last executing test programs: 5.876659026s ago: executing program 4 (id=2512): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) eventfd2(0x5, 0x1) io_submit(r0, 0x0, 0x0) 5.575051671s ago: executing program 4 (id=2516): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x3402, 0x0, 0x0, 0x8, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2c, 0x80, 0x2, 0x261}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x22d0, 0x20, 0x0, 0x0, 0xa) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'wlc\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0xcd, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.15891466s ago: executing program 2 (id=2520): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000000c0)="80", 0x1, 0x48d4, &(0x7f00000001c0)={0x11, 0x8, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.087472743s ago: executing program 2 (id=2521): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.022640407s ago: executing program 2 (id=2522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406a056b00400001020301090224000101d77f0cb5778a8d2eda0adbea00050904000602030100d1092105007f011c682bf500e2226103090581"], 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe70, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0xe, 0x2}, [{0xdc8, 0xffffffff, 0xfffffffd, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x8009, 0x4, 0x5, 0x3, 0x983c3b9}, {0x14, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x4391}, {0x8ce, 0x8, 0x101, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x5}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xd, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x5, 0x8}, {0x7fffffff, 0x401, 0x0, 0xffffffff, 0x380000, 0x2}, {0x9, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x1}, {0x6, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x6f8, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x20000004, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x2d, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x72b42cb3, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4c}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0xffffffff, 0x2, 0x8002000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace42}, {0xffffffff, 0xfffffdfa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x10, 0x2, 0xfffffffd, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x9, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x6}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0x5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x4000002, 0x7, 0x5}, {0x80e0470, 0x9, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7ffffffd, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x2, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x10001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x5, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0xffffffff, 0xffff, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0xfffffffe, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x6}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0xb}, {0x200, 0x9, 0x0, 0xfff, 0x3, 0xf}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0xfffd, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x8, 0xb, 0x8b0, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x100, 0x56, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {}, {0x5, 0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {0x4, 0x33b46010c087959a}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0xb92f7acd6c055d88}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe70}}, 0x2400c800) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x20042, 0x9a) write$tcp_mem(r4, 0x0, 0x0) connect$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') accept4$x25(r4, 0x0, &(0x7f00000004c0), 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x5, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0xfffffffffffffff7, 0x6}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xfce1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x5f24949ec43de3bf, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xfffffffffffffda3, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 3.516925112s ago: executing program 4 (id=2525): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0, 0x20}) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000100), 0x1004) 3.453872106s ago: executing program 4 (id=2526): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x4, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.050347286s ago: executing program 2 (id=2528): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) eventfd2(0x5, 0x1) io_submit(r0, 0x0, 0x0) 2.847239496s ago: executing program 2 (id=2532): r0 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000180)={[{@nombcache}, {@errors_remount}, {@inlinecrypt}, {@norecovery}, {@nodioread_nolock}, {@debug}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x34a8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xfb, &(0x7f00000004c0)=""/251, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x7, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2], &(0x7f0000000b00)=[{0x3, 0x1, 0x5, 0xc}], 0x10, 0xfffffff9}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpu.stat\x00', 0x275a, 0x0) fremovexattr(r3, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00a620914709e91312e1facf4b6db08f99000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}}, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mmap(&(0x7f00007fd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8f65e000) ioctl$EVIOCRMFF(r8, 0xc0085508, &(0x7f00000000c0)=0x18) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x140, &(0x7f0000000200)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="14f94a420000005200005d0e361d590003000000060007000a10000001000100090000006671db051550bd33ba72e5a65cac1ebd195470708944dbe2243d2391170ce7c9f955ce5d05531d0d4e4b53e963317bee5475484be99dafb1498da17f"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0xfffffde3) 2.650134347s ago: executing program 3 (id=2535): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1, &(0x7f00000003c0)=""/46, 0x2e}, 0x8}, {{&(0x7f0000000400)=@tipc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/93, 0x5d}, {&(0x7f0000000600)=""/32, 0x20}], 0x2, &(0x7f00000009c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/53, 0x35}, {&(0x7f00000019c0)=""/164, 0xa4}, {&(0x7f0000001a80)=""/243, 0xf3}, {&(0x7f0000001b80)=""/220, 0xdc}, {&(0x7f0000000780)=""/38, 0x26}, {&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000002740)=""/47, 0x24}, {&(0x7f0000001cc0)=""/89, 0x59}, {&(0x7f0000001d40)=""/84, 0x5c}], 0xa, &(0x7f0000001e80)=""/235, 0xeb}, 0x25}, {{&(0x7f0000001f80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002000)=""/75, 0x4b}, {&(0x7f0000002140)=""/67, 0x43}, {&(0x7f00000021c0)=""/65, 0x41}, {&(0x7f0000002240)=""/189, 0xbd}, {&(0x7f00000020c0)=""/20, 0x14}, {&(0x7f0000002300)=""/91, 0x5b}], 0x6, &(0x7f0000002400)=""/152, 0x98}, 0x51}, {{&(0x7f00000024c0)=@pppol2tpv3, 0xc8, &(0x7f0000002780)=[{&(0x7f0000002540)=""/176, 0xb0}, {&(0x7f0000002600)=""/218, 0xda}, {&(0x7f0000002700)=""/41, 0x29}, {&(0x7f0000002740)}], 0x4, &(0x7f00000027c0)=""/96, 0x60}, 0x1}, {{&(0x7f0000002840)=@phonet, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000028c0)=""/102, 0x66}, {&(0x7f0000002940)=""/220, 0xdc}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/84, 0x54}], 0x4, &(0x7f0000003b00)=""/142, 0x8e}, 0x7}], 0x6, 0x10322, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_procfs(0x0, &(0x7f00000015c0)='net/raw6\x00') read(r5, &(0x7f0000000100)=""/34, 0x22) 1.37202898s ago: executing program 0 (id=2541): syz_emit_ethernet(0xd6, &(0x7f00000003c0)=ANY=[@ANYBLOB="0980c2000000bbbbbbbbbbbb86dd6003000000a03a00fe8000000000000000000000000000bbff0200000000000000000000000000010402907800000fff6055c0e400033cffff02005700000000000000000000000100000000000000000000ffffffffffff2b000400073009003a0c04060328ff01ff020000000000000000000000000001ff02000000000000000000000000000120010000000000000000000000000001ff0200000000000000000000000000010000000000000000000000000000000020010000000000000000000000000002"], 0x0) socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x885, &(0x7f0000000340)={0x0, 0xde2e, 0x8, 0x0, 0x3c0, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r4}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x3d3e, 0x2001, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, 0x0, 0x0) 1.00850177s ago: executing program 4 (id=2544): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001014010000000f000000000008"], 0x30}}, 0x94) 808.542511ms ago: executing program 4 (id=2546): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x20}, 0x41) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x440100, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xe) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'batadv_slave_1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1, 0xf, "544f3a2d3532a1598334283a97e6ee"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='debugfs\x00', 0x200010, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000fffeffffffffffff0000000d00000000020000000000000c020000000000"], 0x0, 0x44, 0x0, 0x2}, 0x28) 808.049471ms ago: executing program 1 (id=2547): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x66042, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x1, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file1/file0\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4, 0x40000}, 0x10) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x22, 0x4) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0xffffff03, &(0x7f0000000000)="fb06debdc28eadb1a6b0399a241330dfe2f9af2e"}) io_setup(0x2007, &(0x7f0000000980)) 781.678194ms ago: executing program 1 (id=2548): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x149a82, 0xa4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7030000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 716.898338ms ago: executing program 2 (id=2549): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) write$tun(r0, &(0x7f0000001b80)={@val={0x0, 0x9200}, @void, @ipv6=@generic={0x0, 0x6, "725dde", 0x0, 0x6c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x2c) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x10044009) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fb, &(0x7f0000002440)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0xf1, 0xf507}) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0020"], 0x78}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x92800, 0x20) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x9}) 700.292724ms ago: executing program 1 (id=2550): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x42758, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x5, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffe, @remote}, @ib={0x1b, 0x4, 0x5, {"0000f3b4f9ff05ff9d00002080000001"}, 0x7000000, 0x0, 0x1e8b}}}, 0x118) 623.202115ms ago: executing program 3 (id=2551): socket$kcm(0x23, 0x5, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], 0x0, 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 576.020083ms ago: executing program 1 (id=2552): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 2) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 575.514923ms ago: executing program 3 (id=2553): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x301, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x20040000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x8c, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x5c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6e49}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x20000881) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 575.011433ms ago: executing program 1 (id=2554): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000680)=""/144, &(0x7f0000000380)=0x90) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x103202) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000040)=0xfa) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x10000, 0x3, 0x117}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0xb, &(0x7f0000000340)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x6, 0xff}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000100001f2feff00000000df2510000000", @ANYRES32=0x0, @ANYBLOB="001000000000000008001b"], 0x28}}, 0x8004) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x8004098) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x100}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000004000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="8e53f71e5dab3813f20f74eeff0148c9eae147ad5754cc13633a2afff7a37d73c031e0a99e627d833db92f460f738c5a3e4b6990deefb58b9ef7515847a48b4a576a9327b4e077775ebbda6b580821011e86c9157d75b590cc07ec1fb8e3f0d1039b44e45e88e211cfa8edba66ee9e0582dda6b4742370a143174d4ec11c6cde4d06cd810a4fc03001e363a7a863e37dd3e48c", @ANYRES8, @ANYRES8, @ANYRES64, @ANYRESDEC=r9, @ANYRESDEC=r4, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES8=r10, @ANYRES8=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 499.981164ms ago: executing program 1 (id=2555): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) prlimit64(r0, 0xd, 0x0, &(0x7f0000000240)) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000040)=r3) close(r4) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x1, 0x2, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x5, 0xffff8001}}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r5, r3, 0x0, r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x804818, &(0x7f0000000100)={[{@check_relaxed}, {@check_strict}, {@hide}, {}, {@unhide}, {@nojoliet}, {@check_relaxed}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) 480.90129ms ago: executing program 3 (id=2556): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xc8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) connect$inet6(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 435.766689ms ago: executing program 3 (id=2557): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010014000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 336.362904ms ago: executing program 3 (id=2558): mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) open$dir(&(0x7f0000000140)='./file0\x00', 0x242, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x10000000000000, 0x1, 0x2, 0xa8, 0x500}, 0x0, &(0x7f0000000000)={0x1f, 0x4, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 335.814924ms ago: executing program 0 (id=2559): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="8cff7cf908"], 0x20) 267.960487ms ago: executing program 0 (id=2560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) getgid() (async) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x400c810}, 0x84) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x11, 0x1, '/dev/net/tun\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4080) 242.62768ms ago: executing program 0 (id=2561): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x149a82, 0xa4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7030000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 195.150289ms ago: executing program 0 (id=2562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e80)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x1}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000054}, 0x4000) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0xa76c8594dc1e23b9, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 0 (id=2563): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x0, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xa, 0x1}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000d00)="406c5816", 0x4}, {0x0}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000240)='ns/uts\x00') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r4], &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0xc}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r6, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xf5, 0xf0, 0x14, 0x8ab, 0x2, 0x0, 0x80000001, 0x19a, 0x38, 0x8008b, 0x6, 0x5, 0x20, 0x0, 0x5, 0x1, 0x20}}, 0x38) mmap$IORING_OFF_SQ_RING(&(0x7f0000313000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @in6={0xa, 0x4e20, 0xd, @loopback, 0x91b}}}, 0x90) kernel console output (not intermixed with test programs): 00007f0085005fa0 R15: 00007ffd857b7b48 [ 213.226390][ T9495] [ 213.453747][ T9498] loop2: detected capacity change from 0 to 128 [ 213.492287][ T9498] netlink: 68664 bytes leftover after parsing attributes in process `syz.2.1903'. [ 213.504209][ T9498] net_ratelimit: 134 callbacks suppressed [ 213.504225][ T9498] netlink: zone id is out of range [ 213.517735][ T9498] netlink: zone id is out of range [ 213.533053][ T9498] netlink: zone id is out of range [ 213.539310][ T9498] netlink: zone id is out of range [ 213.544994][ T9489] loop4: detected capacity change from 0 to 1024 [ 213.547143][ T9504] loop0: detected capacity change from 0 to 512 [ 213.567887][ T9498] netlink: zone id is out of range [ 213.586364][ T9498] netlink: zone id is out of range [ 213.593988][ T9504] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 213.608615][ T9508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.611651][ T9489] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 213.624864][ T9498] netlink: zone id is out of range [ 213.624872][ T9498] netlink: zone id is out of range [ 213.624880][ T9498] netlink: zone id is out of range [ 213.663356][ T9489] System zones: 0-1, 3-36 [ 213.664869][ T9504] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 213.678896][ T9514] xt_TCPMSS: Only works on TCP SYN packets [ 213.680117][ T9489] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1898: bad orphan inode 134217728 [ 213.706143][ T9504] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1905: bad orphan inode 4 [ 213.708006][ T9489] loop4: lost filesystem error report for type 5 error -117 [ 213.717281][ T9504] loop0: lost filesystem error report for type 5 error -117 [ 213.728632][ T9504] EXT4-fs (loop0): 1 orphan inode deleted [ 213.735951][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 213.735972][ C1] EXT4-fs (loop0): initial error at time 2000000063: ext4_orphan_get:1417 [ 213.736000][ C1] EXT4-fs (loop0): last error at time 2000000063: ext4_orphan_get:1417 [ 213.770348][ T9489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.771843][ T9504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.007362][ T9526] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 4: comm syz.0.1905: lblock 0 mapped to illegal pblock 4 (length 1) [ 214.099347][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.185044][ T9531] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 214.296648][ T9538] loop3: detected capacity change from 0 to 128 [ 214.350632][ T9538] netlink: 98968 bytes leftover after parsing attributes in process `syz.3.1918'. [ 214.453593][ T9542] syzkaller0: entered promiscuous mode [ 214.459760][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.544351][ T9557] loop3: detected capacity change from 0 to 2051 [ 214.562807][ T9557] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 64 [ 214.579901][ T9562] loop2: detected capacity change from 0 to 512 [ 214.602065][ T9562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.618027][ T9562] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.029008][ T9584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1931'. [ 215.247239][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1934'. [ 215.602524][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.648812][ T9601] program syz.4.1936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.794993][ T9609] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 215.840500][ T9615] FAULT_INJECTION: forcing a failure. [ 215.840500][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 215.853232][ T9615] CPU: 1 UID: 0 PID: 9615 Comm: syz.2.1938 Tainted: G W syzkaller #0 PREEMPT(full) [ 215.853263][ T9615] Tainted: [W]=WARN [ 215.853269][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.853280][ T9615] Call Trace: [ 215.853286][ T9615] [ 215.853293][ T9615] __dump_stack+0x1d/0x30 [ 215.853375][ T9615] dump_stack_lvl+0x95/0xd0 [ 215.853395][ T9615] dump_stack+0x15/0x1b [ 215.853414][ T9615] should_fail_ex+0x263/0x280 [ 215.853435][ T9615] ? fl_init+0x33/0x130 [ 215.853547][ T9615] should_failslab+0x8c/0xb0 [ 215.853606][ T9615] __kmalloc_cache_noprof+0x5f/0x410 [ 215.853632][ T9615] ? __pfx_fl_reoffload+0x10/0x10 [ 215.853664][ T9615] fl_init+0x33/0x130 [ 215.853693][ T9615] tcf_proto_create+0x130/0x1a0 [ 215.853790][ T9615] tc_new_tfilter+0xa82/0x1110 [ 215.853820][ T9615] ? ns_capable+0x7c/0xb0 [ 215.853840][ T9615] ? __pfx_tc_new_tfilter+0x10/0x10 [ 215.853900][ T9615] rtnetlink_rcv_msg+0x64b/0x720 [ 215.853927][ T9615] ? avc_has_perm_noaudit+0xab/0x130 [ 215.854029][ T9615] netlink_rcv_skb+0x123/0x220 [ 215.854050][ T9615] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.854171][ T9615] rtnetlink_rcv+0x1c/0x30 [ 215.854196][ T9615] netlink_unicast+0x5c0/0x690 [ 215.854261][ T9615] netlink_sendmsg+0x5c8/0x6f0 [ 215.854291][ T9615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.854388][ T9615] ____sys_sendmsg+0x5af/0x600 [ 215.854416][ T9615] ___sys_sendmsg+0x195/0x1e0 [ 215.854454][ T9615] __x64_sys_sendmsg+0xd4/0x160 [ 215.854488][ T9615] x64_sys_call+0x194c/0x3020 [ 215.854510][ T9615] do_syscall_64+0x12c/0x370 [ 215.854563][ T9615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.854586][ T9615] RIP: 0033:0x7ff3fdccc799 [ 215.854603][ T9615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.854701][ T9615] RSP: 002b:00007ff3fc71f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.854719][ T9615] RAX: ffffffffffffffda RBX: 00007ff3fdf45fa0 RCX: 00007ff3fdccc799 [ 215.854731][ T9615] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 215.854742][ T9615] RBP: 00007ff3fc71f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.854753][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.854764][ T9615] R13: 00007ff3fdf46038 R14: 00007ff3fdf45fa0 R15: 00007ffd31274ce8 [ 215.854815][ T9615] [ 216.170994][ T9622] tipc: Enabled bearer , priority 0 [ 216.193805][ T9624] No such timeout policy "syz1" [ 216.208604][ T9622] syzkaller0: entered promiscuous mode [ 216.214210][ T9622] syzkaller0: entered allmulticast mode [ 216.220140][ T9622] tipc: Resetting bearer [ 216.268132][ T9624] lo speed is unknown, defaulting to 1000 [ 216.319745][ T9622] loop2: detected capacity change from 0 to 512 [ 216.381436][ T9622] FAT-fs (loop2): Directory bread(block 199916) failed [ 216.401604][ T9622] FAT-fs (loop2): Directory bread(block 199917) failed [ 216.438220][ T9624] lo speed is unknown, defaulting to 1000 [ 216.465552][ T9622] FAT-fs (loop2): Directory bread(block 199918) failed [ 216.477998][ T9622] FAT-fs (loop2): Directory bread(block 199919) failed [ 216.494450][ T9622] FAT-fs (loop2): Directory bread(block 199920) failed [ 216.506218][ T9622] FAT-fs (loop2): Directory bread(block 199921) failed [ 216.513325][ T9622] FAT-fs (loop2): Directory bread(block 199922) failed [ 216.521006][ T9622] FAT-fs (loop2): Directory bread(block 199923) failed [ 216.521313][ T61] tipc: Resetting bearer [ 216.641671][ T9635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12304 sclass=netlink_route_socket pid=9635 comm=syz.1.1950 [ 216.662211][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1951'. [ 216.796580][ T9622] FAT-fs (loop2): FAT read failed (blocknr 128) [ 216.856715][ T9650] loop3: detected capacity change from 0 to 128 [ 216.895918][ T9650] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.909407][ T9621] tipc: Resetting bearer [ 216.931072][ T9650] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.934064][ T9621] tipc: Disabling bearer [ 217.429716][ T28] kauditd_printk_skb: 205 callbacks suppressed [ 217.429771][ T28] audit: type=1400 audit(2000000067.649:1424): avc: denied { mount } for pid=9670 comm="syz.2.1960" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 217.587563][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.627485][ T28] audit: type=1400 audit(2000000067.849:1425): avc: denied { listen } for pid=9677 comm="syz.1.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.649896][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 217.658810][ T28] audit: type=1400 audit(2000000067.849:1426): avc: denied { accept } for pid=9677 comm="syz.1.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.681870][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 217.691525][ T9680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1965'. [ 217.874384][ T28] audit: type=1326 audit(2000000068.089:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb89bc799 code=0x7ffc0000 [ 217.874883][ T9695] netlink: 'syz.4.1968': attribute type 1 has an invalid length. [ 217.925342][ T28] audit: type=1326 audit(2000000068.089:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fceb89bc799 code=0x7ffc0000 [ 217.949465][ T28] audit: type=1326 audit(2000000068.089:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb89bc799 code=0x7ffc0000 [ 217.982076][ T28] audit: type=1326 audit(2000000068.089:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fceb89bc799 code=0x7ffc0000 [ 218.005996][ T28] audit: type=1326 audit(2000000068.089:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb89bc799 code=0x7ffc0000 [ 218.029794][ T28] audit: type=1326 audit(2000000068.089:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fceb89bc799 code=0x7ffc0000 [ 218.053859][ T28] audit: type=1326 audit(2000000068.089:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb89bc799 code=0x7ffc0000 [ 218.126272][ T9703] SET target dimension over the limit! [ 219.467711][ T9728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1980'. [ 219.676223][ T9730] loop4: detected capacity change from 0 to 4096 [ 219.926271][ T9730] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.1981: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 219.974091][ T9730] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 219.975136][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 219.990610][ C1] EXT4-fs (loop4): initial error at time 2000000070: ext4_ext_check_inode:521: inode 4 [ 220.000320][ C1] EXT4-fs (loop4): last error at time 2000000070: ext4_ext_check_inode:521: inode 4 [ 220.035888][ T9730] EXT4-fs error (device loop4): ext4_quota_enable:7195: comm syz.4.1981: Bad quota inode: 4, type: 1 [ 220.080576][ T9730] loop4: lost filesystem error report for type 5 error -117 [ 220.123114][ T9730] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 220.124413][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 220.386173][ T9730] EXT4-fs (loop4): mount failed [ 220.459148][ T9738] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1982'. [ 220.703828][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1987'. [ 220.756209][ T9750] loop0: detected capacity change from 0 to 512 [ 220.772327][ T9746] loop4: detected capacity change from 0 to 512 [ 220.783448][ T9750] ext4: Unknown parameter 'fsuuid' [ 220.788936][ T9746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.821500][ T9746] EXT4-fs (loop4): 1 truncate cleaned up [ 220.833187][ T9746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.267463][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.643518][ T9797] loop0: detected capacity change from 0 to 256 [ 221.867655][ T9797] FAT-fs (loop0): Directory bread(block 64) failed [ 221.928920][ T9797] FAT-fs (loop0): Directory bread(block 65) failed [ 221.935556][ T9797] FAT-fs (loop0): Directory bread(block 66) failed [ 221.942599][ T9797] FAT-fs (loop0): Directory bread(block 67) failed [ 221.949389][ T9797] FAT-fs (loop0): Directory bread(block 68) failed [ 221.956053][ T9797] FAT-fs (loop0): Directory bread(block 69) failed [ 221.962757][ T9797] FAT-fs (loop0): Directory bread(block 70) failed [ 221.969464][ T9797] FAT-fs (loop0): Directory bread(block 71) failed [ 221.980624][ T9797] FAT-fs (loop0): Directory bread(block 72) failed [ 221.993377][ T9797] FAT-fs (loop0): Directory bread(block 73) failed [ 222.034865][ T9800] cgroup: fork rejected by pids controller in /syz2 [ 222.558471][T15190] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2005'. [ 222.562159][T15186] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2004'. [ 222.631672][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 222.631687][ T28] audit: type=1400 audit(2000000072.849:1465): avc: denied { shutdown } for pid=15604 comm="syz.4.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.695704][T15602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.734337][ T28] audit: type=1400 audit(2000000072.849:1466): avc: denied { read } for pid=15604 comm="syz.4.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.786752][T15614] bridge_slave_1: left allmulticast mode [ 222.797031][T15616] loop3: detected capacity change from 0 to 128 [ 222.805043][T15614] bridge_slave_1: left promiscuous mode [ 223.764757][ T28] audit: type=1400 audit(2000000073.099:1467): avc: denied { create } for pid=15604 comm="syz.4.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 223.775903][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.796805][T15616] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.809971][T15616] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.801349][T15614] bridge_slave_0: left allmulticast mode [ 224.815129][T15614] bridge_slave_0: left promiscuous mode [ 224.826908][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.388063][T15627] netlink: 'syz.2.2010': attribute type 29 has an invalid length. [ 225.396155][T15630] netlink: 'syz.2.2010': attribute type 29 has an invalid length. [ 225.516220][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.712579][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2020'. [ 225.743507][T15646] loop2: detected capacity change from 0 to 8192 [ 225.760094][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2020'. [ 225.783469][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2020'. [ 225.794243][T15651] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.810362][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2020'. [ 225.829030][ T1058] Process accounting resumed [ 225.844555][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2020'. [ 225.853828][ T3302] loop2: p1 p2 p3 p4 [ 225.854525][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2020'. [ 225.859383][ T3302] loop2: p3 start 117772289 is beyond EOD, [ 225.869571][T15656] netlink: 'syz.3.2020': attribute type 1 has an invalid length. [ 225.883412][ T3302] truncated [ 225.883598][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2020'. [ 225.895123][ T3302] loop2: p4 size 262144 extends beyond EOD, truncated [ 225.896290][T15648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2020'. [ 225.912833][T15646] loop2: p1 p2 p3 p4 [ 225.930779][T15656] macsec1: entered allmulticast mode [ 225.931517][ T28] audit: type=1400 audit(2000000076.149:1468): avc: denied { ioctl } for pid=15658 comm="syz.1.2024" path="socket:[26980]" dev="sockfs" ino=26980 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.943873][T15656] dummy0: entered allmulticast mode [ 225.962910][T15646] loop2: p3 start 117772289 is beyond EOD, truncated [ 225.981731][T15646] loop2: p4 size 262144 extends beyond EOD, truncated [ 226.009069][T15656] dummy0: left allmulticast mode [ 226.015495][ T28] audit: type=1400 audit(2000000076.219:1469): avc: denied { getopt } for pid=15658 comm="syz.1.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 226.118952][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 226.130625][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 226.161451][T15667] netlink: 'syz.1.2025': attribute type 12 has an invalid length. [ 226.170578][T15667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8225 sclass=netlink_route_socket pid=15667 comm=syz.1.2025 [ 226.234354][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 226.240849][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 226.273652][T15678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15678 comm=syz.3.2030 [ 226.299064][T15679] netlink: 'syz.1.2031': attribute type 1 has an invalid length. [ 226.339944][T15646] loop2: detected capacity change from 0 to 8192 [ 226.375200][T15685] 8021q: adding VLAN 0 to HW filter on device team1 [ 226.382737][T15685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15685 comm=syz.4.2033 [ 226.433881][ T3302] loop2: p1 p2 p3 p4 [ 226.439011][ T3302] loop2: p3 start 117772289 is beyond EOD, truncated [ 226.447207][ T3302] loop2: p4 size 262144 extends beyond EOD, truncated [ 226.464282][T15646] loop2: p1 p2 p3 p4 [ 226.477600][T15646] loop2: p3 start 117772289 is beyond EOD, truncated [ 226.480240][T15691] loop3: detected capacity change from 0 to 1024 [ 226.485606][T15692] lo speed is unknown, defaulting to 1000 [ 226.490985][T15646] loop2: p4 size 262144 extends beyond EOD, truncated [ 226.515460][T15691] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.549330][T15691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.571182][ T28] audit: type=1326 audit(2000000076.789:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.4.2035" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fceb89bc799 code=0x0 [ 226.571653][T15691] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.625449][T15691] EXT4-fs (loop3): shut down requested (2) [ 226.631547][T15691] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 226.648084][T15691] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 226.658223][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 226.669138][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 226.680934][T15691] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 226.700072][T15692] lo speed is unknown, defaulting to 1000 [ 226.712594][ T28] audit: type=1400 audit(2000000076.869:1471): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 226.734952][T15691] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 226.758432][T15691] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 226.763286][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 226.768260][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 226.794020][ T28] audit: type=1400 audit(2000000076.869:1472): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.824189][T15691] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 226.835555][ T28] audit: type=1400 audit(2000000076.869:1473): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.835799][T15691] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 226.857183][ T28] audit: type=1400 audit(2000000076.869:1474): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.952452][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 227.122821][T15723] loop2: detected capacity change from 0 to 1024 [ 227.237229][T15723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 227.249657][T15723] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.319723][T15724] loop3: detected capacity change from 0 to 512 [ 227.403030][T15728] loop4: detected capacity change from 0 to 1024 [ 227.410035][T15728] EXT4-fs: Ignoring removed orlov option [ 227.615933][T15724] EXT4-fs (loop3): blocks per group (8192) and clusters per group (2304) inconsistent [ 227.642134][T15732] netlink: 'syz.1.2045': attribute type 29 has an invalid length. [ 227.651999][T15732] netlink: 'syz.1.2045': attribute type 29 has an invalid length. [ 227.674181][T15728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.019684][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 228.075022][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.226520][T15747] siw: device registration error -23 [ 228.243545][T15747] loop2: detected capacity change from 0 to 2048 [ 228.252105][T15747] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (8) [ 228.420970][T15766] loop0: detected capacity change from 0 to 512 [ 228.455888][T15766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 228.485635][T15766] EXT4-fs (loop0): 1 truncate cleaned up [ 228.498076][T15766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.681622][T15760] loop4: detected capacity change from 0 to 512 [ 228.710345][T15760] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.256802][T15760] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.2053: Directory hole found for htree leaf block 0 [ 229.323231][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.770118][ T6127] IPVS: starting estimator thread 0... [ 229.865128][T15786] IPVS: using max 2352 ests per chain, 117600 per kthread [ 229.876723][T15791] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 229.883410][T15791] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 229.914957][T15791] vhci_hcd vhci_hcd.0: Device attached [ 229.933695][T15795] loop3: detected capacity change from 0 to 512 [ 229.942189][T15796] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 229.948849][T15796] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 229.958282][T15795] EXT4-fs: Ignoring removed i_version option [ 229.964424][T15795] EXT4-fs: Ignoring removed bh option [ 229.975222][T15796] vhci_hcd vhci_hcd.0: Device attached [ 229.987860][T15795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.002349][T15791] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(18) [ 230.008999][T15791] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 230.017363][T15795] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.033198][T15791] vhci_hcd vhci_hcd.0: Device attached [ 230.055264][T15796] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(20) [ 230.061872][T15796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 230.117270][T15796] vhci_hcd vhci_hcd.0: Device attached [ 230.141560][T15791] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(23) [ 230.148186][T15791] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 230.200191][T15796] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 230.368940][ T3373] usb 2-1: SetAddress Request (2) to port 0 [ 230.374899][ T3373] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 230.392563][T15796] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 230.429685][T15791] vhci_hcd vhci_hcd.0: Device attached [ 230.460877][T15810] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 230.527466][ T3310] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 230.600063][T15814] loop4: detected capacity change from 0 to 128 [ 230.705697][T15801] vhci_hcd: connection closed [ 230.705913][ T3719] vhci_hcd vhci_hcd.0: stop threads [ 230.716411][T15792] vhci_hcd: connection closed [ 230.720438][T15797] vhci_hcd: connection reset by peer [ 230.730843][T15805] vhci_hcd: connection closed [ 230.734631][T15807] vhci_hcd: connection closed [ 230.758331][T15816] loop2: detected capacity change from 0 to 512 [ 230.775132][ T3719] vhci_hcd vhci_hcd.0: release socket [ 230.800998][ T3719] vhci_hcd vhci_hcd.0: disconnect device [ 230.821391][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.834181][ T3719] vhci_hcd vhci_hcd.0: stop threads [ 230.844845][T15818] __nla_validate_parse: 157 callbacks suppressed [ 230.844860][T15818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2065'. [ 230.860984][T15816] ext3: Invalid uid '0x00000000ffffffff' [ 230.869354][ T3719] vhci_hcd vhci_hcd.0: release socket [ 230.889065][ T3719] vhci_hcd vhci_hcd.0: disconnect device [ 230.914931][T15820] FAULT_INJECTION: forcing a failure. [ 230.914931][T15820] name failslab, interval 1, probability 0, space 0, times 0 [ 230.932848][ T3719] vhci_hcd vhci_hcd.0: stop threads [ 230.945576][T15818] ip6gre0: Master is either lo or non-ether device [ 230.962247][ T3719] vhci_hcd vhci_hcd.0: release socket [ 230.971401][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 230.980743][ T3719] vhci_hcd vhci_hcd.0: disconnect device [ 231.007082][ T3719] vhci_hcd vhci_hcd.0: stop threads [ 231.012533][T15820] CPU: 0 UID: 0 PID: 15820 Comm: syz.3.2066 Tainted: G W syzkaller #0 PREEMPT(full) [ 231.012562][T15820] Tainted: [W]=WARN [ 231.012569][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.012582][T15820] Call Trace: [ 231.012589][T15820] [ 231.012597][T15820] __dump_stack+0x1d/0x30 [ 231.012699][T15820] dump_stack_lvl+0x95/0xd0 [ 231.012779][T15820] dump_stack+0x15/0x1b [ 231.012799][T15820] should_fail_ex+0x263/0x280 [ 231.012817][T15820] ? alloc_fs_context+0x46/0x580 [ 231.012835][T15820] should_failslab+0x8c/0xb0 [ 231.012852][T15820] __kmalloc_cache_noprof+0x5f/0x410 [ 231.012930][T15820] alloc_fs_context+0x46/0x580 [ 231.012950][T15820] fs_context_for_mount+0x22/0x30 [ 231.012967][T15820] do_new_mount+0xe7/0x8d0 [ 231.012986][T15820] ? security_capable+0x7b/0x90 [ 231.013008][T15820] path_mount+0x4d0/0xbc0 [ 231.013069][T15820] __se_sys_mount+0x28c/0x2e0 [ 231.013085][T15820] ? fput+0x8f/0xc0 [ 231.013111][T15820] __x64_sys_mount+0x67/0x80 [ 231.013133][T15820] x64_sys_call+0x2d61/0x3020 [ 231.013229][T15820] do_syscall_64+0x12c/0x370 [ 231.013274][T15820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.013309][T15820] RIP: 0033:0x7f0084d8c799 [ 231.013322][T15820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.013337][T15820] RSP: 002b:00007f00837e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 231.013355][T15820] RAX: ffffffffffffffda RBX: 00007f0085005fa0 RCX: 00007f0084d8c799 [ 231.013400][T15820] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 231.013412][T15820] RBP: 00007f00837e7090 R08: 0000200000000080 R09: 0000000000000000 [ 231.013423][T15820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.013433][T15820] R13: 00007f0085006038 R14: 00007f0085005fa0 R15: 00007ffd857b7b48 [ 231.013450][T15820] [ 231.207921][ T3719] vhci_hcd vhci_hcd.0: release socket [ 231.213372][ T3719] vhci_hcd vhci_hcd.0: disconnect device [ 231.225342][ T3719] vhci_hcd vhci_hcd.0: stop threads [ 231.230563][ T3719] vhci_hcd vhci_hcd.0: release socket [ 231.239420][ T3719] vhci_hcd vhci_hcd.0: disconnect device [ 231.303254][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 231.303269][ T28] audit: type=1400 audit(2000000081.509:1481): avc: denied { getopt } for pid=15829 comm="syz.1.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 231.324543][T15833] netlink: 'syz.3.2070': attribute type 4 has an invalid length. [ 231.367682][T15833] netlink: 'syz.3.2070': attribute type 2 has an invalid length. [ 231.405887][T15837] loop2: detected capacity change from 0 to 256 [ 231.418159][ T1058] Process accounting resumed [ 231.514075][T15842] wireguard0: entered promiscuous mode [ 231.538373][T15846] loop0: detected capacity change from 0 to 1024 [ 231.555224][T15842] wireguard0: entered allmulticast mode [ 231.563763][T15846] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.641429][T15846] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.655833][T15827] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.676526][T15846] JBD2: no valid journal superblock found [ 231.682516][T15846] EXT4-fs (loop0): Could not load journal inode [ 231.730877][T15846] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 231.742789][T15861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2080'. [ 231.781991][T15863] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2081'. [ 231.814313][ T28] audit: type=1400 audit(2000000082.029:1482): avc: denied { ioctl } for pid=15858 comm="syz.3.2079" path="socket:[27419]" dev="sockfs" ino=27419 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 232.026442][T15868] loop4: detected capacity change from 0 to 512 [ 232.044904][T15868] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.076135][T15868] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 232.090867][T15868] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2082: bg 0: block 248: padding at end of block bitmap is not set [ 232.105342][T15868] loop4: lost filesystem error report for type 5 error -117 [ 232.105602][T15868] Quota error (device loop4): write_blk: dquota write failed [ 232.120340][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 232.120363][ C1] EXT4-fs (loop4): last error at time 2000000082: ext4_validate_block_bitmap:441 [ 232.136062][T15868] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 232.145990][T15868] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2082: Failed to acquire dquot type 1 [ 232.157708][T15868] loop4: lost filesystem error report for type 5 error -117 [ 232.158200][T15868] EXT4-fs (loop4): 1 truncate cleaned up [ 232.171718][T15868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 232.248315][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 232.273693][ T28] audit: type=1400 audit(2000000082.489:1483): avc: denied { listen } for pid=15884 comm="syz.4.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.312808][T15885] IPv6: sit1: Disabled Multicast RS [ 232.353367][T15887] netlink: 'syz.1.2086': attribute type 29 has an invalid length. [ 232.363878][T15887] netlink: 'syz.1.2086': attribute type 29 has an invalid length. [ 232.514730][ T6127] kernel read not supported for file /vcs (pid: 6127 comm: kworker/0:12) [ 232.643528][T15898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2091'. [ 232.859716][T15903] xt_TPROXY: Can be used only with -p tcp or -p udp [ 232.893367][ T1058] Process accounting resumed [ 232.913686][T15909] loop2: detected capacity change from 0 to 1024 [ 232.925626][T15909] EXT4-fs: inline encryption not supported [ 232.941000][T15909] EXT4-fs: Ignoring removed bh option [ 232.967332][T15909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.103001][T15909] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 233.131213][T15917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2097'. [ 233.166800][T15909] EXT4-fs (loop2): Remounting filesystem read-only [ 233.250568][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.452202][ T28] audit: type=1326 audit(2000000083.659:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 233.606655][T15940] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2105'. [ 233.685563][ T28] audit: type=1326 audit(2000000083.659:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 233.780219][T15950] loop4: detected capacity change from 0 to 128 [ 233.886599][ T6133] Process accounting resumed [ 234.078719][T15953] netlink: 'syz.4.2107': attribute type 3 has an invalid length. [ 234.097637][ T28] audit: type=1326 audit(2000000083.669:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 234.305856][ T28] audit: type=1326 audit(2000000083.669:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 234.344649][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2108'. [ 234.392693][ T28] audit: type=1326 audit(2000000083.669:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 234.480764][T15944] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.954406][T15967] netlink: 'syz.2.2110': attribute type 29 has an invalid length. [ 234.963148][T15967] netlink: 'syz.2.2110': attribute type 29 has an invalid length. [ 235.084888][T15969] ip6t_srh: unknown srh invflags 4000 [ 235.251811][T15971] loop0: detected capacity change from 0 to 1024 [ 235.307448][T15971] EXT4-fs: inline encryption not supported [ 235.354822][T15971] EXT4-fs: Ignoring removed bh option [ 235.360919][T15973] bond0: (slave macvlan2): Opening slave failed [ 235.377299][T15971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.409159][T15971] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 235.424144][T15971] EXT4-fs (loop0): Remounting filesystem read-only [ 235.446191][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.455168][ T3373] usb 2-1: device descriptor read/8, error -110 [ 235.477154][ T3738] kworker/u8:18: attempt to access beyond end of device [ 235.477154][ T3738] loop4: rw=1, sector=137, nr_sectors = 8 limit=128 [ 235.480499][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 235.506033][ T3738] kworker/u8:18: attempt to access beyond end of device [ 235.506033][ T3738] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 235.519784][ T3738] kworker/u8:18: attempt to access beyond end of device [ 235.519784][ T3738] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 235.533907][ T3738] kworker/u8:18: attempt to access beyond end of device [ 235.533907][ T3738] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 235.556057][ T3738] kworker/u8:18: attempt to access beyond end of device [ 235.556057][ T3738] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 235.569487][ T3373] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 235.575450][ T3738] kworker/u8:18: attempt to access beyond end of device [ 235.575450][ T3738] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 235.595383][ T3373] usb 2-1: enqueue for inactive port 0 [ 235.603284][ T3373] usb 2-1: enqueue for inactive port 0 [ 235.608082][ T3738] kworker/u8:18: attempt to access beyond end of device [ 235.608082][ T3738] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 235.622289][ T3373] usb 2-1: enqueue for inactive port 0 [ 235.622410][ T3738] kworker/u8:18: attempt to access beyond end of device [ 235.622410][ T3738] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 235.648119][ T3738] kworker/u8:18: attempt to access beyond end of device [ 235.648119][ T3738] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 235.662042][ T3738] kworker/u8:18: attempt to access beyond end of device [ 235.662042][ T3738] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 235.905831][T16009] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 235.912472][T16009] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.920232][T16009] vhci_hcd vhci_hcd.0: Device attached [ 235.941040][T16009] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 235.945647][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 235.947649][T16009] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 235.988790][T16009] vhci_hcd vhci_hcd.0: Device attached [ 236.008535][T16018] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(19) [ 236.015239][T16018] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.068798][T16018] vhci_hcd vhci_hcd.0: Device attached [ 236.084108][T16009] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 236.090725][T16009] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.125228][T16009] vhci_hcd vhci_hcd.0: Device attached [ 236.136942][T16030] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(21) [ 236.143556][T16030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.175196][ T6127] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 236.184298][T16009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.201330][T16030] vhci_hcd vhci_hcd.0: Device attached [ 236.225473][T16009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.250439][T16009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.348721][T16011] vhci_hcd: connection reset by peer [ 236.354082][T16013] vhci_hcd: connection closed [ 236.354529][T16031] vhci_hcd: connection closed [ 236.359378][T16019] vhci_hcd: connection closed [ 236.364094][ T61] vhci_hcd vhci_hcd.4: stop threads [ 236.364272][T16025] vhci_hcd: connection closed [ 236.368953][ T61] vhci_hcd vhci_hcd.4: release socket [ 236.386420][ T61] vhci_hcd vhci_hcd.4: disconnect device [ 236.401289][ T61] vhci_hcd vhci_hcd.4: stop threads [ 236.415818][ T61] vhci_hcd vhci_hcd.4: release socket [ 236.435236][ T61] vhci_hcd vhci_hcd.4: disconnect device [ 236.441050][ T28] kauditd_printk_skb: 148 callbacks suppressed [ 236.441062][ T28] audit: type=1326 audit(2000000086.659:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 236.480713][ T61] vhci_hcd vhci_hcd.4: stop threads [ 236.494130][ T61] vhci_hcd vhci_hcd.4: release socket [ 236.507741][ T61] vhci_hcd vhci_hcd.4: disconnect device [ 236.534225][ T61] vhci_hcd vhci_hcd.4: stop threads [ 236.542684][ T28] audit: type=1326 audit(2000000086.659:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 236.545257][ T61] vhci_hcd vhci_hcd.4: release socket [ 236.607341][ T61] vhci_hcd vhci_hcd.4: disconnect device [ 236.612223][ T28] audit: type=1326 audit(2000000086.659:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 236.625106][ T61] vhci_hcd vhci_hcd.4: stop threads [ 236.650740][T16044] loop3: detected capacity change from 0 to 2048 [ 236.655243][ T61] vhci_hcd vhci_hcd.4: release socket [ 236.662613][ T61] vhci_hcd vhci_hcd.4: disconnect device [ 236.686626][ T28] audit: type=1326 audit(2000000086.659:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 236.710489][ T3373] usb usb2-port1: attempt power cycle [ 236.725506][ T3302] loop3: p1 < > p3 < > p4 < > [ 236.730279][ T3302] loop3: partition table partially beyond EOD, truncated [ 236.745214][ T3302] loop3: p1 start 3405774849 is beyond EOD, truncated [ 236.755271][ T28] audit: type=1326 audit(2000000086.659:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 236.755393][ T3302] loop3: p3 start 2304 is beyond EOD, truncated [ 236.828440][ T28] audit: type=1326 audit(2000000086.659:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 236.866583][T16044] loop3: p1 < > p3 < > p4 < > [ 236.871455][T16044] loop3: partition table partially beyond EOD, truncated [ 236.878558][ T28] audit: type=1326 audit(2000000086.659:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 236.885333][T16044] loop3: p1 start 3405774849 is beyond EOD, [ 236.902652][ T28] audit: type=1326 audit(2000000086.659:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 236.942197][T16044] truncated [ 236.946539][ T28] audit: type=1326 audit(2000000086.659:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 236.955834][T16044] loop3: p3 start 2304 is beyond EOD, [ 236.970625][ T28] audit: type=1326 audit(2000000086.659:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 237.002185][T16044] truncated [ 237.194397][T16053] loop2: detected capacity change from 0 to 512 [ 237.330398][T16057] loop0: detected capacity change from 0 to 512 [ 237.357676][T16057] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 237.459411][T16057] EXT4-fs (loop0): 1 truncate cleaned up [ 237.500494][T16057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.709541][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.798141][T16070] netlink: 'syz.1.2139': attribute type 13 has an invalid length. [ 237.850339][T16070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.927723][T16070] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.945938][T16070] net_ratelimit: 128 callbacks suppressed [ 237.946179][T16070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.137758][T16080] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 238.144383][T16080] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.229330][T16080] vhci_hcd vhci_hcd.0: Device attached [ 238.250990][T16090] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17) [ 238.257624][T16090] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 238.354039][T16096] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 238.360660][T16096] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.406705][T16080] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(22) [ 238.413353][T16080] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.447573][T16104] netlink: 'syz.1.2145': attribute type 1 has an invalid length. [ 238.459114][T16090] vhci_hcd vhci_hcd.0: Device attached [ 238.472866][T16106] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(25) [ 238.479642][T16106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.498094][T16096] vhci_hcd vhci_hcd.0: Device attached [ 238.530117][T16090] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 238.538333][T16080] vhci_hcd vhci_hcd.0: Device attached [ 238.544197][T16090] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 238.552858][T16106] vhci_hcd vhci_hcd.0: Device attached [ 238.559166][T16080] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 238.714843][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 238.730334][T16120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2148'. [ 238.746202][T16123] loop3: detected capacity change from 0 to 512 [ 238.779475][T16123] ------------[ cut here ]------------ [ 238.785000][T16123] EA inode 11 i_nlink=2 [ 238.785041][T16123] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.2146/16123 [ 238.800150][T16123] Modules linked in: [ 238.804085][T16123] CPU: 1 UID: 0 PID: 16123 Comm: syz.3.2146 Tainted: G W syzkaller #0 PREEMPT(full) [ 238.815114][T16123] Tainted: [W]=WARN [ 238.818930][T16123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.829038][T16123] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 238.835762][T16123] Code: b4 5f 99 ff 4c 8d 2d ad ee 5d 05 49 8d 7e 40 e8 34 f1 b5 ff 49 8b 6e 40 4c 89 e7 e8 68 ec b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 49 dd 03 66 66 66 66 66 66 2e [ 238.844313][ T6137] lo speed is unknown, defaulting to 1000 [ 238.855420][T16123] RSP: 0018:ffffc9000fd63778 EFLAGS: 00010246 [ 238.866289][ T6131] lo speed is unknown, defaulting to 1000 [ 238.867274][T16123] RAX: ffff88813dcddcf8 RBX: ffff888119d041a8 RCX: ffffffff81bff598 [ 238.881006][T16123] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de430 [ 238.889025][T16123] RBP: 000000000000000b R08: 0001888119d0415b R09: 0000000000000000 [ 238.897391][T16123] R10: ffffc9000fd636a8 R11: 0001c9000fd636a8 R12: ffff888119d04158 [ 238.905453][T16123] R13: ffffffff871de430 R14: ffff888119d04110 R15: 0000000000000001 [ 238.913465][T16123] FS: 00007f00837a56c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 238.922527][T16123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.929178][T16123] CR2: 00007ff25ed56000 CR3: 0000000134c8c000 CR4: 00000000003506f0 [ 238.937224][T16123] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 238.945231][T16123] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 238.953256][T16123] Call Trace: [ 238.956577][T16123] [ 238.959529][T16123] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 238.965571][T16123] ? errseq_check+0x2c/0x50 [ 238.970150][T16123] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 238.975677][T16123] ? ext4_truncate+0x92b/0xb00 [ 238.980493][T16123] ext4_evict_inode+0xa1f/0xd60 [ 238.985425][T16123] ? __pfx_ext4_evict_inode+0x10/0x10 [ 238.990933][T16123] evict+0x2af/0x510 [ 238.994925][T16123] ? __dquot_initialize+0x146/0x7c0 [ 239.000233][T16123] iput+0x41a/0x580 [ 239.004203][T16123] ext4_process_orphan+0x1a9/0x1c0 [ 239.009368][T16123] ext4_orphan_cleanup+0x6a8/0xa00 [ 239.014547][T16123] ext4_fill_super+0x3408/0x37c0 [ 239.019573][T16123] ? set_blocksize+0x14c/0x270 [ 239.024384][T16123] ? setup_bdev_super+0x30e/0x370 [ 239.029737][T16123] ? __pfx_ext4_fill_super+0x10/0x10 [ 239.035117][T16123] get_tree_bdev_flags+0x291/0x300 [ 239.040287][T16123] ? __pfx_ext4_fill_super+0x10/0x10 [ 239.045672][T16123] get_tree_bdev+0x1f/0x30 [ 239.050181][T16123] ext4_get_tree+0x1c/0x30 [ 239.054658][T16123] vfs_get_tree+0x57/0x1d0 [ 239.059190][T16123] do_new_mount+0x288/0x8d0 [ 239.063723][T16123] path_mount+0x4d0/0xbc0 [ 239.068116][T16123] __se_sys_mount+0x28c/0x2e0 [ 239.072836][T16123] __x64_sys_mount+0x67/0x80 [ 239.077465][T16123] x64_sys_call+0x2d61/0x3020 [ 239.082231][T16123] do_syscall_64+0x12c/0x370 [ 239.086879][T16123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.092797][T16123] RIP: 0033:0x7f0084d8da0a [ 239.097244][T16123] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.116926][T16123] RSP: 002b:00007f00837a4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.125564][T16123] RAX: ffffffffffffffda RBX: 00007f00837a4ee0 RCX: 00007f0084d8da0a [ 239.133582][T16123] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f00837a4ea0 [ 239.141679][T16123] RBP: 00002000000009c0 R08: 00007f00837a4ee0 R09: 0000000000800718 [ 239.149678][T16123] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 239.157777][T16123] R13: 00007f00837a4ea0 R14: 000000000000048d R15: 0000200000000200 [ 239.165961][T16123] [ 239.169026][T16123] ---[ end trace 0000000000000000 ]--- [ 239.195116][ T6133] lo speed is unknown, defaulting to 1000 [ 239.230141][T16091] vhci_hcd: connection closed [ 239.230258][T16081] vhci_hcd: connection closed [ 239.235129][T16097] vhci_hcd: connection closed [ 239.239819][T16101] vhci_hcd: connection closed [ 239.244643][T16107] vhci_hcd: connection closed [ 239.259790][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2146'. [ 239.272990][ T3733] vhci_hcd vhci_hcd.4: stop threads [ 239.278990][ T3733] vhci_hcd vhci_hcd.4: release socket [ 239.284629][ T3733] vhci_hcd vhci_hcd.4: disconnect device [ 239.295604][ T3733] vhci_hcd vhci_hcd.4: stop threads [ 239.300937][ T3733] vhci_hcd vhci_hcd.4: release socket [ 239.306404][ T3733] vhci_hcd vhci_hcd.4: disconnect device [ 239.312265][ T3733] vhci_hcd vhci_hcd.4: stop threads [ 239.317604][ T3733] vhci_hcd vhci_hcd.4: release socket [ 239.323036][ T3733] vhci_hcd vhci_hcd.4: disconnect device [ 239.338864][T16128] loop0: detected capacity change from 0 to 512 [ 239.345540][ T3733] vhci_hcd vhci_hcd.4: stop threads [ 239.355068][T16128] EXT4-fs: Ignoring removed nobh option [ 239.372002][ T3733] vhci_hcd vhci_hcd.4: release socket [ 239.385757][ T3733] vhci_hcd vhci_hcd.4: disconnect device [ 239.392393][T16123] EXT4-fs (loop3): 1 orphan inode deleted [ 239.399932][T16128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.412988][ T3733] vhci_hcd vhci_hcd.4: stop threads [ 239.424414][T16123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.434687][T16128] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.436596][ T3733] vhci_hcd vhci_hcd.4: release socket [ 239.452704][ T3733] vhci_hcd vhci_hcd.4: disconnect device [ 239.472526][T16135] loop2: detected capacity change from 0 to 1024 [ 239.492072][T16135] EXT4-fs: inline encryption not supported [ 239.498037][T16135] EXT4-fs: Ignoring removed nobh option [ 239.514212][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.525699][T16135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 239.534482][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.543763][T16135] System zones: 0-1, 3-12 [ 239.549459][T16135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.566611][T16135] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 239.577871][T16142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2155'. [ 239.594589][T16145] loop0: detected capacity change from 0 to 1024 [ 239.676337][T16148] 8021q: VLANs not supported on caif0 [ 239.691990][ T3373] usb usb2-port1: unable to enumerate USB device [ 239.722283][T16145] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 239.735243][T16145] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 239.744928][T16145] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 239.755892][T16145] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: inode #32: comm syz.0.2154: iget: special inode unallocated [ 239.768582][T16145] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 239.768719][T16145] EXT4-fs (loop0): no journal found [ 239.777932][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 239.777947][ C0] EXT4-fs (loop0): initial error at time 2000000089: ext4_get_journal_inode:5863: inode 32 [ 239.777981][ C0] EXT4-fs (loop0): last error at time 2000000089: ext4_get_journal_inode:5863: inode 32 [ 239.809745][T16145] EXT4-fs (loop0): can't get journal size [ 239.820859][T16145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.896390][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.917863][T16135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.929566][T16135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.112602][T16157] tipc: Enabled bearer , priority 0 [ 240.179714][T16159] loop4: detected capacity change from 0 to 512 [ 240.207720][T16159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 240.233135][T16159] System zones: 1-20 [ 240.249994][T16159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.300093][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.586487][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.867915][T16168] sctp: [Deprecated]: syz.0.2163 (pid 16168) Use of int in maxseg socket option. [ 240.867915][T16168] Use struct sctp_assoc_value instead [ 241.017196][T16173] loop2: detected capacity change from 0 to 2048 [ 241.040858][T16168] loop0: detected capacity change from 0 to 512 [ 241.079047][T16168] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 241.107885][T16165] loop4: detected capacity change from 0 to 1764 [ 241.122557][T16168] EXT4-fs (loop0): 1 truncate cleaned up [ 241.137060][T16165] iso9660: Unknown parameter 'ÿ01777777777777777777777' [ 241.152139][T16168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.216551][ T6127] usb 9-1: enqueue for inactive port 0 [ 241.230065][ T6127] usb 9-1: enqueue for inactive port 0 [ 241.235733][ T3373] tipc: Node number set to 787389789 [ 241.325145][ T6127] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 241.365433][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 241.386234][T16183] loop3: detected capacity change from 0 to 1024 [ 241.401330][T16183] EXT4-fs: inline encryption not supported [ 241.426397][T16183] EXT4-fs: Ignoring removed bh option [ 241.465489][T16187] loop2: detected capacity change from 0 to 256 [ 241.478643][T16183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.491555][T16187] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.553486][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.566132][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.630502][T16197] netlink: 'syz.2.2170': attribute type 10 has an invalid length. [ 242.632854][T16197] team0: Device vxcan1 is of different type [ 242.683486][T16206] loop3: detected capacity change from 0 to 128 [ 242.704680][T16208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=16208 comm=syz.4.2176 [ 242.732577][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 242.732592][ T28] audit: type=1400 audit(2000000092.949:1659): avc: denied { accept } for pid=16195 comm="syz.3.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.936950][T16233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.951215][ T28] audit: type=1400 audit(2000000094.179:1660): avc: denied { watch watch_reads } for pid=16229 comm="syz.4.2183" path="/489/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.751957][ T28] audit: type=1400 audit(2000000094.959:1661): avc: denied { rmdir } for pid=16229 comm="syz.4.2183" name="file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.788989][T16238] set_capacity_and_notify: 1 callbacks suppressed [ 244.789007][T16238] loop0: detected capacity change from 0 to 1764 [ 244.801106][ T28] audit: type=1400 audit(2000000094.959:1662): avc: denied { rename } for pid=16229 comm="syz.4.2183" name="file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.831602][T16238] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 244.847438][ T28] audit: type=1400 audit(2000000094.959:1663): avc: denied { reparent } for pid=16229 comm="syz.4.2183" name="file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.883868][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.908020][ T28] audit: type=1400 audit(2000000095.129:1664): avc: denied { setopt } for pid=16237 comm="syz.0.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.937408][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2188'. [ 244.946823][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2188'. [ 244.955833][T16243] netlink: 'syz.3.2188': attribute type 15 has an invalid length. [ 244.971634][T16243] loop3: detected capacity change from 0 to 1024 [ 244.993737][T16243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.047843][T16251] loop4: detected capacity change from 0 to 1024 [ 245.108740][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.133800][T16251] EXT4-fs: inline encryption not supported [ 245.150139][T16251] EXT4-fs: Ignoring removed bh option [ 245.181836][T16251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.250653][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.452058][T16257] netlink: 'syz.4.2191': attribute type 5 has an invalid length. [ 245.461002][T16258] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2190'. [ 245.470042][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2191'. [ 245.470176][T16258] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2190'. [ 245.488110][T16258] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2190'. [ 245.565868][ T28] audit: type=1400 audit(2000000095.789:1665): avc: denied { getattr } for pid=16259 comm="syz.4.2192" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 245.626763][T16266] loop2: detected capacity change from 0 to 2048 [ 245.675496][ T3303] loop2: p3 < > p4 < > [ 245.680690][ T3303] loop2: partition table partially beyond EOD, truncated [ 245.688087][ T3303] loop2: p3 start 4284289 is beyond EOD, truncated [ 245.698690][T16266] loop2: p3 < > p4 < > [ 245.703770][T16266] loop2: partition table partially beyond EOD, truncated [ 245.711216][T16266] loop2: p3 start 4284289 is beyond EOD, truncated [ 245.854359][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2198'. [ 245.885890][T16290] netlink: 'syz.1.2198': attribute type 21 has an invalid length. [ 245.918164][T16290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2198'. [ 246.080656][T16290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2198'. [ 246.095406][ T1058] usb usb10-port1: attempt power cycle [ 246.223535][T16322] netlink: 'syz.1.2208': attribute type 3 has an invalid length. [ 247.430154][T16340] loop0: detected capacity change from 0 to 2048 [ 247.458126][T16340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.471961][T16343] SET target dimension over the limit! [ 247.522411][T16340] lo speed is unknown, defaulting to 1000 [ 247.555563][T16348] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2216'. [ 247.717294][T16352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2217'. [ 247.734991][T16340] lo speed is unknown, defaulting to 1000 [ 247.746783][T16354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16354 comm=syz.3.2218 [ 248.033430][T16356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55552 sclass=netlink_route_socket pid=16356 comm=syz.3.2219 [ 248.269696][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.355327][ T1058] usb usb10-port1: unable to enumerate USB device [ 248.435660][ T28] audit: type=1400 audit(2000000098.659:1666): avc: denied { bind } for pid=16366 comm="syz.4.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.459866][T16368] loop4: detected capacity change from 0 to 512 [ 248.518517][ T28] audit: type=1400 audit(2000000098.659:1667): avc: denied { name_bind } for pid=16366 comm="syz.4.2225" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 248.670306][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 248.685544][T16381] loop2: detected capacity change from 0 to 164 [ 248.754272][T16381] ISOFS: unable to read i-node block [ 248.779563][T16381] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 248.803076][ T28] audit: type=1400 audit(2000000098.679:1668): avc: denied { node_bind } for pid=16366 comm="syz.4.2225" saddr=2901::400:0:0:0 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 248.858198][T16381] ISOFS: unable to read i-node block [ 248.908443][T16380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.475504][ T28] audit: type=1400 audit(2000000099.689:1669): avc: denied { create } for pid=16385 comm="syz.2.2230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 249.526062][T16391] lo speed is unknown, defaulting to 1000 [ 249.532987][T16390] loop0: detected capacity change from 0 to 128 [ 249.544955][T16391] lo speed is unknown, defaulting to 1000 [ 249.562994][T16391] lo speed is unknown, defaulting to 1000 [ 249.575468][T16390] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.602074][T16391] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 249.625391][T16390] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.803802][T16391] lo speed is unknown, defaulting to 1000 [ 249.819390][T16391] lo speed is unknown, defaulting to 1000 [ 249.834080][T16391] lo speed is unknown, defaulting to 1000 [ 249.848861][T16391] lo speed is unknown, defaulting to 1000 [ 249.866389][T16391] lo speed is unknown, defaulting to 1000 [ 251.339801][T16420] syzkaller0: entered promiscuous mode [ 251.361218][T16420] syzkaller0: entered allmulticast mode [ 253.049199][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.290089][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 253.319208][T16451] loop2: detected capacity change from 0 to 2048 [ 253.329305][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 253.338401][T16459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2251'. [ 253.348051][T16451] loop2: p1 < > p4 [ 253.353725][T16451] loop2: p4 size 8388608 extends beyond EOD, truncated [ 253.367018][ T28] audit: type=1400 audit(2000000103.589:1670): avc: denied { accept } for pid=16462 comm="syz.1.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.368587][T16451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=16451 comm=syz.2.2248 [ 253.419621][T16466] syzkaller0: entered promiscuous mode [ 253.426367][T16451] isofs_fill_super: bread failed, dev=loop2p1, iso_blknum=16, block=32 [ 253.426851][T16466] syzkaller0: entered allmulticast mode [ 253.507958][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 253.524941][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 253.536772][T16470] loop3: detected capacity change from 0 to 8192 [ 253.543847][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 253.553084][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 253.576139][T16474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2258'. [ 253.587510][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 253.625221][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 253.682648][T16482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.714648][T16487] netlink: 'syz.3.2261': attribute type 10 has an invalid length. [ 253.767692][ T28] audit: type=1400 audit(2000000103.979:1671): avc: denied { create } for pid=16493 comm="syz.0.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 253.822448][ T28] audit: type=1400 audit(2000000103.979:1672): avc: denied { write } for pid=16493 comm="syz.0.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 253.882053][T16502] loop3: detected capacity change from 0 to 8192 [ 253.898181][ T28] audit: type=1400 audit(2000000104.119:1673): avc: denied { mounton } for pid=16501 comm="syz.3.2265" path="/391/file2/bus" dev="loop3" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 253.922573][T16503] loop0: detected capacity change from 0 to 136 [ 253.934099][T16503] iso9660: Bad value for 'block' [ 253.950927][ T3321] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 253.960768][ T3321] FAT-fs (loop3): Filesystem has been set read-only [ 253.974634][ T28] audit: type=1400 audit(2000000104.199:1674): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 254.035056][T16505] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 254.045604][T16505] netlink: 'syz.3.2266': attribute type 3 has an invalid length. [ 254.093838][T16515] loop4: detected capacity change from 0 to 512 [ 254.113570][T16515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.139594][T16515] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.342921][T16520] bond3: option mode: unable to set because the bond device has slaves [ 254.490496][T16522] syzkaller1: entered promiscuous mode [ 254.496098][T16522] syzkaller1: entered allmulticast mode [ 254.688026][T16533] loop0: detected capacity change from 0 to 256 [ 254.810155][T16541] loop0: detected capacity change from 0 to 512 [ 254.996398][T16541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.055063][T16541] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.290112][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.358072][T16553] loop4: detected capacity change from 0 to 512 [ 255.405359][T16553] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 255.534742][T16561] loop3: detected capacity change from 0 to 1024 [ 255.553316][T16561] EXT4-fs: inline encryption not supported [ 255.571808][T16561] EXT4-fs: Ignoring removed bh option [ 255.586654][T16561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.608636][T16561] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 255.623622][T16561] EXT4-fs (loop3): Remounting filesystem read-only [ 255.967114][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.031496][T16573] vlan2: entered allmulticast mode [ 256.036685][T16573] bond3: entered allmulticast mode [ 256.041788][T16573] ip6gretap1: entered allmulticast mode [ 256.062211][T16573] bond3: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 256.119524][T16583] loop0: detected capacity change from 0 to 1024 [ 256.167284][T16583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.511043][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.743607][T16607] lo speed is unknown, defaulting to 1000 [ 256.923798][T16607] lo speed is unknown, defaulting to 1000 [ 256.962268][T16607] lo speed is unknown, defaulting to 1000 [ 257.008940][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.100828][T16620] EXT4-fs: inline encryption not supported [ 257.107907][T16620] EXT4-fs: Ignoring removed nobh option [ 257.139402][T16620] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 257.155198][T16620] System zones: 0-1, 3-12 [ 257.160215][T16620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.187992][T16620] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 257.215663][ T3302] loop3: p3 < > p4 < > [ 257.219887][ T3302] loop3: partition table partially beyond EOD, truncated [ 257.236985][ T3302] loop3: p3 start 4284289 is beyond EOD, truncated [ 257.261443][T16625] EXT4-fs: inline encryption not supported [ 257.267581][T16625] EXT4-fs: Ignoring removed bh option [ 257.287323][T16618] loop3: p3 < > p4 < > [ 257.291482][T16618] loop3: partition table partially beyond EOD, truncated [ 257.303152][T16625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.354508][T16618] loop3: p3 start 4284289 is beyond EOD, truncated [ 257.378515][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.457638][T16635] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 257.464261][T16635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.475733][T16632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.489029][T16635] vhci_hcd vhci_hcd.0: Device attached [ 257.496957][T16635] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 257.503553][T16635] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 257.511645][T16635] vhci_hcd vhci_hcd.0: Device attached [ 257.518638][T16635] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(18) [ 257.525245][T16635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.533367][T16635] vhci_hcd vhci_hcd.0: Device attached [ 257.538975][T16632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 257.548105][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.557296][T16635] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(20) [ 257.563890][T16635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.571778][T16635] vhci_hcd vhci_hcd.0: Device attached [ 257.575992][T16632] System zones: 1-2, 4-12, 8-8 [ 257.592891][T16635] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(22) [ 257.599511][T16635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.607223][T16632] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2304: iget: bad i_size value: 38620345925642 [ 257.617757][T16635] vhci_hcd vhci_hcd.0: Device attached [ 257.626414][T16635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 257.635884][T16635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 257.646151][T16635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 257.657314][T16632] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.662172][T16632] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2304: couldn't read orphan inode 15 (err -117) [ 257.665101][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 257.689559][ C0] EXT4-fs (loop2): initial error at time 2000000107: ext4_orphan_get:1391: inode 15 [ 257.699053][ C0] EXT4-fs (loop2): last error at time 2000000107: ext4_orphan_get:1391: inode 15 [ 257.705226][T16650] EXT4-fs: inline encryption not supported [ 257.711445][T16632] loop2: lost filesystem error report for type 5 error -117 [ 257.716366][T16632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.735232][T16650] EXT4-fs: Ignoring removed bh option [ 257.741567][T16636] vhci_hcd: connection closed [ 257.741653][T16645] vhci_hcd: connection closed [ 257.741798][T16641] vhci_hcd: connection closed [ 257.746798][T16638] vhci_hcd: connection closed [ 257.751848][T16643] vhci_hcd: connection closed [ 257.755818][ T6135] usb 9-1: new low-speed USB device number 3 using vhci_hcd [ 257.777971][ T978] vhci_hcd vhci_hcd.4: stop threads [ 257.791753][T16650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.795266][ T978] vhci_hcd vhci_hcd.4: release socket [ 257.824287][T16650] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 257.855374][ T978] vhci_hcd vhci_hcd.4: disconnect device [ 257.861842][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.872782][ T978] vhci_hcd vhci_hcd.4: stop threads [ 257.878147][T16650] EXT4-fs (loop0): Remounting filesystem read-only [ 257.884825][ T978] vhci_hcd vhci_hcd.4: release socket [ 257.906081][ T978] vhci_hcd vhci_hcd.4: disconnect device [ 258.115285][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.134590][ T978] vhci_hcd vhci_hcd.4: stop threads [ 258.139843][ T978] vhci_hcd vhci_hcd.4: release socket [ 258.145640][ T978] vhci_hcd vhci_hcd.4: disconnect device [ 258.164707][ T978] vhci_hcd vhci_hcd.4: stop threads [ 258.181730][ T978] vhci_hcd vhci_hcd.4: release socket [ 258.195323][ T978] vhci_hcd vhci_hcd.4: disconnect device [ 258.201434][ T978] vhci_hcd vhci_hcd.4: stop threads [ 258.211386][ T978] vhci_hcd vhci_hcd.4: release socket [ 258.226690][ T978] vhci_hcd vhci_hcd.4: disconnect device [ 258.468074][T16671] set_capacity_and_notify: 6 callbacks suppressed [ 258.468128][T16671] loop0: detected capacity change from 0 to 1024 [ 258.514894][T16671] EXT4-fs (loop0): bad geometry: block count 590336 exceeds size of device (512 blocks) [ 258.568202][T16671] __nla_validate_parse: 14 callbacks suppressed [ 258.568323][T16671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2311'. [ 258.617228][T16677] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 258.628575][T16677] loop4: detected capacity change from 0 to 512 [ 258.665749][T16677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 258.698882][T16677] EXT4-fs (loop4): 1 truncate cleaned up [ 258.711765][T16677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.342985][T16704] loop2: detected capacity change from 0 to 1024 [ 259.370203][T16704] EXT4-fs: inline encryption not supported [ 259.403090][T16705] loop0: detected capacity change from 0 to 1024 [ 259.405504][T16704] EXT4-fs: Ignoring removed bh option [ 259.426829][T16705] EXT4-fs: Ignoring removed orlov option [ 259.430315][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.451149][T16704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.464987][T16705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.516628][T16704] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 259.555017][T16703] netlink: 'syz.0.2321': attribute type 4 has an invalid length. [ 259.563541][ T28] audit: type=1400 audit(2000000109.769:1675): avc: denied { map } for pid=16701 comm="syz.0.2321" path="socket:[29912]" dev="sockfs" ino=29912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 259.601413][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.615033][T16704] EXT4-fs (loop2): Remounting filesystem read-only [ 259.624102][T16713] loop4: detected capacity change from 0 to 4096 [ 259.715922][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.726088][T16713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.838214][T16725] loop2: detected capacity change from 0 to 764 [ 259.954556][T16725] Symlink component flag not implemented [ 259.969206][T16725] Symlink component flag not implemented (116) [ 259.985971][T16725] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2328'. [ 260.007322][T16731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2330'. [ 260.012465][ T28] audit: type=1400 audit(2000000110.229:1676): avc: denied { accept } for pid=16724 comm="syz.2.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.125668][T16740] program syz.2.2334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.155752][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.261959][T16750] loop2: detected capacity change from 0 to 128 [ 260.408614][T16751] team0: Port device dummy0 removed [ 260.430672][T16751] bond0: (slave bond_slave_0): Releasing backup interface [ 260.447058][T16751] bond0: (slave bond_slave_1): Releasing backup interface [ 260.468653][T16751] team0: Port device team_slave_0 removed [ 260.486028][T16751] team0: Port device team_slave_1 removed [ 260.500432][T16751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.525566][T16751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.570404][T16751] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.660418][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2346'. [ 260.759794][T16767] loop2: detected capacity change from 0 to 8192 [ 260.768860][T16781] loop0: detected capacity change from 0 to 128 [ 260.816032][ T3302] loop2: p1 < > p2 p4 < p5 > [ 260.821030][ T3302] loop2: partition table partially beyond EOD, truncated [ 260.829896][ T3302] loop2: p1 start 134217728 is beyond EOD, truncated [ 260.847101][ T3302] loop2: p2 size 591360 extends beyond EOD, truncated [ 260.878212][ T3302] loop2: p5 size 591360 extends beyond EOD, truncated [ 260.903916][T16767] loop2: p1 < > p2 p4 < p5 > [ 260.915001][T16797] can: request_module (can-proto-0) failed. [ 260.918625][T16767] loop2: partition table partially beyond EOD, truncated [ 260.941785][T16767] loop2: p1 start 134217728 is beyond EOD, truncated [ 260.967255][T16767] loop2: p2 size 591360 extends beyond EOD, truncated [ 260.976112][T16797] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2355'. [ 260.982511][T16767] loop2: p5 size 591360 extends beyond EOD, truncated [ 261.040947][T16801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.114379][T16801] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.172332][T16801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.263335][ T6133] lo speed is unknown, defaulting to 1000 [ 261.271004][ T6133] syz2: Port: 1 Link ACTIVE [ 261.275034][T16813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2361'. [ 261.317885][T16813] netlink: 'syz.3.2361': attribute type 4 has an invalid length. [ 261.479748][T16824] lo speed is unknown, defaulting to 1000 [ 261.576209][T16824] lo speed is unknown, defaulting to 1000 [ 261.590562][T16824] lo speed is unknown, defaulting to 1000 [ 261.605686][T16836] loop3: detected capacity change from 0 to 256 [ 261.707563][T16841] lo speed is unknown, defaulting to 1000 [ 261.745434][T16841] lo speed is unknown, defaulting to 1000 [ 261.757004][T16841] lo speed is unknown, defaulting to 1000 [ 261.968230][T16841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.021076][T16841] program syz.3.2371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.066671][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 262.078445][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 262.144353][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.222167][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2376'. [ 262.257070][T16867] EXT4-fs: inline encryption not supported [ 262.271956][T16867] EXT4-fs: Ignoring removed nobh option [ 262.278016][T16871] EXT4-fs: inline encryption not supported [ 262.290281][T16869] lo speed is unknown, defaulting to 1000 [ 262.314661][T16871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.332056][T16867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 262.340446][T16871] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.351282][T16867] System zones: 0-1, 3-12 [ 262.356601][T16867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.358677][T16869] lo speed is unknown, defaulting to 1000 [ 262.386366][T16867] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 262.386419][T16869] lo speed is unknown, defaulting to 1000 [ 262.444583][T16883] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 262.499576][T16872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.517466][T16883] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2382: bg 0: block 393: padding at end of block bitmap is not set [ 262.531840][T16883] loop4: lost filesystem error report for type 5 error -117 [ 262.534217][ T28] audit: type=1326 audit(2000000112.759:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.1.2385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f462746c799 code=0x0 [ 262.535599][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.541610][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 262.579858][ C0] EXT4-fs (loop4): initial error at time 2000000112: ext4_validate_block_bitmap:441 [ 262.589257][ C0] EXT4-fs (loop4): last error at time 2000000112: ext4_validate_block_bitmap:441 [ 262.600560][T16883] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 262.615939][T16883] loop4: lost filesystem error report for type 5 error -117 [ 262.616126][T16883] EXT4-fs (loop4): 2 truncates cleaned up [ 262.629664][T16883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.649120][T16883] sctp: [Deprecated]: syz.4.2382 (pid 16883) Use of int in max_burst socket option deprecated. [ 262.649120][T16883] Use struct sctp_assoc_value instead [ 262.664765][ T28] audit: type=1400 audit(2000000112.869:1678): avc: denied { link } for pid=16882 comm="syz.4.2382" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 262.711582][T16883] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2382'. [ 262.741112][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.757474][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.772195][T16867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.782082][T16867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.795145][T16903] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2388'. [ 262.815428][ T6135] usb 9-1: enqueue for inactive port 0 [ 262.826641][ T6135] usb 9-1: enqueue for inactive port 0 [ 262.879416][T16912] netlink: 'syz.4.2392': attribute type 29 has an invalid length. [ 262.890270][T16910] EXT4-fs: inline encryption not supported [ 262.898052][T16912] netlink: 'syz.4.2392': attribute type 29 has an invalid length. [ 262.906050][T16910] EXT4-fs: Ignoring removed bh option [ 262.914365][T16912] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2392'. [ 262.924086][ T6135] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 262.941245][T16910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.953847][T16912] unsupported nla_type 58 [ 262.986028][T16910] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 263.001028][T16910] EXT4-fs (loop0): Remounting filesystem read-only [ 263.009447][T16900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 263.021704][T16900] System zones: 0-1, 3-36 [ 263.032116][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.056286][T16920] EXT4-fs: Ignoring removed nobh option [ 263.062686][T16900] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2384: bad orphan inode 134217728 [ 263.074656][T16920] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 263.083662][T16920] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 263.111782][T16900] loop3: lost filesystem error report for type 5 error -117 [ 263.116372][T16920] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.2392: lblock 2 mapped to illegal pblock 2 (length 1) [ 263.137128][T16900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.137827][T16920] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 263.137923][T16920] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 263.137945][T16920] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.2392: lblock 0 mapped to illegal pblock 48 (length 1) [ 263.159416][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 263.159433][ C1] EXT4-fs (loop4): initial error at time 2000000113: ext4_map_blocks:776: inode 3: block 2 [ 263.159473][ C1] EXT4-fs (loop4): last error at time 2000000113: ext4_map_blocks:776: inode 3: block 2 [ 263.208358][T16920] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 263.208459][T16920] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 263.226924][T16920] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2392: Failed to acquire dquot type 0 [ 263.245359][T16920] loop4: lost filesystem error report for type 5 error -117 [ 263.245491][T16920] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 263.262400][T16920] loop4: lost filesystem error report for type 5 error -117 [ 263.264718][T16920] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.2392: mark_inode_dirty error [ 263.283401][T16920] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 263.283540][T16920] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 263.303502][T16920] EXT4-fs (loop4): 1 orphan inode deleted [ 263.310130][T16920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.322509][ T3725] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 263.345555][ T3725] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 263.354252][ T3725] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 263.374525][T16934] lo speed is unknown, defaulting to 1000 [ 263.385595][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.466574][T16934] lo speed is unknown, defaulting to 1000 [ 263.472823][T16934] lo speed is unknown, defaulting to 1000 [ 263.555613][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.577456][T16941] __nla_validate_parse: 5 callbacks suppressed [ 263.577470][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2399'. [ 263.605462][T16941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2399'. [ 263.707748][T16950] set_capacity_and_notify: 8 callbacks suppressed [ 263.707824][T16950] loop2: detected capacity change from 0 to 128 [ 263.740569][T16950] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.781817][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.815196][ T3725] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 263.821704][T16950] ext4 filesystem being mounted at /479/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 263.835100][ T3725] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 263.869312][ T3725] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 263.915108][ T3725] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 263.935603][ T3725] loop4: lost filesystem error report for type 5 error -117 [ 263.943497][T16950] vhci_hcd vhci_hcd.0: default hub control req: 820e v0000 i0000 l236 [ 263.965451][ T3310] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 263.980080][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.990091][T16963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2407'. [ 263.995216][ T3310] loop4: lost filesystem error report for type 5 error -117 [ 263.999431][ T3310] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 264.016539][ T3310] loop4: lost filesystem error report for type 5 error -117 [ 264.016729][ T3310] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 264.046917][ T28] audit: type=1326 audit(2000000114.269:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="syz.3.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 264.074377][ T3310] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 264.087906][ T28] audit: type=1326 audit(2000000114.269:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16962 comm="syz.3.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0084d8c799 code=0x7ffc0000 [ 264.199484][T16971] lo speed is unknown, defaulting to 1000 [ 264.206605][T16965] loop2: detected capacity change from 0 to 1024 [ 264.271702][T16971] lo speed is unknown, defaulting to 1000 [ 264.278159][T16971] lo speed is unknown, defaulting to 1000 [ 264.324593][T16965] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 264.341298][T16965] System zones: 0-1, 3-36 [ 264.392938][T16965] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2408: bad orphan inode 134217728 [ 264.457205][T16965] loop2: lost filesystem error report for type 5 error -117 [ 264.471676][T16965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.534714][T16965] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2408'. [ 264.594071][T16982] syzkaller1: entered promiscuous mode [ 264.609209][T16982] syzkaller1: entered allmulticast mode [ 264.810300][T16987] loop3: detected capacity change from 0 to 1024 [ 264.854004][T16987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.868127][T16978] loop4: detected capacity change from 0 to 512 [ 264.891560][T16978] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 264.914734][T16978] EXT4-fs (loop4): 1 truncate cleaned up [ 264.928333][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.955601][T16978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.207476][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.575055][T16998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.593359][T16998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.649619][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.695882][T17002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 265.702493][T17002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.710027][T17002] vhci_hcd vhci_hcd.0: Device attached [ 265.718497][T17002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16) [ 265.725096][T17002] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 265.732967][T17002] vhci_hcd vhci_hcd.0: Device attached [ 265.739674][T17002] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(18) [ 265.746274][T17002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.754100][T17002] vhci_hcd vhci_hcd.0: Device attached [ 265.760934][T17002] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(20) [ 265.767622][T17002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.775313][ T1058] usb usb10-port1: attempt power cycle [ 265.781160][T17002] vhci_hcd vhci_hcd.0: Device attached [ 265.787819][T17002] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(22) [ 265.794463][T17002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.802259][T17002] vhci_hcd vhci_hcd.0: Device attached [ 265.808230][T17002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.816865][T17002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.825477][T17002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.900787][T17011] vhci_hcd: connection closed [ 265.900856][T17009] vhci_hcd: connection closed [ 265.900940][T17007] vhci_hcd: connection closed [ 265.908817][T17003] vhci_hcd: connection closed [ 265.910355][T17005] vhci_hcd: connection closed [ 265.920146][ T3738] vhci_hcd vhci_hcd.3: stop threads [ 265.930246][ T3738] vhci_hcd vhci_hcd.3: release socket [ 265.939002][ T3738] vhci_hcd vhci_hcd.3: disconnect device [ 265.948483][ T6127] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 265.956252][ T3738] vhci_hcd vhci_hcd.3: stop threads [ 265.961525][ T3738] vhci_hcd vhci_hcd.3: release socket [ 265.969751][ T3738] vhci_hcd vhci_hcd.3: disconnect device [ 265.976124][ T3738] vhci_hcd vhci_hcd.3: stop threads [ 265.981367][ T3738] vhci_hcd vhci_hcd.3: release socket [ 265.994373][ T3738] vhci_hcd vhci_hcd.3: disconnect device [ 266.000906][ T3738] vhci_hcd vhci_hcd.3: stop threads [ 266.006477][ T3738] vhci_hcd vhci_hcd.3: release socket [ 266.012166][ T3738] vhci_hcd vhci_hcd.3: disconnect device [ 266.019171][ T3738] vhci_hcd vhci_hcd.3: stop threads [ 266.024439][ T3738] vhci_hcd vhci_hcd.3: release socket [ 266.030155][ T3738] vhci_hcd vhci_hcd.3: disconnect device [ 266.156924][T17028] loop4: detected capacity change from 0 to 1024 [ 266.163654][T17028] EXT4-fs: inline encryption not supported [ 266.185212][T17028] EXT4-fs: Ignoring removed bh option [ 266.311486][T17028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.556987][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.626333][T17041] loop0: detected capacity change from 0 to 1024 [ 266.633881][T17041] EXT4-fs: inline encryption not supported [ 266.680787][T17041] EXT4-fs: Ignoring removed bh option [ 266.708736][T17041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.753715][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.955323][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 267.217541][T17067] 9p: Bad value for 'wfdno' [ 267.398014][T17068] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.411002][T17064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.775873][T17064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.807165][ T6126] Process accounting resumed [ 267.863896][T17078] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 267.870580][T17078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 267.984003][T17078] vhci_hcd vhci_hcd.0: Device attached [ 268.009854][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 268.009877][ T28] audit: type=1400 audit(2000000118.219:1742): avc: denied { ioctl } for pid=17083 comm="syz.3.2438" path="socket:[31426]" dev="sockfs" ino=31426 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.049202][T17084] team0: entered promiscuous mode [ 268.075245][T17083] team0: left promiscuous mode [ 268.096460][T17085] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 268.103113][T17085] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 268.121503][T17085] vhci_hcd vhci_hcd.0: Device attached [ 268.136242][T17078] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 268.142842][T17078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 268.150856][T17078] vhci_hcd vhci_hcd.0: Device attached [ 268.157561][T17078] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(20) [ 268.164156][T17078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 268.171967][T17078] vhci_hcd vhci_hcd.0: Device attached [ 268.215225][ T3373] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 268.228039][T17078] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(22) [ 268.234653][T17078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 268.242593][T17085] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 268.250850][T17078] vhci_hcd vhci_hcd.0: Device attached [ 268.257129][T17078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 268.266641][T17078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 268.310025][T17094] vhci_hcd: connection closed [ 268.310154][T17092] vhci_hcd: connection closed [ 268.310353][T17086] vhci_hcd: connection closed [ 268.314993][T17090] vhci_hcd: connection closed [ 268.320058][T17081] vhci_hcd: connection reset by peer [ 268.324278][ T978] vhci_hcd vhci_hcd.2: stop threads [ 268.324360][ T978] vhci_hcd vhci_hcd.2: release socket [ 268.355136][ T978] vhci_hcd vhci_hcd.2: disconnect device [ 268.361211][ T978] vhci_hcd vhci_hcd.2: stop threads [ 268.365009][T17109] syzkaller0: entered promiscuous mode [ 268.372551][T17109] syzkaller0: entered allmulticast mode [ 268.375217][ T978] vhci_hcd vhci_hcd.2: release socket [ 268.383619][ T978] vhci_hcd vhci_hcd.2: disconnect device [ 268.389551][ T978] vhci_hcd vhci_hcd.2: stop threads [ 268.394966][ T978] vhci_hcd vhci_hcd.2: release socket [ 268.400826][ T978] vhci_hcd vhci_hcd.2: disconnect device [ 268.406876][ T978] vhci_hcd vhci_hcd.2: stop threads [ 268.412157][ T978] vhci_hcd vhci_hcd.2: release socket [ 268.417697][ T978] vhci_hcd vhci_hcd.2: disconnect device [ 268.425029][ T978] vhci_hcd vhci_hcd.2: stop threads [ 268.430561][ T978] vhci_hcd vhci_hcd.2: release socket [ 268.436188][ T978] vhci_hcd vhci_hcd.2: disconnect device [ 268.630819][T17118] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.640669][ T6131] Process accounting resumed [ 269.039810][T17139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 269.123103][T17148] loop3: detected capacity change from 0 to 1024 [ 269.124918][T17140] Process accounting resumed [ 269.140515][T17148] EXT4-fs: inline encryption not supported [ 269.156195][T17148] EXT4-fs: Ignoring removed nobh option [ 269.376957][T17148] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 269.424726][T17148] System zones: 0-1, 3-12 [ 269.454079][ T28] audit: type=1326 audit(2000000119.669:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fdccc799 code=0x50000 [ 269.505616][T17148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.590943][ T1058] usb usb10-port1: unable to enumerate USB device [ 269.597625][ T28] audit: type=1326 audit(2000000119.669:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fdccc799 code=0x50000 [ 269.600827][T17148] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 269.621121][ T28] audit: type=1326 audit(2000000119.669:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fdccc799 code=0x50000 [ 269.669945][ T28] audit: type=1326 audit(2000000119.669:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fdccc799 code=0x50000 [ 269.719470][ T28] audit: type=1326 audit(2000000119.669:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fdccc799 code=0x50000 [ 269.743213][ T28] audit: type=1326 audit(2000000119.669:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fdccc799 code=0x50000 [ 269.772787][ T28] audit: type=1326 audit(2000000119.669:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fdccc799 code=0x50000 [ 269.803511][ T28] audit: type=1326 audit(2000000119.669:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fdccc799 code=0x50000 [ 269.837697][ T28] audit: type=1326 audit(2000000119.669:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17154 comm="syz.2.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fdccc799 code=0x50000 [ 269.929595][T17169] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 269.936211][T17169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 269.953144][T17169] vhci_hcd vhci_hcd.0: Device attached [ 269.973970][T17148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.982963][T17169] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 269.989563][T17169] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 269.995406][T17148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.003885][T17169] vhci_hcd vhci_hcd.0: Device attached [ 270.018379][T17169] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(18) [ 270.025005][T17169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 270.036987][T17169] vhci_hcd vhci_hcd.0: Device attached [ 270.044487][T17169] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(20) [ 270.051081][T17169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 270.066523][T17169] vhci_hcd vhci_hcd.0: Device attached [ 270.077459][T17169] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(22) [ 270.084137][T17169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 270.115231][T17169] vhci_hcd vhci_hcd.0: Device attached [ 270.121345][T17169] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 270.129783][T17169] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 270.138310][T17169] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 270.169932][T17187] vhci_hcd: connection closed [ 270.170027][T17176] vhci_hcd: connection closed [ 270.174789][T17180] vhci_hcd: connection closed [ 270.180148][T17172] vhci_hcd: connection closed [ 270.185213][T17182] vhci_hcd: connection closed [ 270.190040][ T3719] vhci_hcd vhci_hcd.4: stop threads [ 270.200189][ T3719] vhci_hcd vhci_hcd.4: release socket [ 270.206364][ T3719] vhci_hcd vhci_hcd.4: disconnect device [ 270.212454][ T3719] vhci_hcd vhci_hcd.4: stop threads [ 270.215149][ T1058] usb 9-1: new low-speed USB device number 4 using vhci_hcd [ 270.222469][ T3719] vhci_hcd vhci_hcd.4: release socket [ 270.225383][T17173] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 270.233068][ T3719] vhci_hcd vhci_hcd.4: disconnect device [ 270.261687][ T3719] vhci_hcd vhci_hcd.4: stop threads [ 270.268752][ T3719] vhci_hcd vhci_hcd.4: release socket [ 270.276616][ T3719] vhci_hcd vhci_hcd.4: disconnect device [ 270.291534][ T3719] vhci_hcd vhci_hcd.4: stop threads [ 270.296872][ T3719] vhci_hcd vhci_hcd.4: release socket [ 270.302384][ T3719] vhci_hcd vhci_hcd.4: disconnect device [ 270.308349][ T3719] vhci_hcd vhci_hcd.4: stop threads [ 270.313564][ T3719] vhci_hcd vhci_hcd.4: release socket [ 270.319993][ T3719] vhci_hcd vhci_hcd.4: disconnect device [ 270.565899][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.958063][ T6135] IPVS: starting estimator thread 0... [ 270.968400][T17214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.055129][T17221] IPVS: using max 2400 ests per chain, 120000 per kthread [ 271.073068][ T6135] Process accounting resumed [ 271.753594][ T6127] usb 7-1: enqueue for inactive port 0 [ 271.759108][ T6127] usb 7-1: enqueue for inactive port 0 [ 271.793198][T17233] lo speed is unknown, defaulting to 1000 [ 271.799385][T17236] loop4: detected capacity change from 0 to 512 [ 271.855185][T17236] EXT4-fs: test_dummy_encryption option not supported [ 271.936465][T17238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31768 sclass=netlink_route_socket pid=17238 comm=syz.1.2474 [ 271.980907][T17233] lo speed is unknown, defaulting to 1000 [ 271.995677][T17233] lo speed is unknown, defaulting to 1000 [ 272.142354][T17248] netlink: 'syz.1.2477': attribute type 4 has an invalid length. [ 272.158934][T17248] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2477'. [ 272.179951][T17248] .`: renamed from bond0 (while UP) [ 272.481188][ T6127] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 272.566552][T17262] loop0: detected capacity change from 0 to 1024 [ 272.604044][T17262] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 272.639405][T17267] 8021q: VLANs not supported on xfrm0 [ 272.733163][T17270] loop0: detected capacity change from 0 to 1024 [ 272.740745][T17270] EXT4-fs: inline encryption not supported [ 272.747010][T17270] EXT4-fs: Ignoring removed bh option [ 272.846428][T17270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.887285][T17272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 272.895413][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.895895][ T6131] Process accounting resumed [ 273.022352][T17283] loop0: detected capacity change from 0 to 128 [ 273.088702][T17283] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.142256][T17283] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.870709][ T3373] usb 5-1: enqueue for inactive port 0 [ 273.876609][ T3373] usb 5-1: enqueue for inactive port 0 [ 273.955345][ T3373] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 274.680701][T17315] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 274.759334][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 275.007495][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 275.121614][T17326] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 275.128236][T17326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.140026][T17326] vhci_hcd vhci_hcd.0: Device attached [ 275.147744][T17326] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 275.154364][T17326] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 275.163432][T17326] vhci_hcd vhci_hcd.0: Device attached [ 275.170778][T17326] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(18) [ 275.177375][T17326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.186366][T17326] vhci_hcd vhci_hcd.0: Device attached [ 275.193204][T17326] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(20) [ 275.199806][T17326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.208382][T17326] vhci_hcd vhci_hcd.0: Device attached [ 275.215490][T17326] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(22) [ 275.222089][T17326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.230645][T17326] vhci_hcd vhci_hcd.0: Device attached [ 275.237088][T17326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.247041][T17326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.256238][T17326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.425174][ T10] usb 2-1: SetAddress Request (6) to port 0 [ 275.431297][ T10] usb 2-1: new SuperSpeed USB device number 6 using vhci_hcd [ 275.886351][T17335] vhci_hcd: connection closed [ 275.886717][ T3725] vhci_hcd vhci_hcd.0: stop threads [ 275.897362][T17333] vhci_hcd: connection closed [ 275.897455][T17331] vhci_hcd: connection closed [ 275.902184][T17327] vhci_hcd: connection closed [ 275.905110][ T1058] usb 9-1: enqueue for inactive port 0 [ 275.906882][T17329] vhci_hcd: connection reset by peer [ 275.911521][ T1058] usb 9-1: enqueue for inactive port 0 [ 275.930185][ T3725] vhci_hcd vhci_hcd.0: release socket [ 275.939325][ T3725] vhci_hcd vhci_hcd.0: disconnect device [ 275.945239][ T3725] vhci_hcd vhci_hcd.0: stop threads [ 275.950946][ T3725] vhci_hcd vhci_hcd.0: release socket [ 275.985117][ T1058] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 275.986980][ T3725] vhci_hcd vhci_hcd.0: disconnect device [ 276.028748][ T3725] vhci_hcd vhci_hcd.0: stop threads [ 276.036744][T17350] loop4: detected capacity change from 0 to 512 [ 276.050044][ T3725] vhci_hcd vhci_hcd.0: release socket [ 276.059096][ T3725] vhci_hcd vhci_hcd.0: disconnect device [ 276.087667][ T3725] vhci_hcd vhci_hcd.0: stop threads [ 276.096432][T17350] EXT4-fs (loop4): too many log groups per flexible block group [ 276.112887][ T3725] vhci_hcd vhci_hcd.0: release socket [ 276.119724][T17350] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 276.127533][ T3725] vhci_hcd vhci_hcd.0: disconnect device [ 276.133327][T17350] EXT4-fs (loop4): mount failed [ 276.138613][ T3725] vhci_hcd vhci_hcd.0: stop threads [ 276.144145][ T3725] vhci_hcd vhci_hcd.0: release socket [ 276.149760][ T3725] vhci_hcd vhci_hcd.0: disconnect device [ 276.415397][ T6124] usb usb8-port1: attempt power cycle [ 276.441615][ T28] kauditd_printk_skb: 10697 callbacks suppressed [ 276.441630][ T28] audit: type=1400 audit(2000000126.659:12449): avc: denied { write } for pid=17349 comm="syz.4.2503" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 276.506907][T17361] loop0: detected capacity change from 0 to 512 [ 276.526069][T17365] loop4: detected capacity change from 0 to 128 [ 276.533237][T17362] syzkaller0: entered promiscuous mode [ 276.547897][T17362] syzkaller0: entered allmulticast mode [ 276.551337][T17361] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.583016][T17365] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.615448][T17365] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.719745][T17361] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 276.734326][T17361] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2508: bg 0: block 248: padding at end of block bitmap is not set [ 276.748852][T17361] loop0: lost filesystem error report for type 5 error -117 [ 276.755080][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 276.768796][ C1] EXT4-fs (loop0): last error at time 2000000126: ext4_validate_block_bitmap:441 [ 277.608305][T17361] Quota error (device loop0): write_blk: dquota write failed [ 277.629117][T17380] netlink: 304 bytes leftover after parsing attributes in process `syz.3.2511'. [ 277.638425][T17361] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 277.661540][T17380] lo speed is unknown, defaulting to 1000 [ 277.715334][T17361] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.2508: Failed to acquire dquot type 1 [ 277.729886][T17361] loop0: lost filesystem error report for type 5 error -117 [ 277.730350][T17361] EXT4-fs (loop0): 1 truncate cleaned up [ 277.757911][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.766824][T17380] lo speed is unknown, defaulting to 1000 [ 277.773087][T17380] lo speed is unknown, defaulting to 1000 [ 277.825601][T17361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 277.881305][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 277.897805][T17386] xt_hashlimit: size too large, truncated to 1048576 [ 277.904943][ T28] audit: type=1400 audit(2000000128.109:12450): avc: denied { connect } for pid=17385 comm="syz.1.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 277.915560][T17386] xt_hashlimit: max too large, truncated to 1048576 [ 277.995317][ T6126] usb usb6-port1: attempt power cycle [ 278.049060][T17395] loop3: detected capacity change from 0 to 164 [ 279.515582][T17412] loop3: detected capacity change from 0 to 1024 [ 279.566666][T17412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.654270][T17424] lo speed is unknown, defaulting to 1000 [ 279.694069][T17426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2522'. [ 279.703464][ T6124] usb usb8-port1: unable to enumerate USB device [ 279.762406][T17424] lo speed is unknown, defaulting to 1000 [ 279.774029][T17424] lo speed is unknown, defaulting to 1000 [ 280.122924][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'. [ 280.163263][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2524'. [ 280.186438][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'. [ 280.195674][ T6137] usb usb10-port1: attempt power cycle [ 280.201522][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2524'. [ 280.214054][T17432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=17432 comm=syz.0.2524 [ 280.680844][ T10] usb 2-1: device descriptor read/8, error -110 [ 280.795055][ T10] usb 2-1: new SuperSpeed USB device number 6 using vhci_hcd [ 280.804264][T17454] loop2: detected capacity change from 0 to 1024 [ 280.835041][ T10] usb 2-1: enqueue for inactive port 0 [ 280.850163][ T10] usb 2-1: enqueue for inactive port 0 [ 280.855779][ T10] usb 2-1: enqueue for inactive port 0 [ 280.861692][T17454] EXT4-fs: inline encryption not supported [ 280.867786][T17454] EXT4-fs: Ignoring removed nobh option [ 280.885571][ T6126] usb usb6-port1: unable to enumerate USB device [ 280.988881][T17454] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 281.001023][T17454] System zones: 0-1, 3-12 [ 281.126095][T17454] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 282.235898][T17487] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 282.242520][T17487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.266077][T17491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2542'. [ 282.291536][T17454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.305426][T17487] vhci_hcd vhci_hcd.0: Device attached [ 282.311492][T17491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2542'. [ 282.325782][T17454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.334559][T17492] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 282.341160][T17492] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 282.384706][T17487] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 282.391424][T17487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.433104][T17497] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(22) [ 282.439738][T17497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.477679][T17492] vhci_hcd vhci_hcd.0: Device attached [ 282.493356][T17487] vhci_hcd vhci_hcd.0: Device attached [ 282.503368][T17503] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(25) [ 282.509957][T17503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.517623][ T10] usb 2-1: SetAddress Request (7) to port 0 [ 282.523523][ T10] usb 2-1: new SuperSpeed USB device number 7 using vhci_hcd [ 282.549469][T17505] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.571433][T17508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.589885][T17497] vhci_hcd vhci_hcd.0: Device attached [ 282.603031][T17487] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 282.639230][T17503] vhci_hcd vhci_hcd.0: Device attached [ 282.745586][T17488] vhci_hcd: connection closed [ 282.745683][T17493] vhci_hcd: connection reset by peer [ 282.755725][T17494] vhci_hcd: connection closed [ 282.755867][T17501] vhci_hcd: connection closed [ 282.760614][T17504] vhci_hcd: connection closed [ 282.775300][ T3725] vhci_hcd vhci_hcd.0: stop threads [ 282.810873][ T3725] vhci_hcd vhci_hcd.0: release socket [ 282.826564][ T3725] vhci_hcd vhci_hcd.0: disconnect device [ 282.856966][T17525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2548'. [ 282.866556][ T3725] vhci_hcd vhci_hcd.0: stop threads [ 282.871775][ T3725] vhci_hcd vhci_hcd.0: release socket [ 282.878617][ T3725] vhci_hcd vhci_hcd.0: disconnect device [ 282.892062][ T3725] vhci_hcd vhci_hcd.0: stop threads [ 282.898143][ T3725] vhci_hcd vhci_hcd.0: release socket [ 282.914599][ T3725] vhci_hcd vhci_hcd.0: disconnect device [ 282.935583][ T3725] vhci_hcd vhci_hcd.0: stop threads [ 282.941228][ T3725] vhci_hcd vhci_hcd.0: release socket [ 282.947370][ T3725] vhci_hcd vhci_hcd.0: disconnect device [ 282.965305][ T3725] vhci_hcd vhci_hcd.0: stop threads [ 282.971018][ T3725] vhci_hcd vhci_hcd.0: release socket [ 282.978532][ T3725] vhci_hcd vhci_hcd.0: disconnect device [ 283.063685][T17530] loop2: detected capacity change from 0 to 8192 [ 283.086162][T17530] netlink: 'syz.2.2549': attribute type 32 has an invalid length. [ 283.096972][T17530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2549'. [ 283.106555][T17530] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 283.135199][ T6137] usb usb10-port1: unable to enumerate USB device [ 283.312670][T17551] Invalid option length (453) for dns_resolver key [ 283.323861][T17555] SELinux: policydb string does not match my string SE Linux [ 283.331583][T17555] SELinux: failed to load policy [ 283.401089][T17560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2561'. [ 283.596659][ T3727] ================================================================== [ 283.602460][T17564] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2563'. [ 283.604753][ T3727] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 283.621947][ T3727] [ 283.624265][ T3727] write to 0xffff888135fd1688 of 2 bytes by task 17530 on cpu 1: [ 283.631970][ T3727] fat16_ent_put+0x28/0x60 [ 283.636383][ T3727] fat_alloc_clusters+0x57b/0xc50 [ 283.641399][ T3727] fat_get_block+0x258/0x5e0 [ 283.645979][ T3727] __block_write_begin_int+0x400/0xf90 [ 283.651430][ T3727] cont_write_begin+0x5fe/0x970 [ 283.656275][ T3727] fat_write_begin+0x4f/0xe0 [ 283.660857][ T3727] generic_perform_write+0x183/0x490 [ 283.666132][ T3727] __generic_file_write_iter+0x9e/0x120 [ 283.671682][ T3727] generic_file_write_iter+0x8d/0x310 [ 283.677047][ T3727] vfs_write+0x5a6/0x9f0 [ 283.681285][ T3727] ksys_write+0xdc/0x1a0 [ 283.685530][ T3727] __x64_sys_write+0x40/0x50 [ 283.690117][ T3727] x64_sys_call+0x27e1/0x3020 [ 283.694889][ T3727] do_syscall_64+0x12c/0x370 [ 283.699464][ T3727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.705347][ T3727] [ 283.707661][ T3727] read to 0xffff888135fd1600 of 512 bytes by task 3727 on cpu 0: [ 283.715363][ T3727] copy_folio_from_iter_atomic+0x75f/0x1170 [ 283.721252][ T3727] generic_perform_write+0x2c1/0x490 [ 283.726527][ T3727] shmem_file_write_iter+0xc5/0xf0 [ 283.731720][ T3727] lo_rw_aio+0x67d/0x730 [ 283.735953][ T3727] loop_process_work+0x56c/0xac0 [ 283.740879][ T3727] loop_workfn+0x31/0x40 [ 283.745112][ T3727] process_scheduled_works+0x4de/0x9e0 [ 283.750565][ T3727] worker_thread+0x581/0x770 [ 283.755155][ T3727] kthread+0x22a/0x280 [ 283.759209][ T3727] ret_from_fork+0x150/0x360 [ 283.763793][ T3727] ret_from_fork_asm+0x1a/0x30 [ 283.768553][ T3727] [ 283.770858][ T3727] Reported by Kernel Concurrency Sanitizer on: [ 283.776999][ T3727] CPU: 0 UID: 0 PID: 3727 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT(full) [ 283.788097][ T3727] Tainted: [W]=WARN [ 283.791880][ T3727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.801924][ T3727] Workqueue: loop2 loop_workfn [ 283.806683][ T3727] ================================================================== [ 287.615094][ T10] usb 2-1: device descriptor read/8, error -110 [ 287.725084][ T10] usb 2-1: new SuperSpeed USB device number 7 using vhci_hcd [ 287.745079][ T10] usb 2-1: enqueue for inactive port 0 [ 287.750639][ T10] usb 2-1: enqueue for inactive port 0 [ 287.756145][ T10] usb 2-1: enqueue for inactive port 0 [ 287.865130][ T10] usb usb2-port1: attempt power cycle [ 289.695355][ T10] usb usb2-port1: unable to enumerate USB device