last executing test programs: 13.485261428s ago: executing program 1 (id=682): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0xf0, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x8, 0x8}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, {0x88, 0x1, [@m_ctinfo={0x84, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x10}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xccb}]}, {0x40, 0x6, "6bd9172da9c5dc72fa3b1755feb7a2af5b37a870d5fbfbdadb63c13c8c16f9712eec82e99e693b8f7a67eaaf469eeb81b06a7c96c89b2d9635759336"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 13.426788169s ago: executing program 1 (id=685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x3ff, r0, 'id0\x00'}) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) r1 = syz_usbip_server_init(0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x48}}, 0x0) write$usbip_server(r1, &(0x7f0000000280)=@ret_unlink={{0x4, 0x1000, 0x0, 0x1, 0x200}, {0x102}}, 0x30) unshare(0xa000200) r2 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r2, 0x0, 0xd, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x2d64, &(0x7f0000000340)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x6, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r5, 0x4) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)) 12.768780615s ago: executing program 1 (id=691): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1000000, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4000000000000, 0xffffffffffbffffe, 0x7f, 0xfffffffd}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) sendfile(r0, r0, 0x0, 0x252c000000000000) r1 = epoll_create1(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x20) sendmsg$NFQNL_MSG_VERDICT(r2, 0x0, 0x4004841) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x521, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_config_ext={0x7fffffffffffffff, 0x8}, 0x10ecc8, 0x1227, 0x8001, 0x8, 0x5, 0x20004, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4044804) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000180), 0x0, 0x236, &(0x7f0000000800)="$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") capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000040)=0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) timer_create(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 11.802401819s ago: executing program 1 (id=707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x81c04a, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c6e6f6e756d7461696c3d302c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030332c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c756e695f786c6174653d302c666c7573682c757466383d302c726f6469722c747a3d5554432c00e696e27e745267d0e7f7d60cf64c4d116172285e0a94b37c3f04b4e454913b1615b6c103a4be033c3f79c81a7a0dc9f3282eb2b984b8df829f11f7b15ceaa2ddb341548691e92d41d923144fa5f6aa8b37c7698e74a04d87cb16f3c338160646d1719f9aa1097cb78032fa4c9c60c14840662537510c0ac9f95a646f5231c0c9eb096b898803099b3050797137354ed2fb2a3dd97ad790f0758b4561eb7180b4b366c9ac840ca3d57727827ab961af0bb24ac6b14796d3bedfa4addb1c2f59217a563ca0a3729d45669905a6f0f3dbf3fd22ab36dfe7cf80913ecb4656ca"], 0x6, 0x2d9, &(0x7f0000000880)="$eJzs3b+LHHUUAPA3e7M//AG7hZUIDmhhFXJpbTZIAuJVhi3UQg+TgNwuQgIHijimEjv/Af8CQfB/sLWxsxT8AywjBEZmdmZ3Nju7uYh7ovl8mrzM9735vtkZ7uaKe/fRK4uz21ncffDFbzEaJdGbxjQeJjGJXjS+ig3TbwMA+C97WBTxR7HUsfzrNzvqkogYHbg3AOAwnvD9v5auwx8vpS0A4IBuvff+O9dPTm68m2WjuLn4+nxW/mRf/rtcv343Pol53ImrMY5HEdWLQj+qt4UyvFkURZ5mpUm8vsjPZ2Xl4sOf6/P/9GIdHMc4JlW0etuo6t8+uXGcLbXq87KP5+v9p+X+12IcL62KN+qvddTHbBBvvNbq/0qM45eP49OYx+2qiXX9l8dZ9lb5ivNB2V5Zn+Tns2GVt1YcNZvnl3h/AAAAAAAAAAAAAAAAAAAAAAD4f7pSz84ZRjW/pzxUz985elT+px9ZY7I5n2dZnzQnas8HKooiL+K7Zr7O1SzLijpxXZ/Gy2l7sCAAAAAAAAAAAAAAAAAAAAA8u+5/9vnZ6Xx+515nUIx3LnUGzTSANCL+vBVxsartYNo68mrsTx7We57O57063MxJ20fiqMlJIva2EelqmMHfvIoLB89t9VwH3//QVTXYvHFptHJGT960373XPxk0T9fZaRKdOcNVz6PlQ1INgljnDKKrqhki0bpxg11tFPE0j9+gc2m8r6rsZfs8L1RBvuOTL4NI9jX25u/LK6yPJI9fxaD6VDvL+3UQXY1Vz0b3vXgsiNGyfPtrRWJaBwAAAAAAAAAAAAAAAAAAHNT6t387Fh/sLe0Vw4O1BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACXav33/58iyOviCyQP4t79f/kSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAb8FQAA//9LTF1m") sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000020101"], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x807, 0x1}, 0x0, 0x400, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x2}, 0x809}, {0xa, 0x4e20, 0xfffffff7, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xfbffffff, 0x8]}}, 0x5c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e25, @empty=0xe0000001}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="580a01002312010064001280080001007369740058000280060010000104000008000c000600000008000300ffffffff14000b00fc01000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="05000008000100000000000000000000d42bfdd9e38212d8a0f2f73b92ac73f200000000", @ANYRES32, @ANYBLOB="060012004e22000008000400fc44"], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 11.549912295s ago: executing program 1 (id=709): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) write(0xffffffffffffffff, &(0x7f0000000400)='0', 0x18) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') unlinkat(r1, &(0x7f0000000f80)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r0, 0xffffffffffffffff, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x100, 0x1ff, 0x0, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0x49, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x1c, &(0x7f00000009c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0xd6, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x45) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5r3, {0xe3b4}}, './dev\x00'}) ioctl$USBDEVFS_RESET(r5, 0x5514) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000002000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x3, r6, 0x8fa13219e00e88f2}, 0x38) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224e204e0000", 0x58}], 0x1) 5.796425857s ago: executing program 5 (id=757): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) write(r0, &(0x7f0000000080)='4', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="01002ebd7000000000001400000018000180140002006e6574898ac9ba66eee67a000000000008001300480a000008001200feffffff"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000045c0)=ANY=[@ANYBLOB="ebacf4000023734ed8f067588070434f298f3b57dbc8f81376aa48b25ffa52c743ea4ae55434a4c6e1e38ef9e58d74419b420a7ebadc8a128ead44dde8e9ad4ee2efcf4b7e0623031c7e9591be1f770368cc915fd2772ff81baa2dc27406c1669a25dc66b7a69c9e5fb4f4d42ff4accd18d126a020169da3f53bf19dcc943a34facfb647b0d7633500"/149, @ANYRES16=r4, @ANYBLOB="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"], 0x11a8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x5070bd28, 0x7f, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x63, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r10, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000021c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, '\'*s', 0x44, 0x2f, 0x1, @local, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x3, 0x3, 0x0, 0x1, 0x4, 0x16}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x5, 0x3, 0x1, 0x0, 0x7, 0x5}, 0x2, {0x4d, 0x84f, 0x2, 0x6, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 4.758997403s ago: executing program 3 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) 4.643442446s ago: executing program 3 (id=766): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0xf0, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x8, 0x8}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, {0x88, 0x1, [@m_ctinfo={0x84, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x10}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xccb}]}, {0x40, 0x6, "6bd9172da9c5dc72fa3b1755feb7a2af5b37a870d5fbfbdadb63c13c8c16f9712eec82e99e693b8f7a67eaaf469eeb81b06a7c96c89b2d9635759336"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.629221526s ago: executing program 5 (id=768): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1e0, 0x2e8, 0x2e8, 0x1e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xffff46ff}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x1, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_config_ext={0x9, 0x100}, 0x204, 0x7, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r1, &(0x7f0000003100)=[{&(0x7f0000000200)="6a232ea9941e670000000000", 0xc}], 0x1, 0x3, 0x4) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') chdir(&(0x7f0000000100)='./file1\x00') openat$full(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140e000ee010c00018008000140e0000002050014002000000005000500020000000500010006"], 0x6c}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x80000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xfffffffffffffe8c, &(0x7f0000000200)="952bb3e00aae9a4c3a"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x40004580, 0x0) 4.552308498s ago: executing program 3 (id=769): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x75}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000540)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b6, &(0x7f0000006200)="$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") r1 = open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r4, 0x3, {0x0, 0xff}}, 0x18) sendmmsg$inet(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001500)='i', 0x1}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2800c801) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4, 0x5, 0x4}]}) ioctl$TUNGETVNETLE(r7, 0x40107446, &(0x7f0000000180)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f00000004c0)={'veth1\x00'}) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) write$cgroup_type(r9, &(0x7f0000000280), 0x9) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[], 0x28}}, 0x0) syz_io_uring_setup(0x5a2a, &(0x7f00000002c0)={0x0, 0x3866, 0x1000, 0x0, 0x1cd}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) fallocate(r1, 0x0, 0x1, 0x104) 4.182435327s ago: executing program 5 (id=772): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x3ff, r0, 'id0\x00'}) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) r1 = syz_usbip_server_init(0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x48}}, 0x0) write$usbip_server(r1, &(0x7f0000000280)=@ret_unlink={{0x4, 0x1000, 0x0, 0x1, 0x200}, {0x102}}, 0x30) unshare(0xa000200) r2 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r2, 0x0, 0xd, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x2d64, &(0x7f0000000340)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x6, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r5, 0x4) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)) 3.283505059s ago: executing program 5 (id=783): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x600000000000, 0xc}, 0x4008, 0x400000, 0x4, 0x0, 0x0, 0x1000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000c40)={[{@nombcache}, {@errors_remount}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@noquota}, {@orlov}, {@nodiscard}, {@usrjquota}, {@norecovery}, {@grpquota}]}, 0x6, 0x498, &(0x7f0000000100)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001540), &(0x7f0000001580)=[{0x2, 0x4, 0x0, 0x6}, {0x4, 0x4, 0xd, 0x1}, {0x0, 0x2, 0x3, 0x8}], 0x10, 0x2}, 0x94) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18}) 2.973065727s ago: executing program 5 (id=786): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="080000e4018c9c0d00020000000b00000000000000"], 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x2, 0x402, 0x0, 0x4005, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1) r5 = gettid() ptrace$ARCH_SHSTK_STATUS(0x1e, r5, &(0x7f0000000040), 0x5005) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r5}, &(0x7f0000000380)=0x0) timer_settime(r6, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff70) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = gettid() tkill(r9, 0x16) socket(0x10, 0x1, 0xd61) process_vm_readv(r9, &(0x7f0000001900)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000180)=""/162, 0xa2}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/32, 0x20}, {&(0x7f0000001880)=""/69, 0x45}], 0x6, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/227, 0xe3}, {&(0x7f0000001a80)=""/235, 0xeb}], 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 2.143117937s ago: executing program 4 (id=796): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$TIOCCBRK(r2, 0x5428) unshare(0x22020600) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 2.098021358s ago: executing program 4 (id=797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x3ff, r0, 'id0\x00'}) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r2 = syz_usbip_server_init(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$usbip_server(r2, &(0x7f0000000280)=@ret_unlink={{0x4, 0x1000, 0x0, 0x1, 0x200}, {0x102}}, 0x30) unshare(0xa000200) r3 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x2d64, &(0x7f0000000340)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)) 1.727804187s ago: executing program 3 (id=800): r0 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="2600000000000000100000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x4) 1.499929303s ago: executing program 4 (id=801): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x7ffffffe, 0x3d, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x61) write(r3, &(0x7f0000000500)="2d9fb296a5769c3345ae8a9da1e5cddbb36930e71309cf8503df38026af6a60e54d3ac12b85ac9f53b41011816ace484735efc2473f35ad06cf4f99ca6feff14fabd352049494b177f50a62647b29c39d16be43442d576cabd3d5ec7eb215067adb8b2ca0d931440fc9eedd5222b8c6ba409007099c4bac21221187eb301e13186c3e4b53a7aaac4f3e6d839", 0x8c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x24000858) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sched_setparam(0x0, &(0x7f00000000c0)=0xe1f1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x6a040000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpjquota}]}, 0x82, 0x49c, &(0x7f0000000600)="$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") statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)=""/216) close_range(r1, r2, 0x2) socket$kcm(0x29, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0xc28001, 0x75653100}, 0x0, {0x3}}) 1.474120664s ago: executing program 3 (id=802): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x0, 0x1, 0x0, 0x3, 0x5, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) write(r2, &(0x7f0000000960)='1', 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1c8, 0x20a, 0x278, 0x1c8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0x0, 0xff000000], 'batadv_slave_1\x00', 'dvmrp0\x00', {0xff}, {}, 0x2c, 0x21, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0xc, 0x7, 0x5, 0x5, 0x3]}, &(0x7f0000000240)=0x54) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0x7, 0x6, 0x3c, 0x8000, 0x9, "6ee0b9ccd74e50ae"}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) syz_open_dev$usbfs(&(0x7f0000000040), 0x334df134, 0x60c2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xe3b4}}, './dev\x00'}) ioctl$USBDEVFS_RESET(r5, 0x5514) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x3, r6, 0x8fa13219e00e88f2}, 0x38) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224e204e0000", 0x58}], 0x1) 1.355452456s ago: executing program 0 (id=803): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0xc4, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, {0x78, 0x1, [@m_ctinfo={0x74, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x3f, 0x6, "6bd9172da9c5dc72fa3b1755feb7a2af5b37a870d5fbfbdadb63c13c8c16f9712eec82e99e693b8f7a67eaaf469eeb81b06a7c96c89b2d96357593"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.309841368s ago: executing program 0 (id=804): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xe, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xb7, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r3, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000003cfe073bd534f13e8c0b3317aba4f5000000"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={r4, &(0x7f0000000280), 0x0}, 0x20) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000000)='10001', 0x5, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r0, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x411}, 0x0) socket$kcm(0x10, 0x2, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 1.106579982s ago: executing program 0 (id=805): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0xe8, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x8, 0x8}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, {0x80, 0x1, [@m_ctinfo={0x7c, 0x4, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x10}]}, {0x3d, 0x6, "6bd9172da9c5dc72fa3b1755feb7a2af5b37a870d5fbfbdadb63c13c8c16f9712eec82e99e693b8f7a67eaaf469eeb81b06a7c96c89b2d9635"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.002678295s ago: executing program 0 (id=806): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) write(0xffffffffffffffff, &(0x7f0000000400)='0', 0x18) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000f80)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x1c, &(0x7f00000009c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0xd6, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x45) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) write(r0, &(0x7f0000000080)='4', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="01002ebd7000000000001400000018000180140002006e6574898ac9ba66eee67a000000000008001300480a000008001200feffffff"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000045c0)=ANY=[@ANYBLOB="ebacf4000023734ed8f067588070434f298f3b57dbc8f81376aa48b25ffa52c743ea4ae55434a4c6e1e38ef9e58d74419b420a7ebadc8a128ead44dde8e9ad4ee2efcf4b7e0623031c7e9591be1f770368cc915fd2772ff81baa2dc27406c1669a25dc66b7a69c9e5fb4f4d42ff4accd18d126a020169da3f53bf19dcc943a34facfb647b0d7633500"/149, @ANYRES16=r4, @ANYBLOB="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"], 0x11a8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x5070bd28, 0x7f, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x63, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r10, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000021c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, '\'*s', 0x44, 0x2f, 0x1, @local, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x3, 0x3, 0x0, 0x1, 0x4, 0x16}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x5, 0x3, 0x1, 0x0, 0x7, 0x5}, 0x2, {0x4d, 0x84f, 0x2, 0x6, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 551.661267ms ago: executing program 2 (id=813): r0 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="2600000000000000100000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x4) 504.649808ms ago: executing program 0 (id=814): r0 = socket(0x22, 0x1, 0x1) (async) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x201, 0x0, 0xffffffff, r2}, &(0x7f0000000180)=0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18700b6a3f5bdd54466fa800000003f3ff00000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r5, &(0x7f0000000200)="2fb03afc4872c9a5b8eb04ecfbc7dc1a871947bd1202000000fc868595138aace2315a3012b865d369377f40461d1557b8358c71e546795a3e8e5a18419f45ad9df42b1b294622ae5c2fa38da9fddcc67f71497193912dd1b0a6128128dd737e441500009071900662b1f3a80d866f9d1d370040198789f13067ff57ab44b5c8cdb12c5ac61e68fd4b5e57dd3b976f1601320f1fbb12829da398e9168402cb9b4081fbcf7b09a7e7298a0afb60d2871b9d724bd6c6640cd0b097718ea76b5aa6d6f2ffb6e3", &(0x7f0000000580)=""/191}, 0x20) (async) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000440)=0x4, &(0x7f0000000480)=0x1) (async) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0}, 0x94) (async) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x9, 0xffff}, {0x4, 0xfff1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 437.315819ms ago: executing program 2 (id=815): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0xc4, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, {0x78, 0x1, [@m_ctinfo={0x74, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x3f, 0x6, "6bd9172da9c5dc72fa3b1755feb7a2af5b37a870d5fbfbdadb63c13c8c16f9712eec82e99e693b8f7a67eaaf469eeb81b06a7c96c89b2d96357593"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 372.740591ms ago: executing program 0 (id=816): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = accept4(r2, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000440)=0x80, 0x800) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000000)) r6 = semget$private(0x0, 0x4, 0x29b) semop(r6, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, 0x0, r8, r9) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000010c0)={{0x3, 0x0, r9, r8, r9, 0x101, 0x6}, 0x3f9, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002c00)={0x0, 0x0, 0x0}, &(0x7f0000002c40)=0xc) r11 = fcntl$getown(0xffffffffffffffff, 0x9) r12 = geteuid() r13 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r14 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)={[{@gid={'gid', 0x3d, r15}}]}) keyctl$chown(0x4, r13, 0xee01, r15) sendmsg$netlink(r3, &(0x7f0000002d80)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc, &(0x7f0000001900)=[{&(0x7f0000000280)={0x10, 0x3c, 0x400, 0x70bd27, 0x25dfdbfe}, 0x10}, {&(0x7f0000000c40)={0x290, 0x11, 0x400, 0x70bd28, 0x25dfdbfb, "", [@typed={0xc, 0x8c, 0x0, 0x0, @u64=0x3}, @generic="16b355d8966adf95cf95f5010bf6005ec86310546f406690793a3e4cdb8b4d6a8002988214b4e3709c40b6c8f0e61fa8e2a84a64f7", @nested={0x131, 0x14e, 0x0, 0x1, [@generic="425f945d55a6e41f2b5d6e98084fb127ad3453df6621569ec9922d992755e3867202addc7daeccf10d7a692f8f2113ee0da1147df65629dc1b9e8e24d30a023afa1fdd5652311df60ac82f", @nested={0x4, 0x5d}, @nested={0x4, 0xe4}, @generic, @generic="959aec3e3c2df67d642dd8b6542ddb9b16dee764fbd01028264f1ea12369c914daecd9fd5da583a659e278d50c35226233f94a607c879b2fb531dadbb422bb2eb0f3dc0b2e11c582a4e208a5c6f1394caea5a0bad183b40ea26a7faaacbe7de84ff9f912b7293d9a911056be6c2887f7b575e3f55b9a12f1b372f44608cc69bcffe8c8c1860b33803f38442699e2efd5cc61ca9fd0407f95a2fac5d57525cb7f7c0c4976b75b34b204d182321bb43f5899979352067e23c5df12a4bb1b92cfcb3457640e970122a1394e29339479c5887ddee52d0cfef467d3d5"]}, @nested={0x106, 0xb3, 0x0, 0x1, [@generic="6cfe1865083268d55c3d876af25837ebf4c51fc6d5d9bab0ade036f08e59c052a074a66bc8e0118059d10187d980fdfbcbf4ef9aaf81f02ea088245f597f174cebb7caf8751c358720426f59955047f75744007bd28865fb635e1b0e6a3b3793f67915699d52eebc75ac6c9c07d04abe7b80750065dad27875518b5032e75d18a7ac2964fd30c27835ff673167aaad31c259a3e49137edfef14a8b0346df2e9b11946115a0aef3cef4df9cc43088fa04df45445f6b50976b9d52d5b81439e3b36034e84ee8d2b1e61fd4351992443369c9b8275ac88693d4282f8d955efd7e828e4322f92a5cf860446e95b0ea22", @typed={0x14, 0x11a, 0x0, 0x0, @ipv6=@private0}]}]}, 0x290}, {&(0x7f0000000f00)={0x1bc, 0x2a, 0x304, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x81, 0x0, 0x0, @str='full'}, @nested={0xae, 0xab, 0x0, 0x1, [@nested={0x4, 0x13d}, @generic="392c92e8721c0514b88cf68ce75ac5ae42dadee7e9cac5977c66a55169efb39b2c835761eaa8cafe4dafeb5336ca2d4175e9565db5872142108368c64d4dcec7459d650efcc4d6eb5007133b2eb01ab49a21f73bab078ae20ee4cdec7016385bdda4c2d0eacbd5f60a9ee6e8eb0b51a59d45103d0da73bc848851ee0df940d66ba01df19e6ec42cfdfc57a1f7693834f7d494a0b24e83071ee32f482892bc59418f8480c301c"]}, @nested={0xf4, 0x67, 0x0, 0x1, [@generic="5e65ed9d88bf970f529437188e11ade351add34035ab96b4feae2afa08b020940db29d9607e9713de33491fdc264b0de4ea6d13a857696eed6b6fcaeff2ae17301472e0c6267c1b6c3063a0969742c763bb6aaab52ee505f709d52b37b9669195364753dffac511652bd34805fefbb15d7782486ea1cdb4cbd31cfc41c865558e9c429c7f919a3dbede64c1d6f15727bbc0e07388efb3a32bec369034f66dfd56892151ee3a84b13b6003980affe7f13491542c175045de3550d68261853502e6df29b1fb5861e5be851e5231d12979c8e408f98e1ef324745ddc5cfdff000464a4e96f000a21e1e0408cb714e6e94d5"]}]}, 0x1bc}, {&(0x7f0000001340)={0x3d0, 0x8001, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0xc4, 0x0, 0x0, @fd=r3}, @nested={0x12b, 0x9, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @uid}, @generic="feeff4a93076af5ed26cb577c42c5be4993011867de3cbd0f6f00be463a10f0e6ea70e20b2ce74", @generic="fdd86b212fd75459fd355c717034f17842fe286dfe6ac917fbf56d8e7b92ecc096adf69e9f2dd0a8a62331078cac25d2922c60245a5c03920ed465988ce59f5ad19113517e27ab49c2bba305605a43ba9f0aae90228516aeb4b0296c1cfe638d5c83f4b19350dc0fd0cc2109a80b9c62379090c44ddf638b481c605c78ffb48b53528565ac22ae715eaa1b9d286d9cf4c186c9ecd8021ca24a1821cb499f016d818543ed8e559ee8aabec6361d2da5b2393f421d78d44cb6700482dcfe8706f6ae58977d896df6ba90bf0e2ad799a15125c1600cbb87d54bffeb124f16260d7629928df3b2525c3b0bd6abab48ee716ca4ade562350ffa7c"]}, @generic="526ef6759cd2fa888f035466905d8363978f73be3620ba54484f6c401372a4a617ba10f0d05cbf4d9f83cde0355b94793eb8d278824ff06354f49edd0c48c4044af97bd766bd721797810c0e37ce766695288653fd0f654951e1596cf1c4629a277eb61ddbd371076093613d2249ee58d7f657fa416a818944ae85c83c3218d94898c96d5380b32f75a2e63772dc58117007471bb7a47016c1750782fb35bff6fe3a94c7ad6ddc688abc634128", @generic="19a82536f88edb2362cb27630fa696cf824090a1349fefe274335d243b55d1542debc5551208e0b2f6453b2f8b6e90b5e199be1e4b9eadf89b7cf5573525006444634754b170c15681096043459c0548a5c36fa53b9475968a782cb2b2823227c7de1a13691f753db127af6241407dbbeae5c0232234f402a78faccce7ca761514c982a0fe0184be3c932cfd56e4b967e6f43096a4de338a93667b1bc0d818baf556ddde7975cce0bea5a1bfdcabf7855e9200f2752ce7baa24e17b5dd62f853136a7ddf8bda3d3b1f5b89cfcb9edcdb186ea34d99e0975132ead1b7d0c9de3eab", @typed={0xc, 0xa7, 0x0, 0x0, @u64=0x6}, @generic="cc1b5f8330ab885c8f03b19e454358cff2f2173e6c8cae45f2526e762b1ae88cdeb8333397496cb7b13331b9d12166817f526ebc50", @generic="5586e0813d4bbabf2a8e2454f057cdb3dc2caaa320870b23a0c99be59516227fc502d1c5e88b413fc6603f2bc8267962caaafade03b2c3b468c24dfb7dae8eb109381e7536b291f38c6cf841e7be8d19d91f0d10a7212fddbbc94ea67abe1cfdf1848c3d5b1094b053e0fa476ad8a89fd32bd38ba115f9daed2d0643ffe56a8e856b28ebcb7ab073fe5be4120c321d5f0e8e14d25037122f812f0a0e8e2a278208100e235a4d3c4a27ddbeec3cbe2b60171a93", @typed={0x8, 0xee, 0x0, 0x0, @u32=0x40}]}, 0x3d0}, {&(0x7f0000001740)={0x18, 0x22, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@generic, @typed={0x8, 0x53, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f0000001780)={0x15c, 0x1c, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x13f, 0x0, 0x0, @u32=0x3ff}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @nested={0x103, 0x60, 0x0, 0x1, [@generic="f4c0cf4c28997f8d4d6689d3287d45d89439bb5f6e29fd0fd02741ee341097289c2a5af0a94dc46d1f6e087ee6b8467633299f47c3ec42e770b6b2458050a953013a0ed1a0f6b9f08b88d12c986860f6619a19c431d667c577e8fd8b9da7d8f3ef0b8639ea4d86269277d2d5f694ad286deeb0d249fb626fcf772e3893102d7d855d37f2346167d7f0cc51f31fbb953bda0c8639c60c33e01e6edec4531e3e1d643a36b4d95c542cba4997c6dd0ed956eae4bca1c592fe7138fa24ab1b41a1e34c3c991daf2d8f92fa67c3f64d40dd1d72babb95a3f3b5c4d35db590bb0cf17b1fb0a5785ec7ebf96c220b47bacb08", @typed={0x7, 0xae, 0x0, 0x0, @str='(^\x00'}, @typed={0x4, 0x134}, @nested={0x4, 0x132}]}, @nested={0x38, 0x101, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x133, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x151}, @typed={0x8, 0x71, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @nested={0x4, 0x50}, @nested={0x4, 0x7c}]}]}, 0x15c}], 0x6, &(0x7f0000002c80)=[@rights={{0x1c, 0x1, 0x1, [r0, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r1, r0, r5, r3]}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r15}}}], 0x100, 0x20004004}, 0x4008000) io_uring_enter(r5, 0x1e61, 0x9296, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 368.132531ms ago: executing program 2 (id=817): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0xe8, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x8, 0x8}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, {0x80, 0x1, [@m_ctinfo={0x7c, 0x4, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x10}]}, {0x3d, 0x6, "6bd9172da9c5dc72fa3b1755feb7a2af5b37a870d5fbfbdadb63c13c8c16f9712eec82e99e693b8f7a67eaaf469eeb81b06a7c96c89b2d9635"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 340.780302ms ago: executing program 2 (id=818): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa91aabb72b40000005908060001080006"], 0x0) 280.174653ms ago: executing program 2 (id=819): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000697000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000817000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000696000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 54.087289ms ago: executing program 2 (id=820): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) write(r0, &(0x7f0000000080)='4', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYBLOB="01002ebd7000000000001400000018000180140002006e6574898ac9ba66eee67a000000000008001300480a000008001200feffffff"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000045c0)=ANY=[@ANYBLOB="ebacf4000023734ed8f067588070434f298f3b57dbc8f81376aa48b25ffa52c743ea4ae55434a4c6e1e38ef9e58d74419b420a7ebadc8a128ead44dde8e9ad4ee2efcf4b7e0623031c7e9591be1f770368cc915fd2772ff81baa2dc27406c1669a25dc66b7a69c9e5fb4f4d42ff4accd18d126a020169da3f53bf19dcc943a34facfb647b0d7633500"/149, @ANYRES16=r4, @ANYBLOB="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"], 0x11a8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x5070bd28, 0x7f, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x63, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r10, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000021c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, '\'*s', 0x44, 0x2f, 0x1, @local, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x3, 0x3, 0x0, 0x1, 0x4, 0x16}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x5, 0x3, 0x1, 0x0, 0x7, 0x5}, 0x2, {0x4d, 0x84f, 0x2, 0x6, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 0s ago: executing program 4 (id=830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x3ff, r0, 'id0\x00'}) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) r1 = syz_usbip_server_init(0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x48}}, 0x0) write$usbip_server(r1, &(0x7f0000000280)=@ret_unlink={{0x4, 0x1000, 0x0, 0x1, 0x200}, {0x102}}, 0x30) unshare(0xa000200) r2 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r2, 0x0, 0xd, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x2d64, &(0x7f0000000340)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x6, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r5, 0x4) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)) kernel console output (not intermixed with test programs): . [ 46.227559][ T28] audit: type=1400 audit(1786986778.347:213): avc: denied { setopt } for pid=3736 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.257018][ T3726] loop0: detected capacity change from 0 to 512 [ 46.279414][ T28] audit: type=1400 audit(1786986778.367:214): avc: denied { create } for pid=3736 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 46.303151][ T3726] EXT4-fs: Ignoring removed orlov option [ 46.323612][ T3726] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.337929][ T28] audit: type=1400 audit(1786986778.367:215): avc: denied { ioctl } for pid=3736 comm="syz.3.69" path="socket:[5651]" dev="sockfs" ino=5651 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 46.364106][ T3726] EXT4-fs (loop0): #clusters per group too big: 139264 [ 46.412426][ T28] audit: type=1400 audit(1786986778.397:216): avc: denied { bind } for pid=3736 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.466498][ T3402] usb 3-1: enqueue for inactive port 0 [ 46.545763][ T3402] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 46.762196][ T3744] loop4: detected capacity change from 0 to 8192 [ 46.912448][ T3742] hub 1-0:1.0: USB hub found [ 46.919931][ T3742] hub 1-0:1.0: 8 ports detected [ 47.292930][ T3758] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 47.299610][ T3758] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 47.308547][ T3758] vhci_hcd vhci_hcd.0: Device attached [ 47.355060][ T3760] vhci_hcd: cannot find the pending unlink 4096 [ 47.493845][ T23] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 47.554304][ T23] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 47.761197][ T3771] hub 1-0:1.0: USB hub found [ 47.773269][ T3771] hub 1-0:1.0: 8 ports detected [ 47.855091][ T3774] loop2: detected capacity change from 0 to 512 [ 47.936464][ T3774] EXT4-fs: Ignoring removed orlov option [ 47.973936][ T3774] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 47.990022][ T3774] EXT4-fs (loop2): #clusters per group too big: 139264 [ 48.004404][ T3781] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 48.011070][ T3781] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.022659][ T3781] vhci_hcd vhci_hcd.0: Device attached [ 48.033396][ T3783] vhci_hcd: cannot find the pending unlink 4096 [ 48.069675][ T3779] loop0: detected capacity change from 0 to 8192 [ 48.125389][ T3760] vhci_hcd: connection reset by peer [ 48.152401][ T49] vhci_hcd vhci_hcd.3: stop threads [ 48.175396][ T49] vhci_hcd vhci_hcd.3: release socket [ 48.194465][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 48.204247][ T11] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 48.255808][ T3791] serio: Serial port ptm0 [ 48.263020][ T11] usb 3-1: new full-speed USB device number 3 using vhci_hcd [ 48.371415][ T3798] loop2: detected capacity change from 0 to 512 [ 48.425647][ T3798] EXT4-fs: Ignoring removed orlov option [ 48.439579][ T3798] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 48.547967][ T3798] EXT4-fs (loop2): #clusters per group too big: 139264 [ 48.712040][ T3783] vhci_hcd: connection reset by peer [ 48.718424][ T49] vhci_hcd vhci_hcd.1: stop threads [ 48.723699][ T49] vhci_hcd vhci_hcd.1: release socket [ 48.739001][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 48.973030][ T3812] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 48.979590][ T3812] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 49.147585][ T3812] vhci_hcd vhci_hcd.0: Device attached [ 49.173189][ T3525] usb 9-1: enqueue for inactive port 0 [ 49.178866][ T3525] usb 9-1: enqueue for inactive port 0 [ 49.253153][ T3525] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 49.272884][ T3810] loop1: detected capacity change from 0 to 512 [ 49.311089][ T3820] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 49.317841][ T3820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 49.331836][ T3810] EXT4-fs: Ignoring removed orlov option [ 49.339609][ T3820] vhci_hcd vhci_hcd.0: Device attached [ 49.351973][ T3810] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 49.367814][ T3810] EXT4-fs (loop1): #clusters per group too big: 139264 [ 49.379004][ T3821] vhci_hcd: cannot find the pending unlink 4096 [ 49.688371][ T3833] bridge0: port 3(syz_tun) entered blocking state [ 49.729629][ T3833] bridge0: port 3(syz_tun) entered disabled state [ 49.743116][ T3525] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 49.775582][ T3833] syz_tun: entered allmulticast mode [ 49.809347][ T3833] syz_tun: entered promiscuous mode [ 49.834589][ T3833] bridge0: port 3(syz_tun) entered blocking state [ 49.841131][ T3833] bridge0: port 3(syz_tun) entered forwarding state [ 49.842559][ T3824] loop3: detected capacity change from 0 to 512 [ 49.854537][ T3813] vhci_hcd: connection reset by peer [ 49.854805][ T49] vhci_hcd vhci_hcd.2: stop threads [ 49.854899][ T49] vhci_hcd vhci_hcd.2: release socket [ 49.854929][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 49.854982][ T3388] usb 5-1: enqueue for inactive port 0 [ 49.855005][ T3388] usb 5-1: enqueue for inactive port 0 [ 49.907891][ T3824] EXT4-fs: Ignoring removed orlov option [ 49.924535][ T3388] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 49.945200][ T3838] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 49.951819][ T3838] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 49.969129][ T3824] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 49.978684][ T3838] vhci_hcd vhci_hcd.0: Device attached [ 49.998224][ T3824] EXT4-fs (loop3): #clusters per group too big: 139264 [ 50.026355][ T3839] vhci_hcd: cannot find the pending unlink 4096 [ 50.163099][ T3821] vhci_hcd: connection reset by peer [ 50.170677][ T311] vhci_hcd vhci_hcd.4: stop threads [ 50.183469][ T311] vhci_hcd vhci_hcd.4: release socket [ 50.201702][ T311] vhci_hcd vhci_hcd.4: disconnect device [ 50.207561][ T3388] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 50.556602][ T874] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 50.582994][ T874] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.607721][ T28] audit: type=1400 audit(1786986782.717:217): avc: denied { read write } for pid=3843 comm="syz.1.102" name="hidraw0" dev="devtmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.652179][ T28] audit: type=1400 audit(1786986782.717:218): avc: denied { open } for pid=3843 comm="syz.1.102" path="/dev/hidraw0" dev="devtmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.689293][ T28] audit: type=1400 audit(1786986782.717:219): avc: denied { ioctl } for pid=3843 comm="syz.1.102" path="/dev/hidraw0" dev="devtmpfs" ino=612 ioctlcmd=0x4807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.884472][ T3854] hub 1-0:1.0: USB hub found [ 50.889981][ T3854] hub 1-0:1.0: 8 ports detected [ 50.986876][ T3839] vhci_hcd: connection reset by peer [ 51.009491][ T12] vhci_hcd vhci_hcd.2: stop threads [ 51.029070][ T12] vhci_hcd vhci_hcd.2: release socket [ 51.057016][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 51.076701][ T28] audit: type=1400 audit(1786986783.197:220): avc: denied { create } for pid=3862 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.188766][ T3871] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 51.195345][ T3871] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.202932][ T3871] vhci_hcd vhci_hcd.0: Device attached [ 51.211931][ T3872] vhci_hcd: cannot find the pending unlink 4096 [ 51.268235][ T3861] hub 1-0:1.0: USB hub found [ 51.279239][ T3861] hub 1-0:1.0: 8 ports detected [ 51.475081][ T3879] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 51.481668][ T3879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.489314][ T3879] vhci_hcd vhci_hcd.0: Device attached [ 51.493490][ T3859] hub 1-0:1.0: USB hub found [ 51.498885][ T3880] vhci_hcd: cannot find the pending unlink 4096 [ 51.505495][ T3859] hub 1-0:1.0: 8 ports detected [ 51.512354][ T3880] vhci_hcd: connection closed [ 51.514766][ T12] vhci_hcd vhci_hcd.4: stop threads [ 51.525678][ T12] vhci_hcd vhci_hcd.4: release socket [ 51.541297][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 51.619625][ T3866] hub 1-0:1.0: USB hub found [ 51.626778][ T3866] hub 1-0:1.0: 8 ports detected [ 51.829280][ T3887] loop2: detected capacity change from 0 to 512 [ 51.851727][ T3887] EXT4-fs: Ignoring removed orlov option [ 51.888585][ T3887] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 51.895323][ T3868] hub 1-0:1.0: USB hub found [ 51.913918][ T3868] hub 1-0:1.0: 8 ports detected [ 51.915223][ T3887] EXT4-fs (loop2): #clusters per group too big: 139264 [ 51.945376][ T3889] loop0: detected capacity change from 0 to 8192 [ 52.064547][ T3872] vhci_hcd: connection closed [ 52.067550][ T3424] vhci_hcd vhci_hcd.3: stop threads [ 52.093141][ T3424] vhci_hcd vhci_hcd.3: release socket [ 52.111294][ T3424] vhci_hcd vhci_hcd.3: disconnect device [ 52.519955][ T3891] hub 1-0:1.0: USB hub found [ 52.536878][ T3891] hub 1-0:1.0: 8 ports detected [ 52.626903][ T23] usb 7-1: enqueue for inactive port 0 [ 52.634996][ T23] usb 7-1: enqueue for inactive port 0 [ 52.663023][ T3908] loop0: detected capacity change from 0 to 512 [ 52.703856][ T23] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 52.808727][ T3908] EXT4-fs: Ignoring removed orlov option [ 53.207602][ T3908] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 53.246020][ T3908] EXT4-fs (loop0): #clusters per group too big: 139264 [ 53.274957][ T3912] serio: Serial port ptm0 [ 53.323717][ T3919] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 53.330479][ T3919] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.340576][ T11] usb 3-1: enqueue for inactive port 0 [ 53.347208][ T11] usb 3-1: enqueue for inactive port 0 [ 53.353960][ T3919] vhci_hcd vhci_hcd.0: Device attached [ 53.416196][ T3920] vhci_hcd: cannot find the pending unlink 4096 [ 53.423433][ T11] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 53.539788][ T3925] bridge0: port 3(syz_tun) entered blocking state [ 53.560954][ T3925] bridge0: port 3(syz_tun) entered disabled state [ 53.635300][ T3925] syz_tun: entered allmulticast mode [ 53.654696][ T3925] syz_tun: entered promiscuous mode [ 53.712987][ T3925] bridge0: port 3(syz_tun) entered blocking state [ 53.719590][ T3925] bridge0: port 3(syz_tun) entered forwarding state [ 53.833814][ T3933] loop1: detected capacity change from 0 to 8192 [ 53.933275][ T23] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 53.998644][ T3943] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 54.005229][ T3943] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.041484][ T3943] vhci_hcd vhci_hcd.0: Device attached [ 54.052624][ T3944] vhci_hcd: cannot find the pending unlink 4096 [ 54.144262][ T3920] vhci_hcd: connection reset by peer [ 54.150507][ T12] vhci_hcd vhci_hcd.3: stop threads [ 54.156696][ T12] vhci_hcd vhci_hcd.3: release socket [ 54.157809][ T3941] hub 1-0:1.0: USB hub found [ 54.169225][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 54.215224][ T3952] serio: Serial port ptm1 [ 54.219191][ T3941] hub 1-0:1.0: 8 ports detected [ 54.244170][ T3855] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.267781][ T3855] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.367065][ T11] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 54.768314][ T3944] vhci_hcd: connection reset by peer [ 54.791113][ T49] vhci_hcd vhci_hcd.1: stop threads [ 54.796464][ T49] vhci_hcd vhci_hcd.1: release socket [ 54.803654][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 54.830582][ T3963] loop4: detected capacity change from 0 to 512 [ 54.896167][ T3963] EXT4-fs: Ignoring removed orlov option [ 54.912531][ T3963] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 54.932965][ T3525] usb 9-1: enqueue for inactive port 0 [ 54.936727][ T3402] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 54.938778][ T3525] usb 9-1: enqueue for inactive port 0 [ 54.952344][ T3963] EXT4-fs (loop4): #clusters per group too big: 139264 [ 54.952485][ T3402] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 55.042910][ T3525] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 55.249276][ T3973] loop2: detected capacity change from 0 to 8192 [ 55.428827][ T3983] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 55.435470][ T3983] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.475833][ T3983] vhci_hcd vhci_hcd.0: Device attached [ 55.532154][ T3984] vhci_hcd: unlink->seqnum 5 [ 55.537068][ T3984] vhci_hcd: cannot find the pending unlink 4096 [ 56.061032][ T3984] vhci_hcd: connection reset by peer [ 56.067753][ T12] vhci_hcd vhci_hcd.2: stop threads [ 56.084328][ T12] vhci_hcd vhci_hcd.2: release socket [ 56.103982][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 56.272000][ T3991] hub 1-0:1.0: USB hub found [ 56.279283][ T3991] hub 1-0:1.0: 8 ports detected [ 56.626735][ T4011] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 56.633401][ T4011] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.674921][ T4011] vhci_hcd vhci_hcd.0: Device attached [ 56.992127][ T4012] hub 1-0:1.0: USB hub found [ 57.016282][ T4012] hub 1-0:1.0: 8 ports detected [ 57.195621][ T4028] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 57.202216][ T4028] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.207261][ T4024] hub 1-0:1.0: USB hub found [ 57.224813][ T4028] vhci_hcd vhci_hcd.0: Device attached [ 57.235055][ T4024] hub 1-0:1.0: 8 ports detected [ 57.254697][ T4032] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 57.255228][ T4029] vhci_hcd: cannot find the pending unlink 4096 [ 57.261259][ T4032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.268526][ T4032] vhci_hcd vhci_hcd.0: Device attached [ 57.307446][ T4033] vhci_hcd: cannot find the pending unlink 4096 [ 57.373636][ T4013] vhci_hcd: connection reset by peer [ 57.379173][ T49] vhci_hcd vhci_hcd.2: stop threads [ 57.385170][ T49] vhci_hcd vhci_hcd.2: release socket [ 57.391726][ T4040] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 57.398279][ T4040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.406273][ T4040] vhci_hcd vhci_hcd.0: Device attached [ 57.411135][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 57.416304][ T4041] vhci_hcd: cannot find the pending unlink 4096 [ 57.454318][ T4044] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 57.460899][ T4044] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.480323][ T4044] vhci_hcd vhci_hcd.0: Device attached [ 57.518675][ T4045] vhci_hcd: cannot find the pending unlink 4096 [ 57.533446][ T3374] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 57.582849][ T3525] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 57.594219][ T3374] usb 1-1: new full-speed USB device number 3 using vhci_hcd [ 57.608972][ T4041] vhci_hcd: connection closed [ 57.609302][ T311] vhci_hcd vhci_hcd.4: stop threads [ 57.619463][ T311] vhci_hcd vhci_hcd.4: release socket [ 57.625076][ T311] vhci_hcd vhci_hcd.4: disconnect device [ 57.642947][ T3525] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 57.652309][ T3525] usb 9-1: enqueue for inactive port 0 [ 57.658020][ T3525] usb 9-1: enqueue for inactive port 0 [ 57.663682][ T3525] usb 9-1: enqueue for inactive port 0 [ 57.732883][ T3525] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 57.856997][ T4033] vhci_hcd: connection closed [ 57.861212][ T311] vhci_hcd vhci_hcd.3: stop threads [ 57.885040][ T4029] vhci_hcd: connection reset by peer [ 57.892904][ T311] vhci_hcd vhci_hcd.3: release socket [ 57.898798][ T311] vhci_hcd vhci_hcd.3: disconnect device [ 57.919256][ T311] vhci_hcd vhci_hcd.0: stop threads [ 57.926220][ T311] vhci_hcd vhci_hcd.0: release socket [ 57.931816][ T311] vhci_hcd vhci_hcd.0: disconnect device [ 57.980750][ T4059] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 57.987308][ T4059] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.995934][ T4059] vhci_hcd vhci_hcd.0: Device attached [ 58.007082][ T4061] vhci_hcd: cannot find the pending unlink 4096 [ 58.117127][ T4045] vhci_hcd: connection closed [ 58.119363][ T49] vhci_hcd vhci_hcd.2: stop threads [ 58.150396][ T49] vhci_hcd vhci_hcd.2: release socket [ 58.160430][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 58.175549][ T4069] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 58.182132][ T4069] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.189743][ T4069] vhci_hcd vhci_hcd.0: Device attached [ 58.197571][ T4070] vhci_hcd: cannot find the pending unlink 4096 [ 58.432852][ T3525] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 58.722229][ T4061] vhci_hcd: connection closed [ 58.722604][ T3424] vhci_hcd vhci_hcd.1: stop threads [ 58.748287][ T3424] vhci_hcd vhci_hcd.1: release socket [ 58.756726][ T3424] vhci_hcd vhci_hcd.1: disconnect device [ 58.842989][ T4070] vhci_hcd: connection reset by peer [ 58.861644][ T3424] vhci_hcd vhci_hcd.4: stop threads [ 58.867089][ T3424] vhci_hcd vhci_hcd.4: release socket [ 58.875551][ T3424] vhci_hcd vhci_hcd.4: disconnect device [ 58.932593][ T4091] serio: Serial port ptm0 [ 59.052691][ T3375] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 59.062173][ T3375] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.173382][ T23] usb 7-1: enqueue for inactive port 0 [ 59.184398][ T23] usb 7-1: enqueue for inactive port 0 [ 59.263868][ T23] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 59.519018][ T4113] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 59.525647][ T4113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.542193][ T4117] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 59.547104][ T4113] vhci_hcd vhci_hcd.0: Device attached [ 59.548842][ T4117] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.558913][ T4117] vhci_hcd vhci_hcd.0: Device attached [ 59.572494][ T4114] vhci_hcd: cannot find the pending unlink 4096 [ 59.574965][ T4119] vhci_hcd: cannot find the pending unlink 4096 [ 59.745061][ T4132] loop3: detected capacity change from 0 to 8192 [ 60.106535][ T4114] vhci_hcd: connection reset by peer [ 60.113170][ T362] vhci_hcd vhci_hcd.1: stop threads [ 60.127330][ T362] vhci_hcd vhci_hcd.1: release socket [ 60.137504][ T362] vhci_hcd vhci_hcd.1: disconnect device [ 60.205917][ T4119] vhci_hcd: connection closed [ 60.209042][ T362] vhci_hcd vhci_hcd.4: stop threads [ 60.220838][ T362] vhci_hcd vhci_hcd.4: release socket [ 60.230972][ T362] vhci_hcd vhci_hcd.4: disconnect device [ 60.358993][ T4150] serio: Serial port ptm1 [ 60.677610][ T4161] loop2: detected capacity change from 0 to 8192 [ 60.948875][ T4164] bridge0: port 3(syz_tun) entered blocking state [ 60.963606][ T4164] bridge0: port 3(syz_tun) entered disabled state [ 60.979268][ T4164] syz_tun: entered allmulticast mode [ 60.994591][ T4164] syz_tun: entered promiscuous mode [ 61.018107][ T4164] bridge0: port 3(syz_tun) entered blocking state [ 61.025435][ T4164] bridge0: port 3(syz_tun) entered forwarding state [ 61.173077][ T3388] usb 5-1: enqueue for inactive port 0 [ 61.243170][ T3388] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 61.833882][ T4193] serio: Serial port ptm1 [ 61.986437][ T3389] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 61.998148][ T3389] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.395275][ T4215] loop1: detected capacity change from 0 to 512 [ 62.413599][ T4215] EXT4-fs: Ignoring removed orlov option [ 62.428804][ T4215] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 62.437886][ T4215] EXT4-fs (loop1): #clusters per group too big: 139264 [ 62.613231][ T3374] usb 1-1: enqueue for inactive port 0 [ 62.621833][ T3374] usb 1-1: enqueue for inactive port 0 [ 62.703815][ T3374] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 62.736441][ T28] audit: type=1400 audit(1786986794.857:221): avc: denied { mmap_zero } for pid=4219 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 62.759756][ T4220] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 63.177149][ T4229] loop2: detected capacity change from 0 to 512 [ 63.243370][ T4229] EXT4-fs: Ignoring removed orlov option [ 63.256034][ T4229] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 63.268094][ T4229] EXT4-fs (loop2): #clusters per group too big: 139264 [ 63.327412][ T4231] loop1: detected capacity change from 0 to 512 [ 63.386002][ T4231] EXT4-fs: Ignoring removed orlov option [ 63.401516][ T4231] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 63.413358][ T4231] EXT4-fs (loop1): #clusters per group too big: 139264 [ 63.522477][ T4239] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 63.529062][ T4239] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.560121][ T4239] vhci_hcd vhci_hcd.0: Device attached [ 63.577150][ T4228] hub 1-0:1.0: USB hub found [ 63.584239][ T4228] hub 1-0:1.0: 8 ports detected [ 63.592345][ T4240] vhci_hcd: cannot find the pending unlink 4096 [ 63.675702][ T4246] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 63.682263][ T4246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.700409][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 63.706723][ T4246] vhci_hcd vhci_hcd.0: Device attached [ 63.727957][ T3374] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.760132][ T4247] vhci_hcd: cannot find the pending unlink 4096 [ 63.768196][ T4252] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 63.774766][ T4252] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.809650][ T4252] vhci_hcd vhci_hcd.0: Device attached [ 63.835117][ T4253] vhci_hcd: cannot find the pending unlink 4096 [ 63.892832][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 63.953335][ T9] usb 7-1: new full-speed USB device number 4 using vhci_hcd [ 63.992847][ T3409] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 64.062812][ T3409] usb 5-1: new full-speed USB device number 4 using vhci_hcd [ 64.307004][ T4240] vhci_hcd: connection reset by peer [ 64.312991][ T12] vhci_hcd vhci_hcd.4: stop threads [ 64.318663][ T12] vhci_hcd vhci_hcd.4: release socket [ 64.324433][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 64.419485][ T4253] vhci_hcd: connection reset by peer [ 64.439793][ T12] vhci_hcd vhci_hcd.2: stop threads [ 64.448574][ T12] vhci_hcd vhci_hcd.2: release socket [ 64.458887][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 64.525951][ T4247] vhci_hcd: connection reset by peer [ 64.539676][ T362] vhci_hcd vhci_hcd.3: stop threads [ 64.545164][ T362] vhci_hcd vhci_hcd.3: release socket [ 64.559801][ T362] vhci_hcd vhci_hcd.3: disconnect device [ 64.626440][ T4272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 64.714462][ T28] audit: type=1400 audit(1786986796.807:222): avc: denied { create } for pid=4268 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.768898][ T28] audit: type=1400 audit(1786986796.877:223): avc: denied { create } for pid=4282 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.819460][ T28] audit: type=1400 audit(1786986796.887:224): avc: denied { write } for pid=4282 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.884615][ T28] audit: type=1400 audit(1786986796.887:225): avc: denied { ioctl } for pid=4282 comm="syz.2.240" path="socket:[6896]" dev="sockfs" ino=6896 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.943669][ T28] audit: type=1400 audit(1786986796.887:226): avc: denied { read write } for pid=4282 comm="syz.2.240" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 64.970164][ T28] audit: type=1400 audit(1786986796.887:227): avc: denied { open } for pid=4282 comm="syz.2.240" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.055626][ T4294] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 65.059779][ T28] audit: type=1400 audit(1786986796.977:228): avc: denied { perfmon } for pid=4286 comm="syz.0.242" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.062271][ T4294] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.098370][ T4294] vhci_hcd vhci_hcd.0: Device attached [ 65.123267][ T28] audit: type=1400 audit(1786986796.987:229): avc: denied { bpf } for pid=4288 comm="syz.2.243" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.179503][ T11] usb 3-1: enqueue for inactive port 0 [ 65.188041][ T28] audit: type=1400 audit(1786986796.997:230): avc: denied { create } for pid=4288 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.253266][ T11] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 65.322065][ T4287] hub 1-0:1.0: USB hub found [ 65.355827][ T4287] hub 1-0:1.0: 8 ports detected [ 65.778384][ T4295] vhci_hcd: connection closed [ 65.779444][ T362] vhci_hcd vhci_hcd.2: stop threads [ 65.806026][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 65.815413][ T3374] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 65.826016][ T362] vhci_hcd vhci_hcd.2: release socket [ 65.842958][ T362] vhci_hcd vhci_hcd.2: disconnect device [ 66.675567][ T4325] FAULT_INJECTION: forcing a failure. [ 66.675567][ T4325] name failslab, interval 1, probability 0, space 0, times 1 [ 66.688721][ T4325] CPU: 1 UID: 0 PID: 4325 Comm: syz.4.254 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.688771][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.688788][ T4325] Call Trace: [ 66.688795][ T4325] [ 66.688803][ T4325] __dump_stack+0x1d/0x30 [ 66.688831][ T4325] dump_stack_lvl+0x95/0xd0 [ 66.688859][ T4325] dump_stack+0x15/0x1b [ 66.688885][ T4325] should_fail_ex+0x25e/0x270 [ 66.688981][ T4325] should_failslab+0x8c/0xb0 [ 66.689007][ T4325] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 66.689079][ T4325] ? skb_clone+0x151/0x1f0 [ 66.689101][ T4325] ? skb_clone+0x151/0x1f0 [ 66.689138][ T4325] skb_clone+0x151/0x1f0 [ 66.689165][ T4325] __netlink_deliver_tap+0x2be/0x510 [ 66.689206][ T4325] netlink_unicast+0x654/0x680 [ 66.689268][ T4325] netlink_sendmsg+0x5be/0x6f0 [ 66.689306][ T4325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.689344][ T4325] ____sys_sendmsg+0x532/0x580 [ 66.689367][ T4325] ___sys_sendmsg+0x195/0x1e0 [ 66.689468][ T4325] __x64_sys_sendmsg+0xd4/0x160 [ 66.689492][ T4325] x64_sys_call+0x194c/0x3020 [ 66.689526][ T4325] do_syscall_64+0x136/0x3c0 [ 66.689618][ T4325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.689663][ T4325] RIP: 0033:0x7f915ff8e0d9 [ 66.689728][ T4325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.689752][ T4325] RSP: 002b:00007f915e9e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.689778][ T4325] RAX: ffffffffffffffda RBX: 00007f9160215fa0 RCX: 00007f915ff8e0d9 [ 66.689804][ T4325] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 66.689821][ T4325] RBP: 00007f915e9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.689897][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.689977][ T4325] R13: 00007f9160216038 R14: 00007f9160215fa0 R15: 00007fff935f7c48 [ 66.690072][ T4325] [ 66.898532][ T4327] loop1: detected capacity change from 0 to 512 [ 66.912257][ T4327] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.939609][ T4327] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.256: bad orphan inode 13 [ 66.963604][ T4327] loop1: lost filesystem error report for type 5 error -117 [ 66.966816][ T4327] ext4_test_bit(bit=12, block=18) = 1 [ 66.974201][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 66.974219][ C1] EXT4-fs (loop1): last error at time 1786986799: ext4_orphan_get:1425 [ 67.000377][ T4327] is_bad_inode(inode)=0 [ 67.009259][ T4327] NEXT_ORPHAN(inode)=0 [ 67.013664][ T4327] max_ino=32 [ 67.016927][ T4327] i_nlink=1 [ 67.020524][ T4327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 67.051684][ T4327] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 67.066216][ T4342] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 67.072768][ T4342] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.080517][ T4342] vhci_hcd vhci_hcd.0: Device attached [ 67.081717][ T4327] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.256: bg 0: block 248: padding at end of block bitmap is not set [ 67.089625][ T4344] vhci_hcd: cannot find the pending unlink 4096 [ 67.131666][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 67.153401][ T3388] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.173312][ T4327] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.256: Failed to acquire dquot type 1 [ 67.586851][ T4364] loop0: detected capacity change from 0 to 1024 [ 67.606073][ T4364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.625071][ T4364] EXT4-fs (loop0): unable to read superblock [ 67.805659][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 67.805690][ T28] audit: type=1400 audit(1786986799.927:245): avc: denied { write } for pid=4326 comm="syz.1.256" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.812914][ T4344] vhci_hcd: connection reset by peer [ 67.898989][ T28] audit: type=1400 audit(1786986799.927:246): avc: denied { add_name } for pid=4326 comm="syz.1.256" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.934662][ T3424] vhci_hcd vhci_hcd.4: stop threads [ 67.941348][ T3424] vhci_hcd vhci_hcd.4: release socket [ 67.952338][ T4327] syz.1.256 (4327) used greatest stack depth: 9696 bytes left [ 67.953732][ T28] audit: type=1400 audit(1786986799.927:247): avc: denied { create } for pid=4326 comm="syz.1.256" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.973083][ T3424] vhci_hcd vhci_hcd.4: disconnect device [ 68.002985][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 68.012634][ T28] audit: type=1400 audit(1786986800.037:248): avc: denied { write } for pid=4370 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.017077][ T49] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 68.051738][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 68.064335][ T49] loop1: lost filesystem error report for type 5 error -117 [ 68.195970][ T4380] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 68.209826][ T4380] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.227827][ T4380] vhci_hcd vhci_hcd.0: Device attached [ 68.236511][ T4381] vhci_hcd: cannot find the pending unlink 4096 [ 68.430547][ T3855] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 68.512833][ T3855] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 68.681886][ T4396] loop0: detected capacity change from 0 to 512 [ 68.704979][ T4396] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.732315][ T4396] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 68.762179][ T4396] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.278: inode #15: comm syz.0.278: iget: illegal inode # [ 68.778903][ T4396] loop0: lost filesystem error report for type 5 error -117 [ 68.780416][ T4396] EXT4-fs (loop0): Remounting filesystem read-only [ 68.788039][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 68.788062][ C1] EXT4-fs (loop0): initial error at time 1786986800: ext4_orphan_get:1399 [ 68.788088][ C1] EXT4-fs (loop0): last error at time 1786986800: ext4_orphan_get:1399 [ 68.819979][ T4396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.839222][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 68.867881][ T28] audit: type=1400 audit(1786986800.987:249): avc: denied { create } for pid=4395 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.899810][ T4381] vhci_hcd: connection reset by peer [ 68.916856][ T49] vhci_hcd vhci_hcd.1: stop threads [ 68.922275][ T49] vhci_hcd vhci_hcd.1: release socket [ 68.925379][ T28] audit: type=1400 audit(1786986801.037:250): avc: denied { map_create } for pid=4395 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.947137][ T28] audit: type=1400 audit(1786986801.047:251): avc: denied { write } for pid=4395 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.955767][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 68.974689][ T28] audit: type=1400 audit(1786986801.067:252): avc: denied { read } for pid=4395 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.019757][ T4400] loop1: detected capacity change from 0 to 128 [ 69.027536][ T9] usb 7-1: enqueue for inactive port 0 [ 69.033362][ T9] usb 7-1: enqueue for inactive port 0 [ 69.039496][ T28] audit: type=1400 audit(1786986801.127:253): avc: denied { connect } for pid=4395 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.049868][ T4400] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.088287][ T4400] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.200231][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 69.206780][ T3409] usb 5-1: enqueue for inactive port 0 [ 69.212362][ T3409] usb 5-1: enqueue for inactive port 0 [ 69.283622][ T3409] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 69.344138][ T3525] usb 9-1: enqueue for inactive port 0 [ 69.416909][ T4408] loop4: detected capacity change from 0 to 512 [ 69.424963][ T3525] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 69.476946][ T4408] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.280: Unimplemented hash flags: 0x0001 [ 69.513307][ T4408] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.280: Corrupt directory, running e2fsck is recommended [ 69.564796][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.579182][ T4408] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 69.598473][ T4408] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.280: corrupted in-inode xattr: invalid ea_ino [ 69.628304][ T4408] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.628539][ T4408] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.280: couldn't read orphan inode 15 (err -117) [ 69.638632][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 69.638657][ C0] EXT4-fs (loop4): initial error at time 1786986801: ext4_iget_extra_inode:5180: inode 15 [ 69.638682][ C0] EXT4-fs (loop4): last error at time 1786986801: ext4_iget_extra_inode:5180: inode 15 [ 69.743989][ T4408] loop4: lost filesystem error report for type 5 error -117 [ 69.744903][ T4408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.846989][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.860647][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.482936][ T4418] hub 1-0:1.0: USB hub found [ 70.504138][ T4418] hub 1-0:1.0: 8 ports detected [ 70.664339][ T4436] loop0: detected capacity change from 0 to 512 [ 70.687598][ T4439] loop1: detected capacity change from 0 to 512 [ 70.702466][ T4439] ======================================================= [ 70.702466][ T4439] WARNING: The mand mount option has been deprecated and [ 70.702466][ T4439] and is ignored by this kernel. Remove the mand [ 70.702466][ T4439] option from the mount to silence this warning. [ 70.702466][ T4439] ======================================================= [ 70.829815][ T4436] EXT4-fs: Ignoring removed orlov option [ 70.850300][ T4434] hub 1-0:1.0: USB hub found [ 70.871156][ T4436] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 70.881106][ T4434] hub 1-0:1.0: 8 ports detected [ 70.893090][ T4436] EXT4-fs (loop0): #clusters per group too big: 139264 [ 70.905139][ T4439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.934622][ T4439] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.159764][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.253000][ T4446] hub 1-0:1.0: USB hub found [ 71.300717][ T4446] hub 1-0:1.0: 8 ports detected [ 71.750973][ T4485] can0: slcan on ttyS3. [ 71.814752][ T4485] can0 (unregistered): slcan off ttyS3. [ 71.822201][ T4485] Falling back ldisc for ttyS3. [ 71.828754][ T4486] loop3: detected capacity change from 0 to 128 [ 71.868229][ T4486] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.908897][ T4486] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.015764][ T4482] hub 1-0:1.0: USB hub found [ 72.029480][ T3295] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.045449][ T4482] hub 1-0:1.0: 8 ports detected [ 72.241940][ T4505] serio: Serial port ptm2 [ 72.416362][ T4498] loop2: detected capacity change from 0 to 512 [ 72.681816][ T4498] EXT4-fs: Ignoring removed orlov option [ 72.721516][ T4498] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 72.764891][ T4498] EXT4-fs (loop2): #clusters per group too big: 139264 [ 72.832418][ T4508] hub 1-0:1.0: USB hub found [ 72.859267][ T4508] hub 1-0:1.0: 8 ports detected [ 73.203659][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 73.203678][ T28] audit: type=1400 audit(1786986805.317:327): avc: denied { create } for pid=4528 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.355021][ T4531] hub 1-0:1.0: USB hub found [ 73.361334][ T4531] hub 1-0:1.0: 8 ports detected [ 73.445755][ T28] audit: type=1400 audit(1786986805.567:328): avc: denied { bind } for pid=4538 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.517490][ T28] audit: type=1400 audit(1786986805.567:329): avc: denied { setopt } for pid=4538 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.574192][ T3855] usb 3-1: enqueue for inactive port 0 [ 73.577107][ T28] audit: type=1400 audit(1786986805.617:330): avc: denied { write } for pid=4538 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.596181][ T3855] usb 3-1: enqueue for inactive port 0 [ 73.624776][ T4543] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 73.631364][ T4543] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.641339][ T28] audit: type=1400 audit(1786986805.727:331): avc: denied { name_bind } for pid=4542 comm="syz.3.325" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 73.674450][ T4543] vhci_hcd vhci_hcd.0: Device attached [ 73.687344][ T28] audit: type=1400 audit(1786986805.727:332): avc: denied { node_bind } for pid=4542 comm="syz.3.325" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.708329][ T4546] vhci_hcd: cannot find the pending unlink 4096 [ 73.713097][ T3855] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 73.716124][ T4537] loop4: detected capacity change from 0 to 512 [ 73.728994][ T4550] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 73.735618][ T4550] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.755216][ T28] audit: type=1400 audit(1786986805.867:333): avc: denied { sqpoll } for pid=4542 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.796140][ T4537] EXT4-fs: Ignoring removed orlov option [ 73.803236][ T4550] vhci_hcd vhci_hcd.0: Device attached [ 73.823952][ T4537] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 73.838093][ T4537] EXT4-fs (loop4): #clusters per group too big: 139264 [ 73.854245][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 73.922887][ T9] usb 7-1: new full-speed USB device number 5 using vhci_hcd [ 73.982848][ T3388] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 73.991923][ T4563] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 73.998471][ T4563] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.006445][ T4563] vhci_hcd vhci_hcd.0: Device attached [ 74.015174][ T4564] vhci_hcd: cannot find the pending unlink 4096 [ 74.043117][ T3388] usb 1-1: new full-speed USB device number 4 using vhci_hcd [ 74.182821][ T3374] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 74.242828][ T3374] usb 9-1: new full-speed USB device number 4 using vhci_hcd [ 74.285213][ T4546] vhci_hcd: connection reset by peer [ 74.290929][ T49] vhci_hcd vhci_hcd.3: stop threads [ 74.306321][ T49] vhci_hcd vhci_hcd.3: release socket [ 74.321987][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 74.364632][ T4551] vhci_hcd: connection reset by peer [ 74.377073][ T49] vhci_hcd vhci_hcd.0: stop threads [ 74.401774][ T49] vhci_hcd vhci_hcd.0: release socket [ 74.421595][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 74.434403][ T28] audit: type=1400 audit(1786986806.547:334): avc: denied { create } for pid=4573 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.465577][ T28] audit: type=1400 audit(1786986806.547:335): avc: denied { bind } for pid=4573 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.485724][ T28] audit: type=1400 audit(1786986806.547:336): avc: denied { listen } for pid=4573 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.635543][ T4564] vhci_hcd: connection reset by peer [ 74.646717][ T3424] vhci_hcd vhci_hcd.4: stop threads [ 74.652010][ T3424] vhci_hcd vhci_hcd.4: release socket [ 74.661717][ T3424] vhci_hcd vhci_hcd.4: disconnect device [ 74.691895][ T23] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 74.703414][ T23] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.768007][ T4599] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 74.774627][ T4599] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.802859][ T4599] vhci_hcd vhci_hcd.0: Device attached [ 74.837655][ T4601] vhci_hcd: cannot find the pending unlink 4096 [ 74.983076][ T23] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 74.998321][ T4616] FAULT_INJECTION: forcing a failure. [ 74.998321][ T4616] name failslab, interval 1, probability 0, space 0, times 0 [ 75.022873][ T4616] CPU: 1 UID: 0 PID: 4616 Comm: syz.3.344 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.022907][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.022920][ T4616] Call Trace: [ 75.022927][ T4616] [ 75.022935][ T4616] __dump_stack+0x1d/0x30 [ 75.022990][ T4616] dump_stack_lvl+0x95/0xd0 [ 75.023012][ T4616] dump_stack+0x15/0x1b [ 75.023039][ T4616] should_fail_ex+0x25e/0x270 [ 75.023108][ T4616] should_failslab+0x8c/0xb0 [ 75.023140][ T4616] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 75.023172][ T4616] ? io_submit_one+0xcf/0x1350 [ 75.023201][ T4616] ? io_submit_one+0xcf/0x1350 [ 75.023245][ T4616] io_submit_one+0xcf/0x1350 [ 75.023276][ T4616] __se_sys_io_submit+0xfb/0x280 [ 75.023324][ T4616] __x64_sys_io_submit+0x43/0x50 [ 75.023409][ T4616] x64_sys_call+0x19d5/0x3020 [ 75.023460][ T4616] do_syscall_64+0x136/0x3c0 [ 75.023487][ T4616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.023515][ T4616] RIP: 0033:0x7f7452cee0d9 [ 75.023533][ T4616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.023610][ T4616] RSP: 002b:00007f7451747028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 75.023638][ T4616] RAX: ffffffffffffffda RBX: 00007f7452f75fa0 RCX: 00007f7452cee0d9 [ 75.023657][ T4616] RDX: 0000200000001240 RSI: 0000000000000001 RDI: 00007f7451716000 [ 75.023671][ T4616] RBP: 00007f7451747090 R08: 0000000000000000 R09: 0000000000000000 [ 75.023684][ T4616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.023775][ T4616] R13: 00007f7452f76038 R14: 00007f7452f75fa0 R15: 00007fffcda60428 [ 75.023795][ T4616] [ 75.204216][ T23] usb 3-1: new full-speed USB device number 5 using vhci_hcd [ 75.384395][ T4628] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 75.390954][ T4628] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.398842][ T4628] vhci_hcd vhci_hcd.0: Device attached [ 75.408931][ T4629] vhci_hcd: cannot find the pending unlink 4096 [ 75.416721][ T4631] tipc: Started in network mode [ 75.434179][ T4631] tipc: Node identity 2007ff, cluster identity 4711 [ 75.452028][ T4631] tipc: Node number set to 2099199 [ 75.582875][ T3402] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 75.643987][ T3402] usb 5-1: new full-speed USB device number 5 using vhci_hcd [ 75.704057][ T4601] vhci_hcd: connection reset by peer [ 75.720181][ T3424] vhci_hcd vhci_hcd.1: stop threads [ 75.729488][ T3424] vhci_hcd vhci_hcd.1: release socket [ 75.741403][ T3424] vhci_hcd vhci_hcd.1: disconnect device [ 76.147127][ T4629] vhci_hcd: connection reset by peer [ 76.156955][ T3424] vhci_hcd vhci_hcd.2: stop threads [ 76.162835][ T3424] vhci_hcd vhci_hcd.2: release socket [ 76.168467][ T3424] vhci_hcd vhci_hcd.2: disconnect device [ 76.200431][ T3855] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 76.211107][ T3855] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.376574][ T4658] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 76.383158][ T4658] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.392825][ T4658] vhci_hcd vhci_hcd.0: Device attached [ 76.589962][ T4668] netlink: 44 bytes leftover after parsing attributes in process `syz.4.362'. [ 76.615724][ T4674] loop1: detected capacity change from 0 to 256 [ 76.628018][ T4674] vfat: Unknown parameter '' [ 76.658105][ T4668] bridge0: port 3(syz_tun) entered disabled state [ 76.665900][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.674506][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.757623][ T3389] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 76.769153][ T3389] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.002741][ T4659] vhci_hcd: connection closed [ 77.005134][ T49] vhci_hcd vhci_hcd.3: stop threads [ 77.084285][ T4689] netlink: 'syz.1.364': attribute type 29 has an invalid length. [ 77.101761][ T49] vhci_hcd vhci_hcd.3: release socket [ 77.117926][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 77.631687][ T3525] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 77.642786][ T3525] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.942973][ T4710] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 77.949620][ T4710] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.960668][ T4710] vhci_hcd vhci_hcd.0: Device attached [ 78.474792][ T4731] loop3: detected capacity change from 0 to 512 [ 78.481818][ T4731] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.495433][ T4731] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.506804][ T4731] EXT4-fs (loop3): 1 truncate cleaned up [ 78.521876][ T4731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.552705][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 78.552718][ T28] audit: type=1400 audit(1786986810.667:362): avc: denied { write } for pid=4730 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.601516][ T4711] vhci_hcd: connection closed [ 78.601745][ T49] vhci_hcd vhci_hcd.2: stop threads [ 78.627781][ T49] vhci_hcd vhci_hcd.2: release socket [ 78.648125][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 78.668238][ T3389] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 78.682128][ T3389] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.893151][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.923857][ T4747] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 78.930502][ T4747] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.952455][ T4747] vhci_hcd vhci_hcd.0: Device attached [ 78.961165][ T4749] vhci_hcd: cannot find the pending unlink 4096 [ 79.012957][ T3855] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 79.020511][ T9] usb 7-1: enqueue for inactive port 0 [ 79.031159][ T9] usb 7-1: enqueue for inactive port 0 [ 79.063745][ T4757] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 79.070381][ T4757] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.088995][ T4757] vhci_hcd vhci_hcd.0: Device attached [ 79.095166][ T3388] usb 1-1: enqueue for inactive port 0 [ 79.105102][ T3388] usb 1-1: enqueue for inactive port 0 [ 79.114422][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 79.119140][ T4758] vhci_hcd: cannot find the pending unlink 4096 [ 79.202910][ T3388] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 79.399775][ T3855] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.426644][ T4766] fido_id[4766]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.508021][ T4770] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 79.514583][ T4770] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.522128][ T4770] vhci_hcd vhci_hcd.0: Device attached [ 79.532295][ T4771] vhci_hcd: cannot find the pending unlink 4096 [ 79.663083][ T4758] vhci_hcd: connection reset by peer [ 79.669688][ T311] vhci_hcd vhci_hcd.4: stop threads [ 79.683942][ T311] vhci_hcd vhci_hcd.4: release socket [ 79.693028][ T311] vhci_hcd vhci_hcd.4: disconnect device [ 79.702891][ T4749] vhci_hcd: connection closed [ 79.703033][ T12] vhci_hcd vhci_hcd.1: stop threads [ 79.721896][ T12] vhci_hcd vhci_hcd.1: release socket [ 79.727550][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 79.738737][ T28] audit: type=1400 audit(1786986811.857:363): avc: denied { create } for pid=4780 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.764576][ T4783] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 79.771212][ T4783] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.779069][ T4783] vhci_hcd vhci_hcd.0: Device attached [ 79.792272][ T4784] vhci_hcd: cannot find the pending unlink 4096 [ 80.021811][ T4776] hub 1-0:1.0: USB hub found [ 80.029495][ T4776] hub 1-0:1.0: 8 ports detected [ 80.102284][ T4789] hub 1-0:1.0: USB hub found [ 80.108641][ T4789] hub 1-0:1.0: 8 ports detected [ 80.116261][ T4771] vhci_hcd: connection closed [ 80.130199][ T49] vhci_hcd vhci_hcd.2: stop threads [ 80.145273][ T49] vhci_hcd vhci_hcd.2: release socket [ 80.155239][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 80.197408][ T4803] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 80.204051][ T4803] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.215579][ T4803] vhci_hcd vhci_hcd.0: Device attached [ 80.236652][ T4806] vhci_hcd: cannot find the pending unlink 4096 [ 80.247958][ T874] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 80.255816][ T874] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.503029][ T3525] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 80.532467][ T874] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 80.545407][ T874] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz1] on syz0 [ 80.562853][ T3525] usb 1-1: new full-speed USB device number 5 using vhci_hcd [ 80.579139][ T4784] vhci_hcd: connection reset by peer [ 80.593081][ T49] vhci_hcd vhci_hcd.1: stop threads [ 80.599836][ T49] vhci_hcd vhci_hcd.1: release socket [ 80.614647][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 80.693473][ T3402] usb 5-1: enqueue for inactive port 0 [ 80.699077][ T3402] usb 5-1: enqueue for inactive port 0 [ 80.748409][ T28] audit: type=1400 audit(1786986812.867:364): avc: denied { ioctl } for pid=4820 comm="syz.1.405" path="socket:[8746]" dev="sockfs" ino=8746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.776048][ T3402] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 80.787586][ T28] audit: type=1400 audit(1786986812.897:365): avc: denied { connect } for pid=4820 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.815755][ T28] audit: type=1400 audit(1786986812.897:366): avc: denied { write } for pid=4820 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.977169][ T4806] vhci_hcd: connection reset by peer [ 80.983118][ T311] vhci_hcd vhci_hcd.0: stop threads [ 80.988426][ T311] vhci_hcd vhci_hcd.0: release socket [ 80.995774][ T311] vhci_hcd vhci_hcd.0: disconnect device [ 81.005742][ T4825] loop4: detected capacity change from 0 to 512 [ 81.068392][ T4825] EXT4-fs: Ignoring removed orlov option [ 81.077037][ T4825] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 81.088245][ T4825] EXT4-fs (loop4): #clusters per group too big: 139264 [ 81.141544][ T28] audit: type=1400 audit(1786986813.257:367): avc: denied { create } for pid=4838 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.175618][ T28] audit: type=1400 audit(1786986813.257:368): avc: denied { write } for pid=4838 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.211521][ T28] audit: type=1400 audit(1786986813.257:369): avc: denied { write } for pid=4838 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.211833][ T4839] loop3: detected capacity change from 0 to 512 [ 81.311242][ T4839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.325319][ T4839] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.408753][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.771322][ T4856] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 81.778402][ T4856] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.788154][ T4856] vhci_hcd vhci_hcd.0: Device attached [ 81.832718][ T4857] vhci_hcd: cannot find the pending unlink 4096 [ 82.390183][ T3402] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 82.399739][ T3402] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.556282][ T4857] vhci_hcd: connection reset by peer [ 82.582894][ T49] vhci_hcd vhci_hcd.1: stop threads [ 82.589524][ T49] vhci_hcd vhci_hcd.1: release socket [ 82.597538][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 82.622988][ T28] audit: type=1400 audit(1786986814.737:370): avc: denied { mount } for pid=4884 comm="syz.2.428" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.662567][ T3402] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 82.676584][ T3402] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz1] on syz0 [ 82.850047][ T4896] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 82.856604][ T4896] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.884392][ T4896] vhci_hcd vhci_hcd.0: Device attached [ 82.962861][ T4901] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 82.969539][ T4901] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.996793][ T4901] vhci_hcd vhci_hcd.0: Device attached [ 83.336803][ T4916] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 83.343338][ T4916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 83.350973][ T4916] vhci_hcd vhci_hcd.0: Device attached [ 83.358162][ T4917] vhci_hcd: cannot find the pending unlink 4096 [ 83.403167][ T4917] vhci_hcd: connection closed [ 83.403286][ T311] vhci_hcd vhci_hcd.0: stop threads [ 83.413479][ T311] vhci_hcd vhci_hcd.0: release socket [ 83.419017][ T311] vhci_hcd vhci_hcd.0: disconnect device [ 83.553153][ T4897] vhci_hcd: connection closed [ 83.553726][ T311] vhci_hcd vhci_hcd.1: stop threads [ 83.564461][ T311] vhci_hcd vhci_hcd.1: release socket [ 83.569899][ T311] vhci_hcd vhci_hcd.1: disconnect device [ 83.710858][ T28] audit: type=1400 audit(1786986815.827:371): avc: denied { bind } for pid=4926 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.730372][ T28] audit: type=1400 audit(1786986815.827:372): avc: denied { name_bind } for pid=4926 comm="syz.2.439" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.754125][ T4902] vhci_hcd: connection reset by peer [ 83.766099][ T49] vhci_hcd vhci_hcd.4: stop threads [ 83.775474][ T49] vhci_hcd vhci_hcd.4: release socket [ 83.786749][ T28] audit: type=1400 audit(1786986815.827:373): avc: denied { node_bind } for pid=4926 comm="syz.2.439" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 83.793122][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 83.820863][ T28] audit: type=1400 audit(1786986815.907:374): avc: denied { ioctl } for pid=4926 comm="syz.2.439" path="socket:[9474]" dev="sockfs" ino=9474 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.037475][ T3409] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 84.104043][ T3409] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.780470][ T4959] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 84.787064][ T4959] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.798508][ T4959] vhci_hcd vhci_hcd.0: Device attached [ 84.798936][ T3374] usb 9-1: enqueue for inactive port 0 [ 84.892838][ T3374] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 85.005965][ T28] audit: type=1400 audit(1786986817.127:375): avc: denied { read append } for pid=4978 comm="syz.2.459" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.029684][ T28] audit: type=1400 audit(1786986817.127:376): avc: denied { open } for pid=4978 comm="syz.2.459" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.066876][ T28] audit: type=1400 audit(1786986817.147:377): avc: denied { ioctl } for pid=4978 comm="syz.2.459" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.107109][ T4979] loop2: detected capacity change from 0 to 1024 [ 85.117435][ T4979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.129464][ T4979] EXT4-fs (loop2): unable to read superblock [ 85.148521][ T28] audit: type=1400 audit(1786986817.267:378): avc: denied { read } for pid=4978 comm="syz.2.459" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 85.183073][ T28] audit: type=1400 audit(1786986817.267:379): avc: denied { open } for pid=4978 comm="syz.2.459" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 85.328383][ T4960] vhci_hcd: connection closed [ 85.338561][ T49] vhci_hcd vhci_hcd.1: stop threads [ 85.350687][ T49] vhci_hcd vhci_hcd.1: release socket [ 85.357356][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 85.652836][ T23] usb 3-1: enqueue for inactive port 0 [ 85.722937][ T23] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 86.078270][ T3525] usb 1-1: enqueue for inactive port 0 [ 86.084049][ T3525] usb 1-1: enqueue for inactive port 0 [ 86.152849][ T3525] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 86.330696][ T3512] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 86.339478][ T5028] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 86.344306][ T3512] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.346024][ T5028] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.377263][ T5028] vhci_hcd vhci_hcd.0: Device attached [ 86.968502][ T5016] hub 1-0:1.0: USB hub found [ 86.976112][ T5016] hub 1-0:1.0: 8 ports detected [ 87.139179][ T5024] hub 1-0:1.0: USB hub found [ 87.151218][ T5040] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 87.157780][ T5040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.190208][ T5029] vhci_hcd: connection closed [ 87.202947][ T5024] hub 1-0:1.0: 8 ports detected [ 87.234503][ T49] vhci_hcd vhci_hcd.3: stop threads [ 87.239843][ T49] vhci_hcd vhci_hcd.3: release socket [ 87.249168][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 87.272419][ T5040] vhci_hcd vhci_hcd.0: Device attached [ 87.323087][ T3374] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 87.462919][ T3409] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 87.522907][ T3409] usb 1-1: new full-speed USB device number 6 using vhci_hcd [ 87.561226][ T5062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.486'. [ 87.962690][ T5041] vhci_hcd: connection reset by peer [ 87.974331][ T12] vhci_hcd vhci_hcd.0: stop threads [ 87.982355][ T12] vhci_hcd vhci_hcd.0: release socket [ 87.990856][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 88.034810][ T5075] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 88.041424][ T5075] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.052036][ T5075] vhci_hcd vhci_hcd.0: Device attached [ 89.066186][ T5076] vhci_hcd: connection closed [ 89.067865][ T3424] vhci_hcd vhci_hcd.0: stop threads [ 89.085158][ T3424] vhci_hcd vhci_hcd.0: release socket [ 89.112912][ T3424] vhci_hcd vhci_hcd.0: disconnect device [ 89.144012][ T5105] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 89.150673][ T5105] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.159463][ T5108] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 89.166008][ T5108] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.180133][ T5105] vhci_hcd vhci_hcd.0: Device attached [ 89.185789][ T5108] vhci_hcd vhci_hcd.0: Device attached [ 89.207885][ T5095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 89.363135][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 89.426228][ T9] usb 9-1: new full-speed USB device number 5 using vhci_hcd [ 89.704796][ T5109] vhci_hcd: connection closed [ 89.708633][ T311] vhci_hcd vhci_hcd.0: stop threads [ 89.734302][ T311] vhci_hcd vhci_hcd.0: release socket [ 89.751047][ T311] vhci_hcd vhci_hcd.0: disconnect device [ 89.757639][ T3525] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 89.767066][ T3525] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.807921][ T5110] vhci_hcd: connection reset by peer [ 89.824963][ T49] vhci_hcd vhci_hcd.4: stop threads [ 89.831170][ T49] vhci_hcd vhci_hcd.4: release socket [ 89.850696][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 90.026750][ T5139] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 90.033406][ T5139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.040942][ T5139] vhci_hcd vhci_hcd.0: Device attached [ 90.048722][ T5142] vhci_hcd: cannot find the pending unlink 4096 [ 90.300858][ T5156] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 90.307397][ T5156] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.315106][ T5156] vhci_hcd vhci_hcd.0: Device attached [ 90.322868][ T5157] vhci_hcd: cannot find the pending unlink 4096 [ 90.461616][ T5164] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 90.468211][ T5164] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.475833][ T5164] vhci_hcd vhci_hcd.0: Device attached [ 90.492868][ T3855] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 90.552432][ T5170] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 90.552923][ T3855] usb 3-1: new full-speed USB device number 6 using vhci_hcd [ 90.559077][ T5170] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.559444][ T5170] vhci_hcd vhci_hcd.0: Device attached [ 90.582039][ T5171] vhci_hcd: cannot find the pending unlink 4096 [ 90.618942][ T5142] vhci_hcd: connection closed [ 90.619226][ T68] vhci_hcd vhci_hcd.0: stop threads [ 90.629505][ T68] vhci_hcd vhci_hcd.0: release socket [ 90.635054][ T68] vhci_hcd vhci_hcd.0: disconnect device [ 90.644181][ T3525] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 90.655157][ T3525] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.672817][ T3512] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 90.732818][ T3512] usb 7-1: new full-speed USB device number 7 using vhci_hcd [ 90.763907][ T3374] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 90.833328][ T3374] usb 5-1: new full-speed USB device number 6 using vhci_hcd [ 90.857345][ T5183] netlink: 'syz.0.524': attribute type 8 has an invalid length. [ 90.934456][ T5157] vhci_hcd: connection reset by peer [ 90.944743][ T68] vhci_hcd vhci_hcd.1: stop threads [ 90.951337][ T68] vhci_hcd vhci_hcd.1: release socket [ 90.957963][ T68] vhci_hcd vhci_hcd.1: disconnect device [ 91.027208][ T5165] vhci_hcd: connection reset by peer [ 91.047764][ T49] vhci_hcd vhci_hcd.3: stop threads [ 91.061364][ T49] vhci_hcd vhci_hcd.3: release socket [ 91.077792][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 91.141871][ T5171] vhci_hcd: connection reset by peer [ 91.151068][ T49] vhci_hcd vhci_hcd.2: stop threads [ 91.156596][ T49] vhci_hcd vhci_hcd.2: release socket [ 91.166782][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 91.518703][ T28] audit: type=1400 audit(1786986823.637:380): avc: denied { name_bind } for pid=5208 comm="syz.3.532" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 91.933892][ T28] audit: type=1400 audit(1786986824.047:381): avc: denied { relabelfrom } for pid=5208 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.954622][ T28] audit: type=1400 audit(1786986824.047:382): avc: denied { relabelto } for pid=5208 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.980068][ T3525] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 91.994759][ T3525] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.081305][ T5229] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 92.087880][ T5229] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.148794][ T5229] vhci_hcd vhci_hcd.0: Device attached [ 92.204132][ T5230] vhci_hcd: cannot find the pending unlink 4096 [ 92.613676][ T3409] usb 1-1: enqueue for inactive port 0 [ 93.085027][ T3409] usb 1-1: enqueue for inactive port 0 [ 93.255715][ T5253] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 93.262286][ T5253] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.287416][ T5253] vhci_hcd vhci_hcd.0: Device attached [ 93.350780][ T5254] vhci_hcd: cannot find the pending unlink 4096 [ 93.366754][ T3409] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 93.395816][ T5230] vhci_hcd: connection closed [ 93.397914][ T311] vhci_hcd vhci_hcd.1: stop threads [ 93.415465][ T311] vhci_hcd vhci_hcd.1: release socket [ 93.421050][ T311] vhci_hcd vhci_hcd.1: disconnect device [ 93.584133][ T3409] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 93.640722][ T5280] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 93.647284][ T5280] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.692917][ T5280] vhci_hcd vhci_hcd.0: Device attached [ 93.724173][ T3375] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 93.737377][ T3375] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.019714][ T3402] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 94.029153][ T3402] hid-generic 0000:0000:0000.001D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 94.131679][ T5254] vhci_hcd: connection reset by peer [ 94.142999][ T68] vhci_hcd vhci_hcd.0: stop threads [ 94.148324][ T68] vhci_hcd vhci_hcd.0: release socket [ 94.165937][ T68] vhci_hcd vhci_hcd.0: disconnect device [ 94.296863][ T5297] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 94.303427][ T5297] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.338070][ T5297] vhci_hcd vhci_hcd.0: Device attached [ 94.794629][ T5303] loop3: detected capacity change from 0 to 2048 [ 94.849889][ T5303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.880551][ T28] audit: type=1400 audit(1786986826.997:383): avc: denied { write } for pid=5302 comm="syz.3.556" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.902337][ T28] audit: type=1400 audit(1786986826.997:384): avc: denied { read write } for pid=5302 comm="syz.3.556" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.907121][ T5298] vhci_hcd: connection closed [ 94.925255][ T28] audit: type=1400 audit(1786986826.997:385): avc: denied { open } for pid=5302 comm="syz.3.556" path="/120/file1/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.956904][ T49] vhci_hcd vhci_hcd.0: stop threads [ 94.963683][ T49] vhci_hcd vhci_hcd.0: release socket [ 94.969345][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 94.985492][ T5280] syz.4.551 (5280) used greatest stack depth: 9600 bytes left [ 94.993170][ T5281] vhci_hcd: connection reset by peer [ 94.999806][ T311] vhci_hcd vhci_hcd.4: stop threads [ 95.008438][ T311] vhci_hcd vhci_hcd.4: release socket [ 95.022407][ T311] vhci_hcd vhci_hcd.4: disconnect device [ 95.051739][ T5303] capability: warning: `syz.3.556' uses deprecated v2 capabilities in a way that may be insecure [ 95.086982][ T28] audit: type=1400 audit(1786986827.207:386): avc: denied { read } for pid=5302 comm="syz.3.556" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.119686][ T28] audit: type=1400 audit(1786986827.207:387): avc: denied { open } for pid=5302 comm="syz.3.556" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.144106][ T5329] loop0: detected capacity change from 0 to 256 [ 95.147767][ T28] audit: type=1400 audit(1786986827.227:388): avc: denied { ioctl } for pid=5302 comm="syz.3.556" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.166472][ T5329] vfat: Bad value for 'uid' [ 95.214172][ T5329] vfat: Bad value for 'uid' [ 95.217856][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.575580][ T3855] usb 3-1: enqueue for inactive port 0 [ 95.606035][ T3855] usb 3-1: enqueue for inactive port 0 [ 95.656063][ T28] audit: type=1400 audit(1786986827.777:389): avc: denied { map } for pid=5336 comm="syz.1.569" path="socket:[10112]" dev="sockfs" ino=10112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.692947][ T3855] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 95.773536][ T5343] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 95.780100][ T5343] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.799141][ T5343] vhci_hcd vhci_hcd.0: Device attached [ 95.831349][ T5337] syz.1.569 (5337) used greatest stack depth: 9272 bytes left [ 95.903031][ T3374] usb 5-1: enqueue for inactive port 0 [ 95.908737][ T3374] usb 5-1: enqueue for inactive port 0 [ 95.910497][ T5349] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 95.920749][ T5349] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.928641][ T5349] vhci_hcd vhci_hcd.0: Device attached [ 95.972999][ T3374] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 95.982218][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 95.991657][ T5356] netlink: 'syz.0.574': attribute type 26 has an invalid length. [ 96.041557][ T5357] loop4: detected capacity change from 0 to 1024 [ 96.057602][ T5327] syz.2.566 (5327) used greatest stack depth: 8696 bytes left [ 96.076383][ T5357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.090267][ T5357] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.182836][ T3855] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 96.451276][ T5376] loop2: detected capacity change from 0 to 8192 [ 96.463584][ T5376] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.607409][ T5344] vhci_hcd: connection reset by peer [ 96.713322][ T12] vhci_hcd vhci_hcd.3: stop threads [ 96.718656][ T12] vhci_hcd vhci_hcd.3: release socket [ 96.728423][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 96.768551][ T5374] xt_CT: No such helper "netbios-ns" [ 96.914578][ T5353] vhci_hcd: connection reset by peer [ 96.920200][ T311] vhci_hcd vhci_hcd.1: stop threads [ 96.925522][ T311] vhci_hcd vhci_hcd.1: release socket [ 96.931094][ T311] vhci_hcd vhci_hcd.1: disconnect device [ 97.088968][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 97.088985][ T28] audit: type=1400 audit(1786986829.207:404): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 97.128834][ T28] audit: type=1400 audit(1786986829.247:405): avc: denied { read } for pid=5351 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.150518][ T28] audit: type=1400 audit(1786986829.247:406): avc: denied { mount } for pid=5386 comm="syz.1.584" name="/" dev="ramfs" ino=10200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.172854][ T28] audit: type=1400 audit(1786986829.267:407): avc: denied { execute } for pid=5386 comm="syz.1.584" path="/103/file1" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.307282][ T3374] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 97.320142][ T3374] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.456215][ T28] audit: type=1400 audit(1786986829.577:408): avc: denied { read write } for pid=5394 comm="syz.2.586" name="hidraw0" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.496072][ T28] audit: type=1400 audit(1786986829.577:409): avc: denied { open } for pid=5394 comm="syz.2.586" path="/dev/hidraw0" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.526776][ T28] audit: type=1400 audit(1786986829.647:410): avc: denied { ioctl } for pid=5394 comm="syz.2.586" path="/dev/hidraw0" dev="devtmpfs" ino=751 ioctlcmd=0x4807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.615345][ T5396] fido_id[5396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.854200][ T3409] usb 1-1: enqueue for inactive port 0 [ 98.860028][ T3409] usb 1-1: enqueue for inactive port 0 [ 98.943485][ T3409] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 98.947579][ T3402] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 98.958679][ T3402] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.221532][ T5431] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 99.228093][ T5431] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.253085][ T5317] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 99.280853][ T5431] vhci_hcd vhci_hcd.0: Device attached [ 99.288767][ T5317] EXT4-fs (loop4): Remounting filesystem read-only [ 99.317828][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.340103][ T5432] vhci_hcd: cannot find the pending unlink 4096 [ 99.664251][ T3409] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 99.903677][ T3409] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 99.950496][ T5387] syz.1.584 (5387) used greatest stack depth: 8072 bytes left [ 99.985338][ T3409] usb 1-1: new full-speed USB device number 7 using vhci_hcd [ 100.023425][ T5432] vhci_hcd: connection reset by peer [ 100.030956][ T49] vhci_hcd vhci_hcd.0: stop threads [ 100.036420][ T49] vhci_hcd vhci_hcd.0: release socket [ 100.050028][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 100.056232][ T9] usb 9-1: enqueue for inactive port 0 [ 100.133405][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 100.166661][ T5459] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 100.173249][ T5459] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.206525][ T5459] vhci_hcd vhci_hcd.0: Device attached [ 100.242879][ T5460] vhci_hcd: cannot find the pending unlink 4096 [ 100.393147][ T3402] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 100.453032][ T3402] usb 5-1: new full-speed USB device number 7 using vhci_hcd [ 100.471514][ T5467] loop4: detected capacity change from 0 to 512 [ 100.616659][ T5472] netlink: 'syz.3.612': attribute type 8 has an invalid length. [ 100.617960][ T5467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.646058][ T5467] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.678008][ T28] audit: type=1400 audit(1786986832.797:411): avc: denied { write } for pid=5466 comm="syz.4.611" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.704678][ T28] audit: type=1400 audit(1786986832.817:412): avc: denied { create } for pid=5466 comm="syz.4.611" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 100.734825][ T5467] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.611: corrupted inode contents [ 100.749026][ T5467] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #2: comm syz.4.611: mark_inode_dirty error [ 100.783049][ T5467] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.611: corrupted inode contents [ 100.803730][ T5467] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.611: mark_inode_dirty error [ 100.874824][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.894576][ T5460] vhci_hcd: connection reset by peer [ 100.914514][ T49] vhci_hcd vhci_hcd.2: stop threads [ 100.927263][ T49] vhci_hcd vhci_hcd.2: release socket [ 100.946029][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 101.434098][ T5509] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 101.440727][ T5509] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.463680][ T5509] vhci_hcd vhci_hcd.0: Device attached [ 101.474763][ T5513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 101.481317][ T5513] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.489745][ T5513] vhci_hcd vhci_hcd.0: Device attached [ 101.494586][ T3855] usb 3-1: enqueue for inactive port 0 [ 101.499767][ T5510] vhci_hcd: cannot find the pending unlink 4096 [ 101.501513][ T3855] usb 3-1: enqueue for inactive port 0 [ 101.612804][ T3855] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 101.654307][ T23] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 101.722832][ T23] usb 9-1: new full-speed USB device number 6 using vhci_hcd [ 101.812877][ T3512] usb 7-1: enqueue for inactive port 0 [ 101.827607][ T5489] bond1 (unregistering): Released all slaves [ 101.883066][ T3512] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 101.936741][ T5525] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 101.943285][ T5525] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.950975][ T5525] vhci_hcd vhci_hcd.0: Device attached [ 101.978454][ T28] audit: type=1400 audit(1786986834.097:413): avc: denied { name_connect } for pid=5524 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 102.060511][ T5514] vhci_hcd: connection closed [ 102.060779][ T3424] vhci_hcd vhci_hcd.2: stop threads [ 102.078735][ T3424] vhci_hcd vhci_hcd.2: release socket [ 102.084566][ T3424] vhci_hcd vhci_hcd.2: disconnect device [ 102.116429][ T5510] vhci_hcd: connection reset by peer [ 102.146975][ T3424] vhci_hcd vhci_hcd.4: stop threads [ 102.153119][ T3424] vhci_hcd vhci_hcd.4: release socket [ 102.158683][ T3424] vhci_hcd vhci_hcd.4: disconnect device [ 102.284047][ T3375] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 102.296627][ T3375] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.544800][ T5528] vhci_hcd: connection closed [ 102.545518][ T3424] vhci_hcd vhci_hcd.0: stop threads [ 102.555693][ T3424] vhci_hcd vhci_hcd.0: release socket [ 102.565415][ T5545] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 102.565938][ T3424] vhci_hcd vhci_hcd.0: disconnect device [ 102.572061][ T5545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.580824][ T5545] vhci_hcd vhci_hcd.0: Device attached [ 102.596959][ T5546] vhci_hcd: cannot find the pending unlink 4096 [ 102.603406][ T5549] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 102.609945][ T5549] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.633460][ T5549] vhci_hcd vhci_hcd.0: Device attached [ 102.712885][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 102.753244][ T5553] hsr_slave_1 (unregistering): left promiscuous mode [ 102.864092][ T28] audit: type=1400 audit(1786986834.987:414): avc: denied { ioctl } for pid=5552 comm="syz.1.639" path="socket:[10893]" dev="sockfs" ino=10893 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.899940][ T28] audit: type=1400 audit(1786986835.017:415): avc: denied { listen } for pid=5561 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 102.978639][ T5568] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 102.985203][ T5568] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.993023][ T5568] vhci_hcd vhci_hcd.0: Device attached [ 102.999579][ T5571] vhci_hcd: cannot find the pending unlink 4096 [ 103.182913][ T3512] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 103.242862][ T3512] usb 3-1: new full-speed USB device number 7 using vhci_hcd [ 103.323840][ T3855] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 103.339025][ T3855] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.348733][ T5546] vhci_hcd: connection closed [ 103.349181][ T49] vhci_hcd vhci_hcd.2: stop threads [ 103.364622][ T49] vhci_hcd vhci_hcd.2: release socket [ 103.370547][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 103.424499][ T5550] vhci_hcd: connection closed [ 103.427455][ T49] vhci_hcd vhci_hcd.0: stop threads [ 103.445601][ T49] vhci_hcd vhci_hcd.0: release socket [ 103.453271][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 103.504806][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 103.602516][ T5571] vhci_hcd: connection reset by peer [ 103.610694][ T9] hid-generic 0000:0000:0000.0022: hidraw1: HID v0.00 Device [syz1] on syz0 [ 103.636067][ T49] vhci_hcd vhci_hcd.1: stop threads [ 103.641342][ T49] vhci_hcd vhci_hcd.1: release socket [ 103.658571][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 103.743743][ T3389] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 103.751778][ T3389] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.798522][ T5600] loop4: detected capacity change from 0 to 128 [ 103.833113][ T5600] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.851140][ T5600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 104.211738][ T5617] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 104.218304][ T5617] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.243273][ T5617] vhci_hcd vhci_hcd.0: Device attached [ 104.253002][ T5618] vhci_hcd: cannot find the pending unlink 4096 [ 104.369572][ T5623] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 104.376129][ T5623] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.383798][ T5623] vhci_hcd vhci_hcd.0: Device attached [ 104.390443][ T5624] vhci_hcd: cannot find the pending unlink 4096 [ 104.637590][ T3389] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 104.648875][ T3389] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.823254][ T5618] vhci_hcd: connection closed [ 104.823864][ T49] vhci_hcd vhci_hcd.0: stop threads [ 104.834149][ T49] vhci_hcd vhci_hcd.0: release socket [ 104.839707][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 104.851554][ T5639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 104.898202][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 104.929410][ T5624] vhci_hcd: connection closed [ 104.932184][ T3424] vhci_hcd vhci_hcd.2: stop threads [ 104.948391][ T3424] vhci_hcd vhci_hcd.2: release socket [ 104.959398][ T3424] vhci_hcd vhci_hcd.2: disconnect device [ 104.999693][ T28] audit: type=1326 audit(1786986837.117:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b4dee0d9 code=0x7ffc0000 [ 105.013058][ T3409] usb 1-1: enqueue for inactive port 0 [ 105.040936][ T3409] usb 1-1: enqueue for inactive port 0 [ 105.051540][ T5652] loop4: detected capacity change from 0 to 512 [ 105.065140][ T28] audit: type=1326 audit(1786986837.117:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b4dee0d9 code=0x7ffc0000 [ 105.092068][ T5652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.105904][ T28] audit: type=1326 audit(1786986837.177:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b4dee0d9 code=0x7ffc0000 [ 105.133226][ T28] audit: type=1326 audit(1786986837.177:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b4dee0d9 code=0x7ffc0000 [ 105.158723][ T28] audit: type=1326 audit(1786986837.177:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f21b4dee0d9 code=0x7ffc0000 [ 105.184158][ T28] audit: type=1326 audit(1786986837.257:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b4dee0d9 code=0x7ffc0000 [ 105.187749][ T3409] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 105.209990][ T28] audit: type=1326 audit(1786986837.257:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21b4dede42 code=0x7ffc0000 [ 105.248785][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 105.259031][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.272086][ T5662] FAULT_INJECTION: forcing a failure. [ 105.272086][ T5662] name failslab, interval 1, probability 0, space 0, times 0 [ 105.290430][ T28] audit: type=1326 audit(1786986837.257:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.675" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f21b4deded7 code=0x7ffc0000 [ 105.316203][ T5662] CPU: 1 UID: 0 PID: 5662 Comm: syz.3.677 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.316279][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.316292][ T5662] Call Trace: [ 105.316299][ T5662] [ 105.316306][ T5662] __dump_stack+0x1d/0x30 [ 105.316331][ T5662] dump_stack_lvl+0x95/0xd0 [ 105.316353][ T5662] dump_stack+0x15/0x1b [ 105.316373][ T5662] should_fail_ex+0x25e/0x270 [ 105.316420][ T5662] should_failslab+0x8c/0xb0 [ 105.316445][ T5662] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 105.316469][ T5662] ? audit_log_start+0x34c/0x730 [ 105.316548][ T5662] ? audit_log_start+0x34c/0x730 [ 105.316580][ T5662] audit_log_start+0x34c/0x730 [ 105.316696][ T5662] audit_seccomp+0x49/0x110 [ 105.316725][ T5662] __seccomp_filter+0x905/0x1370 [ 105.316750][ T5662] ? __fget_files+0x184/0x1c0 [ 105.316838][ T5662] ? xfd_validate_state+0x45/0xf0 [ 105.316875][ T5662] __secure_computing+0x7d/0x150 [ 105.316956][ T5662] do_syscall_64+0xd4/0x3c0 [ 105.317008][ T5662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.317031][ T5662] RIP: 0033:0x7f7452cee0d9 [ 105.317053][ T5662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.317072][ T5662] RSP: 002b:00007f7451747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 105.317145][ T5662] RAX: ffffffffffffffda RBX: 00007f7452f75fa0 RCX: 00007f7452cee0d9 [ 105.317159][ T5662] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 105.317174][ T5662] RBP: 00007f7451747090 R08: 0000000000001000 R09: 0000000000000000 [ 105.317187][ T5662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.317200][ T5662] R13: 00007f7452f76038 R14: 00007f7452f75fa0 R15: 00007fffcda60428 [ 105.317220][ T5662] [ 105.511123][ T5664] loop2: detected capacity change from 0 to 1024 [ 105.525336][ T5664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.542720][ T3402] usb 5-1: enqueue for inactive port 0 [ 105.556655][ T3402] usb 5-1: enqueue for inactive port 0 [ 105.567308][ T5669] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 105.573884][ T5669] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.585467][ T5669] vhci_hcd vhci_hcd.0: Device attached [ 105.601966][ T5671] vhci_hcd: cannot find the pending unlink 4096 [ 105.623349][ T3402] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 105.651896][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 105.727883][ T5678] 9p: Unknown uid 00000000004294967295 [ 105.780831][ T5683] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 105.787475][ T5683] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.795405][ T5683] vhci_hcd vhci_hcd.0: Device attached [ 105.806596][ T5686] vhci_hcd: cannot find the pending unlink 4096 [ 105.873011][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.903134][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.913726][ T3409] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 105.980561][ T3855] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 105.988600][ T3855] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.014016][ T3389] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 106.023526][ T3389] hid-generic 0000:0000:0000.0026: hidraw1: HID v0.00 Device [syz1] on syz0 [ 106.277519][ T5671] vhci_hcd: connection reset by peer [ 106.295524][ T311] vhci_hcd vhci_hcd.0: stop threads [ 106.300970][ T311] vhci_hcd vhci_hcd.0: release socket [ 106.311061][ T311] vhci_hcd vhci_hcd.0: disconnect device [ 106.388460][ T5705] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 106.395066][ T5705] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.412768][ T5686] vhci_hcd: connection closed [ 106.420595][ T311] vhci_hcd vhci_hcd.1: stop threads [ 106.435589][ T5705] vhci_hcd vhci_hcd.0: Device attached [ 106.439793][ T311] vhci_hcd vhci_hcd.1: release socket [ 106.464507][ T311] vhci_hcd vhci_hcd.1: disconnect device [ 106.709293][ T5710] loop1: detected capacity change from 0 to 2048 [ 106.773872][ T23] usb 9-1: enqueue for inactive port 0 [ 106.784346][ T23] usb 9-1: enqueue for inactive port 0 [ 106.801648][ T5710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.864061][ T23] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 106.982066][ T5706] vhci_hcd: connection closed [ 106.983902][ T311] vhci_hcd vhci_hcd.0: stop threads [ 106.995286][ T311] vhci_hcd vhci_hcd.0: release socket [ 107.000963][ T311] vhci_hcd vhci_hcd.0: disconnect device [ 107.038186][ T5734] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 107.044750][ T5734] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.053491][ T5734] vhci_hcd vhci_hcd.0: Device attached [ 107.090464][ T5738] vhci_hcd: cannot find the pending unlink 4096 [ 107.233258][ T3402] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 107.242689][ T3402] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.373167][ T23] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 107.401495][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.435952][ T5754] loop1: detected capacity change from 0 to 256 [ 107.445432][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 107.499420][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 107.510665][ T5754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 107.635654][ T3298] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 107.643304][ T3298] FAT-fs (loop1): Filesystem has been set read-only [ 107.650309][ T3298] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 107.693993][ T3298] bridge0: port 3(syz_tun) entered disabled state [ 107.707968][ T3298] syz_tun (unregistering): left allmulticast mode [ 107.717750][ T3298] syz_tun (unregistering): left promiscuous mode [ 107.724227][ T3298] bridge0: port 3(syz_tun) entered disabled state [ 107.799933][ T5738] vhci_hcd: connection reset by peer [ 107.813100][ T311] vhci_hcd vhci_hcd.4: stop threads [ 107.821379][ T311] vhci_hcd vhci_hcd.4: release socket [ 107.827021][ T311] vhci_hcd vhci_hcd.4: disconnect device [ 107.839686][ T5763] FAULT_INJECTION: forcing a failure. [ 107.839686][ T5763] name failslab, interval 1, probability 0, space 0, times 0 [ 107.855381][ T5763] CPU: 1 UID: 0 PID: 5763 Comm: syz.0.712 Not tainted syzkaller #0 PREEMPT(lazy) [ 107.855415][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.855431][ T5763] Call Trace: [ 107.855440][ T5763] [ 107.855449][ T5763] __dump_stack+0x1d/0x30 [ 107.855547][ T5763] dump_stack_lvl+0x95/0xd0 [ 107.855574][ T5763] dump_stack+0x15/0x1b [ 107.855660][ T5763] should_fail_ex+0x25e/0x270 [ 107.855771][ T5763] should_failslab+0x8c/0xb0 [ 107.855798][ T5763] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 107.855828][ T5763] ? audit_log_start+0x34c/0x730 [ 107.855893][ T5763] ? audit_log_start+0x34c/0x730 [ 107.855982][ T5763] audit_log_start+0x34c/0x730 [ 107.856012][ T5763] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 107.856075][ T5763] audit_seccomp+0x49/0x110 [ 107.856102][ T5763] __seccomp_filter+0x905/0x1370 [ 107.856125][ T5763] ? __fget_files+0x184/0x1c0 [ 107.856238][ T5763] __secure_computing+0x7d/0x150 [ 107.856262][ T5763] do_syscall_64+0xd4/0x3c0 [ 107.856296][ T5763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.856358][ T5763] RIP: 0033:0x7f21b4dee0d9 [ 107.856373][ T5763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.856390][ T5763] RSP: 002b:00007f21b3847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 107.856413][ T5763] RAX: ffffffffffffffda RBX: 00007f21b5075fa0 RCX: 00007f21b4dee0d9 [ 107.856431][ T5763] RDX: ffffffffffffffff RSI: 00002000000000c0 RDI: ffffffffffffffff [ 107.856510][ T5763] RBP: 00007f21b3847090 R08: 0000000000001000 R09: 0000000000000000 [ 107.856525][ T5763] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 107.856537][ T5763] R13: 00007f21b5076038 R14: 00007f21b5075fa0 R15: 00007ffee9407768 [ 107.856561][ T5763] [ 108.057919][ T3424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.080485][ T28] kauditd_printk_skb: 172 callbacks suppressed [ 108.080502][ T28] audit: type=1326 audit(1786986840.197:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.4.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ff8e0d9 code=0x7ffc0000 [ 108.112625][ T28] audit: type=1326 audit(1786986840.197:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.4.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ff8e0d9 code=0x7ffc0000 [ 108.138071][ T28] audit: type=1326 audit(1786986840.197:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.4.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ff8e0d9 code=0x7ffc0000 [ 108.165722][ T28] audit: type=1326 audit(1786986840.197:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.4.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ff8e0d9 code=0x7ffc0000 [ 108.191137][ T28] audit: type=1326 audit(1786986840.197:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.4.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f915ff8e0d9 code=0x7ffc0000 [ 108.216923][ T28] audit: type=1326 audit(1786986840.197:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.4.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ff8e0d9 code=0x7ffc0000 [ 108.245335][ T28] audit: type=1326 audit(1786986840.197:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.4.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ff8e0d9 code=0x7ffc0000 [ 108.271340][ T28] audit: type=1326 audit(1786986840.197:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.4.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ff8e0d9 code=0x7ffc0000 [ 108.309678][ T28] audit: type=1326 audit(1786986840.197:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.4.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f915ff8e0d9 code=0x7ffc0000 [ 108.313226][ T3512] usb 3-1: enqueue for inactive port 0 [ 108.343830][ T28] audit: type=1326 audit(1786986840.197:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.4.714" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915ff8e0d9 code=0x7ffc0000 [ 108.369418][ T3424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.381079][ T3512] usb 3-1: enqueue for inactive port 0 [ 108.401663][ T5775] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 108.408252][ T5775] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.428817][ T3424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.453911][ T5775] vhci_hcd vhci_hcd.0: Device attached [ 108.462995][ T3512] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 108.635657][ T3525] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 108.647197][ T3525] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.895821][ T5801] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 108.902403][ T5801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.911096][ T3424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.933485][ T5801] vhci_hcd vhci_hcd.0: Device attached [ 108.991032][ T5778] vhci_hcd: connection closed [ 108.992666][ T30] vhci_hcd vhci_hcd.4: stop threads [ 109.017156][ T30] vhci_hcd vhci_hcd.4: release socket [ 109.030052][ T30] vhci_hcd vhci_hcd.4: disconnect device [ 109.089003][ T5811] SELinux: security_context_str_to_sid (a`yv-|J+0l8G[kT_|nU5 [ 109.089003][ T5811] M9) failed with errno=-22 [ 109.113858][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 109.136760][ T3424] bridge_slave_1: left promiscuous mode [ 109.155777][ T5811] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 109.164208][ T3424] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.179879][ T9] usb 7-1: new full-speed USB device number 8 using vhci_hcd [ 109.201473][ T3424] bridge_slave_0: left allmulticast mode [ 109.207972][ T3424] bridge_slave_0: left promiscuous mode [ 109.214627][ T3424] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.275257][ T3402] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 109.287042][ T3402] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.637114][ T5802] vhci_hcd: connection reset by peer [ 109.653269][ T49] vhci_hcd vhci_hcd.3: stop threads [ 109.671642][ T49] vhci_hcd vhci_hcd.3: release socket [ 109.696661][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 109.959984][ T3424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.985321][ T3424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.001045][ T3424] bond0 (unregistering): Released all slaves [ 110.091153][ T5820] vti0: entered allmulticast mode [ 110.130296][ T3424] hsr_slave_0: left promiscuous mode [ 110.140396][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.151219][ T3424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.170959][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.179064][ T3424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.192001][ T3424] veth1_macvtap: left promiscuous mode [ 110.199195][ T3424] veth0_macvtap: left promiscuous mode [ 110.205029][ T3424] veth1_vlan: left promiscuous mode [ 110.211166][ T3424] veth0_vlan: left promiscuous mode [ 110.277523][ T3424] team0 (unregistering): Port device team_slave_1 removed [ 110.287789][ T3424] team0 (unregistering): Port device team_slave_0 removed [ 110.869885][ T5835] netlink: 'syz.3.731': attribute type 8 has an invalid length. [ 110.938015][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.945186][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.952369][ T5788] bridge_slave_0: entered allmulticast mode [ 110.959372][ T5788] bridge_slave_0: entered promiscuous mode [ 110.966438][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.973632][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.980798][ T5788] bridge_slave_1: entered allmulticast mode [ 110.987928][ T5788] bridge_slave_1: entered promiscuous mode [ 111.005480][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.016675][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.039351][ T5788] team0: Port device team_slave_0 added [ 111.045998][ T5788] team0: Port device team_slave_1 added [ 111.064701][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.071696][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.097811][ T3409] usb 1-1: enqueue for inactive port 0 [ 111.104518][ T3409] usb 1-1: enqueue for inactive port 0 [ 111.112552][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.125060][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.132215][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.158602][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.174817][ T3409] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 111.208291][ T5788] hsr_slave_0: entered promiscuous mode [ 111.214987][ T5788] hsr_slave_1: entered promiscuous mode [ 111.221612][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 111.228448][ T5788] Cannot create hsr debugfs directory [ 111.337980][ T5788] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.347681][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.356836][ T5788] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.365782][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.378645][ T5788] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.444000][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.452358][ T5788] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.463116][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.530352][ T3375] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 111.560231][ T3375] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.570785][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.606481][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.617341][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.624485][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.638734][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.645881][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.870501][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.988745][ T5895] netlink: 'syz.4.744': attribute type 8 has an invalid length. [ 112.189722][ T5788] veth0_vlan: entered promiscuous mode [ 112.216887][ T5788] veth1_vlan: entered promiscuous mode [ 112.233447][ T5896] loop2: detected capacity change from 0 to 512 [ 112.249909][ T5857] hub 1-0:1.0: USB hub found [ 112.255540][ T5896] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.265612][ T5788] veth0_macvtap: entered promiscuous mode [ 112.271463][ T5857] hub 1-0:1.0: 8 ports detected [ 112.282809][ T5788] veth1_macvtap: entered promiscuous mode [ 112.294950][ T5896] EXT4-fs (loop2): 1 truncate cleaned up [ 112.301876][ T5896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.311757][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.328954][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.377251][ T311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.388095][ T311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.413058][ T3424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.422610][ T3424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.502860][ T3409] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 112.619566][ T23] usb 9-1: enqueue for inactive port 0 [ 112.631447][ T23] usb 9-1: enqueue for inactive port 0 [ 112.715968][ T23] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 112.725853][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.858723][ T5937] loop4: detected capacity change from 0 to 512 [ 112.894984][ T5937] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.934245][ T5937] EXT4-fs (loop4): 1 truncate cleaned up [ 112.966573][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 112.974896][ T5937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.141621][ T5954] netlink: 'syz.2.754': attribute type 8 has an invalid length. [ 113.147138][ T5927] hub 1-0:1.0: USB hub found [ 113.177741][ T5927] hub 1-0:1.0: 8 ports detected [ 113.282251][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 113.282270][ T28] audit: type=1400 audit(1786986845.397:672): avc: denied { write } for pid=5948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.367179][ T28] audit: type=1400 audit(1786986845.487:673): avc: denied { write } for pid=5969 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.420958][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 113.466489][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.596986][ T5985] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 113.603631][ T5985] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.636834][ T5985] vhci_hcd vhci_hcd.0: Device attached [ 113.739340][ T5995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.740190][ T5990] bridge0: port 3(syz_tun) entered blocking state [ 113.790922][ T28] audit: type=1400 audit(1786986845.897:674): avc: denied { write } for pid=5975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.824559][ T23] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 113.860813][ T5990] bridge0: port 3(syz_tun) entered disabled state [ 113.884263][ T23] usb 9-1: new full-speed USB device number 7 using vhci_hcd [ 113.942423][ T28] audit: type=1400 audit(1786986846.057:675): avc: denied { setopt } for pid=5994 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.959366][ T5990] syz_tun: entered allmulticast mode [ 114.036236][ T5990] syz_tun: entered promiscuous mode [ 114.072426][ T5990] bridge0: port 3(syz_tun) entered blocking state [ 114.079125][ T5990] bridge0: port 3(syz_tun) entered forwarding state [ 114.135422][ T28] audit: type=1400 audit(1786986846.257:676): avc: denied { write } for pid=6004 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.175714][ T28] audit: type=1400 audit(1786986846.287:677): avc: denied { write } for pid=5994 comm="syz.2.761" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 114.233121][ T9] usb 7-1: enqueue for inactive port 0 [ 114.238870][ T9] usb 7-1: enqueue for inactive port 0 [ 114.274598][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 114.285591][ T3409] hid-generic 0000:0000:0000.002B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 114.313024][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 114.575438][ T6010] fido_id[6010]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.658882][ T28] audit: type=1400 audit(1786986846.777:678): avc: denied { write } for pid=6019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.705517][ T28] audit: type=1400 audit(1786986846.827:679): avc: denied { write } for pid=6040 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.755276][ T6036] loop3: detected capacity change from 0 to 1024 [ 114.770705][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 114.771462][ T6036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.808471][ T6036] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.858339][ T28] audit: type=1400 audit(1786986846.977:680): avc: denied { write } for pid=6035 comm="syz.3.769" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.867826][ T6026] hub 1-0:1.0: USB hub found [ 114.896675][ T6026] hub 1-0:1.0: 8 ports detected [ 115.001486][ T5988] vhci_hcd: connection reset by peer [ 115.016725][ T311] vhci_hcd vhci_hcd.4: stop threads [ 115.022398][ T311] vhci_hcd vhci_hcd.4: release socket [ 115.030034][ T311] vhci_hcd vhci_hcd.4: disconnect device [ 115.032660][ T6054] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 115.042316][ T6054] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.051852][ T6054] vhci_hcd vhci_hcd.0: Device attached [ 115.065743][ T6061] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 115.072283][ T6061] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.073480][ T6056] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 115.083277][ T6059] vhci_hcd: cannot find the pending unlink 4096 [ 115.086190][ T6056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.089987][ T6056] vhci_hcd vhci_hcd.0: Device attached [ 115.095719][ T6061] vhci_hcd vhci_hcd.0: Device attached [ 115.147340][ T6066] vhci_hcd: cannot find the pending unlink 4096 [ 115.203963][ T3402] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 115.213815][ T3402] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.243842][ T874] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 115.272994][ T3512] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 115.309905][ T874] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 115.334890][ T3512] usb 1-1: new full-speed USB device number 8 using vhci_hcd [ 115.694438][ T6064] vhci_hcd: connection closed [ 115.696864][ T30] vhci_hcd vhci_hcd.4: stop threads [ 115.713922][ T30] vhci_hcd vhci_hcd.4: release socket [ 115.720731][ T30] vhci_hcd vhci_hcd.4: disconnect device [ 115.839850][ T6059] vhci_hcd: connection reset by peer [ 115.845771][ T6066] vhci_hcd: connection reset by peer [ 115.852457][ T30] vhci_hcd vhci_hcd.5: stop threads [ 115.865828][ T30] vhci_hcd vhci_hcd.5: release socket [ 115.880533][ T30] vhci_hcd vhci_hcd.5: disconnect device [ 115.892533][ T30] vhci_hcd vhci_hcd.0: stop threads [ 115.902560][ T30] vhci_hcd vhci_hcd.0: release socket [ 115.908409][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 115.917347][ T6092] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 115.923920][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.934060][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 115.940351][ T6093] vhci_hcd: cannot find the pending unlink 4096 [ 115.993380][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.784'. [ 116.037826][ T6096] loop5: detected capacity change from 0 to 512 [ 116.064844][ T6096] EXT4-fs: Ignoring removed orlov option [ 116.081954][ T6096] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 116.093117][ T6096] EXT4-fs (loop5): #clusters per group too big: 139264 [ 116.296073][ T6106] loop5: detected capacity change from 0 to 512 [ 116.304688][ T6106] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.786: iget: bad i_size value: 38620345925642 [ 116.317668][ T6106] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.317969][ T6106] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.786: couldn't read orphan inode 15 (err -117) [ 116.327267][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 116.327288][ C0] EXT4-fs (loop5): initial error at time 1786986848: ext4_orphan_get:1399: inode 15 [ 116.327331][ C0] EXT4-fs (loop5): last error at time 1786986848: ext4_orphan_get:1399: inode 15 [ 116.364489][ T6106] loop5: lost filesystem error report for type 5 error -117 [ 116.365231][ T6106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.392552][ T28] audit: type=1400 audit(1786986848.507:681): avc: denied { append } for pid=6102 comm="syz.5.786" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.493609][ T6093] vhci_hcd: connection closed [ 116.493977][ T30] vhci_hcd vhci_hcd.0: stop threads [ 116.504407][ T30] vhci_hcd vhci_hcd.0: release socket [ 116.509913][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 116.616949][ T6117] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 116.623522][ T6117] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.631655][ T6117] vhci_hcd vhci_hcd.0: Device attached [ 116.673748][ T3374] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 116.707926][ T3374] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.044512][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'. [ 117.086721][ T6140] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 117.093279][ T6140] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.105134][ T6140] vhci_hcd vhci_hcd.0: Device attached [ 117.111291][ T6141] vhci_hcd: cannot find the pending unlink 4096 [ 117.295812][ T6118] vhci_hcd: connection closed [ 117.296672][ T30] vhci_hcd vhci_hcd.0: stop threads [ 117.307273][ T30] vhci_hcd vhci_hcd.0: release socket [ 117.313003][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 117.383179][ T3374] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 117.414806][ T3374] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.461974][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.672997][ T6141] vhci_hcd: connection closed [ 117.673296][ T311] vhci_hcd vhci_hcd.4: stop threads [ 117.690175][ T311] vhci_hcd vhci_hcd.4: release socket [ 117.703056][ T311] vhci_hcd vhci_hcd.4: disconnect device [ 118.052004][ T6166] loop4: detected capacity change from 0 to 512 [ 118.085860][ T6166] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.106874][ T6166] EXT4-fs error (device loop4): __ext4_fill_super:5600: inode #2: comm syz.4.801: iget: special inode unallocated [ 118.119240][ T6166] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 118.119487][ T6166] EXT4-fs (loop4): get root inode failed [ 118.128717][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 118.128739][ C0] EXT4-fs (loop4): initial error at time 1786986850: __ext4_fill_super:5600: inode 2 [ 118.128775][ C0] EXT4-fs (loop4): last error at time 1786986850: __ext4_fill_super:5600: inode 2 [ 118.160597][ T6166] EXT4-fs (loop4): mount failed [ 118.285337][ T9] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 118.297394][ T9] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.379942][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.808'. [ 118.518239][ T6180] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 118.524831][ T6180] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.532678][ T6180] vhci_hcd vhci_hcd.0: Device attached [ 118.687057][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 118.687071][ T28] audit: type=1400 audit(1786986850.807:683): avc: denied { create } for pid=6190 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 118.865555][ T28] audit: type=1400 audit(1786986850.987:684): avc: denied { accept } for pid=6201 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.000752][ T28] audit: type=1400 audit(1786986851.117:685): avc: denied { setopt } for pid=6201 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.046375][ T6212] syzkaller0: entered promiscuous mode [ 119.058078][ T6212] syzkaller0: entered allmulticast mode [ 119.126549][ T6182] vhci_hcd: connection reset by peer [ 119.135402][ T68] vhci_hcd vhci_hcd.4: stop threads [ 119.145910][ T68] vhci_hcd vhci_hcd.4: release socket [ 119.160152][ T68] vhci_hcd vhci_hcd.4: disconnect device [ 119.171121][ T6217] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 119.177669][ T6217] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.201521][ T6217] vhci_hcd vhci_hcd.0: Device attached [ 119.226539][ T6219] vhci_hcd: cannot find the pending unlink 4096 [ 119.238773][ T28] audit: type=1400 audit(1786986851.357:686): avc: denied { getopt } for pid=6201 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.265095][ T6221] loop0: detected capacity change from 0 to 512 [ 119.315680][ T6215] ================================================================== [ 119.323810][ T6215] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 119.331131][ T6215] [ 119.333470][ T6215] read-write to 0xffffc90001687cc0 of 8 bytes by task 6218 on cpu 1: [ 119.341574][ T6215] shmem_writeout+0x2eb/0x8f0 [ 119.346282][ T6215] shrink_folio_list+0x1ebb/0x2780 [ 119.351424][ T6215] evict_folios+0x20e2/0x2d60 [ 119.356134][ T6215] try_to_shrink_lruvec+0x74d/0x8b0 [ 119.361363][ T6215] shrink_lruvec+0x25e/0x1b60 [ 119.366098][ T6215] shrink_node+0x67c/0x1e30 [ 119.370620][ T6215] do_try_to_free_pages+0x408/0xc90 [ 119.375838][ T6215] try_to_free_mem_cgroup_pages+0x201/0x420 [ 119.381762][ T6215] mem_cgroup_resize_max+0x1cd/0x240 [ 119.387070][ T6215] mem_cgroup_write+0x1ad/0x250 [ 119.391954][ T6215] cgroup_file_write+0x197/0x350 [ 119.396912][ T6215] kernfs_fop_write_iter+0x1d2/0x2e0 [ 119.402225][ T6215] vfs_write+0x57d/0x990 [ 119.406486][ T6215] ksys_write+0xdc/0x1a0 [ 119.410742][ T6215] __x64_sys_write+0x40/0x50 [ 119.415365][ T6215] x64_sys_call+0x27e1/0x3020 [ 119.420072][ T6215] do_syscall_64+0x136/0x3c0 [ 119.424683][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.430593][ T6215] [ 119.432929][ T6215] read to 0xffffc90001687cc0 of 8 bytes by task 6215 on cpu 0: [ 119.440487][ T6215] shmem_fallocate+0x589/0x8f0 [ 119.445278][ T6215] vfs_fallocate+0x3ac/0x400 [ 119.449881][ T6215] file_ioctl+0x4e1/0x5b0 [ 119.454224][ T6215] do_vfs_ioctl+0x7c4/0xe50 [ 119.458742][ T6215] __se_sys_ioctl+0x82/0x140 [ 119.463363][ T6215] __x64_sys_ioctl+0x43/0x50 [ 119.467974][ T6215] x64_sys_call+0x1563/0x3020 [ 119.472677][ T6215] do_syscall_64+0x136/0x3c0 [ 119.477286][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.483197][ T6215] [ 119.485535][ T6215] value changed: 0x00000000000006db -> 0x00000000000006ea [ 119.492658][ T6215] [ 119.494990][ T6215] Reported by Kernel Concurrency Sanitizer on: [ 119.501159][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz.2.820 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.510376][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.520456][ T6215] ================================================================== [ 119.560505][ T6221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.573145][ T5909] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 119.608653][ T6221] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.808471][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.929472][ T6219] vhci_hcd: connection reset by peer [ 119.935728][ T68] vhci_hcd vhci_hcd.4: stop threads [ 119.945465][ T68] vhci_hcd vhci_hcd.4: release socket [ 119.954001][ T68] vhci_hcd vhci_hcd.4: disconnect device [ 120.372853][ T874] usb 11-1: enqueue for inactive port 0 [ 120.378485][ T874] usb 11-1: enqueue for inactive port 0 [ 120.384179][ T3512] usb 1-1: enqueue for inactive port 0 [ 120.389850][ T3512] usb 1-1: enqueue for inactive port 0 [ 120.452873][ T874] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 120.462946][ T3512] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 121.324868][ T5788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.212825][ T23] usb 9-1: enqueue for inactive port 0 [ 124.282830][ T23] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 125.113224][ T28] audit: type=1400 audit(1786986857.237:687): avc: denied { write } for pid=6230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.170832][ T28] audit: type=1400 audit(1786986857.287:688): avc: denied { write } for pid=6241 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.372298][ T28] audit: type=1400 audit(1786986858.487:689): avc: denied { write } for pid=6244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.406650][ T28] audit: type=1400 audit(1786986858.527:690): avc: denied { write } for pid=6255 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.801288][ T28] audit: type=1400 audit(1786986858.917:691): avc: denied { write } for pid=6258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.835204][ T28] audit: type=1400 audit(1786986858.957:692): avc: denied { write } for pid=6269 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.261516][ T28] audit: type=1400 audit(1786986859.377:693): avc: denied { write } for pid=6272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.294624][ T28] audit: type=1400 audit(1786986859.417:694): avc: denied { write } for pid=6283 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1