faad85f634808c304a12834afa1629556c44dafaed3ce96478bc", 0x23}], 0x4, &(0x7f0000000340)={0x78, 0x117, 0xff, "177aea5d600b6d52ed3c89ae7470cd7713fe75b59c4f82a3f2d485fc95aec3f92e8fb40dd97ed48c2c5d4e872504ad1c2d9cb0dda75902dc42fe846af3bb9268930d5396cdf375eab1007b250dce1fdbf1e7ee59a2a2bb5c5a959131b428f09c7e981d77541daa"}, 0x78, 0x4}, 0xc000) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4) sendfile(r1, r2, 0x0, 0x3) 11:04:50 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xffff, 0x8, {"587b8a31fd1a9108163a35571cb3722b"}, 0x2, 0x3, 0xffffffffffffff80}}}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {&(0x7f0000000700), r5, 0x1d}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7ff}, {0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, r6, 0x200}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7ff}, {0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, r6, 0x200}}, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r7, 0x0, 0x2, 0x4}}, 0x20) syz_usbip_server_init(0x1) (async) r9 = syz_usbip_server_init(0x1) close(r9) 11:04:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x2, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x2, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) (async) 11:04:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2010000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:50 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xffffffff00000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:50 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, "c265165335c4b083e40c3568f8e5864439c5a84186553a75528606083abe603a643ae2419ab1b4580dfab55a1168ceb18e3052c741bddb142e1e84d5eb33dc", 0x1e}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000140)="4473527f87ae369b828e08b49d4c098396552f87e65f0164b02747b85ea47eb3dd92219b1b9ef1a2d366a9e1034699daafa2cd382d3f9dfd8719ea1bca5262a7ee0a72063467dac02239d433d7e63f0726872b77e4b047022820f2c2e662771d80d6b551e593c17684bfb9de77275d3359d5972aaff060ac441a93487cb49d0eebe21ddd18597f21", 0x88}, {&(0x7f0000000200)="c0308d4520d2f4815d014bf0425b6005ae2c9d0f05139fca63214cce2ee883d3444a03faa8f7decd1ce63ef1b26dd21985f7b2467c9ebaa594feada8e56a", 0x3e}, {&(0x7f0000000240)="c04a083017855a2edf17abcbe354670a226c7218a2911a2df14c07515dffb87d04db202f6d80d0d715adb04f178a7915dac6a10683fd6c1349816e733e116e4a12d11ed1d51c5dd1283f684848a845e9bd028fcb0b4b6bf449ada0b49e176670d6", 0x61}, {&(0x7f00000002c0)="a121a2c3160202b702faad85f634808c304a12834afa1629556c44dafaed3ce96478bc", 0x23}], 0x4, &(0x7f0000000340)={0x78, 0x117, 0xff, "177aea5d600b6d52ed3c89ae7470cd7713fe75b59c4f82a3f2d485fc95aec3f92e8fb40dd97ed48c2c5d4e872504ad1c2d9cb0dda75902dc42fe846af3bb9268930d5396cdf375eab1007b250dce1fdbf1e7ee59a2a2bb5c5a959131b428f09c7e981d77541daa"}, 0x78, 0x4}, 0xc000) (async) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4) (async) sendfile(r1, r2, 0x0, 0x3) 11:04:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:50 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2200000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 559.373601][T29992] loop0: detected capacity change from 0 to 128 [ 559.384347][T29985] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 559.390901][T29985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 559.398497][T29985] vhci_hcd vhci_hcd.0: Device attached [ 559.430291][ T25] audit: type=1400 audit(837860690.570:465): avc: denied { setattr } for pid=30006 comm="syz-executor.1" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 559.436325][T29986] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 559.461707][T29986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 559.469324][T29986] vhci_hcd vhci_hcd.0: Device attached [ 559.489145][T29991] vhci_hcd: connection closed [ 559.511620][ T9310] vhci_hcd: stop threads [ 559.520616][ T9310] vhci_hcd: release socket [ 559.525155][ T9310] vhci_hcd: disconnect device [ 559.543281][T29990] vhci_hcd: connection closed [ 559.543512][ T9310] vhci_hcd: stop threads [ 559.552499][ T9310] vhci_hcd: release socket [ 559.556998][ T9310] vhci_hcd: disconnect device 11:04:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x700) 11:04:51 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:51 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, "c265165335c4b083e40c3568f8e5864439c5a84186553a75528606083abe603a643ae2419ab1b4580dfab55a1168ceb18e3052c741bddb142e1e84d5eb33dc", 0x1e}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000140)="4473527f87ae369b828e08b49d4c098396552f87e65f0164b02747b85ea47eb3dd92219b1b9ef1a2d366a9e1034699daafa2cd382d3f9dfd8719ea1bca5262a7ee0a72063467dac02239d433d7e63f0726872b77e4b047022820f2c2e662771d80d6b551e593c17684bfb9de77275d3359d5972aaff060ac441a93487cb49d0eebe21ddd18597f21", 0x88}, {&(0x7f0000000200)="c0308d4520d2f4815d014bf0425b6005ae2c9d0f05139fca63214cce2ee883d3444a03faa8f7decd1ce63ef1b26dd21985f7b2467c9ebaa594feada8e56a", 0x3e}, {&(0x7f0000000240)="c04a083017855a2edf17abcbe354670a226c7218a2911a2df14c07515dffb87d04db202f6d80d0d715adb04f178a7915dac6a10683fd6c1349816e733e116e4a12d11ed1d51c5dd1283f684848a845e9bd028fcb0b4b6bf449ada0b49e176670d6", 0x61}, {&(0x7f00000002c0)="a121a2c3160202b702faad85f634808c304a12834afa1629556c44dafaed3ce96478bc", 0x23}], 0x4, &(0x7f0000000340)={0x78, 0x117, 0xff, "177aea5d600b6d52ed3c89ae7470cd7713fe75b59c4f82a3f2d485fc95aec3f92e8fb40dd97ed48c2c5d4e872504ad1c2d9cb0dda75902dc42fe846af3bb9268930d5396cdf375eab1007b250dce1fdbf1e7ee59a2a2bb5c5a959131b428f09c7e981d77541daa"}, 0x78, 0x4}, 0xc000) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4) sendfile(r1, r2, 0x0, 0x3) 11:04:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x3f00000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x4) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xffff, 0x8, {"587b8a31fd1a9108163a35571cb3722b"}, 0x2, 0x3, 0xffffffffffffff80}}}, 0x90) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {&(0x7f0000000700), r5, 0x1d}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7ff}, {0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, r6, 0x200}}, 0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r7, 0x0, 0x2, 0x4}}, 0x20) (async, rerun: 32) r9 = syz_usbip_server_init(0x1) (rerun: 32) close(r9) 11:04:51 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r2 = syz_usbip_server_init(0x1) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x3}}, 0x20) 11:04:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x1}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 11:04:51 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x4900000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) r4 = socket(0x200000100000011, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], 0x10}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x80, 0x9, {{0xc, 0x4, 0x2, 0x3b, 0x30, 0x67, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x41}, {[@end, @timestamp_prespec={0x44, 0xc, 0x7c, 0x3, 0x9, [{@empty, 0x7c000000}]}, @noop, @rr={0x7, 0x7, 0x4b, [@loopback]}, @ssrr={0x89, 0x7, 0xd6, [@remote]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8, 0x7, 0x9, 0x9, {{0x1c, 0x4, 0x3, 0x2b, 0x70, 0x67, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x13}, {[@generic={0x86, 0x11, "33a0339bc9095fce55692de1001b48"}, @ssrr={0x89, 0x7, 0xa2, [@dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x4, [0x1, 0x0, 0x23, 0x3]}, @rr={0x7, 0x27, 0x4e, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast1, @empty, @remote, @rand_addr=0x64010100, @broadcast, @empty]}, @generic={0x82, 0x8, "97a7e10b09ee"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x3f, 0x9, 0xbbb, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8041, 0x8, 0x8, 0x8}}) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) r13 = socket(0x200000100000011, 0x3, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r13, &(0x7f0000000180)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r15], 0x10}], 0x1}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={0x2c4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x9, 0x2, 0x80000001}, {0xe2, 0x6, 0x7, 0xffffff01}, {0x3ff, 0x1f, 0x3f, 0x800}, {0x4150, 0x3, 0x3, 0x6}, {0xfff8, 0xff, 0x63, 0x2aa9}, {0x6, 0x1f, 0x5, 0x80000001}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa9b026f}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x5}, 0x4) [ 560.283428][T30027] 9pnet_fd: Insufficient options for proto=fd [ 560.296194][T30031] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 560.302747][T30031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 560.310343][T30031] vhci_hcd vhci_hcd.0: Device attached [ 560.316603][T30032] vhci_hcd: connection closed [ 560.316779][ T33] vhci_hcd: stop threads [ 560.325773][ T33] vhci_hcd: release socket 11:04:51 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11:04:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x300) [ 560.330193][ T33] vhci_hcd: disconnect device [ 560.344999][T30041] loop0: detected capacity change from 0 to 128 [ 560.382546][T30046] loop1: detected capacity change from 0 to 128 11:04:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x804) 11:04:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5100000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r2}}) 11:04:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) r4 = socket(0x200000100000011, 0x3, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], 0x10}], 0x1}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x80, 0x9, {{0xc, 0x4, 0x2, 0x3b, 0x30, 0x67, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x41}, {[@end, @timestamp_prespec={0x44, 0xc, 0x7c, 0x3, 0x9, [{@empty, 0x7c000000}]}, @noop, @rr={0x7, 0x7, 0x4b, [@loopback]}, @ssrr={0x89, 0x7, 0xd6, [@remote]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8, 0x7, 0x9, 0x9, {{0x1c, 0x4, 0x3, 0x2b, 0x70, 0x67, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x13}, {[@generic={0x86, 0x11, "33a0339bc9095fce55692de1001b48"}, @ssrr={0x89, 0x7, 0xa2, [@dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x4, [0x1, 0x0, 0x23, 0x3]}, @rr={0x7, 0x27, 0x4e, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast1, @empty, @remote, @rand_addr=0x64010100, @broadcast, @empty]}, @generic={0x82, 0x8, "97a7e10b09ee"}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x3f, 0x9, 0xbbb, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8041, 0x8, 0x8, 0x8}}) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) r13 = socket(0x200000100000011, 0x3, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r13, &(0x7f0000000180)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendmsg$netlink(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r15], 0x10}], 0x1}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={0x2c4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x9, 0x2, 0x80000001}, {0xe2, 0x6, 0x7, 0xffffff01}, {0x3ff, 0x1f, 0x3f, 0x800}, {0x4150, 0x3, 0x3, 0x6}, {0xfff8, 0xff, 0x63, 0x2aa9}, {0x6, 0x1f, 0x5, 0x80000001}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa9b026f}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x5}, 0x4) 11:04:52 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r2 = syz_usbip_server_init(0x1) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x3}}, 0x20) 11:04:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5200000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r2}}) [ 561.532016][T30064] 9pnet_fd: Insufficient options for proto=fd [ 561.538198][T30058] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 561.544788][T30058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 561.552376][T30058] vhci_hcd vhci_hcd.0: Device attached 11:04:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async, rerun: 64) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (rerun: 64) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) (async, rerun: 32) r4 = socket(0x200000100000011, 0x3, 0x0) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], 0x10}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x80, 0x9, {{0xc, 0x4, 0x2, 0x3b, 0x30, 0x67, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x41}, {[@end, @timestamp_prespec={0x44, 0xc, 0x7c, 0x3, 0x9, [{@empty, 0x7c000000}]}, @noop, @rr={0x7, 0x7, 0x4b, [@loopback]}, @ssrr={0x89, 0x7, 0xd6, [@remote]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8, 0x7, 0x9, 0x9, {{0x1c, 0x4, 0x3, 0x2b, 0x70, 0x67, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x13}, {[@generic={0x86, 0x11, "33a0339bc9095fce55692de1001b48"}, @ssrr={0x89, 0x7, 0xa2, [@dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x4, [0x1, 0x0, 0x23, 0x3]}, @rr={0x7, 0x27, 0x4e, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast1, @empty, @remote, @rand_addr=0x64010100, @broadcast, @empty]}, @generic={0x82, 0x8, "97a7e10b09ee"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x3f, 0x9, 0xbbb, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8041, 0x8, 0x8, 0x8}}) (async) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) r13 = socket(0x200000100000011, 0x3, 0x0) (async) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r13, &(0x7f0000000180)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendmsg$netlink(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r15], 0x10}], 0x1}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={0x2c4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x9, 0x2, 0x80000001}, {0xe2, 0x6, 0x7, 0xffffff01}, {0x3ff, 0x1f, 0x3f, 0x800}, {0x4150, 0x3, 0x3, 0x6}, {0xfff8, 0xff, 0x63, 0x2aa9}, {0x6, 0x1f, 0x5, 0x80000001}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa9b026f}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x5}, 0x4) 11:04:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) write$cgroup_type(r0, &(0x7f0000000100), 0x9) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', './cgroup.cpu/syz0\x00'}, &(0x7f00000001c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x24, 0x1) 11:04:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r2}}) 11:04:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5300000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 561.603182][T30062] vhci_hcd: connection closed [ 561.603523][ T24] vhci_hcd: stop threads [ 561.609862][T30072] loop0: detected capacity change from 0 to 128 [ 561.612604][ T24] vhci_hcd: release socket [ 561.612613][ T24] vhci_hcd: disconnect device [ 561.632084][T30075] 9pnet_fd: Insufficient options for proto=fd 11:04:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) lchown(&(0x7f00000000c0)='./file0\x00', 0xee00, 0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) [ 561.764325][T30086] 9pnet_fd: Insufficient options for proto=fd 11:04:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x900) 11:04:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5400000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:53 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x22}) 11:04:53 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r2 = syz_usbip_server_init(0x1) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) syz_usbip_server_init(0x1) (async) close(r2) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x3}}, 0x20) (async) 11:04:53 executing program 1: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ec0f005155fd8070f1a35b35314964f3f2e429f71bead83987d973b5712475f00a420a0b2d3ac96f22680a939cbf74912c8a564452f7a0de55fef6b8e89bdbcf943c532a2807df567b016d04a1a2f973a0597aa389a1263e84aec6fea360fe747ffb69ee06604b402983f25e9f6f160e4e1a4aedcb9ad01865a2b71a18eaaeb1f319e21a2d8545c78f822e059285b40e7a50ee38a2cc7cb2af7a2f2dcf81ad0c6cba1327a01781a00e3618a0c4f402587703d3d7cdff11b350d975508881e273e61d227ac275e594", @ANYRES32=0x0, @ANYBLOB="000325bd7000fedbdf253a00000008000300", @ANYRES32, @ANYBLOB="ae005b007a97e2fa3975712454410e9c1f9ec5fc5c6a423ee04164179729a24bce2655ccb42cd5e5cf1607e389ee7cf40d4bb5449208b23537812742aa59a2d3a2b2e1ce9a876a67461daee3005923c7af176034ae5722482f68287c9590681ace0f339927067e8aeeba499da989bda9ddecc3953cc05d258c0eb027356d655d794f08d5974feb9d311844659626dbcfb4757591365d6f5332ff01899c682d20fc906ff83b700201c118a73455a8000006006500cd4b000006006500030000000600650002000000060065007fff0000"], 0xec}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x329040, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000008c0)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYBLOB="efbb4ad3792670fa0313defd6dec71ffba65bd965748ee2af073ce5fc0f6553f3b28705d3a3565204642cbc8354d60d511e10a3d8d316fb3ea00922e2434e5afd9f09fb53f594c6b2cba5d1c5dc98682f2ab9b3e88945976512d018ae70018a5ed2ba758e6e4ccdc4faff2bfafcc0901b081aa4c5906f3df9233ba26122a98aa13eb6ed56fe4c4aebbb125c0c404800b3040e24140d897939391522e7296f5381e34843e2c1531a3396abfa71ccda934bfcc4d222fd936c43bbd0027f8a85e1cb670f9ccd2bc5e51485c6a7b9312e328865018b11634e9", @ANYRES8, @ANYRESDEC=r7, @ANYRES16=r6, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r5, @ANYRES32=r2, @ANYRES32=0x0], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r11, r10, 0x0, 0x100000000000004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r12, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r12, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000a00)={0x15, 0x110, 0xfa00, {r12, 0xfff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4a, @mcast1, 0x8}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) sendfile(r10, r11, 0x0, 0x3) 11:04:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) lchown(&(0x7f00000000c0)='./file0\x00', 0xee00, 0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) lchown(&(0x7f00000000c0)='./file0\x00', 0xee00, 0xee01) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) (async) 11:04:53 executing program 1: r0 = socket$inet(0x2, 0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) 11:04:53 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 562.495958][T30100] 9pnet_fd: Insufficient options for proto=fd [ 562.503870][T30101] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 562.510412][T30101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 562.518010][T30101] vhci_hcd vhci_hcd.0: Device attached 11:04:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x5600000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 562.550477][T30112] loop0: detected capacity change from 0 to 128 11:04:53 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6200000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:53 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000300)={{r1}, 0x0, 0x18, @inherit={0x78, &(0x7f0000000000)={0x1, 0x6, 0x5, 0x40, {0x24, 0x7659430e, 0x10008, 0x3, 0x800}, [0x7e004, 0x200, 0xf8, 0x2754, 0x3, 0x9]}}, @subvolid=0x8}) close(r0) 11:04:53 executing program 1: r0 = socket$inet(0x2, 0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) [ 562.581530][T30102] vhci_hcd: connection closed [ 562.633674][ T3085] vhci_hcd: stop threads [ 562.642639][ T3085] vhci_hcd: release socket [ 562.647093][ T3085] vhci_hcd: disconnect device [ 562.661054][T30136] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 562.667648][T30136] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 562.675229][T30136] vhci_hcd vhci_hcd.0: Device attached [ 562.681645][T30137] vhci_hcd: connection closed [ 562.681863][ T3085] vhci_hcd: stop threads [ 562.690850][ T3085] vhci_hcd: release socket [ 562.695384][ T3085] vhci_hcd: disconnect device 11:04:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEniYlJRJPDsssuLL7sXnYvg7p7XHYNiy7LBlZcs/QHFEad2JBpIjNBmyLVnnot/SN6EHvzJrT+A156ay+99OalUEo9SKdkMmM0jjVqYqx+PyDzZt7nmXnfmSjPhLxuX3t0p5i3tbxekXBcSUhEZEckLWHxhbxt2G3HZL8V+bnv3cuV/67f+CeTzY5NKjWemfplRCk1MPh+cSnhhW30ylb61vbbkTdbX299u/1x6nbBVgVblcoVpavp8uuKPm0aarZgFzWlJkxDtw1VKNmGVe8v1/vzZnl+vqr00mx/ct4ybFvppaoqGlVVKauKVVX6nF4oKU3TVH9ScJzc6uSknjll8kybB4MOsayMHhGRxKGe3GpXBgQAALqquf4P10r6E9f/3wfW/88Wl9Z+2Kz0/b8+4NX/G7Gg+v/XV/VjHaj/4yLSvvp/7u5vfwXM/nBFdLWcqf7HxTAYO7QrdOBVrf5Per+/rgc314bcBvU/AAAAAAAAAAAAAAAAAAAAAABfgh3HSTmOk/K3/k+viMRFxHGc5uUErBe5RFq4/+7rbo8TndFYuNczIGI+XMgt5OpbL2BTREwxZEhSsuu+HzwiTtRfeaRq0vLcXPbylxdyEbcnk5eCmz8sKUk35TuOM/53dmxY1R3Mj0rSzc+IRN1DpeSr4PyRwPyY/PTjvvNrkpIXM1IWU2bd93Uj//6wUn/+m23KT7hxAAAAAABcBpraE/j8rmlH9dfz956vgz4f8J6vhwKfz3vku57uzh0AAAAAgKvCrt4r6qZpWJ9pJOT4mPY2nh7VNeoNu4Xj+DP093hfYlppCrYi3kXwv8twyjFHWg2OB115/+TFP/ZN0I88zyvfaiPcyi1oNEK7jmNY9mBtNuqsZ/c/NjoqRiZOfuTYSe97SAK6vnn85EP7rvPv6/FjZtqxRrSDf3IAAAAAdEmj6Pf3jHZ3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEHn8e/Euj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KL4FAAA//8X6PzU") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0xd00) 11:04:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) lchown(&(0x7f00000000c0)='./file0\x00', 0xee00, 0xee01) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) 11:04:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6400000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:54 executing program 1: r0 = socket$inet(0x2, 0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x7, 0x4) (async) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) 11:04:54 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r0 = syz_usbip_server_init(0x1) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000300)={{r1}, 0x0, 0x18, @inherit={0x78, &(0x7f0000000000)={0x1, 0x6, 0x5, 0x40, {0x24, 0x7659430e, 0x10008, 0x3, 0x800}, [0x7e004, 0x200, 0xf8, 0x2754, 0x3, 0x9]}}, @subvolid=0x8}) close(r0) 11:04:54 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x2}}) 11:04:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x6700000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x3) [ 563.473156][T30158] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 563.479769][T30158] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 563.487425][T30158] vhci_hcd vhci_hcd.0: Device attached [ 563.509257][T30172] loop0: detected capacity change from 0 to 128 [ 563.515690][T30159] vhci_hcd: connection closed 11:04:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7100000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 563.515861][ T9310] vhci_hcd: stop threads [ 563.524838][ T9310] vhci_hcd: release socket [ 563.529323][ T9310] vhci_hcd: disconnect device 11:04:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7300000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7500000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, 0x1c) accept$inet6(r0, 0x0, &(0x7f0000000040)) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000140)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="e28b801ffc4cc8fe3a1a4bb2eca98f367c629645c6c4051a08e43b", 0x1b}, {&(0x7f0000000280)="01ecb0aba743a1af7744ca6282", 0xd}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="501a62f50000000000"], 0x18}, 0x0) [ 563.655310][ T25] audit: type=1400 audit(837860694.790:466): avc: denied { accept } for pid=30180 comm="syz-executor.1" laddr=fe80::a8aa:aaff:feaa:aa16 lport=60 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 11:04:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEniYlJRJPDsssuLL7sXnYvg7p7XHYNiy7LBlZcs/QHFEad2JBpIjNBmyLVnnot/SN6EHvzJrT+A156ay+99OalUEo9SKdkMmM0jjVqYqx+PyDzZt7nmXnfmSjPhLxuX3t0p5i3tbxekXBcSUhEZEckLWHxhbxt2G3HZL8V+bnv3cuV/67f+CeTzY5NKjWemfplRCk1MPh+cSnhhW30ylb61vbbkTdbX299u/1x6nbBVgVblcoVpavp8uuKPm0aarZgFzWlJkxDtw1VKNmGVe8v1/vzZnl+vqr00mx/ct4ybFvppaoqGlVVKauKVVX6nF4oKU3TVH9ScJzc6uSknjll8kybB4MOsayMHhGRxKGe3GpXBgQAALqquf4P10r6E9f/3wfW/88Wl9Z+2Kz0/b8+4NX/G7Gg+v/XV/VjHaj/4yLSvvp/7u5vfwXM/nBFdLWcqf7HxTAYO7QrdOBVrf5Per+/rgc314bcBvU/AAAAAAAAAAAAAAAAAAAAAABfgh3HSTmOk/K3/k+viMRFxHGc5uUErBe5RFq4/+7rbo8TndFYuNczIGI+XMgt5OpbL2BTREwxZEhSsuu+HzwiTtRfeaRq0vLcXPbylxdyEbcnk5eCmz8sKUk35TuOM/53dmxY1R3Mj0rSzc+IRN1DpeSr4PyRwPyY/PTjvvNrkpIXM1IWU2bd93Uj//6wUn/+m23KT7hxAAAAAABcBpraE/j8rmlH9dfz956vgz4f8J6vhwKfz3vku57uzh0AAAAAgKvCrt4r6qZpWJ9pJOT4mPY2nh7VNeoNu4Xj+DP093hfYlppCrYi3kXwv8twyjFHWg2OB115/+TFP/ZN0I88zyvfaiPcyi1oNEK7jmNY9mBtNuqsZ/c/NjoqRiZOfuTYSe97SAK6vnn85EP7rvPv6/FjZtqxRrSDf3IAAAAAdEmj6Pf3jHZ3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEHn8e/Euj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KL4FAAA//8X6PzU") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0xf00) 11:04:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, 0x1c) (async) accept$inet6(r0, 0x0, &(0x7f0000000040)) (async) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000140)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="e28b801ffc4cc8fe3a1a4bb2eca98f367c629645c6c4051a08e43b", 0x1b}, {&(0x7f0000000280)="01ecb0aba743a1af7744ca6282", 0xd}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="501a62f50000000000"], 0x18}, 0x0) 11:04:55 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x7700000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) sendfile(r2, r3, 0x0, 0x3) 11:04:55 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r0 = syz_usbip_server_init(0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000300)={{r1}, 0x0, 0x18, @inherit={0x78, &(0x7f0000000000)={0x1, 0x6, 0x5, 0x40, {0x24, 0x7659430e, 0x10008, 0x3, 0x800}, [0x7e004, 0x200, 0xf8, 0x2754, 0x3, 0x9]}}, @subvolid=0x8}) (async) close(r0) 11:04:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x7}}) 11:04:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, 0x1c) (rerun: 32) accept$inet6(r0, 0x0, &(0x7f0000000040)) (async, rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="e28b801ffc4cc8fe3a1a4bb2eca98f367c629645c6c4051a08e43b", 0x1b}, {&(0x7f0000000280)="01ecb0aba743a1af7744ca6282", 0xd}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="501a62f50000000000"], 0x18}, 0x0) 11:04:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r3, r2, 0x0, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x3) 11:04:55 executing program 3: iopl(0x5) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3a5e, 0x7, {"1424b12ce44600213a3ce0153e64e5e6"}, 0x0, 0x0, 0xffffffffffffffeb}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) [ 564.400200][T30192] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 564.406837][T30192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 564.414403][T30192] vhci_hcd vhci_hcd.0: Device attached 11:04:55 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x8cffffff00000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:55 executing program 1: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0x7c8, 0x0) inotify_init1(0x0) [ 564.432678][T30193] vhci_hcd: connection closed [ 564.445962][ T24] vhci_hcd: stop threads [ 564.454930][ T24] vhci_hcd: release socket [ 564.459431][ T24] vhci_hcd: disconnect device [ 564.465346][T30209] loop0: detected capacity change from 0 to 128 [ 564.499834][T30217] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 564.506411][T30217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 564.513961][T30217] vhci_hcd vhci_hcd.0: Device attached 11:04:55 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xf6ffffff00000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 564.523608][T30218] vhci_hcd: connection closed [ 564.582208][ T3085] vhci_hcd: stop threads [ 564.591239][ T3085] vhci_hcd: release socket [ 564.595713][ T3085] vhci_hcd: disconnect device [ 564.607190][T30221] loop1: detected capacity change from 0 to 512 [ 564.642714][T30221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.725849][ T3381] udevd[3381]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 564.741828][ T25] audit: type=1400 audit(837860695.880:467): avc: denied { create } for pid=30219 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 564.762297][ T25] audit: type=1400 audit(837860695.880:468): avc: denied { write } for pid=30219 comm="syz-executor.1" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 564.784222][ T25] audit: type=1400 audit(837860695.880:469): avc: denied { add_name } for pid=30219 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 564.804957][ T25] audit: type=1400 audit(837860695.890:470): avc: denied { setattr } for pid=30219 comm="syz-executor.1" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 564.830509][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:04:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x1800) 11:04:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xffff000000000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:56 executing program 1: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) (async, rerun: 64) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0x7c8, 0x0) (async, rerun: 64) inotify_init1(0x0) 11:04:56 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000240)={'broute\x00', 0x0, 0x4, 0x0, [0x117, 0x8, 0x1, 0xffffffffffffffff], 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000200)}, &(0x7f00000002c0)=0x78) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x3) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x90, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='veth1_to_team\x00', 0x4ab, 0x8, 0xbd6}) 11:04:56 executing program 3: iopl(0x5) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3a5e, 0x7, {"1424b12ce44600213a3ce0153e64e5e6"}, 0x0, 0x0, 0xffffffffffffffeb}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r0 = syz_usbip_server_init(0x1) close(r0) 11:04:56 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0xa}}) 11:04:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0xffffffff00000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 565.447254][T30243] loop1: detected capacity change from 0 to 512 [ 565.457951][T30241] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 565.464605][T30241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 565.472256][T30241] vhci_hcd vhci_hcd.0: Device attached 11:04:56 executing program 1: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) (async, rerun: 32) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0x7c8, 0x0) (rerun: 32) inotify_init1(0x0) 11:04:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 565.496830][T30249] loop0: detected capacity change from 0 to 128 [ 565.511378][T30242] vhci_hcd: connection closed [ 565.511832][ T3085] vhci_hcd: stop threads [ 565.520850][ T3085] vhci_hcd: release socket [ 565.525337][ T3085] vhci_hcd: disconnect device 11:04:56 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000240)={'broute\x00', 0x0, 0x4, 0x0, [0x117, 0x8, 0x1, 0xffffffffffffffff], 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000200)}, &(0x7f00000002c0)=0x78) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x3) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x90, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='veth1_to_team\x00', 0x4ab, 0x8, 0xbd6}) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x90, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='veth1_to_team\x00', 0x4ab, 0x8, 0xbd6}) 11:04:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 565.610630][ T3381] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 565.619606][T30254] 9pnet_fd: Insufficient options for proto=fd [ 565.638054][T30257] loop1: detected capacity change from 0 to 512 [ 565.652218][ T3381] udevd[3381]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 565.660730][T30264] 9pnet_fd: Insufficient options for proto=fd [ 565.676698][ T3381] udevd[3381]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system 11:04:56 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r5}}) [ 565.699516][T30257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.735390][ T3381] udevd[3381]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 565.772633][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.817938][T30270] 9pnet_fd: Insufficient options for proto=fd 11:04:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEniYlJRJPDsssuLL7sXnYvg7p7XHYNiy7LBlZcs/QHFEad2JBpIjNBmyLVnnot/SN6EHvzJrT+A156ay+99OalUEo9SKdkMmM0jjVqYqx+PyDzZt7nmXnfmSjPhLxuX3t0p5i3tbxekXBcSUhEZEckLWHxhbxt2G3HZL8V+bnv3cuV/67f+CeTzY5NKjWemfplRCk1MPh+cSnhhW30ylb61vbbkTdbX299u/1x6nbBVgVblcoVpavp8uuKPm0aarZgFzWlJkxDtw1VKNmGVe8v1/vzZnl+vqr00mx/ct4ybFvppaoqGlVVKauKVVX6nF4oKU3TVH9ScJzc6uSknjll8kybB4MOsayMHhGRxKGe3GpXBgQAALqquf4P10r6E9f/3wfW/88Wl9Z+2Kz0/b8+4NX/G7Gg+v/XV/VjHaj/4yLSvvp/7u5vfwXM/nBFdLWcqf7HxTAYO7QrdOBVrf5Per+/rgc314bcBvU/AAAAAAAAAAAAAAAAAAAAAABfgh3HSTmOk/K3/k+viMRFxHGc5uUErBe5RFq4/+7rbo8TndFYuNczIGI+XMgt5OpbL2BTREwxZEhSsuu+HzwiTtRfeaRq0vLcXPbylxdyEbcnk5eCmz8sKUk35TuOM/53dmxY1R3Mj0rSzc+IRN1DpeSr4PyRwPyY/PTjvvNrkpIXM1IWU2bd93Uj//6wUn/+m23KT7hxAAAAAABcBpraE/j8rmlH9dfz956vgz4f8J6vhwKfz3vku57uzh0AAAAAgKvCrt4r6qZpWJ9pJOT4mPY2nh7VNeoNu4Xj+DP093hfYlppCrYi3kXwv8twyjFHWg2OB115/+TFP/ZN0I88zyvfaiPcyi1oNEK7jmNY9mBtNuqsZ/c/NjoqRiZOfuTYSe97SAK6vnn85EP7rvPv6/FjZtqxRrSDf3IAAAAAdEmj6Pf3jHZ3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEHn8e/Euj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KL4FAAA//8X6PzU") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x2000) 11:04:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0x10}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r5, 0x29, 0xfa, 0x4, 0x9, 0x14, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, 0x7800, 0x8000, 0x8, 0x8}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x8, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8011) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300669808030000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c00014000000000000001010c000240000000000000000008000440000000010800034000000000140000001000010000000000000000000000000a66734c1efc42ea12339e84312241f67f09bc35a42845e8891777c0a6572d8b34102f133eee7a288c051c9f2bbd927b139c4d52e7e908814ac5e6b37b5942a2f366713095542f6aa6e834fa596da4278fd45b4144804a7301409c48bfbb70936dd6303d97cb94b2d7201e896e0b138793b2fd340a2aec3cc9a8e703a80fe41bab7d3347741a3022cd9154896f1c3cfe35e726d9722fce02b6c2d509f278a7af2fe3f34f5316d031da8477ee1750629fb3c6e8b86e71faf8c4cbadf1575faef9054857e968aaf51a418cbbb289165fdda026d8f7598abcfce39ff929ece8bcdd4fec4c032e39dd688b74b9ce8327b0e905d96ac9754e292b4c6da14a2293dd93432059a741928c3e1eb18ccdb0bf3725e5958f59bad57cca2b099c0060602e5cf831ddb070432a925b2b7a5579d4bc92d8a00633c9b1f87aa38db97f5585f2255d18efc88fced690565559dff466074b20f169d6164642e350af4d8407c2cb74eeccdb3f94324e58"], 0xc0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) openat$cgroup_ro(r2, &(0x7f0000000280)='cgroup.freeze\x00', 0x0, 0x0) 11:04:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r5}}) 11:04:57 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000240)={'broute\x00', 0x0, 0x4, 0x0, [0x117, 0x8, 0x1, 0xffffffffffffffff], 0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000200)}, &(0x7f00000002c0)=0x78) (async) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) (async) sendfile(r3, r4, 0x0, 0x3) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x90, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='veth1_to_team\x00', 0x4ab, 0x8, 0xbd6}) 11:04:57 executing program 3: iopl(0x5) (async) iopl(0x5) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3a5e, 0x7, {"1424b12ce44600213a3ce0153e64e5e6"}, 0x0, 0x0, 0xffffffffffffffeb}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) 11:04:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x10}}) [ 566.392282][T30276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 566.398845][T30276] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 566.406487][T30276] vhci_hcd vhci_hcd.0: Device attached [ 566.412118][T30283] 9pnet_fd: Insufficient options for proto=fd [ 566.412598][T30278] vhci_hcd: connection closed [ 566.429442][ T33] vhci_hcd: stop threads 11:04:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x3) 11:04:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r5}}) [ 566.438505][ T33] vhci_hcd: release socket [ 566.442942][ T33] vhci_hcd: disconnect device [ 566.449558][T30288] loop0: detected capacity change from 0 to 128 11:04:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x22}) 11:04:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x3) 11:04:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0x10}], 0x1}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r5, 0x29, 0xfa, 0x4, 0x9, 0x14, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, 0x7800, 0x8000, 0x8, 0x8}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x8, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8011) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) (async) ioctl$RTC_PIE_OFF(r6, 0x7006) (async) openat$cgroup_ro(r2, &(0x7f0000000280)='cgroup.freeze\x00', 0x0, 0x0) [ 566.494559][T30293] 9pnet_fd: Insufficient options for proto=fd 11:04:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) (async) sendfile(r3, r4, 0x0, 0x3) [ 566.583966][T30305] 9pnet_fd: Insufficient options for proto=fd 11:04:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 11:04:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0x10}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r5, 0x29, 0xfa, 0x4, 0x9, 0x14, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, 0x7800, 0x8000, 0x8, 0x8}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x8, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8011) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) openat$cgroup_ro(r2, &(0x7f0000000280)='cgroup.freeze\x00', 0x0, 0x0) 11:04:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x2200) 11:04:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='rdma.max\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x3) 11:04:58 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x22}}) 11:04:58 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x3) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="180000001800ff0f00363105d17fb7cee5e5af52935400040000000000850000006d030000000000000000040095e2cb83b18a6e02f690c66585882075480f3b0f4b790abff8f3a4b3abb150505e77e7af932a95c95e29a98d1e3b56af6b949f25be90ddda89dd576f664c4b68b7df27c2f4427971886cefd22422ad0488b3c3428ff207e53d207618bbe85df96aaa998cbffe05d09abcbe59091aa55d7473"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='inet_sock_set_state\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f00000013c0)='.pending_reads\x00', 0x2000, 0x13) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001400)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000001480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xd5}, {0xa, 0x4e23, 0xfffffff7, @mcast2, 0x6}, r7, 0x3ff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000802, 0xee00, &(0x7f0000000100)={0xe8c0, 0xfffffffffffffffb, 0x1, 0x0, 0x101, 0x5, 0x8, 0x9, 0x4}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r9, 0x0, &(0x7f0000000280)=""/4096}, 0x20) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000000240)={{r9}, 0x0, &(0x7f0000000100), 0xfffffffffffff055, 0x0, 0x1}) sendto$inet6(r8, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a59", 0x63, 0x1, 0x0, 0x0) shutdown(r8, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000640)={r10, 0x9, 0x0, [0x10001, 0x0, 0x401, 0x400, 0x7cc7], [0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x0, 0xba38, 0x5e, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x8, 0x5, 0x0, 0x2, 0xa0, 0xffffffffe, 0x14, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x57, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3ff, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, 0x0, 0x9, 0x5, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000640)={0x0, 0x4, {0x8, @struct={0x5, 0x5d}, 0x0, 0x1, 0x0, 0x6, 0xfcd5, 0x30, 0x60, @usage, 0x80000000, 0x3, [0x1, 0x5, 0x0, 0x3, 0x7f, 0x8000000000000000]}, {0x0, @usage=0x4, 0x0, 0x8, 0x1, 0x0, 0x9b27, 0x6, 0x401, @usage, 0x1, 0x81, [0x8, 0x6b4, 0x1ff, 0x0, 0x3]}, {0x8001, @struct={0x2}, r10, 0x1, 0xffffffffffffffff, 0x4ef02756, 0x0, 0x0, 0x401, @struct={0x1, 0x7fff}, 0x80, 0x0, [0x20, 0xfffffffffffffbff, 0x0, 0x0, 0x7, 0x18ed]}, {0x1, 0x7fffffffffffffff, 0x6}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002c00)={{r1}, r2, 0x16, @inherit={0x0, 0x0}, @devid=r10}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000300)={{r0}, r2, 0x2, @unused=[0x8001, 0x100, 0x9, 0x4], @subvolid=0xfffffffeffffffff}) [ 567.404630][T30328] loop0: detected capacity change from 0 to 128 [ 567.409041][T30326] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 567.417433][T30326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 567.425006][T30326] vhci_hcd vhci_hcd.0: Device attached 11:04:58 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r5}}) 11:04:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x70, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x48, 0x1, "1dbc8c446f18e9beea8fbec3f53ea9cfc1f0437715bf2e2ea8e01aeaf363f67b47128cbc55f8a1058ba29d66fb7a11709e42bf92bfb5f4d11cd4f392f6f9c0a6678482e2"}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f0000000140)=0x18) [ 567.514800][T30329] vhci_hcd: connection closed [ 567.515047][ T24] vhci_hcd: stop threads [ 567.524449][ T24] vhci_hcd: release socket [ 567.528911][ T24] vhci_hcd: disconnect device [ 567.551707][T30337] 9pnet_fd: Insufficient options for proto=fd 11:04:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x70, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x48, 0x1, "1dbc8c446f18e9beea8fbec3f53ea9cfc1f0437715bf2e2ea8e01aeaf363f67b47128cbc55f8a1058ba29d66fb7a11709e42bf92bfb5f4d11cd4f392f6f9c0a6678482e2"}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f0000000140)=0x18) [ 567.659078][ T25] audit: type=1400 audit(837860698.800:471): avc: denied { shutdown } for pid=30339 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 11:04:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x70, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x48, 0x1, "1dbc8c446f18e9beea8fbec3f53ea9cfc1f0437715bf2e2ea8e01aeaf363f67b47128cbc55f8a1058ba29d66fb7a11709e42bf92bfb5f4d11cd4f392f6f9c0a6678482e2"}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x14}, 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f0000000140)=0x18) 11:04:59 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="8cffffff00010000000000000000000080000000240001801410018008000100ac3b000108000000000000000003028005000100000000001800028014"], 0x50}}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 11:04:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) (async) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='rdma.max\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) (async) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x3) 11:04:59 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x2}}) 11:04:59 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r0 = syz_usbip_server_init(0x1) close(r0) (async) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x3) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="180000001800ff0f00363105d17fb7cee5e5af52935400040000000000850000006d030000000000000000040095e2cb83b18a6e02f690c66585882075480f3b0f4b790abff8f3a4b3abb150505e77e7af932a95c95e29a98d1e3b56af6b949f25be90ddda89dd576f664c4b68b7df27c2f4427971886cefd22422ad0488b3c3428ff207e53d207618bbe85df96aaa998cbffe05d09abcbe59091aa55d7473"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='inet_sock_set_state\x00', r3}, 0x10) (async, rerun: 64) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f00000013c0)='.pending_reads\x00', 0x2000, 0x13) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001400)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000001480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xd5}, {0xa, 0x4e23, 0xfffffff7, @mcast2, 0x6}, r7, 0x3ff}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000802, 0xee00, &(0x7f0000000100)={0xe8c0, 0xfffffffffffffffb, 0x1, 0x0, 0x101, 0x5, 0x8, 0x9, 0x4}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r9, 0x0, &(0x7f0000000280)=""/4096}, 0x20) (async) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000000240)={{r9}, 0x0, &(0x7f0000000100), 0xfffffffffffff055, 0x0, 0x1}) sendto$inet6(r8, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r8, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a59", 0x63, 0x1, 0x0, 0x0) (async, rerun: 64) shutdown(r8, 0x1) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000640)={r10, 0x9, 0x0, [0x10001, 0x0, 0x401, 0x400, 0x7cc7], [0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x0, 0xba38, 0x5e, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x8, 0x5, 0x0, 0x2, 0xa0, 0xffffffffe, 0x14, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x57, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3ff, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, 0x0, 0x9, 0x5, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000640)={0x0, 0x4, {0x8, @struct={0x5, 0x5d}, 0x0, 0x1, 0x0, 0x6, 0xfcd5, 0x30, 0x60, @usage, 0x80000000, 0x3, [0x1, 0x5, 0x0, 0x3, 0x7f, 0x8000000000000000]}, {0x0, @usage=0x4, 0x0, 0x8, 0x1, 0x0, 0x9b27, 0x6, 0x401, @usage, 0x1, 0x81, [0x8, 0x6b4, 0x1ff, 0x0, 0x3]}, {0x8001, @struct={0x2}, r10, 0x1, 0xffffffffffffffff, 0x4ef02756, 0x0, 0x0, 0x401, @struct={0x1, 0x7fff}, 0x80, 0x0, [0x20, 0xfffffffffffffbff, 0x0, 0x0, 0x7, 0x18ed]}, {0x1, 0x7fffffffffffffff, 0x6}}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002c00)={{r1}, r2, 0x16, @inherit={0x0, 0x0}, @devid=r10}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000300)={{r0}, r2, 0x2, @unused=[0x8001, 0x100, 0x9, 0x4], @subvolid=0xfffffffeffffffff}) [ 568.258855][T30362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 568.265404][T30362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 568.272968][T30362] vhci_hcd vhci_hcd.0: Device attached [ 568.286956][T30363] vhci_hcd: connection closed [ 568.287945][ T33] vhci_hcd: stop threads [ 568.296968][ T33] vhci_hcd: release socket [ 568.301599][ T33] vhci_hcd: disconnect device 11:04:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) (async) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='rdma.max\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) (async) sendfile(r3, r4, 0x0, 0x3) 11:04:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x2502) 11:04:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x49}}) 11:04:59 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x3) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="180000001800ff0f00363105d17fb7cee5e5af52935400040000000000850000006d030000000000000000040095e2cb83b18a6e02f690c66585882075480f3b0f4b790abff8f3a4b3abb150505e77e7af932a95c95e29a98d1e3b56af6b949f25be90ddda89dd576f664c4b68b7df27c2f4427971886cefd22422ad0488b3c3428ff207e53d207618bbe85df96aaa998cbffe05d09abcbe59091aa55d7473"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='inet_sock_set_state\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) openat$incfs(0xffffffffffffff9c, &(0x7f00000013c0)='.pending_reads\x00', 0x2000, 0x13) (async) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f00000013c0)='.pending_reads\x00', 0x2000, 0x13) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001400)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000001480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xd5}, {0xa, 0x4e23, 0xfffffff7, @mcast2, 0x6}, r7, 0x3ff}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000001480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xd5}, {0xa, 0x4e23, 0xfffffff7, @mcast2, 0x6}, r7, 0x3ff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000802, 0xee00, &(0x7f0000000100)={0xe8c0, 0xfffffffffffffffb, 0x1, 0x0, 0x101, 0x5, 0x8, 0x9, 0x4}) (async) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000802, 0xee00, &(0x7f0000000100)={0xe8c0, 0xfffffffffffffffb, 0x1, 0x0, 0x101, 0x5, 0x8, 0x9, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r9, 0x0, &(0x7f0000000280)=""/4096}, 0x20) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000000240)={{r9}, 0x0, &(0x7f0000000100), 0xfffffffffffff055, 0x0, 0x1}) sendto$inet6(r8, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a59", 0x63, 0x1, 0x0, 0x0) (async) sendto$inet6(r8, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a59", 0x63, 0x1, 0x0, 0x0) shutdown(r8, 0x1) (async) shutdown(r8, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000640)={r10, 0x9, 0x0, [0x10001, 0x0, 0x401, 0x400, 0x7cc7], [0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x0, 0xba38, 0x5e, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x8, 0x5, 0x0, 0x2, 0xa0, 0xffffffffe, 0x14, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x57, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3ff, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, 0x0, 0x9, 0x5, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000640)={0x0, 0x4, {0x8, @struct={0x5, 0x5d}, 0x0, 0x1, 0x0, 0x6, 0xfcd5, 0x30, 0x60, @usage, 0x80000000, 0x3, [0x1, 0x5, 0x0, 0x3, 0x7f, 0x8000000000000000]}, {0x0, @usage=0x4, 0x0, 0x8, 0x1, 0x0, 0x9b27, 0x6, 0x401, @usage, 0x1, 0x81, [0x8, 0x6b4, 0x1ff, 0x0, 0x3]}, {0x8001, @struct={0x2}, r10, 0x1, 0xffffffffffffffff, 0x4ef02756, 0x0, 0x0, 0x401, @struct={0x1, 0x7fff}, 0x80, 0x0, [0x20, 0xfffffffffffffbff, 0x0, 0x0, 0x7, 0x18ed]}, {0x1, 0x7fffffffffffffff, 0x6}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002c00)={{r1}, r2, 0x16, @inherit={0x0, 0x0}, @devid=r10}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000300)={{r0}, r2, 0x2, @unused=[0x8001, 0x100, 0x9, 0x4], @subvolid=0xfffffffeffffffff}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000300)={{r0}, r2, 0x2, @unused=[0x8001, 0x100, 0x9, 0x4], @subvolid=0xfffffffeffffffff}) 11:04:59 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x20, 0x0, [0x10000, 0xffffff7f, 0x7, 0x1, 0x7a, 0x9, 0x0, 0x80000001, 0x0, 0x1, 0x2, 0x3b, 0x7, 0x3f, 0x902, 0x7fffffff]}, {0x32, 0x0, [0x76e, 0x844, 0x8, 0x10001, 0x7c50, 0x7fff, 0xfffff18c, 0x7ff, 0x9, 0x7f, 0x1, 0x0, 0x7, 0x9, 0xfff, 0x1]}, {0x6, 0x0, [0x0, 0xffffffff, 0x3, 0x1, 0x71b3, 0x7, 0x3, 0xff, 0x5, 0x3491, 0x10001, 0x7, 0x4, 0x8, 0x10000, 0x8]}], r3, 0x1, 0x1, 0xd8}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r4 = syz_usbip_server_init(0x1) close(r4) [ 568.453587][T30374] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 568.460169][T30374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 568.467793][T30374] vhci_hcd vhci_hcd.0: Device attached [ 568.474050][T30375] vhci_hcd: connection closed [ 568.477575][ T24] vhci_hcd: stop threads [ 568.478551][T30378] loop0: detected capacity change from 0 to 128 [ 568.482288][ T24] vhci_hcd: release socket [ 568.497418][ T24] vhci_hcd: disconnect device 11:04:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x897}}, './file0\x00'}) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000200)={0x7, 0xd4, &(0x7f0000000100)="f655c434329d701b934c28b8b680f7be1e8e86a55f91a9e21b09150f3e3a09cdf70425fe4bcd5364f68ed4dabc79203030eb3577d97050096735a6aec36c9553218d3d1958974ecfcbcd5318d865f08d8096672cf454da5be1de74f1dbcd7a51aae60899e5aaf3d0c09d0c03bce3482a9a24a19f94e3296750381aa133c843f251e6c120e6bd61a3194f860a265fd3853e7184491d046e95bc0c9036867c93ddcd2518ed06a652b70026030b57a8db767a3cc9a1952c92ec1efafe6d19a283b5da6756f122f128f4a594e52b35c46b2308d55580"}) [ 568.597100][T30382] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 568.603725][T30382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 568.611382][T30382] vhci_hcd vhci_hcd.0: Device attached [ 568.624485][T30383] vhci_hcd: connection closed [ 568.624767][ T3085] vhci_hcd: stop threads [ 568.633985][ T3085] vhci_hcd: release socket [ 568.638601][ T3085] vhci_hcd: disconnect device 11:04:59 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="8cffffff00010000000000000000000080000000240001801410018008000100ac3b000108000000000000000003028005000100000000001800028014"], 0x50}}, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 11:05:00 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="8cffffff00010000000000000000000080000000240001801410018008000100ac3b000108000000000000000003028005000100000000001800028014"], 0x50}}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000280)) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="8cffffff00010000000000000000000080000000240001801410018008000100ac3b000108000000000000000003028005000100000000001800028014"], 0x50}}, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) (async) 11:05:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x7}}) 11:05:00 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x20, 0x0, [0x10000, 0xffffff7f, 0x7, 0x1, 0x7a, 0x9, 0x0, 0x80000001, 0x0, 0x1, 0x2, 0x3b, 0x7, 0x3f, 0x902, 0x7fffffff]}, {0x32, 0x0, [0x76e, 0x844, 0x8, 0x10001, 0x7c50, 0x7fff, 0xfffff18c, 0x7ff, 0x9, 0x7f, 0x1, 0x0, 0x7, 0x9, 0xfff, 0x1]}, {0x6, 0x0, [0x0, 0xffffffff, 0x3, 0x1, 0x71b3, 0x7, 0x3, 0xff, 0x5, 0x3491, 0x10001, 0x7, 0x4, 0x8, 0x10000, 0x8]}], r3, 0x1, 0x1, 0xd8}}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r4 = syz_usbip_server_init(0x1) close(r4) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x20, 0x0, [0x10000, 0xffffff7f, 0x7, 0x1, 0x7a, 0x9, 0x0, 0x80000001, 0x0, 0x1, 0x2, 0x3b, 0x7, 0x3f, 0x902, 0x7fffffff]}, {0x32, 0x0, [0x76e, 0x844, 0x8, 0x10001, 0x7c50, 0x7fff, 0xfffff18c, 0x7ff, 0x9, 0x7f, 0x1, 0x0, 0x7, 0x9, 0xfff, 0x1]}, {0x6, 0x0, [0x0, 0xffffffff, 0x3, 0x1, 0x71b3, 0x7, 0x3, 0xff, 0x5, 0x3491, 0x10001, 0x7, 0x4, 0x8, 0x10000, 0x8]}], r3, 0x1, 0x1, 0xd8}}, 0x20) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) syz_usbip_server_init(0x1) (async) close(r4) (async) 11:05:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x897}}, './file0\x00'}) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000200)={0x7, 0xd4, &(0x7f0000000100)="f655c434329d701b934c28b8b680f7be1e8e86a55f91a9e21b09150f3e3a09cdf70425fe4bcd5364f68ed4dabc79203030eb3577d97050096735a6aec36c9553218d3d1958974ecfcbcd5318d865f08d8096672cf454da5be1de74f1dbcd7a51aae60899e5aaf3d0c09d0c03bce3482a9a24a19f94e3296750381aa133c843f251e6c120e6bd61a3194f860a265fd3853e7184491d046e95bc0c9036867c93ddcd2518ed06a652b70026030b57a8db767a3cc9a1952c92ec1efafe6d19a283b5da6756f122f128f4a594e52b35c46b2308d55580"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x897}}, './file0\x00'}) (async) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000200)={0x7, 0xd4, &(0x7f0000000100)="f655c434329d701b934c28b8b680f7be1e8e86a55f91a9e21b09150f3e3a09cdf70425fe4bcd5364f68ed4dabc79203030eb3577d97050096735a6aec36c9553218d3d1958974ecfcbcd5318d865f08d8096672cf454da5be1de74f1dbcd7a51aae60899e5aaf3d0c09d0c03bce3482a9a24a19f94e3296750381aa133c843f251e6c120e6bd61a3194f860a265fd3853e7184491d046e95bc0c9036867c93ddcd2518ed06a652b70026030b57a8db767a3cc9a1952c92ec1efafe6d19a283b5da6756f122f128f4a594e52b35c46b2308d55580"}) (async) 11:05:00 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async, rerun: 32) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x20, 0x0, [0x10000, 0xffffff7f, 0x7, 0x1, 0x7a, 0x9, 0x0, 0x80000001, 0x0, 0x1, 0x2, 0x3b, 0x7, 0x3f, 0x902, 0x7fffffff]}, {0x32, 0x0, [0x76e, 0x844, 0x8, 0x10001, 0x7c50, 0x7fff, 0xfffff18c, 0x7ff, 0x9, 0x7f, 0x1, 0x0, 0x7, 0x9, 0xfff, 0x1]}, {0x6, 0x0, [0x0, 0xffffffff, 0x3, 0x1, 0x71b3, 0x7, 0x3, 0xff, 0x5, 0x3491, 0x10001, 0x7, 0x4, 0x8, 0x10000, 0x8]}], r3, 0x1, 0x1, 0xd8}}, 0x20) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async, rerun: 64) r4 = syz_usbip_server_init(0x1) close(r4) 11:05:00 executing program 1: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0xd, &(0x7f0000000180)={0x5, 0x8}, &(0x7f00000002c0)) get_robust_list(r1, &(0x7f0000000080)=&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)}, &(0x7f00000000c0)=0x18) process_vm_writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x351, &(0x7f0000000540)=[{&(0x7f0000000380)=""/222, 0x7ffff000}], 0x2d7, 0x0) [ 569.173831][T30403] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 569.180453][T30403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 569.188143][T30403] vhci_hcd vhci_hcd.0: Device attached [ 569.195172][T30404] vhci_hcd: connection closed [ 569.197967][ T33] vhci_hcd: stop threads [ 569.206963][ T33] vhci_hcd: release socket [ 569.211455][ T33] vhci_hcd: disconnect device 11:05:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x3f00) 11:05:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x51}}) 11:05:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x8000, @local, 0x6}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="06000020000000002e00"]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r5, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, @ib={0x1b, 0x4, 0x2, {"a57c3fd4884279b258025c8e0c6595e2"}, 0x4, 0xffff, 0x5}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @ib={0x1b, 0x4, 0x6, {"af78e66c463b625d620a76a152d034d8"}, 0x412, 0x43f, 0x2}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r7 = syz_usbip_server_init(0x1) close(r7) 11:05:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x897}}, './file0\x00'}) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000200)={0x7, 0xd4, &(0x7f0000000100)="f655c434329d701b934c28b8b680f7be1e8e86a55f91a9e21b09150f3e3a09cdf70425fe4bcd5364f68ed4dabc79203030eb3577d97050096735a6aec36c9553218d3d1958974ecfcbcd5318d865f08d8096672cf454da5be1de74f1dbcd7a51aae60899e5aaf3d0c09d0c03bce3482a9a24a19f94e3296750381aa133c843f251e6c120e6bd61a3194f860a265fd3853e7184491d046e95bc0c9036867c93ddcd2518ed06a652b70026030b57a8db767a3cc9a1952c92ec1efafe6d19a283b5da6756f122f128f4a594e52b35c46b2308d55580"}) 11:05:00 executing program 1: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0xd, &(0x7f0000000180)={0x5, 0x8}, &(0x7f00000002c0)) (async) prlimit64(r1, 0xd, &(0x7f0000000180)={0x5, 0x8}, &(0x7f00000002c0)) get_robust_list(r1, &(0x7f0000000080)=&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)}, &(0x7f00000000c0)=0x18) process_vm_writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x351, &(0x7f0000000540)=[{&(0x7f0000000380)=""/222, 0x7ffff000}], 0x2d7, 0x0) (async) process_vm_writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x351, &(0x7f0000000540)=[{&(0x7f0000000380)=""/222, 0x7ffff000}], 0x2d7, 0x0) 11:05:00 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x44002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) sendfile(r4, r3, 0x0, 0x3) sendfile(r3, r2, 0x0, 0xec8) 11:05:00 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x44002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) sendfile(r4, r3, 0x0, 0x3) sendfile(r3, r2, 0x0, 0xec8) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x44002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) sendfile(r4, r3, 0x0, 0x3) (async) sendfile(r3, r2, 0x0, 0xec8) (async) [ 569.426386][T30456] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 569.432945][T30456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 569.440575][T30456] vhci_hcd vhci_hcd.0: Device attached [ 569.451655][T30457] vhci_hcd: connection closed [ 569.451791][ T33] vhci_hcd: stop threads [ 569.460815][ T33] vhci_hcd: release socket [ 569.465267][ T33] vhci_hcd: disconnect device [ 569.466287][T30460] loop0: detected capacity change from 0 to 128 [ 569.610261][T30468] ================================================================== [ 569.618383][T30468] BUG: KCSAN: data-race in copyin / copyin [ 569.624628][T30468] [ 569.626952][T30468] write to 0xffff888163466000 of 4096 bytes by task 30466 on cpu 0: [ 569.634922][T30468] copyin+0x65/0x90 [ 569.638726][T30468] _copy_from_iter+0x260/0xa40 [ 569.643493][T30468] copy_page_from_iter+0x162/0x290 [ 569.648603][T30468] process_vm_rw+0x5d5/0x8c0 [ 569.653196][T30468] __x64_sys_process_vm_writev+0x7a/0x90 [ 569.658867][T30468] do_syscall_64+0x41/0xc0 [ 569.663303][T30468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 569.669201][T30468] [ 569.671520][T30468] write to 0xffff888163466000 of 4096 bytes by task 30468 on cpu 1: [ 569.679494][T30468] copyin+0x65/0x90 [ 569.683304][T30468] _copy_from_iter+0x260/0xa40 [ 569.688061][T30468] copy_page_from_iter+0x162/0x290 [ 569.693273][T30468] process_vm_rw+0x5d5/0x8c0 [ 569.697869][T30468] __x64_sys_process_vm_writev+0x7a/0x90 [ 569.703505][T30468] do_syscall_64+0x41/0xc0 [ 569.707961][T30468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 569.713860][T30468] [ 569.716192][T30468] Reported by Kernel Concurrency Sanitizer on: [ 569.722330][T30468] CPU: 1 PID: 30468 Comm: syz-executor.1 Not tainted 6.4.0-rc4-syzkaller-00276-ge5282a7d8f6b #0 [ 569.732738][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 569.742789][T30468] ================================================================== 11:05:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0xa}}) 11:05:01 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x44002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) sendfile(r4, r3, 0x0, 0x3) sendfile(r3, r2, 0x0, 0xec8) 11:05:01 executing program 1: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) prlimit64(r1, 0xd, &(0x7f0000000180)={0x5, 0x8}, &(0x7f00000002c0)) (async) get_robust_list(r1, &(0x7f0000000080)=&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)}, &(0x7f00000000c0)=0x18) process_vm_writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x351, &(0x7f0000000540)=[{&(0x7f0000000380)=""/222, 0x7ffff000}], 0x2d7, 0x0) 11:05:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x8000, @local, 0x6}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="06000020000000002e00"]) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0xfffffffffffffffe) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r5, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, @ib={0x1b, 0x4, 0x2, {"a57c3fd4884279b258025c8e0c6595e2"}, 0x4, 0xffff, 0x5}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @ib={0x1b, 0x4, 0x6, {"af78e66c463b625d620a76a152d034d8"}, 0x412, 0x43f, 0x2}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r7 = syz_usbip_server_init(0x1) close(r7) 11:05:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r4, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000000c0)) 11:05:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$eJzs3M9LG2kYwPEniYlJRJPDsssuLL7sXnYvg7p7XHYNiy7LBlZcs/QHFEad2JBpIjNBmyLVnnot/SN6EHvzJrT+A156ay+99OalUEo9SKdkMmM0jjVqYqx+PyDzZt7nmXnfmSjPhLxuX3t0p5i3tbxekXBcSUhEZEckLWHxhbxt2G3HZL8V+bnv3cuV/67f+CeTzY5NKjWemfplRCk1MPh+cSnhhW30ylb61vbbkTdbX299u/1x6nbBVgVblcoVpavp8uuKPm0aarZgFzWlJkxDtw1VKNmGVe8v1/vzZnl+vqr00mx/ct4ybFvppaoqGlVVKauKVVX6nF4oKU3TVH9ScJzc6uSknjll8kybB4MOsayMHhGRxKGe3GpXBgQAALqquf4P10r6E9f/3wfW/88Wl9Z+2Kz0/b8+4NX/G7Gg+v/XV/VjHaj/4yLSvvp/7u5vfwXM/nBFdLWcqf7HxTAYO7QrdOBVrf5Per+/rgc314bcBvU/AAAAAAAAAAAAAAAAAAAAAABfgh3HSTmOk/K3/k+viMRFxHGc5uUErBe5RFq4/+7rbo8TndFYuNczIGI+XMgt5OpbL2BTREwxZEhSsuu+HzwiTtRfeaRq0vLcXPbylxdyEbcnk5eCmz8sKUk35TuOM/53dmxY1R3Mj0rSzc+IRN1DpeSr4PyRwPyY/PTjvvNrkpIXM1IWU2bd93Uj//6wUn/+m23KT7hxAAAAAABcBpraE/j8rmlH9dfz956vgz4f8J6vhwKfz3vku57uzh0AAAAAgKvCrt4r6qZpWJ9pJOT4mPY2nh7VNeoNu4Xj+DP093hfYlppCrYi3kXwv8twyjFHWg2OB115/+TFP/ZN0I88zyvfaiPcyi1oNEK7jmNY9mBtNuqsZ/c/NjoqRiZOfuTYSe97SAK6vnn85EP7rvPv6/FjZtqxRrSDf3IAAAAAdEmj6Pf3jHZ3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEHn8e/Euj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KL4FAAA//8X6PzU") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0xff00) 11:05:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x8000, @local, 0x6}}}, 0x90) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="06000020000000002e00"]) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r5, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, @ib={0x1b, 0x4, 0x2, {"a57c3fd4884279b258025c8e0c6595e2"}, 0x4, 0xffff, 0x5}}}, 0x118) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x2}}, 0x20) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @ib={0x1b, 0x4, 0x6, {"af78e66c463b625d620a76a152d034d8"}, 0x412, 0x43f, 0x2}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r7 = syz_usbip_server_init(0x1) close(r7) 11:05:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0xa8}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x20, 0x3, 0x9, 0x490, r0, 0x0, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x48) 11:05:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x52}}) 11:05:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async, rerun: 64) sendfile(r2, r3, 0x0, 0x3) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r4, 0x0) (async, rerun: 64) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000000c0)) (rerun: 64) 11:05:01 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x9f, 0x8, {"4791b873a73bdd73bda4ddca061a3c25"}, 0x8e1a, 0x1, 0x7}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "8dd4501ff51c4ddc7eb9c8d1fa3057d4693ff54f824ed4ca7a7a5e4b5456f0fa7fa5581065015082f55ebf665af0a9604df7d77fbd849ec875b5ba4efbb39b47f1e8fde96b"}, 0x52) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x32000) [ 570.514474][T30510] loop0: detected capacity change from 0 to 128 11:05:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r4, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000000c0)) [ 570.619410][T30521] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 570.625961][T30521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 570.633632][T30521] vhci_hcd vhci_hcd.0: Device attached [ 570.640944][T30522] vhci_hcd: connection closed [ 570.641245][ T24] vhci_hcd: stop threads [ 570.650261][ T24] vhci_hcd: release socket [ 570.654685][ T24] vhci_hcd: disconnect device 11:05:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x10}}) 11:05:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0xa8}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x20, 0x3, 0x9, 0x490, r0, 0x0, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0xa8}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x20, 0x3, 0x9, 0x490, r0, 0x0, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x48) (async) 11:05:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000001c0)) fchmod(r1, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x1b43201096b27fa8, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x4) sendfile(r5, r6, 0x0, 0x3) 11:05:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0xa8}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x20, 0x3, 0x9, 0x490, r0, 0x0, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0xa8}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x20, 0x3, 0x9, 0x490, r0, 0x0, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x48) (async) 11:05:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x178, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x178}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) [ 571.074983][T30548] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 571.083144][T30548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:05:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x100000) 11:05:02 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x9f, 0x8, {"4791b873a73bdd73bda4ddca061a3c25"}, 0x8e1a, 0x1, 0x7}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r0 = syz_usbip_server_init(0x1) close(r0) (async) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "8dd4501ff51c4ddc7eb9c8d1fa3057d4693ff54f824ed4ca7a7a5e4b5456f0fa7fa5581065015082f55ebf665af0a9604df7d77fbd849ec875b5ba4efbb39b47f1e8fde96b"}, 0x52) (async, rerun: 32) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x32000) (rerun: 32) 11:05:02 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x178, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x178}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) 11:05:02 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = pidfd_getfd(r0, r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000001c0)) fchmod(r1, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x1b43201096b27fa8, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x4) sendfile(r5, r6, 0x0, 0x3) 11:05:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x53}}) 11:05:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x178, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x178}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x178, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x178}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000080)={&(0x7f00000000c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) (async) [ 571.487167][T30557] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 571.490261][T30555] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 571.495394][T30557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 571.501866][T30555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 571.518819][T30555] vhci_hcd vhci_hcd.0: Device attached [ 571.534853][T30564] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 571.542991][T30564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 571.543375][T30556] vhci_hcd: connection closed [ 571.553381][T30568] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 571.566213][T30568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 571.570952][ T24] vhci_hcd: stop threads [ 571.578642][T30569] loop0: detected capacity change from 0 to 128 11:05:02 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x9f, 0x8, {"4791b873a73bdd73bda4ddca061a3c25"}, 0x8e1a, 0x1, 0x7}}}, 0x90) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) (async) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "8dd4501ff51c4ddc7eb9c8d1fa3057d4693ff54f824ed4ca7a7a5e4b5456f0fa7fa5581065015082f55ebf665af0a9604df7d77fbd849ec875b5ba4efbb39b47f1e8fde96b"}, 0x52) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x32000) [ 571.579745][ T24] vhci_hcd: release socket [ 571.579754][ T24] vhci_hcd: disconnect device [ 571.592213][T30572] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 571.601658][T30572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 571.609245][T30572] vhci_hcd vhci_hcd.0: Device attached [ 571.616390][T30573] vhci_hcd: connection closed [ 571.616733][ T24] vhci_hcd: stop threads [ 571.625972][ T24] vhci_hcd: release socket [ 571.630385][ T24] vhci_hcd: disconnect device 11:05:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x22}}) 11:05:02 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c50ddcc9"], 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) 11:05:02 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c50ddcc9"], 0x10) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) 11:05:03 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nbd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c50ddcc9"], 0x10) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) 11:05:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x200000100000011, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4], 0x10}], 0x1}, 0x0) r5 = socket(0x200000100000011, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r7], 0x10}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@mpls_delroute={0x50, 0x19, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x20, 0x20, 0x1, 0x4c4ed7d144f4e323, 0x0, 0xfe, 0x7, 0x1000}, [@RTA_VIA={0x14, 0x12, {0xa, "a38eb2d9112c87547702900e88f1"}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x24, 0x0, r4}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x20, 0x3, r7}}, @RTA_OIF={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x3c}}, 0x0) 11:05:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x200000) 11:05:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x200000100000011, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4], 0x10}], 0x1}, 0x0) r5 = socket(0x200000100000011, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r7], 0x10}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@mpls_delroute={0x50, 0x19, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x20, 0x20, 0x1, 0x4c4ed7d144f4e323, 0x0, 0xfe, 0x7, 0x1000}, [@RTA_VIA={0x14, 0x12, {0xa, "a38eb2d9112c87547702900e88f1"}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x24, 0x0, r4}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x20, 0x3, r7}}, @RTA_OIF={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket(0x200000100000011, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4], 0x10}], 0x1}, 0x0) (async) socket(0x200000100000011, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) (async) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r7], 0x10}], 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@mpls_delroute={0x50, 0x19, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x20, 0x20, 0x1, 0x4c4ed7d144f4e323, 0x0, 0xfe, 0x7, 0x1000}, [@RTA_VIA={0x14, 0x12, {0xa, "a38eb2d9112c87547702900e88f1"}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x24, 0x0, r4}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x20, 0x3, r7}}, @RTA_OIF={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x3c}}, 0x0) (async) 11:05:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000001c0)) fchmod(r1, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x1b43201096b27fa8, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x4) sendfile(r5, r6, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) pidfd_getfd(r0, r0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000001c0)) (async) fchmod(r1, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x1b43201096b27fa8, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r6, r5, 0x0, 0x4) (async) sendfile(r5, r6, 0x0, 0x3) (async) 11:05:03 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r2 = syz_usbip_server_init(0x1) close(r2) 11:05:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x54}}) 11:05:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x200000100000011, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4], 0x10}], 0x1}, 0x0) socket(0x200000100000011, 0x3, 0x0) (async) r5 = socket(0x200000100000011, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r7], 0x10}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@mpls_delroute={0x50, 0x19, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x20, 0x20, 0x1, 0x4c4ed7d144f4e323, 0x0, 0xfe, 0x7, 0x1000}, [@RTA_VIA={0x14, 0x12, {0xa, "a38eb2d9112c87547702900e88f1"}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x24, 0x0, r4}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x20, 0x3, r7}}, @RTA_OIF={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@mpls_delroute={0x50, 0x19, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x20, 0x20, 0x1, 0x4c4ed7d144f4e323, 0x0, 0xfe, 0x7, 0x1000}, [@RTA_VIA={0x14, 0x12, {0xa, "a38eb2d9112c87547702900e88f1"}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x24, 0x0, r4}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x20, 0x3, r7}}, @RTA_OIF={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x3c}}, 0x0) 11:05:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x49}}) [ 572.575549][T30598] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 572.582115][T30598] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 572.589772][T30598] vhci_hcd vhci_hcd.0: Device attached 11:05:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="826fb0a79bc8a95c7049049fc74483e61f2b4c17a2f9431ecace1c099606ac3e1f22ac8c31aa0d2b7256059208d55cbe193b", 0x32, 0x4008000, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @private1, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0xa, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6}, 0xe) recvmmsg(r0, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/244, 0xf4}], 0x1, &(0x7f0000000b00)=""/17, 0x11}}], 0x1, 0x0, 0x0) [ 572.618461][T30623] loop0: detected capacity change from 0 to 128 [ 572.629483][T30605] vhci_hcd: connection closed [ 572.630811][ T3085] vhci_hcd: stop threads [ 572.639796][ T3085] vhci_hcd: release socket [ 572.644379][ T3085] vhci_hcd: disconnect device 11:05:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r3, r2, 0x0, 0x4) sendfile(r2, r3, 0x0, 0x3) 11:05:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040)="826fb0a79bc8a95c7049049fc74483e61f2b4c17a2f9431ecace1c099606ac3e1f22ac8c31aa0d2b7256059208d55cbe193b", 0x32, 0x4008000, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @private1, 0x4}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socket$inet6(0xa, 0xa, 0x4) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6}, 0xe) (async) recvmmsg(r0, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/244, 0xf4}], 0x1, &(0x7f0000000b00)=""/17, 0x11}}], 0x1, 0x0, 0x0) 11:05:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="826fb0a79bc8a95c7049049fc74483e61f2b4c17a2f9431ecace1c099606ac3e1f22ac8c31aa0d2b7256059208d55cbe193b", 0x32, 0x4008000, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @private1, 0x4}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040)="826fb0a79bc8a95c7049049fc74483e61f2b4c17a2f9431ecace1c099606ac3e1f22ac8c31aa0d2b7256059208d55cbe193b", 0x32, 0x4008000, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @private1, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0xa, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6}, 0xe) recvmmsg(r0, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/244, 0xf4}], 0x1, &(0x7f0000000b00)=""/17, 0x11}}], 0x1, 0x0, 0x0) 11:05:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xd, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpquota}, {@init_itable}, {@errors_remount}, {@nobh}, {@nombcache}]}, 0x0, 0x424, &(0x7f0000000900)="$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") write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) listen(r2, 0x95a1) syz_emit_ethernet(0xa0, &(0x7f0000000240)={@local, @random="38b394b8ab56", @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "a778c8", 0x6a, 0x21, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e22, 0x4e21, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x4, "d27171", 0x3f, "1f01d2"}, "0aded6b960f32a214d61621e3e14f6b35e28154223529cba17180bf5a6c36f7dd8b07918dc4515f0059c5fd3dbab8b6d615f581adb5c89666506ef840641fd0ca011f8003d5cf1cf4312c62831f2ef9353970f8ae6f865997ae9"}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r1, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 572.995044][T30657] loop1: detected capacity change from 0 to 512 [ 573.027852][T30657] EXT4-fs: Ignoring removed nobh option [ 573.050897][T30657] EXT4-fs (loop1): orphan cleanup on readonly fs [ 573.065768][T30657] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz-executor.1: invalid block [ 573.078925][T30657] EXT4-fs (loop1): Remounting filesystem read-only [ 573.085865][T30657] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1) [ 573.102101][T30657] EXT4-fs error (device loop1): mb_free_blocks:1803: group 0, inode 13: block 100:freeing already freed block (bit 99); block bitmap corrupt. [ 573.118558][T30657] EXT4-fs (loop1): 1 truncate cleaned up [ 573.124264][T30657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 573.157895][ T3381] udevd[3381]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 573.219129][ T3086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:05:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x1000000) 11:05:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) 11:05:04 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r2 = syz_usbip_server_init(0x1) close(r2) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) syz_usbip_server_init(0x1) (async) close(r2) (async) 11:05:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0xfff) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) (rerun: 64) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xd, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpquota}, {@init_itable}, {@errors_remount}, {@nobh}, {@nombcache}]}, 0x0, 0x424, &(0x7f0000000900)="$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") (async) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) listen(r2, 0x95a1) (async) syz_emit_ethernet(0xa0, &(0x7f0000000240)={@local, @random="38b394b8ab56", @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "a778c8", 0x6a, 0x21, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e22, 0x4e21, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x4, "d27171", 0x3f, "1f01d2"}, "0aded6b960f32a214d61621e3e14f6b35e28154223529cba17180bf5a6c36f7dd8b07918dc4515f0059c5fd3dbab8b6d615f581adb5c89666506ef840641fd0ca011f8003d5cf1cf4312c62831f2ef9353970f8ae6f865997ae9"}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r1, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:05:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x56}}) 11:05:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x51}}) 11:05:04 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) r2 = syz_usbip_server_init(0x1) close(r2) [ 573.621445][T30669] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 573.628002][T30669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 573.635522][T30669] vhci_hcd vhci_hcd.0: Device attached [ 573.641346][T30670] vhci_hcd: connection closed [ 573.641514][ T3085] vhci_hcd: stop threads [ 573.650486][ T3085] vhci_hcd: release socket [ 573.655003][ T3085] vhci_hcd: disconnect device 11:05:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async, rerun: 64) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (rerun: 64) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) [ 573.677350][T30665] loop1: detected capacity change from 0 to 512 [ 573.684854][T30686] loop0: detected capacity change from 0 to 128 [ 573.696276][T30689] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 573.702818][T30689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 573.710391][T30689] vhci_hcd vhci_hcd.0: Device attached [ 573.721686][T30665] EXT4-fs: Ignoring removed nobh option [ 573.738429][T30691] vhci_hcd: connection closed [ 573.739391][ T9310] vhci_hcd: stop threads [ 573.748459][ T9310] vhci_hcd: release socket [ 573.752933][ T9310] vhci_hcd: disconnect device 11:05:04 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$FITHAW(r4, 0xc0045878) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendfile(r5, r4, 0x0, 0x4) sendfile(r4, r5, 0x0, 0x3) 11:05:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xd, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpquota}, {@init_itable}, {@errors_remount}, {@nobh}, {@nombcache}]}, 0x0, 0x424, &(0x7f0000000900)="$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") write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) listen(r2, 0x95a1) syz_emit_ethernet(0xa0, &(0x7f0000000240)={@local, @random="38b394b8ab56", @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "a778c8", 0x6a, 0x21, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e22, 0x4e21, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x4, "d27171", 0x3f, "1f01d2"}, "0aded6b960f32a214d61621e3e14f6b35e28154223529cba17180bf5a6c36f7dd8b07918dc4515f0059c5fd3dbab8b6d615f581adb5c89666506ef840641fd0ca011f8003d5cf1cf4312c62831f2ef9353970f8ae6f865997ae9"}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r1, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0xfff) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xd, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpquota}, {@init_itable}, {@errors_remount}, {@nobh}, {@nombcache}]}, 0x0, 0x424, &(0x7f0000000900)="$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") (async) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x0) (async) listen(r2, 0x95a1) (async) syz_emit_ethernet(0xa0, &(0x7f0000000240)={@local, @random="38b394b8ab56", @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "a778c8", 0x6a, 0x21, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e22, 0x4e21, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x4, "d27171", 0x3f, "1f01d2"}, "0aded6b960f32a214d61621e3e14f6b35e28154223529cba17180bf5a6c36f7dd8b07918dc4515f0059c5fd3dbab8b6d615f581adb5c89666506ef840641fd0ca011f8003d5cf1cf4312c62831f2ef9353970f8ae6f865997ae9"}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r1, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) [ 573.808840][T30665] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 573.808900][T30665] EXT4-fs: failed to create workqueue [ 573.824223][T30665] EXT4-fs (loop1): mount failed [ 573.854380][ T3381] udevd[3381]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system 11:05:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000e0000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xc}}]}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x1, 0x4, 0x6, 0xffffffffffffff8c, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x32, &(0x7f0000000240)=""/50, 0x41000, 0x5, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x9, 0x8, 0x3}, 0x10, 0x0, r0}, 0x80) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 574.004408][T30720] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 11:05:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000e0000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xc}}]}}]}, 0x40}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x1, 0x4, 0x6, 0xffffffffffffff8c, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x32, &(0x7f0000000240)=""/50, 0x41000, 0x5, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x9, 0x8, 0x3}, 0x10, 0x0, r0}, 0x80) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 574.155009][T30723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 11:05:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', 0x28000cc, &(0x7f0000000000)=ANY=[], 0xfe, 0x318, &(0x7f00000004c0)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x2000000) 11:05:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000e0000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xc}}]}}]}, 0x40}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x1, 0x4, 0x6, 0xffffffffffffff8c, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x32, &(0x7f0000000240)=""/50, 0x41000, 0x5, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x9, 0x8, 0x3}, 0x10, 0x0, r0}, 0x80) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11:05:05 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = syz_usbip_server_init(0x1) close(r0) write$usbip_server(r0, &(0x7f0000000300)=@ret_submit={{0x3, 0x0, 0x0, 0x1, 0x40}, 0x6, 0x43, 0x4, 0x1af, 0xfffffff8, 0x0, "1754454ce35284f657129fef30ac90feecd52f53b8cfe1509e6e5a7b757a877c3a1a053c5351c72af55c81b296b2275ed1b75c96ad559736c0a505174483b15792922f", [{0x0, 0x80000000, 0x493, 0x3}, {0x8, 0xf01, 0x100, 0x3ff}, {0x8aa4, 0xbfd, 0x6, 0x7fffffff}, {0x20, 0x1, 0x4, 0x101}, {0x2, 0x9, 0x200, 0x6}, {0x4, 0x0, 0x9, 0x2}, {0x40, 0x800, 0x1, 0x5}, {0x7f8000, 0x1000, 0x3, 0x12df}, {0x8, 0x4, 0xc0, 0x87}, {0xfffff99a, 0x8, 0x6, 0x200}, {0x2, 0x0, 0x9, 0x1f}, {0x4660, 0x1ff, 0x5, 0x20}, {0x8, 0x4, 0x2058, 0x3ff}, {0x1, 0x85c4, 0x5cb, 0xe9}, {0x7ff, 0x6, 0xffff, 0x7fff}, {0xffffffff, 0xfffffffb, 0x3, 0xe1}, {0x400, 0x7ff, 0x0, 0x1}, {0x0, 0xfffffeff, 0x8, 0xffffffff}, {0x1, 0x4, 0x2, 0x9}, {0x4, 0x80000001, 0x1, 0x5}, {0x562, 0x0, 0x100, 0x3}, {0xffff, 0x1, 0x3, 0x7}, {0x5, 0x7b1, 0x1ff, 0x1ff}, {0x7, 0xc3e, 0x1, 0x8}, {0xffffc000, 0x40, 0xfffffff8, 0x1}, {0xfffffff7, 0x7fff, 0x879, 0x3f}, {0x4, 0x8, 0x5, 0x1ce}, {0xe61b, 0x5, 0x6, 0x9f0}, {0x0, 0xa61, 0x7, 0x1}, {0x222f7b06, 0x8, 0x2, 0x8}, {0x8, 0x6e50c668, 0x18, 0x8}, {0x6, 0x80000000, 0x5, 0x5}, {0x2, 0x3, 0x1, 0x8001}, {0x2921, 0x6, 0x9, 0x2}, {0xeded, 0x4, 0x7c4, 0xfffffff7}, {0x8000, 0x9, 0x46, 0x1}, {0x4, 0x7, 0x7fffffff, 0x3fa}, {0x5, 0xfdd, 0x10000, 0x40}, {0x3, 0x7fffffff, 0x9, 0x7673}, {0x8, 0x1, 0x40, 0xffffffff}, {0x4, 0x2, 0x2, 0x8}, {0x7, 0x3f, 0x1, 0x8}, {0x200, 0x8000, 0x6, 0x6}, {0x4, 0x6a0bd2ba, 0x5, 0x1800}, {0x8, 0x1000, 0x3, 0x1}, {0x1ff, 0x6, 0x9, 0x1000}, {0x200, 0x4, 0x6, 0x800}, {0x0, 0x20, 0x80, 0x8001}, {0xac, 0x5a6e, 0x4, 0x3f}, {0x6, 0x9, 0x4, 0x27dc1671}, {0xffffffff, 0x3, 0x40, 0x3}, {0xb161, 0x0, 0x8, 0x3}, {0x81, 0x401, 0xfff, 0x100}, {0x6, 0xdda, 0x9, 0x3}, {0xfff, 0x6, 0x8001, 0x6}, {0x6, 0x7fffffff, 0x5, 0x101}, {0x40, 0x7, 0x8, 0x8}, {0x8, 0x80, 0x4c, 0x82}, {0x5, 0xbf7, 0xa6, 0x1}, {0x10001, 0x1f, 0x0, 0x5}, {0x3, 0x80000000, 0x7fffffff, 0x4}, {0x10001, 0xa10, 0x6, 0x8}, {0x6, 0x101, 0x3, 0xffffff24}, {0x10000, 0x2, 0x401, 0x7}, {0x7, 0x4, 0x0, 0xaa76}, {0x9, 0x144e, 0x48000000, 0xf19}, {0x0, 0x65, 0x400, 0x1ff}, {0x6, 0x8, 0x3, 0x1}, {0x2, 0x6ea, 0x9c4a, 0x7fffffff}, {0x1484, 0x7f, 0x8001, 0xfc}, {0x547, 0x5, 0x7ff, 0xfffffffc}, {0x5, 0x2d9, 0x7, 0x2}, {0x3, 0x5, 0x20, 0x5}, {0x6, 0x7, 0x19, 0x8000}, {0x7fffffff, 0x6, 0x5, 0x13}, {0x7, 0x7, 0x7, 0xb2}, {0x7, 0xfff, 0x8001, 0x822c}, {0x7, 0x6, 0xffffff7f, 0x2}, {0x1, 0x8, 0x4, 0xffffffff}, {0x7, 0x10001, 0x3ce9, 0x7fff}, {0x800, 0x1ff, 0x3, 0xf88b}, {0x81, 0x2, 0x5, 0x8}, {0x8, 0x6, 0xfffffffe, 0x6}, {0x8, 0x5, 0xdb, 0x80000000}, {0xfffffffa, 0x7f, 0x80000000, 0x401}, {0x3, 0x0, 0xe0, 0x80000001}, {0x8, 0x3f00, 0xda, 0x9}, {0xfffffff7, 0x10001, 0x2, 0x1000}, {0x401, 0x1ff, 0x7, 0x2}, {0x3, 0xbd0, 0x5, 0x64}, {0x400, 0x7, 0xeb200ae, 0x2}, {0x3, 0xfffffff8, 0x66e7}, {0x100, 0x2, 0x800, 0x9}, {0x3, 0x6, 0x80000000, 0x40}, {0x8, 0x10000, 0x1, 0x400}, {0x7, 0x8, 0xffffffff, 0xffffffff}, {0x0, 0x0, 0x2d5, 0xffffffff}, {0x9, 0xffff7fff, 0x10000, 0x7ff}, {0x401, 0xfffffffe, 0x401, 0x401}, {0x81, 0x200, 0x5, 0xff}, {0x5, 0x7f8984d9, 0x5, 0x80000000}, {0x40000000, 0xbe, 0x6, 0x8}, {0x4, 0xc85d, 0x10000, 0xffffffff}, {0x8000, 0x67e, 0x1, 0xb18}, {0x0, 0x69, 0x0, 0x2}, {0xfffff3ec, 0x2, 0xd80, 0xd4}, {0x1, 0xc5, 0xb00, 0xfff}, {0x3f, 0x4, 0x800, 0x101}, {0x6, 0x4, 0x2, 0x9d}, {0x6, 0x40, 0x6, 0xfffffffc}, {0x401, 0x4, 0x120000, 0x5d5e}, {0x6, 0x4, 0x9, 0x100}, {0x6, 0x3a34, 0x9, 0x2}, {0x80, 0x6, 0xffffff81, 0x3}, {0x401, 0x5, 0x3f, 0x3}, {0x0, 0x5, 0x9, 0x4}, {0x0, 0x6837, 0x5}, {0x9, 0x81, 0x3, 0x57c}, {0x9, 0x2, 0x7fff, 0x5}, {0x4, 0x80000001, 0x7c41, 0x3a}, {0x0, 0x7fff, 0x3ff, 0xfffffff7}, {0x5, 0x5, 0x6, 0x1}, {0x9, 0x400, 0x80000001, 0x224}, {0x9, 0x1, 0x7, 0x1}, {0x8000, 0x7fff, 0x9, 0xfffffffc}, {0xe8, 0x7f, 0x51, 0x6}, {0xff, 0xb20f, 0xffff, 0x7}, {0x3, 0xfff, 0x8, 0x8}, {0x0, 0xc655, 0x8, 0x5}, {0x8000, 0x2, 0x1, 0x1ff}, {0xfffff8e3, 0xffffff94, 0x9, 0x1}, {0x29, 0x88, 0xa1c, 0x6000000}, {0x9, 0xfff, 0x5, 0x2}, {0x200, 0x7fff, 0x400, 0x8001}, {0x0, 0x8, 0x1, 0x1000}, {0x7, 0x200, 0x955, 0x81}, {0x5f, 0x6, 0x485}, {0x1a79, 0x40, 0x9, 0xbed}, {0x8, 0x7f, 0x7, 0xe7}, {0x2, 0x5, 0x77, 0x3}, {0x4, 0x1, 0x80, 0xfffffc00}, {0x2, 0x8001, 0xffffffff, 0x3}, {0x0, 0x0, 0x4, 0x7}, {0x3, 0x5, 0x9, 0x1}, {0xfff, 0x7, 0x5cd5, 0x2}, {0x7, 0x9, 0x7ff, 0x40}, {0x40, 0x1ff, 0x2, 0x5}, {0x7, 0x100, 0xffffffc0, 0x1}, {0x5b, 0x401, 0x3}, {0x7, 0x0, 0x9}, {0x81, 0x5, 0xfffffff7, 0x3}, {0x0, 0x0, 0x9, 0x80000001}, {0x81, 0x0, 0x400, 0xe9c3}, {0x9, 0xfffffffe, 0x34, 0x3}, {0x1b14, 0x1000, 0x7, 0x2}, {0x1, 0x1ff, 0x3f, 0x6}, {0xffffffff, 0x1, 0x2, 0x3}, {0x6, 0xfff, 0x3ff}, {0x2, 0x5, 0x1, 0x2a0}, {0x9, 0x5, 0x9, 0x80000000}, {0x3, 0x1000, 0x2, 0x90}, {0x7, 0x400, 0x0, 0x9}, {0x6, 0x10000, 0x4}, {0xfffffff9, 0x401, 0x1000, 0x7}, {0x200, 0x100, 0x4, 0x4}, {0x5, 0x401, 0x7, 0x8}, {0x8e9d, 0x3ff, 0x3, 0x5}, {0xfff, 0x3ff, 0x44a5dfad, 0x8}, {0x8, 0x5, 0x1f, 0x200}, {0xb3, 0xed4, 0x582055cc, 0x5}, {0x5, 0x401, 0x4, 0x3ff}, {0x7, 0xa7d, 0x6, 0x4}, {0x4, 0x5, 0x6, 0x3}, {0xed07, 0x358e6e8f, 0x81, 0x5}, {0xace, 0x9, 0x7, 0x2}, {0x9, 0x7f, 0xbabf, 0x9}, {0x2, 0xffffe0c3, 0x0, 0x7f}, {0xb234, 0x6, 0x6, 0x9}, {0x10000, 0x9, 0x200, 0x3}, {0x7, 0xfffffff7, 0xcc0, 0x8}, {0x100, 0xffffffff, 0x5, 0x8}, {0x401, 0x5, 0x200, 0x7}, {0x0, 0x0, 0x1}, {0x800000, 0xd5, 0x6, 0x1000}, {0x2, 0x5, 0x240, 0x15}, {0x4, 0x10001, 0x3}, {0x1000, 0x7fff, 0xfffffffe, 0x2}, {0x5, 0x0, 0x6, 0x6}, {0x1, 0x3f, 0x8001, 0x4}, {0x80000000, 0x101, 0x3, 0x81}, {0x0, 0x2, 0xff, 0x4}, {0x80000001, 0x80000001, 0x578, 0x866}, {0x0, 0x1ff, 0xbd4, 0x3a}, {0xa0, 0x9, 0x21fda7f9, 0x7ff}, {0x8, 0x6, 0x3a1d, 0x9}, {0x6, 0x0, 0x0, 0x8}, {0x4c, 0x3f, 0x400, 0x4e}, {0x7, 0x9, 0xfffff800, 0xfffffffe}, {0x6, 0x3, 0x90, 0xb69}, {0x2c, 0x400, 0x200, 0x34}, {0x8, 0x7, 0x7ff}, {0x7, 0xe000, 0x0, 0x9}, {0x7ff, 0x400, 0xffffffff, 0x2}, {0x2, 0x8, 0xffffffe0, 0x20}, {0x100, 0x6, 0xfffffff9, 0x1}, {0x3, 0xff, 0x1, 0x1}, {0x388, 0xfff, 0xd1, 0x2}, {0x1f, 0xbf, 0x0, 0x7fff}, {0x3, 0x5, 0x2, 0x4}, {0xfffffc00, 0x8, 0x0, 0xd6}, {0xff, 0x4, 0x3, 0x8}, {0x5, 0x380, 0x9, 0x58}, {0x1, 0x7, 0x6, 0x10000}, {0x9, 0x400, 0x58, 0x2}, {0x4, 0x1, 0x4, 0x8}, {0x2, 0x80000000, 0xe2, 0x5}, {0x48, 0x7ff, 0xffffffff, 0x7b}, {0x5aae, 0x3, 0x10000, 0x6}, {0xa04, 0x0, 0x10001, 0x1ff}, {0x100, 0x81, 0x9, 0xfffffd9f}, {0x5, 0x9b, 0x6, 0xffff}, {0x3ff, 0x200, 0x6, 0x5}, {0x2, 0x3, 0x6, 0x2}, {0xfff, 0x2, 0x7ff, 0xff}, {0x1000, 0x5, 0x81, 0xfa0d}, {0xffffffff, 0x1, 0xd14f, 0x400}, {0x3, 0x7, 0x4, 0x90}, {0x80, 0xabff, 0x7, 0x3}, {0x6, 0xfffffffa, 0x204000, 0x7}, {0x8, 0x2, 0x6, 0xf2b}, {0x0, 0x669c, 0xffffff7f, 0x6}, {0x7, 0x3, 0x80000001, 0x1}, {0x5, 0x3f, 0x80000001, 0x2}, {0x3, 0x7, 0x4, 0xfffffffb}, {0xfff, 0x9, 0x7fffffff, 0xd556}, {0x1ff, 0x0, 0x2, 0x401}, {0x1083, 0x0, 0x0, 0x2}, {0xf7, 0xffffffff, 0x9}, {0x4, 0x8001, 0x401, 0x400}, {0x1, 0x5, 0x10001, 0x7ff}, {0x190b, 0x9, 0x1, 0x8}, {0x6, 0x9, 0x5036, 0x3}, {0x1, 0x7, 0x715cc29e, 0x4}, {0x80000000, 0x2, 0x1ff0, 0x1}, {0x1f, 0x3f, 0xfff}, {0xffff75b3, 0x800, 0x8, 0x4b4}, {0xb438, 0x5, 0x0, 0xffffffe1}, {0x3, 0x3, 0x8, 0x1}, {0x8000, 0xfffffffd, 0x7, 0x3}, {0xf58, 0x7, 0x8, 0x4}, {0x8, 0x80, 0xfffffffc, 0x10000}, {0xb334, 0x9, 0x4, 0x4}, {0x0, 0x1, 0x6, 0xe7}, {0x3, 0x5, 0x5, 0x7fffffff}, {0xfffffff7, 0x7f, 0xe00, 0x3}, {0x80000001, 0x10001, 0x8, 0x5}, {0x39, 0x3f, 0x0, 0x1000}, {0xfe1, 0x9386, 0x2, 0x80000000}, {0x5, 0x7fffffff, 0xffff, 0x4}, {0x40, 0x1, 0x5, 0x1ff}, {0xedbf, 0x0, 0x3f, 0x10000}, {0x9, 0x0, 0xb934, 0x1}, {0xe5d2, 0xfcb0, 0xb0a, 0x7}, {0xffffffb2, 0x100, 0x8, 0x5}, {0x1, 0x200, 0x800, 0x5}, {0x7, 0x8, 0x5, 0x1}, {0x80000000, 0x1000, 0x1, 0x3}, {0x8, 0xd1, 0x0, 0x7}, {0x2, 0x2, 0x9, 0x9}, {0xfc46, 0x40, 0x1, 0x5}, {0x1, 0x9, 0xffff7fff, 0x3}, {0x4, 0x0, 0x1ff, 0x8}, {0x1, 0x3, 0x1, 0x72}, {0x80000000, 0x3f, 0x10000, 0x8}, {0x0, 0xf2, 0x200000, 0x100}, {0x4, 0x8, 0x5, 0x9}, {0x4, 0x10001, 0x4, 0x5}, {0x2, 0x81, 0x2, 0x18}, {0x8000, 0x10001, 0x3f, 0x3f}, {0x10001, 0x5, 0x8, 0xe0}, {0x8, 0x5, 0xc7, 0xb8b}, {0x0, 0x7, 0x6d, 0x80000000}, {0x1, 0x0, 0xffffffff, 0x1f01}, {0xc0, 0x5, 0x19c3, 0x840c}, {0x3, 0x5, 0x3, 0x9}, {0x9b0, 0xffffffff, 0x6, 0x1ff}, {0xfffffe01, 0xff, 0xfff, 0x10000}, {0x0, 0x11, 0x28fec956, 0xfffffffb}, {0x20, 0x6, 0xea5, 0x400}, {0xffffff7f, 0x2, 0x4, 0x73}, {0x8, 0x20, 0x0, 0x6}, {0xc27, 0x3, 0x5}, {0x1, 0x7, 0x8, 0x3f}, {0x1, 0x401, 0x7, 0x4}, {0x28, 0xbd, 0xff, 0x9}, {0x5, 0x80000001, 0x5, 0xc64}, {0x6, 0x2, 0x6, 0x3}, {0x6, 0xa48, 0x100, 0xc5}, {0x3f7a, 0x6, 0x0, 0x7f}, {0x0, 0x0, 0x3, 0xc6}, {0x3, 0x0, 0x1, 0x227}, {0xfffffff8, 0x3, 0x3, 0x3}, {0x9, 0xfffffffd, 0x2, 0x47fd}, {0x2, 0x3, 0x9, 0xf933}, {0x0, 0x401, 0x81, 0xfffffff8}, {0x4, 0x7, 0x3, 0x2}, {0x0, 0x8000, 0xffffea9e, 0x8}, {0x4, 0x7a0, 0xffffff01, 0xffffffff}, {0x3, 0x8, 0x7, 0xfffffffc}, {0x1, 0x101, 0x7, 0xffffffff}, {0x2, 0x0, 0x7fff, 0x80000001}, {0x2, 0x3, 0xffff, 0xc75}, {0x1, 0x10001, 0x7, 0x8}, {0xffffffff, 0x1000, 0xa9cd, 0x40}, {0x4, 0x10000, 0xfffffffb, 0x7f}, {0x3f, 0xff, 0x7fff, 0xfff}, {0x1, 0xd71f, 0xfff, 0x100000}, {0x4, 0x8, 0xd8e8, 0x2}, {0x3, 0xb1, 0x200, 0x5}, {0x3d26, 0x1000, 0x8, 0x1b}, {0x0, 0x2, 0x2, 0x8}, {0x5, 0xfffffffd, 0xffffff55, 0xffff9946}, {0x3ff, 0x401, 0x4, 0x4}, {0x5, 0x800, 0x1, 0x6059}, {0x0, 0x10001, 0x1, 0xcf9}, {0x7ff, 0x74c, 0x78e4, 0x6}, {0x0, 0x3, 0x9, 0x102d}, {0x30a5, 0x2, 0x800, 0x7fffffff}, {0x0, 0x197, 0x5, 0x1}, {0x81, 0x7, 0x1ff, 0x1000}, {0x3ff, 0x100, 0x500000, 0x6}, {0x5, 0x9, 0xff, 0x9}, {0x9, 0x1, 0xff, 0x9}, {0x1, 0x7fff, 0x6, 0x5}, {0x647ab08d, 0x20, 0xce, 0x9}, {0xfff, 0xf52, 0x7fffffff, 0x7}, {0xb9, 0x8, 0xfde4, 0x2}, {0x800, 0x1ff, 0x1ff, 0x2}, {0x7c70d784, 0x1, 0x4, 0x66b7}, {0x80, 0x0, 0xfffffff7, 0x5}, {0x811, 0x3, 0x3d82, 0x7fff}, {0x10001, 0x2, 0x8001, 0x7fffffff}, {0xfffffffd, 0xd0, 0xffffffff, 0x3}, {0x800, 0x5, 0x3ff}, {0x2, 0x3, 0x1, 0x4}, {0x1c, 0xc1a, 0x7ea}, {0x9d, 0x9, 0x4, 0x1}, {0x2, 0xfffffffc, 0x5f}, {0x401, 0x3, 0xfffffce8, 0x4}, {0x1, 0xfff, 0x80, 0x8001}, {0x3f, 0x9, 0x9, 0x43}, {0x53, 0x7f, 0xffffffff, 0x7}, {0x1, 0x8, 0x2, 0x1}, {0x4e67, 0x9, 0x8000, 0x6}, {0x6, 0x9, 0x4, 0xa8}, {0x10001, 0x3, 0x4e4, 0x7fff}, {0x0, 0x28, 0x4, 0x400}, {0x7, 0x6, 0x3, 0x7}, {0x9, 0x2020, 0x4ea4, 0xca5c}, {0x0, 0xffffffe0, 0x1, 0x80200}, {0x800, 0xffffffff, 0x9, 0x6}, {0x9, 0xfffffff8, 0x1, 0x20}, {0xfffffff7, 0x4, 0x9, 0xfff}, {0x6, 0x1, 0x6, 0xffff}, {0x5, 0x1f, 0x4, 0x9}, {0x7f, 0x100, 0x7, 0x7}, {0xfffffff7, 0x92d5, 0x7, 0x3}, {0x5, 0x44a, 0x6, 0x8000}, {0x3, 0x322a, 0x1, 0xffffffff}, {0x1000, 0xb91, 0x5, 0x200}, {0x0, 0x8001, 0x56, 0x1}, {0x3, 0x7, 0x520}, {0x81, 0x9, 0xce7, 0xb1a}, {0x9, 0xffffffff, 0x0, 0x19ff}, {0xfffffff9, 0x1000, 0x401, 0x57cb}, {0x8, 0x6, 0x400, 0xffffffc1}, {0x3, 0x5, 0x4, 0x20}, {0x7f, 0x9, 0xffffff81, 0x1}, {0x1c0000, 0x1f, 0x1, 0x6}, {0x1, 0x3ff, 0xe650, 0x80000000}, {0x0, 0x0, 0x5, 0x9}, {0x4, 0x6, 0xfffff872}, {0x0, 0x9f05, 0x0, 0x4}, {0x3, 0x400, 0x30}, {0xbc34, 0x9, 0x1000, 0x8}, {0x8, 0xfffff3ae, 0x81df, 0x200}, {0x7, 0x8, 0x9}, {0x5, 0x5, 0x4, 0x4}, {0x0, 0x6, 0x2887, 0x3}, {0xd66c, 0x6, 0x15, 0x6}, {0x2, 0xfffffffa, 0x40, 0x1b01}, {0x40, 0x3, 0x10001, 0x1ff}, {0x46a0, 0x80000000, 0x6, 0x9}, {0x0, 0x49d, 0x0, 0x8}, {0xffff0000, 0x8000, 0x401, 0x10001}, {0x9, 0x400, 0x2e59, 0xff}, {0xf2ce, 0x906, 0x0, 0x62ab}, {0x2, 0x7fff, 0x3}, {0x9122, 0x200, 0x5d, 0x1}, {0x9b4, 0x3c7e, 0x101, 0x200}, {0x9, 0x81, 0x8001, 0x3}, {0x7, 0x7, 0x4, 0x4}, {0x81, 0x80000001, 0x7, 0x2}, {0x8, 0xfd10, 0x4, 0x20}, {0x9, 0x626, 0x800, 0x9}, {0x400, 0x3, 0x8, 0x6}, {0x8, 0xffffffff, 0xcd, 0x2}, {0x401, 0x9, 0x2800000, 0x2}, {0xffff0000, 0x2, 0x9a, 0x10001}, {0x0, 0x943, 0x9, 0x4}, {0xc20b, 0xa9fc, 0x0, 0x7}, {0xfffffbff, 0x9, 0x81, 0x9}, {0x3ff, 0x6, 0x9d1, 0x9}, {0xc20f, 0x9, 0x3, 0xa5f}, {0x3, 0x9, 0x6, 0x6}, {0x2, 0x9b9, 0x8, 0x400000}, {0x7fff, 0x9a85, 0x495, 0x8000}, {0x7232, 0x9, 0x1, 0xffffffff}, {0x1, 0x8001, 0x73afceeb, 0x3}, {0xd851, 0x1f, 0x9, 0xfff}, {0x1ff, 0x1ff, 0x2, 0x6}, {0x3ff, 0x9, 0xa62c, 0x3}, {0x7f, 0xff, 0x3f, 0x8}, {0xffffffff, 0x1f, 0x8}, {0xfffffff8, 0x80000000, 0xfffffffd, 0xa0}, {0xf841, 0x7, 0xffff, 0x7}, {0x589, 0x0, 0x1, 0x3}, {0x0, 0xd73, 0x0, 0x7ad}, {0x0, 0x8ed, 0x6, 0x200}, {0xa490, 0x5140, 0x3, 0xffff}, {0x10001, 0x9000000, 0xab400, 0x7}]}, 0x1b63) 11:05:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x62}}) 11:05:05 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$FITHAW(r4, 0xc0045878) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) (async) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendfile(r5, r4, 0x0, 0x4) sendfile(r4, r5, 0x0, 0x3) 11:05:05 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x52}}) 11:05:05 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x6}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) (async) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0], 0x208e24b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$FITHAW(r4, 0xc0045878) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r6, 0x0) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) sendfile(r5, r4, 0x0, 0x4) sendfile(r4, r5, 0x0, 0x3) [ 574.668372][T30732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 574.702660][T30736] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 574.705105][T30747] loop0: detected capacity change from 0 to 128 [ 574.709305][T30736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 574.709408][T30736] vhci_hcd vhci_hcd.0: Device attached [ 574.736273][T30743] vhci_hcd: connection closed [ 574.739628][ T9310] vhci_hcd: stop threads [ 574.748660][ T9310] vhci_hcd: release socket [ 574.753100][ T9310] vhci_hcd: disconnect device 11:05:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r2 = getpgid(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001ec0)={{0x1, 0x1, 0x18, r0, {0xae}}, './file0\x00'}) sendmsg$nl_route(r1, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)=@RTM_NEWNSID={0x5c, 0x58, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_NSID={0x8}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048000}, 0x885) bind$inet(r0, &(0x7f0000000040)={0x2, 0x400, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x80, 0x8000, 0x1, 0x1, {{0x16, 0x4, 0x0, 0x4, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0x0, [{@rand_addr=0x64010100, 0x1}, {@private=0xa010100, 0x1}]}, @timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0x2, [{@broadcast, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3dc}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x81}]}, @timestamp_addr={0x44, 0x14, 0xf3, 0x1, 0x8, [{@rand_addr=0x64010102, 0x641}, {@private=0xa010101, 0x800}]}]}}}}}) r7 = socket(0x200000100000011, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYRESDEC=r9], 0x10}], 0x1}, 0x0) sendmmsg$inet(r5, &(0x7f0000001d80)=[{{&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)="29eeeab3fa911865985f452f24428932b0ccb8286fc17162e9abc7d718ef6098be48af3c45b424fb51caa9c4d36c7321e9ebb201405df57859834250916a849732337aa0048c70f6d3240c29feb730d727e04583b464aa7bc4eb516c70af9568bd85b03dc75ab4ffb05e07e4b03e0a5d40e651188b57", 0x76}], 0x1, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @multicast2}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xc0, [@multicast2, @rand_addr=0x64010102, @broadcast, @local]}, @noop, @timestamp_prespec={0x44, 0x44, 0xc1, 0x3, 0x7, [{@local, 0x80}, {@rand_addr=0x64010102, 0x400}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x5}, {@private=0xa010100, 0x1}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x7}, {@multicast2}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x2a, 0x3, 0x7, [{@empty, 0x7fffffff}, {@loopback, 0x5}, {@loopback, 0x9}, {@empty, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3cc}, {@rand_addr=0x64010101, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc5}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x6e, [@multicast2, @multicast2, @broadcast, @multicast1]}, @noop, @timestamp={0x44, 0x18, 0xaf, 0x0, 0x2, [0x8000, 0x80, 0x5, 0x2, 0xffffff5e]}, @cipso={0x86, 0x50, 0x2, [{0x5, 0x6, "8bf2a004"}, {0x1, 0x9, "6a4769dd75a605"}, {0x6, 0x11, "059648b747de091601311fa01ac961"}, {0x1, 0x10, "a6c6d86d48271cdcb542ebf5ba0c"}, {0x2, 0x9, "f2987f147c10e2"}, {0x2, 0x11, "fbdeb43e3024caffa2841dc1e88edd"}]}, @timestamp={0x44, 0x1c, 0xeb, 0x0, 0x1, [0x3, 0x6, 0x7fff, 0x6, 0x8000, 0x400]}, @end]}}}], 0x1f0}}, {{&(0x7f0000000740)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000780)="4c1205066f1b50f60206033b6603cbf0ac44e6c43ad85e2fe5d635e51e5a48ce720b0f47ffdc7f0cf1c3ce0d93b16953a0698ce0d5224bb6c32496b46ee866ded72a170aaf86e47e3c589d9a24", 0x4d}, {&(0x7f0000000800)="c985a4aab9a91e5c3bbc98b19535dbb25711953a5ade09c880c9618170eb52564e022178d791deb28a8692b358d4695b50874c776bb8", 0x36}, {&(0x7f0000000840)="f41ec336a41e0fda6dbee0b1ced7f06acf1b2f", 0x13}, {&(0x7f0000000880)="8d0cf1da0f02c872ee879600548dc0ad7b4993f4e715900b71e7bd27694f18f5ef47fb6d725ff5affe145798914d30ac48a6c908b03a50443f1b8ce0170516e309e951bdf37fa645b1a9a0c4adf85f871bf9af8feeb1b3e51c6b0d251bec4d509b6690814c6e3550089e55d5897a52cee070f776b9c3d0ce1a378c8fed2c0ff38d5e05f26e968013f1ca4a0d69d8059051a22c0370816dd7d694a5898bc0d47543c0343640ac9986810d2b48affd0038ac43d78eb2a1d76e06", 0xb9}, {&(0x7f0000000940)="7a3501e3ec6d4d8f4fdffb5b45ea59c359920c0a62a56a0d09338c4cb8a34b589cb1b0cb7f97fc28d4c25d455b838137b1a72347", 0x34}, {&(0x7f0000000980)="8ec44a7a873903d74c0699634a819ade6f4dc45c90aad1d61ba7bafda2828eae705e0f538d89f8df1959ee641e386ee99848e7f0c4a66c8d286ed22d8e9cf43312bc3c53dd3403ab9f4fd82b39c249d8e8a8cb03b20384fa0c825f20bca9e2579ae4105c5c879c9e5ad07c40cc2f3271b1818731c8622c4e32cd880cb2e359626e36", 0x82}, {&(0x7f0000000a40)="1b0740d9f24a62e1acd5e125562d6a73caa864225eb1d35b7c38737f28d5d15e1c03d14e33de01570e0e59fdcc79726ad80ddec338f444459b9da149032bcf32c14d3f4ef59dee4d85be48defdcdf1cd700cece09a7e00f29030", 0x5a}], 0x7, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}, {{&(0x7f0000000b80)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000bc0)="6be823dd", 0x4}, {&(0x7f0000000c00)="13097f1a36a6990e011e22128d", 0xd}, {&(0x7f0000000c40)="f8c391a1717190a09a14063e8828f7e3b9cc666a88b0dc95b0f99423e8cb3d181b0e535a61894440ba6c3a8f616fda", 0x2f}, {&(0x7f0000000c80)="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", 0x1000}], 0x4, &(0x7f0000001cc0)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x46, [@dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x24, 0x3, [{0x7, 0x5, "319c05"}, {0x1, 0x9, "901154206e9359"}, {0x0, 0x10, "563a12990a116e98dbb56bed30cd"}]}, @timestamp_prespec={0x44, 0x14, 0xa5, 0x3, 0x4, [{@multicast1, 0x10000}, {@multicast2, 0x2}]}, @ra={0x94, 0x4}, @generic={0x4e, 0x7, "7f52739c28"}, @timestamp={0x44, 0x24, 0x3e, 0x0, 0xf, [0x9, 0x20425026, 0x7fff, 0x8c12, 0x100, 0xffff, 0x8001, 0x4e62]}]}}}], 0x90}}], 0x3, 0x48000) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_newvlan={0x40, 0x70, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x6}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004090) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r11, 0x0) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r10) sendmsg$FOU_CMD_DEL(r11, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="78001100", @ANYRES16=r12, @ANYBLOB="000825bd7000ffdbdf2502000000060001004e20000005000300290000001400070000000000000000000000ffff0a010102050004000300000008000800ac14144408000b00", @ANYRES32=0x0, @ANYBLOB="06000a004e230000"], 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x40) sendto$inet(r0, 0x0, 0x900, 0x4008080, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 11:05:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000002640)={0x5, 0xb4172a5b8c35d709, 0x0, &(0x7f0000002580)=[{&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000440)=""/12, 0xc}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/197, 0xc5}], &(0x7f0000002600)=[0x8000]}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x3, 0x4580) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x7, 0x7, 0x2, 0x8, 0x0, 0x6, 0x5f3cb, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000000340), 0xc}, 0x2, 0x4, 0x20000003, 0x5, 0x1, 0xaf, 0xfff, 0x0, 0xc, 0