last executing test programs: 2m4.895213982s ago: executing program 1 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002060101000000000000000001000000140007800800124000070005050015001f0000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0xc951349034062a20) 2m4.741206875s ago: executing program 1 (id=928): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x101, 0x20001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd17b, 0x0, @perf_config_ext={0x8, 0x6}, 0x11014, 0x10002, 0x0, 0x8, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m4.673396867s ago: executing program 1 (id=932): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x20, 0x1418, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2m4.638906987s ago: executing program 1 (id=934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x300000d, 0x13, r0, 0x12b0c000) 2m4.635953617s ago: executing program 1 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001"], 0x140}}, 0x0) 2m4.603801598s ago: executing program 1 (id=936): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = inotify_init1(0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={&(0x7f0000000380), 0xc}, 0x0, 0x10000, 0x3, 0x0, 0xd8b2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x3}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x100080c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000f80), 0x0}, 0x20) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x109982) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) pipe2$9p(&(0x7f00000000c0), 0x80800) 2m2.655657656s ago: executing program 3 (id=978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 2m2.605830967s ago: executing program 3 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "b9943334c2ec129181b5eefcd3768cc762"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m2.548428758s ago: executing program 3 (id=984): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000500)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{&(0x7f00000035c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x2, 0x404c00c) 2m2.487521949s ago: executing program 3 (id=988): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m2.43377117s ago: executing program 3 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(r1, 0x0, 0x80000000, 0x0) wait4(r1, 0x0, 0x20000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x816ac1f4127f23eb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r8, 0x2007ffb) sendfile(r8, r8, 0x0, 0x1000000201005) ftruncate(r8, 0x6) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000800), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m2.184230865s ago: executing program 3 (id=1003): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) 1m49.393689265s ago: executing program 32 (id=936): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = inotify_init1(0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={&(0x7f0000000380), 0xc}, 0x0, 0x10000, 0x3, 0x0, 0xd8b2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x3}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x100080c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000f80), 0x0}, 0x20) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x109982) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) pipe2$9p(&(0x7f00000000c0), 0x80800) 1m46.984284982s ago: executing program 33 (id=1003): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) 1m44.049215019s ago: executing program 2 (id=1454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x2006}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0x20048b4}, 0x0) 1m43.99841196s ago: executing program 2 (id=1455): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8aa40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x1) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000680)=0xa2) 1m43.826279843s ago: executing program 2 (id=1460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m42.927136971s ago: executing program 2 (id=1485): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) 1m42.924481911s ago: executing program 2 (id=1487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb9b, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0xff4, &(0x7f0000002e80)=""/4084, 0x0, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1m42.877568272s ago: executing program 2 (id=1488): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f00000003c0)={0x0, 0xc70889b45dcc8807, "7da046dc02e5b62e78c14b725ca7f19907a99aab4810bf036efc2530653612031ae2e7d4cecf208a24253d61e08ecbf63439944da1206a4a75c618590f68d3d0e72bc39efb072acdd44a1270eaa016ca30e85907bb76f16ffe70d35c68f58acc1fbb1694fe895b64ab35a80455c34b81eff76dd1c5a45307d0809ca1120d34fb2a259395d6973af5ab9e78a8141bfa999e49df4393de21c0b21c0250f07399415841c344949a51f4d4dcfa4613f922654a9f382837c7fde6dd61c862fecebe93619a92290000000000000000000000000000000000000000000000000000a81a00"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000540)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xf, 0x81, 0x0, 0x0, 0x9, 0x7, 0x0, 0x4000007, 0x6, 0x0}) 1m27.842773486s ago: executing program 34 (id=1488): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f00000003c0)={0x0, 0xc70889b45dcc8807, "7da046dc02e5b62e78c14b725ca7f19907a99aab4810bf036efc2530653612031ae2e7d4cecf208a24253d61e08ecbf63439944da1206a4a75c618590f68d3d0e72bc39efb072acdd44a1270eaa016ca30e85907bb76f16ffe70d35c68f58acc1fbb1694fe895b64ab35a80455c34b81eff76dd1c5a45307d0809ca1120d34fb2a259395d6973af5ab9e78a8141bfa999e49df4393de21c0b21c0250f07399415841c344949a51f4d4dcfa4613f922654a9f382837c7fde6dd61c862fecebe93619a92290000000000000000000000000000000000000000000000000000a81a00"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000540)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xf, 0x81, 0x0, 0x0, 0x9, 0x7, 0x0, 0x4000007, 0x6, 0x0}) 5.845712116s ago: executing program 7 (id=4599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, 0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.58496027s ago: executing program 7 (id=4659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0x9, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0xccd, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x8, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x5, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc9, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x0, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x2a, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x5, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 4.501728622s ago: executing program 7 (id=4661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) 3.257404896s ago: executing program 7 (id=4671): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 3.241479356s ago: executing program 7 (id=4672): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r1, 0xa) 2.985679002s ago: executing program 7 (id=4684): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 2.985424232s ago: executing program 35 (id=4684): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 1.683299687s ago: executing program 5 (id=4706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setpgid(0x0, 0x0) 1.596760029s ago: executing program 5 (id=4709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newtfilter={0x24, 0x11, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.497685341s ago: executing program 4 (id=4714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.462128151s ago: executing program 5 (id=4715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x4}) epoll_pwait(r1, &(0x7f0000002500)=[{}], 0x1, 0x30, 0x0, 0x0) 1.431069872s ago: executing program 5 (id=4716): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000001000) brk(0x400000ffc000) brk(0x400000ffc020) 1.387361703s ago: executing program 5 (id=4717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, 0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r8) 1.101208219s ago: executing program 6 (id=4719): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000000040)=0x8) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x18) io_setup(0x490, &(0x7f0000000000)=0x0) r6 = io_uring_setup(0x6001, &(0x7f00000003c0)={0x0, 0x823a, 0x800, 0x2, 0x249}) close_range(r6, r6, 0x0) io_pgetevents(r5, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0) r7 = eventfd2(0x3ff, 0x800) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7, r6, 0x0, 0x0, 0x2, 0x0, 0x1, r7}]) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x20000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40814) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x84, r11, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x4000) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x90, r11, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008000}, 0xc000) 713.587906ms ago: executing program 8 (id=4725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) 588.434869ms ago: executing program 8 (id=4726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x60, &(0x7f0000001100)}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 555.69166ms ago: executing program 4 (id=4727): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) 540.186309ms ago: executing program 8 (id=4728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 525.09883ms ago: executing program 4 (id=4730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 494.403391ms ago: executing program 4 (id=4731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newtfilter={0x24, 0x11, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 474.406231ms ago: executing program 8 (id=4733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r2) 447.006231ms ago: executing program 8 (id=4734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 354.266023ms ago: executing program 8 (id=4738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 320.997154ms ago: executing program 4 (id=4739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) listxattr(0x0, 0x0, 0x0) 302.644774ms ago: executing program 4 (id=4740): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)=ANY=[], 0xa0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 269.298245ms ago: executing program 0 (id=4741): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 227.412265ms ago: executing program 0 (id=4742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 225.930125ms ago: executing program 6 (id=4743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_io_uring_setup(0x684e, &(0x7f00000000c0)={0x0, 0x79af, 0x2, 0x8008000, 0x183}, &(0x7f0000000340), &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) cachestat(r2, &(0x7f00000022c0)={0x6, 0xa289}, &(0x7f0000002300), 0x0) 149.999167ms ago: executing program 6 (id=4744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x0) close(r2) 149.733387ms ago: executing program 0 (id=4745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0xe4ff, r1, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) 149.524147ms ago: executing program 0 (id=4746): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r2, @ANYBLOB="a183000000000000000005000000080003"], 0x124}}, 0x0) 133.074228ms ago: executing program 0 (id=4747): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x122) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x129) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) 122.066358ms ago: executing program 6 (id=4748): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) 57.802359ms ago: executing program 0 (id=4749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r9) 57.575469ms ago: executing program 6 (id=4751): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) 45.657719ms ago: executing program 5 (id=4752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r9) 0s ago: executing program 6 (id=4753): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) kernel console output (not intermixed with test programs): [ 149.196879][T11398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.204522][T11398] vhci_hcd vhci_hcd.0: Device attached [ 149.377755][T11419] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 149.475352][T11428] loop5: detected capacity change from 0 to 1024 [ 149.482198][T11428] EXT4-fs: Ignoring removed orlov option [ 149.505383][T11428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.629278][ T6764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.676961][T11441] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 149.683533][T11441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.691460][T11441] vhci_hcd vhci_hcd.0: Device attached [ 149.693275][T11445] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11445 comm=syz.0.3209 [ 149.955986][T11399] vhci_hcd: connection reset by peer [ 149.961789][T11076] vhci_hcd: stop threads [ 149.966094][T11076] vhci_hcd: release socket [ 149.970577][T11076] vhci_hcd: disconnect device [ 150.218921][T11465] __nla_validate_parse: 6 callbacks suppressed [ 150.218940][T11465] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3217'. [ 150.318098][T11475] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3222'. [ 150.363636][ T29] kauditd_printk_skb: 1678 callbacks suppressed [ 150.363654][ T29] audit: type=1326 audit(1759200069.113:19207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 150.393746][ T29] audit: type=1326 audit(1759200069.123:19208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11397 comm="syz.7.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7a4deec9 code=0x7ffc0000 [ 150.431150][ T29] audit: type=1326 audit(1759200069.144:19209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 150.455005][ T29] audit: type=1326 audit(1759200069.155:19210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 150.478673][ T29] audit: type=1326 audit(1759200069.165:19211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11397 comm="syz.7.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7a4deec9 code=0x7ffc0000 [ 150.502318][ T29] audit: type=1400 audit(1759200069.165:19212): avc: denied { read write } for pid=11480 comm="syz.6.3225" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 150.502354][ T29] audit: type=1400 audit(1759200069.165:19213): avc: denied { open } for pid=11480 comm="syz.6.3225" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 150.502395][ T29] audit: type=1326 audit(1759200069.165:19214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 150.532680][T11442] vhci_hcd: connection closed [ 150.557106][ T29] audit: type=1326 audit(1759200069.165:19215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11397 comm="syz.7.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7a4deec9 code=0x7ffc0000 [ 150.557150][ T29] audit: type=1326 audit(1759200069.165:19216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.5.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 150.653781][T11483] IPVS: Error connecting to the multicast addr [ 150.687717][T11032] vhci_hcd: stop threads [ 150.692165][T11032] vhci_hcd: release socket [ 150.696691][T11032] vhci_hcd: disconnect device [ 150.786873][T11497] siw: device registration error -23 [ 150.898436][T11524] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3245'. [ 150.921659][T11524] 0{X: renamed from gretap0 (while UP) [ 150.933843][T11524] 0{X: entered allmulticast mode [ 150.939817][T11524] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 151.005051][T11534] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 151.011642][T11534] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.019364][T11534] vhci_hcd vhci_hcd.0: Device attached [ 151.052249][T11539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.073787][T11539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.374991][T11586] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3273'. [ 151.376884][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3274'. [ 151.384413][T11586] unsupported nlmsg_type 40 [ 151.422374][T11592] : renamed from bond0 (while UP) [ 151.463327][T11596] loop5: detected capacity change from 0 to 512 [ 151.470661][T11596] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.487713][T11598] netlink: 'syz.6.3279': attribute type 3 has an invalid length. [ 151.726900][T11616] siw: device registration error -23 [ 151.762467][T11627] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 151.769152][T11627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.776704][T11627] vhci_hcd vhci_hcd.0: Device attached [ 151.797974][T11535] vhci_hcd: connection closed [ 151.798218][T11061] vhci_hcd: stop threads [ 151.807396][T11061] vhci_hcd: release socket [ 151.811858][T11061] vhci_hcd: disconnect device [ 151.944431][T11644] geneve0: entered allmulticast mode [ 151.982745][T11642] siw: device registration error -23 [ 152.008344][T11649] netlink: 'syz.7.3300': attribute type 29 has an invalid length. [ 152.017110][T11649] netlink: 'syz.7.3300': attribute type 29 has an invalid length. [ 152.025895][T11649] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3300'. [ 152.089954][T11656] new mount options do not match the existing superblock, will be ignored [ 152.205806][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.213076][T11675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.220526][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.227606][T11675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.244359][T11675] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 152.279136][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 152.290273][T11684] openvswitch: netlink: Message has 6 unknown bytes. [ 152.447166][T11705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3326'. [ 152.456469][T11705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3326'. [ 152.556256][T11628] vhci_hcd: connection closed [ 152.561025][T11076] vhci_hcd: stop threads [ 152.570041][T11076] vhci_hcd: release socket [ 152.574565][T11076] vhci_hcd: disconnect device [ 152.640022][T11732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11732 comm=syz.7.3341 [ 152.798924][ T3395] usb 9-1: enqueue for inactive port 0 [ 152.804584][ T3395] usb 9-1: enqueue for inactive port 0 [ 152.853011][T11757] IPv6: Can't replace route, no match found [ 152.875572][ T3395] vhci_hcd: vhci_device speed not set [ 152.992019][T11769] vhci_hcd: invalid port number 96 [ 152.997198][T11769] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 153.014532][T11772] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.029925][ T3386] usb 11-1: enqueue for inactive port 0 [ 153.045359][ T3386] usb 11-1: enqueue for inactive port 0 [ 153.076493][T11774] 9p: Unknown access argument : -22 [ 153.133909][ T3386] vhci_hcd: vhci_device speed not set [ 153.248409][ T36] usb 13-1: enqueue for inactive port 0 [ 153.248443][ T36] usb 13-1: enqueue for inactive port 0 [ 153.332352][ T36] vhci_hcd: vhci_device speed not set [ 153.376098][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3372'. [ 153.432219][T11803] siw: device registration error -23 [ 153.521547][T11815] loop7: detected capacity change from 0 to 1024 [ 153.533899][T11815] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.3378: Failed to acquire dquot type 0 [ 153.555590][T11815] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 153.570825][ T23] usb 1-1: enqueue for inactive port 0 [ 153.570854][ T23] usb 1-1: enqueue for inactive port 0 [ 153.585409][T11815] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.3378: corrupted inode contents [ 153.589709][T11813] siw: device registration error -23 [ 153.604093][T11815] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #13: comm syz.7.3378: mark_inode_dirty error [ 153.616271][T11815] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.3378: corrupted inode contents [ 153.629706][T11815] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.3378: mark_inode_dirty error [ 153.643753][T11815] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.3378: corrupted inode contents [ 153.655693][ T23] vhci_hcd: vhci_device speed not set [ 153.658161][T11815] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 153.670039][T11815] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.3378: corrupted inode contents [ 153.684830][T11815] EXT4-fs error (device loop7): ext4_truncate:4666: inode #13: comm syz.7.3378: mark_inode_dirty error [ 153.697308][T11815] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 153.707129][T11815] EXT4-fs (loop7): 1 truncate cleaned up [ 153.714993][T11815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.734098][T11815] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.816689][T11837] netlink: 'syz.4.3386': attribute type 10 has an invalid length. [ 153.841307][T11837] batman_adv: batadv0: Adding interface: veth1_vlan [ 153.844034][T11840] loop7: detected capacity change from 0 to 128 [ 153.848087][T11837] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.860438][T11840] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.892379][T11837] batman_adv: batadv0: Interface activated: veth1_vlan [ 153.899537][T11840] ext4 filesystem being mounted at /294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.962290][T11845] loop4: detected capacity change from 0 to 512 [ 153.963699][ T8683] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.987344][T11845] EXT4-fs warning (device loop4): ext4_xattr_inode_get:542: inode #11: comm syz.4.3389: ea_inode file size=4 entry size=6 [ 153.987575][T11845] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3389: corrupted inode contents [ 153.987800][T11845] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.3389: mark_inode_dirty error [ 153.987945][T11845] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3389: corrupted inode contents [ 153.988223][T11845] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.3389: mark_inode_dirty error [ 153.988418][T11845] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.3389: mark inode dirty (error -117) [ 153.988540][T11845] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 153.988580][T11845] EXT4-fs (loop4): 1 orphan inode deleted [ 153.989111][T11845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.005702][T11849] loop7: detected capacity change from 0 to 512 [ 154.006206][T11849] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.018974][T11849] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 154.020469][T11849] EXT4-fs (loop7): 1 truncate cleaned up [ 154.032588][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.042996][T11849] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.259612][T11857] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 154.266187][T11857] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.273846][T11857] vhci_hcd vhci_hcd.0: Device attached [ 154.503739][ T3386] usb 9-1: new low-speed USB device number 11 using vhci_hcd [ 154.518875][T11888] loop6: detected capacity change from 0 to 256 [ 154.551809][ T9] usb 15-1: enqueue for inactive port 0 [ 154.562618][ T9] usb 15-1: enqueue for inactive port 0 [ 154.583062][T11889] siw: device registration error -23 [ 154.634573][T11901] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.643538][ T9] vhci_hcd: vhci_device speed not set [ 154.812125][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.002976][T11922] vhci_hcd: invalid port number 96 [ 155.008158][T11922] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 155.046449][T11860] vhci_hcd: connection reset by peer [ 155.053402][T11036] vhci_hcd: stop threads [ 155.057830][T11036] vhci_hcd: release socket [ 155.057853][T11926] 9p: Unknown access argument ree: -22 [ 155.062256][T11036] vhci_hcd: disconnect device [ 155.130369][T11930] loop7: detected capacity change from 0 to 512 [ 155.141066][ T29] kauditd_printk_skb: 819 callbacks suppressed [ 155.141167][ T29] audit: type=1326 audit(1759200074.121:20034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 155.150692][T11930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.181128][ T29] audit: type=1326 audit(1759200074.163:20035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 155.187644][T11930] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.207569][ T29] audit: type=1326 audit(1759200074.194:20036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 155.241708][ T29] audit: type=1326 audit(1759200074.205:20037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 155.265342][ T29] audit: type=1326 audit(1759200074.215:20038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 155.289108][ T29] audit: type=1326 audit(1759200074.226:20039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 155.289852][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.312707][ T29] audit: type=1326 audit(1759200074.236:20040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 155.312745][ T29] audit: type=1326 audit(1759200074.247:20041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 155.369341][ T29] audit: type=1326 audit(1759200074.268:20042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 155.392954][ T29] audit: type=1326 audit(1759200074.278:20043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.4.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 155.487672][T11942] sd 0:0:1:0: device reset [ 155.503348][T11945] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.530475][T11950] __nla_validate_parse: 2 callbacks suppressed [ 155.530495][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3435'. [ 155.606972][T11964] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11964 comm=syz.5.3442 [ 155.651062][T11968] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3444'. [ 155.694940][T11972] SELinux: ebitmap start bit (1) is not a multiple of the map unit size (64) [ 155.718851][T11972] SELinux: failed to load policy [ 155.767301][T11983] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 155.773878][T11983] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.781636][T11983] vhci_hcd vhci_hcd.0: Device attached [ 155.790794][T11982] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.885580][T11995] loop7: detected capacity change from 0 to 4096 [ 155.898958][T11995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.027631][ T9] usb 1-1: new low-speed USB device number 12 using vhci_hcd [ 156.044909][T12020] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.3465'. [ 156.102006][T12025] loop5: detected capacity change from 0 to 512 [ 156.116557][T12025] EXT4-fs warning (device loop5): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.133428][T12025] EXT4-fs (loop5): mount failed [ 156.159343][T12029] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3469'. [ 156.163174][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.280010][T12047] loop5: detected capacity change from 0 to 256 [ 156.446032][T12060] : renamed from vlan0 (while UP) [ 156.479624][T12064] random: crng reseeded on system resumption [ 156.548446][T11984] vhci_hcd: connection reset by peer [ 156.558087][T11076] vhci_hcd: stop threads [ 156.562461][T11076] vhci_hcd: release socket [ 156.566906][T11076] vhci_hcd: disconnect device [ 156.631580][T12075] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3491'. [ 156.785730][T12092] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 156.792398][T12092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.800064][T12092] vhci_hcd vhci_hcd.0: Device attached [ 156.855065][T12100] loop4: detected capacity change from 0 to 1024 [ 156.886153][T12100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.994884][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.037728][ T3943] usb 13-1: new low-speed USB device number 7 using vhci_hcd [ 157.117164][T12109] siw: device registration error -23 [ 157.222788][T12055] syz.5.3481 (12055) used greatest stack depth: 7288 bytes left [ 157.466152][T12131] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 157.472763][T12131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.480388][T12131] vhci_hcd vhci_hcd.0: Device attached [ 157.580718][T12093] vhci_hcd: connection reset by peer [ 157.586527][T11043] vhci_hcd: stop threads [ 157.590813][T11043] vhci_hcd: release socket [ 157.595262][T11043] vhci_hcd: disconnect device [ 157.885905][T12163] loop4: detected capacity change from 0 to 512 [ 157.894772][T12163] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.919424][T12163] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3527: invalid indirect mapped block 4294967295 (level 0) [ 157.955194][T12163] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3527: invalid indirect mapped block 4294967295 (level 1) [ 157.974086][T12163] EXT4-fs (loop4): 1 orphan inode deleted [ 157.979880][T12163] EXT4-fs (loop4): 1 truncate cleaned up [ 157.988596][T12163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.034691][T12173] loop6: detected capacity change from 0 to 512 [ 158.047197][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.080413][T12175] ref_ctr_offset mismatch. inode: 0x714 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 158.102506][T12173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.119672][T12173] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.177216][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.237754][T12132] vhci_hcd: connection closed [ 158.238033][T11032] vhci_hcd: stop threads [ 158.247077][T11032] vhci_hcd: release socket [ 158.251563][T11032] vhci_hcd: disconnect device [ 158.282365][T12190] loop6: detected capacity change from 0 to 512 [ 158.310106][T12190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.332970][T12190] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.364850][T12197] loop7: detected capacity change from 0 to 512 [ 158.392478][T12197] EXT4-fs (loop7): orphan cleanup on readonly fs [ 158.411844][T12197] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #11: block 1728053262: comm syz.7.3540: lblock 0 mapped to illegal pblock 1728053262 (length 1) [ 158.441283][T12197] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.466593][T12197] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.3540: corrupted inode contents [ 158.480251][T12197] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #15: comm syz.7.3540: mark_inode_dirty error [ 158.494522][T12197] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.3540: corrupted inode contents [ 158.509793][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.524767][T12197] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #15: comm syz.7.3540: mark_inode_dirty error [ 158.538830][T12197] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #15: comm syz.7.3540: mark inode dirty (error -117) [ 158.564152][T12197] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 158.575562][T12197] EXT4-fs (loop7): 1 orphan inode deleted [ 158.582840][T12197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.597252][T12207] pimreg: entered allmulticast mode [ 158.604888][T12207] pimreg: left allmulticast mode [ 158.611657][T12207] dvmrp1: left allmulticast mode [ 158.627527][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.680096][T12217] netlink: 'wޣ': attribute type 21 has an invalid length. [ 158.689305][T12217] netlink: 132 bytes leftover after parsing attributes in process `wޣ'. [ 158.716822][T12221] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 158.723440][T12221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.731107][T12221] vhci_hcd vhci_hcd.0: Device attached [ 158.837925][T12236] netlink: 'syz.0.3556': attribute type 1 has an invalid length. [ 158.881504][T12238] Set syz1 is full, maxelem 6117 reached [ 158.961290][ T1036] usb 11-1: new low-speed USB device number 7 using vhci_hcd [ 159.044796][T12262] 9pnet_fd: Insufficient options for proto=fd [ 159.151522][T12276] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 159.279595][ T3386] usb 9-1: enqueue for inactive port 0 [ 159.285307][ T3386] usb 9-1: enqueue for inactive port 0 [ 159.293451][T12283] siw: device registration error -23 [ 159.361809][ T3386] vhci_hcd: vhci_device speed not set [ 159.367502][T12286] siw: device registration error -23 [ 159.509781][T12222] vhci_hcd: connection reset by peer [ 159.517489][T11043] vhci_hcd: stop threads [ 159.521927][T11043] vhci_hcd: release socket [ 159.526517][T11043] vhci_hcd: disconnect device [ 159.567693][T12308] loop7: detected capacity change from 0 to 1024 [ 159.575137][T12308] EXT4-fs: Ignoring removed orlov option [ 159.580946][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.613031][T12308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 159.627787][T12308] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.647925][T12308] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 159.684594][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.724999][T12321] siw: device registration error -23 [ 159.730813][T12336] 9pnet_fd: Insufficient options for proto=fd [ 159.764037][T12329] siw: device registration error -23 [ 159.771725][T12339] loop7: detected capacity change from 0 to 256 [ 159.785740][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3602'. [ 159.800514][T12339] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 159.810737][T12339] FAT-fs (loop7): Filesystem has been set read-only [ 159.818397][T12343] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3603'. [ 159.864758][ T36] kernel write not supported for file /1989/net/netstat (pid: 36 comm: kworker/1:1) [ 159.908223][ T29] kauditd_printk_skb: 879 callbacks suppressed [ 159.908245][ T29] audit: type=1326 audit(1759200079.129:20922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 159.968551][ T29] audit: type=1400 audit(1759200079.140:20923): avc: denied { create } for pid=12351 comm="syz.7.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.988253][ T29] audit: type=1400 audit(1759200079.140:20924): avc: denied { connect } for pid=12351 comm="syz.7.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.992504][T12361] loop7: detected capacity change from 0 to 512 [ 160.008086][ T29] audit: type=1400 audit(1759200079.140:20925): avc: denied { bind } for pid=12351 comm="syz.7.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.017529][T12361] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 160.033891][ T29] audit: type=1400 audit(1759200079.140:20926): avc: denied { write } for pid=12351 comm="syz.7.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.063251][ T29] audit: type=1400 audit(1759200079.140:20927): avc: denied { read } for pid=12351 comm="syz.7.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.081644][T12361] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 160.082745][ T29] audit: type=1326 audit(1759200079.182:20928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 160.119462][ T29] audit: type=1326 audit(1759200079.192:20929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 160.166350][ T29] audit: type=1326 audit(1759200079.245:20930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 160.174171][T12361] EXT4-fs (loop7): 1 truncate cleaned up [ 160.207485][T12361] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.234139][ T29] audit: type=1400 audit(1759200079.465:20931): avc: denied { remove_name } for pid=12360 comm="syz.7.3611" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.258672][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.432296][T12383] loop7: detected capacity change from 0 to 1024 [ 160.494360][T12387] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 160.500927][T12387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.508441][T12387] vhci_hcd vhci_hcd.0: Device attached [ 160.536790][T12383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.592272][T12369] Set syz1 is full, maxelem 65536 reached [ 160.608999][T12383] Invalid logical block size (6) [ 160.623972][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.674158][ T3386] kernel write not supported for file /snd/seq (pid: 3386 comm: kworker/0:4) [ 160.721423][T12408] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 160.728061][T12408] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.735707][T12408] vhci_hcd vhci_hcd.0: Device attached [ 160.881295][T12428] siw: device registration error -23 [ 160.961353][ T36] usb 9-1: new low-speed USB device number 12 using vhci_hcd [ 160.997839][T12447] IPv6: Can't replace route, no match found [ 161.079341][T12457] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 161.131865][T12463] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12463 comm=syz.6.3654 [ 161.212534][T12473] netlink: 'syz.6.3659': attribute type 10 has an invalid length. [ 161.222828][T12473] team0: Device hsr_slave_0 failed to register rx_handler [ 161.282766][T12388] vhci_hcd: connection reset by peer [ 161.288528][T11036] vhci_hcd: stop threads [ 161.293142][T11036] vhci_hcd: release socket [ 161.297701][T11036] vhci_hcd: disconnect device [ 161.302656][ T9] usb 1-1: enqueue for inactive port 0 [ 161.311677][ T9] usb 1-1: enqueue for inactive port 0 [ 161.380498][ T9] vhci_hcd: vhci_device speed not set [ 161.414024][T12500] loop5: detected capacity change from 0 to 1024 [ 161.422692][T12500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.429462][T12500] EXT4-fs: Ignoring removed bh option [ 161.440807][T12500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.475329][ T6764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.488769][T12511] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 161.495358][T12511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.503461][T12511] vhci_hcd vhci_hcd.0: Device attached [ 161.509217][T12412] vhci_hcd: connection reset by peer [ 161.515514][T11061] vhci_hcd: stop threads [ 161.519868][T11061] vhci_hcd: release socket [ 161.524490][T11061] vhci_hcd: disconnect device [ 161.537955][T12515] syzkaller1: entered promiscuous mode [ 161.543701][T12515] syzkaller1: entered allmulticast mode [ 161.606618][T12519] 9pnet_fd: Insufficient options for proto=fd [ 161.715089][T12529] loop5: detected capacity change from 0 to 1024 [ 161.722188][T12529] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 161.733249][T12529] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 161.743614][T12529] JBD2: no valid journal superblock found [ 161.749377][T12529] EXT4-fs (loop5): Could not load journal inode [ 161.854941][T12543] loop5: detected capacity change from 0 to 512 [ 161.868771][T12543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.881418][T12543] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.903483][ T6764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.990492][T12555] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 161.997055][T12555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.004928][T12555] vhci_hcd vhci_hcd.0: Device attached [ 162.056507][T12565] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 162.058347][T12564] IPVS: stopping master sync thread 12565 ... [ 162.281682][T12512] vhci_hcd: connection reset by peer [ 162.287304][T11061] vhci_hcd: stop threads [ 162.291627][T11061] vhci_hcd: release socket [ 162.296107][T11061] vhci_hcd: disconnect device [ 162.300817][ T3943] usb 13-1: enqueue for inactive port 0 [ 162.306410][ T3943] usb 13-1: enqueue for inactive port 0 [ 162.370997][ T3943] vhci_hcd: vhci_device speed not set [ 162.777025][T12585] loop6: detected capacity change from 0 to 512 [ 162.784027][T12585] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.790802][T12556] vhci_hcd: connection closed [ 162.791063][T11043] vhci_hcd: stop threads [ 162.796011][T12585] EXT4-fs (loop6): filesystem is read-only [ 162.800087][T11043] vhci_hcd: release socket [ 162.807526][T12585] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 162.810400][T11043] vhci_hcd: disconnect device [ 162.826342][T12585] EXT4-fs (loop6): filesystem is read-only [ 162.832261][T12585] EXT4-fs (loop6): orphan cleanup on readonly fs [ 162.839105][T12585] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #16: comm syz.6.3706: iget: bad i_size value: 648518346341360424 [ 162.852380][T12585] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3706: couldn't read orphan inode 16 (err -117) [ 162.865009][T12585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.892178][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.191616][T12625] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3724'. [ 163.317117][T12638] infiniband !yz!: set active [ 163.321939][T12638] infiniband !yz!: added team_slave_0 [ 163.337919][T12638] RDS/IB: !yz!: added [ 163.342034][T12638] smc: adding ib device !yz! with port count 1 [ 163.352185][T12638] smc: ib device !yz! port 1 has pnetid [ 163.504610][T12663] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 163.511278][T12663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.518886][T12663] vhci_hcd vhci_hcd.0: Device attached [ 163.723727][T12689] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 163.723749][T12689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.723827][T12689] vhci_hcd vhci_hcd.0: Device attached [ 163.772066][ T1036] usb 11-1: enqueue for inactive port 0 [ 163.772091][ T1036] usb 11-1: enqueue for inactive port 0 [ 163.838549][ T1036] vhci_hcd: vhci_device speed not set [ 163.961566][ T3421] usb 13-1: new low-speed USB device number 8 using vhci_hcd [ 164.274515][T12669] vhci_hcd: connection closed [ 164.274867][T11043] vhci_hcd: stop threads [ 164.274877][T11043] vhci_hcd: release socket [ 164.274889][T11043] vhci_hcd: disconnect device [ 164.357152][T12695] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.357172][T12695] vhci_hcd: invalid port number 253 [ 164.357180][T12695] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 164.474575][T12703] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 164.479716][T12702] IPVS: stopping master sync thread 12703 ... [ 164.516410][T12690] vhci_hcd: connection reset by peer [ 164.522141][T11028] vhci_hcd: stop threads [ 164.526466][T11028] vhci_hcd: release socket [ 164.530909][T11028] vhci_hcd: disconnect device [ 164.531444][T12707] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3754' sets config #1 [ 164.653936][T12715] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 164.660509][T12715] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.668154][T12715] vhci_hcd vhci_hcd.0: Device attached [ 164.676346][ T29] kauditd_printk_skb: 1120 callbacks suppressed [ 164.676365][ T29] audit: type=1326 audit(1759200084.137:22052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.0.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 164.706469][ T29] audit: type=1326 audit(1759200084.137:22053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.0.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 164.730169][ T29] audit: type=1326 audit(1759200084.137:22054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.0.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 164.753773][ T29] audit: type=1326 audit(1759200084.137:22055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.0.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 164.777436][ T29] audit: type=1326 audit(1759200084.137:22056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.0.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 164.801013][ T29] audit: type=1326 audit(1759200084.137:22057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.0.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 164.824746][ T29] audit: type=1326 audit(1759200084.137:22058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.0.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 164.848360][ T29] audit: type=1326 audit(1759200084.137:22059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.0.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7effca5fef03 code=0x7ffc0000 [ 164.871796][ T29] audit: type=1326 audit(1759200084.137:22060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.0.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7effca5fef03 code=0x7ffc0000 [ 164.895231][ T29] audit: type=1326 audit(1759200084.137:22061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.0.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 164.971222][ T9] usb 1-1: new low-speed USB device number 13 using vhci_hcd [ 165.070695][T12733] ALSA: seq fatal error: cannot create timer (-19) [ 165.158005][T12748] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3771'. [ 165.167029][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3771'. [ 165.176089][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3771'. [ 165.198426][T12748] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3771'. [ 165.207532][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3771'. [ 165.216673][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3771'. [ 165.244017][T12748] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3771'. [ 165.253072][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3771'. [ 165.262242][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3771'. [ 165.447084][T12716] vhci_hcd: connection reset by peer [ 165.452966][T11043] vhci_hcd: stop threads [ 165.457265][T11043] vhci_hcd: release socket [ 165.461694][T11043] vhci_hcd: disconnect device [ 165.665123][T12784] 9pnet_fd: Insufficient options for proto=fd [ 165.688410][T12786] FAT-fs (loop13): unable to read boot sector [ 165.744377][T12792] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 165.750924][T12792] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.758480][T12792] vhci_hcd vhci_hcd.0: Device attached [ 165.764232][ T36] usb 9-1: enqueue for inactive port 0 [ 165.766681][T12793] vhci_hcd: connection closed [ 165.769794][ T36] usb 9-1: enqueue for inactive port 0 [ 165.780203][T11076] vhci_hcd: stop threads [ 165.784696][T11076] vhci_hcd: release socket [ 165.789257][T11076] vhci_hcd: disconnect device [ 165.838935][ T36] vhci_hcd: vhci_device speed not set [ 166.051453][T12804] ref_ctr_offset mismatch. inode: 0x128b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 166.226085][T12815] netlink: zone id is out of range [ 166.244418][T12813] siw: device registration error -23 [ 166.411139][T12831] SELinux: failed to load policy [ 166.446123][T12840] loop6: detected capacity change from 0 to 2048 [ 166.531073][T12840] loop6: unable to read partition table [ 166.537008][T12840] loop6: partition table beyond EOD, truncated [ 166.543275][T12840] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 166.607469][T12856] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 166.645096][T12858] binfmt_misc: register: failed to install interpreter file ./file0 [ 166.695545][T12864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.912270][T12887] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 166.918898][T12887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.926600][T12887] vhci_hcd vhci_hcd.0: Device attached [ 167.152282][ T1036] usb 9-1: new low-speed USB device number 13 using vhci_hcd [ 167.267615][T12895] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 167.274321][T12895] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.281928][T12895] vhci_hcd vhci_hcd.0: Device attached [ 167.312531][T12902] rdma_rxe: rxe_newlink: failed to add lo [ 167.514281][ T3386] usb 15-1: new low-speed USB device number 5 using vhci_hcd [ 167.559821][T12933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.707113][T12888] vhci_hcd: connection reset by peer [ 167.712702][T11076] vhci_hcd: stop threads [ 167.717017][T11076] vhci_hcd: release socket [ 167.721472][T11076] vhci_hcd: disconnect device [ 167.728942][T12942] siw: device registration error -23 [ 167.914648][T12947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.974129][T12951] netlink: 'syz.0.3857': attribute type 1 has an invalid length. [ 168.001988][T12953] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 168.008538][T12953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.016083][T12953] vhci_hcd vhci_hcd.0: Device attached [ 168.060210][T12896] vhci_hcd: connection reset by peer [ 168.069527][T11043] vhci_hcd: stop threads [ 168.073819][T11043] vhci_hcd: release socket [ 168.078419][T11043] vhci_hcd: disconnect device [ 168.233835][T12961] netlink: zone id is out of range [ 168.240168][T12961] netlink: zone id is out of range [ 168.245416][T12961] netlink: zone id is out of range [ 168.250795][T12961] netlink: zone id is out of range [ 168.256101][T12961] netlink: zone id is out of range [ 168.261482][T12961] netlink: zone id is out of range [ 168.266907][T12961] netlink: zone id is out of range [ 168.314152][T12963] batadv_slave_1: entered promiscuous mode [ 168.321947][T12962] batadv_slave_1: left promiscuous mode [ 168.743380][ T3421] usb 13-1: enqueue for inactive port 0 [ 168.749005][ T3421] usb 13-1: enqueue for inactive port 0 [ 168.766649][T12982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12982 comm=syz.6.3870 [ 168.795280][T12954] vhci_hcd: connection closed [ 168.795408][T11028] vhci_hcd: stop threads [ 168.804469][T11028] vhci_hcd: release socket [ 168.808892][T11028] vhci_hcd: disconnect device [ 168.921910][T12994] netlink: 'syz.6.3876': attribute type 10 has an invalid length. [ 168.931625][T12994] team0: Device hsr_slave_0 failed to register rx_handler [ 168.961623][T12996] __nla_validate_parse: 11 callbacks suppressed [ 168.961639][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3877'. [ 168.980971][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3877'. [ 169.016110][ T3421] vhci_hcd: vhci_device speed not set [ 169.180102][T13008] loop6: detected capacity change from 0 to 128 [ 169.240267][T13014] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 169.348453][T13025] loop6: detected capacity change from 0 to 128 [ 169.350965][T13027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.357519][T13025] FAT-fs (loop6): Directory bread(block 162) failed [ 169.371993][T13025] FAT-fs (loop6): Directory bread(block 163) failed [ 169.378705][T13025] FAT-fs (loop6): Directory bread(block 164) failed [ 169.385470][T13025] FAT-fs (loop6): Directory bread(block 165) failed [ 169.392324][T13025] FAT-fs (loop6): Directory bread(block 166) failed [ 169.399006][T13025] FAT-fs (loop6): Directory bread(block 167) failed [ 169.405637][T13025] FAT-fs (loop6): Directory bread(block 168) failed [ 169.412403][T13025] FAT-fs (loop6): Directory bread(block 169) failed [ 169.424937][T13025] FAT-fs (loop6): Directory bread(block 162) failed [ 169.431875][T13025] FAT-fs (loop6): Directory bread(block 163) failed [ 169.439002][T13025] !#^-!)$}: attempt to access beyond end of device [ 169.439002][T13025] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 169.452114][T13025] !#^-!)$}: attempt to access beyond end of device [ 169.452114][T13025] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 169.483306][T13029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13029 comm=syz.6.3891 [ 169.496146][T13029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13029 comm=syz.6.3891 [ 169.631047][ T29] kauditd_printk_skb: 692 callbacks suppressed [ 169.631066][ T29] audit: type=1326 audit(1759200089.345:22754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.4.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 169.669603][ T29] audit: type=1326 audit(1759200089.345:22755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.4.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 169.693346][ T29] audit: type=1326 audit(1759200089.345:22756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.4.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 169.717047][ T29] audit: type=1326 audit(1759200089.345:22757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.4.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 169.740860][ T29] audit: type=1326 audit(1759200089.345:22758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.4.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 169.742487][T13044] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 169.764643][ T29] audit: type=1326 audit(1759200089.345:22759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.4.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 169.771096][T13044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.794966][ T29] audit: type=1326 audit(1759200089.345:22760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.4.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 169.802391][T13044] vhci_hcd vhci_hcd.0: Device attached [ 169.825813][ T29] audit: type=1326 audit(1759200089.345:22761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.4.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 169.854955][ T29] audit: type=1326 audit(1759200089.376:22762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.4.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 169.878574][ T29] audit: type=1326 audit(1759200089.376:22763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.4.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 169.902979][ T9] usb 1-1: enqueue for inactive port 0 [ 169.908622][ T9] usb 1-1: enqueue for inactive port 0 [ 169.971711][ T9] vhci_hcd: vhci_device speed not set [ 170.089011][T13053] siw: device registration error -23 [ 170.192733][T13059] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 170.199334][T13059] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.206906][T13059] vhci_hcd vhci_hcd.0: Device attached [ 170.537937][T13045] vhci_hcd: connection closed [ 170.538278][T11043] vhci_hcd: stop threads [ 170.547425][T11043] vhci_hcd: release socket [ 170.551873][T11043] vhci_hcd: disconnect device [ 170.883297][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3907'. [ 170.910769][T13075] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3908'. [ 170.985166][T13060] vhci_hcd: connection reset by peer [ 170.990606][T11028] vhci_hcd: stop threads [ 170.994896][T11028] vhci_hcd: release socket [ 170.999347][T11028] vhci_hcd: disconnect device [ 171.043858][T13082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3911'. [ 171.104036][T13088] loop4: detected capacity change from 0 to 1024 [ 171.113714][T13088] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 171.124701][T13088] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 171.136413][T13088] JBD2: no valid journal superblock found [ 171.142265][T13088] EXT4-fs (loop4): Could not load journal inode [ 171.153485][T13088] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 171.213791][T13092] syzkaller1: entered promiscuous mode [ 171.219397][T13092] syzkaller1: entered allmulticast mode [ 171.690913][T13125] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 171.697540][T13125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.705204][T13125] vhci_hcd vhci_hcd.0: Device attached [ 171.791160][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3938'. [ 171.869370][T13157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3945'. [ 171.908057][T13163] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3948'. [ 171.938343][T13167] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3951'. [ 171.947391][T13167] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3951'. [ 171.978143][T13174] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 171.984705][T13174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.986406][T13168] siw: device registration error -23 [ 171.992251][T13174] vhci_hcd vhci_hcd.0: Device attached [ 172.019103][T13179] netlink: 'syz.0.3955': attribute type 7 has an invalid length. [ 172.176944][T13193] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 172.183625][T13193] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.191252][T13193] vhci_hcd vhci_hcd.0: Device attached [ 172.228864][ T3365] usb 13-1: new low-speed USB device number 9 using vhci_hcd [ 172.305249][ T3386] usb 15-1: enqueue for inactive port 0 [ 172.310888][ T3386] usb 15-1: enqueue for inactive port 0 [ 172.381454][ T3386] vhci_hcd: vhci_device speed not set [ 172.476897][T13129] vhci_hcd: connection reset by peer [ 172.482622][T11028] vhci_hcd: stop threads [ 172.486940][T11028] vhci_hcd: release socket [ 172.491386][T11028] vhci_hcd: disconnect device [ 172.742098][T13199] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 172.748697][T13199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.756266][T13199] vhci_hcd vhci_hcd.0: Device attached [ 172.771212][T13175] vhci_hcd: connection reset by peer [ 172.776950][T11032] vhci_hcd: stop threads [ 172.781267][T11032] vhci_hcd: release socket [ 172.785739][T11032] vhci_hcd: disconnect device [ 172.970250][T13194] vhci_hcd: connection closed [ 172.970655][T11028] vhci_hcd: stop threads [ 172.979659][T11028] vhci_hcd: release socket [ 172.984137][T11028] vhci_hcd: disconnect device [ 173.147398][T13217] SELinux: failed to load policy [ 173.186948][T13221] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 173.480447][T13238] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 173.487019][T13238] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.494595][T13238] vhci_hcd vhci_hcd.0: Device attached [ 173.534388][T13200] vhci_hcd: connection reset by peer [ 173.542824][T11036] vhci_hcd: stop threads [ 173.547160][T11036] vhci_hcd: release socket [ 173.551615][T11036] vhci_hcd: disconnect device [ 173.695625][T13257] loop6: detected capacity change from 0 to 512 [ 173.703349][T13257] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.716589][T13257] EXT4-fs warning (device loop6): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 173.733050][T13257] EXT4-fs (loop6): mount failed [ 173.860452][T13266] __nla_validate_parse: 4 callbacks suppressed [ 173.860469][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3987'. [ 173.861438][T13265] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 173.866814][T13266] IPVS: Error connecting to the multicast addr [ 173.875628][T13265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.875744][T13265] vhci_hcd vhci_hcd.0: Device attached [ 173.917421][T13271] loop6: detected capacity change from 0 to 512 [ 173.925266][T13271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.936188][T13271] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.3989: invalid block [ 173.948760][T13271] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3989: invalid indirect mapped block 4294967295 (level 1) [ 173.962915][T13271] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3989: invalid indirect mapped block 4294967295 (level 1) [ 173.978292][T13271] EXT4-fs (loop6): 2 truncates cleaned up [ 173.984789][T13271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.012176][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.052740][T13279] netlink: 'syz.6.3992': attribute type 7 has an invalid length. [ 174.092480][T13285] loop7: detected capacity change from 0 to 764 [ 174.099441][T13285] /dev/loop7: Can't open blockdev [ 174.104931][ C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 174.190078][T13293] loop7: detected capacity change from 0 to 2048 [ 174.207554][T13293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.222364][T13293] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.249750][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.269895][T13239] vhci_hcd: connection closed [ 174.270129][T11043] vhci_hcd: stop threads [ 174.279285][T11043] vhci_hcd: release socket [ 174.283737][T11043] vhci_hcd: disconnect device [ 174.347308][T13303] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 174.353885][T13303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.361434][T13303] vhci_hcd vhci_hcd.0: Device attached [ 174.401723][ T29] kauditd_printk_skb: 1345 callbacks suppressed [ 174.401742][ T29] audit: type=1326 audit(1759200094.353:24109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.7.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdf7a4deec9 code=0x7ffc0000 [ 174.433811][ T29] audit: type=1326 audit(1759200094.353:24110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13264 comm="syz.4.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 174.457626][ T29] audit: type=1326 audit(1759200094.384:24111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13264 comm="syz.4.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 174.481467][ T29] audit: type=1326 audit(1759200094.384:24112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 174.505372][ T29] audit: type=1326 audit(1759200094.384:24113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.7.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdf7a4deec9 code=0x7ffc0000 [ 174.532659][ T29] audit: type=1326 audit(1759200094.405:24114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13264 comm="syz.4.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 174.556486][ T29] audit: type=1326 audit(1759200094.416:24115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 174.580467][ T29] audit: type=1326 audit(1759200094.416:24116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13264 comm="syz.4.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 174.604128][ T29] audit: type=1326 audit(1759200094.426:24117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 174.627770][ T29] audit: type=1326 audit(1759200094.426:24118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13264 comm="syz.4.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f65f1dceec9 code=0x7ffc0000 [ 174.656368][T13267] vhci_hcd: connection reset by peer [ 174.663260][T11043] vhci_hcd: stop threads [ 174.667591][T11043] vhci_hcd: release socket [ 174.672056][T11043] vhci_hcd: disconnect device [ 175.140417][T13304] vhci_hcd: connection closed [ 175.140723][T11043] vhci_hcd: stop threads [ 175.150199][T11043] vhci_hcd: release socket [ 175.154676][T11043] vhci_hcd: disconnect device [ 175.178459][T13327] loop4: detected capacity change from 0 to 128 [ 175.185427][T13327] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.197766][T13327] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.228471][T13329] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 175.235106][T13329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.242848][T13329] vhci_hcd vhci_hcd.0: Device attached [ 175.430872][ T9] usb 1-1: enqueue for inactive port 0 [ 175.436481][ T9] usb 1-1: enqueue for inactive port 0 [ 175.507796][ T9] vhci_hcd: vhci_device speed not set [ 175.532081][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4012'. [ 175.543914][T13335] gretap0: entered promiscuous mode [ 175.549244][T13335] macsec1: entered promiscuous mode [ 175.554595][T13335] macsec1: entered allmulticast mode [ 175.559895][T13335] gretap0: entered allmulticast mode [ 175.566727][T13335] gretap0: left allmulticast mode [ 175.572018][T13335] gretap0: left promiscuous mode [ 175.695263][T13347] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 175.740420][T13355] loop6: detected capacity change from 0 to 512 [ 175.754356][T13355] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4022: casefold flag without casefold feature [ 175.777168][T13355] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4022: couldn't read orphan inode 15 (err -117) [ 175.802862][T13355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.925866][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.949187][T13366] loop6: detected capacity change from 0 to 1024 [ 175.956346][T13366] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 175.969445][T13366] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.4025: Invalid block bitmap block 0 in block_group 0 [ 175.984277][T13366] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.4025: Failed to acquire dquot type 0 [ 176.011376][T13366] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.4025: Freeing blocks not in datazone - block = 0, count = 4096 [ 176.026940][T13330] vhci_hcd: connection closed [ 176.027327][T11028] vhci_hcd: stop threads [ 176.036358][T11028] vhci_hcd: release socket [ 176.041680][T11028] vhci_hcd: disconnect device [ 176.054302][T13366] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.4025: Invalid inode bitmap blk 0 in block_group 0 [ 176.082434][T11043] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:29: Failed to release dquot type 0 [ 176.094208][T13366] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 176.114506][T13366] EXT4-fs (loop6): 1 orphan inode deleted [ 176.122129][T13366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.157780][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.174511][T13375] macvlan1: entered promiscuous mode [ 176.181061][T13375] batadv0: entered promiscuous mode [ 176.225512][T13381] loop6: detected capacity change from 0 to 512 [ 176.233103][T13381] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 176.245245][T13381] EXT4-fs (loop6): 1 truncate cleaned up [ 176.251460][T13381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.267816][T13381] EXT4-fs error (device loop6): ext4_ext_precache:632: inode #15: comm syz.6.4033: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 176.271580][T13386] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4035'. [ 176.295206][T13386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4035'. [ 176.305157][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.325562][T13388] loop6: detected capacity change from 0 to 512 [ 176.333917][T13388] EXT4-fs (loop6): 1 truncate cleaned up [ 176.340766][T13388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.368405][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.418368][T13396] loop6: detected capacity change from 0 to 2048 [ 176.427803][T13396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.626887][T13408] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4044'. [ 176.689241][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.740669][T13412] loop6: detected capacity change from 0 to 764 [ 176.801965][T13420] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 176.808543][T13420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.816119][T13420] vhci_hcd vhci_hcd.0: Device attached [ 176.860610][T13427] loop6: detected capacity change from 0 to 512 [ 176.869676][T13427] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 176.881330][T13427] EXT4-fs (loop6): 1 truncate cleaned up [ 176.888765][T13427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.907452][T13430] loop4: detected capacity change from 0 to 512 [ 176.915563][T13430] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 176.923917][T13430] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4052: invalid indirect mapped block 2683928664 (level 1) [ 176.938882][T13430] EXT4-fs (loop4): 1 truncate cleaned up [ 176.945073][T13430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.970272][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.982488][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.999471][T13434] netlink: 'syz.6.4053': attribute type 1 has an invalid length. [ 177.024128][T13438] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 177.030767][T13438] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.038615][T13438] vhci_hcd vhci_hcd.0: Device attached [ 177.044245][ T3365] usb 13-1: enqueue for inactive port 0 [ 177.049953][ T3365] usb 13-1: enqueue for inactive port 0 [ 177.114913][ T3365] vhci_hcd: vhci_device speed not set [ 177.483703][T13458] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 177.490357][T13458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.491060][T13462] syzkaller1: entered promiscuous mode [ 177.497978][T13458] vhci_hcd vhci_hcd.0: Device attached [ 177.503562][T13462] syzkaller1: entered allmulticast mode [ 177.596192][T13421] vhci_hcd: connection closed [ 177.597513][T11061] vhci_hcd: stop threads [ 177.606594][T11061] vhci_hcd: release socket [ 177.611091][T11061] vhci_hcd: disconnect device [ 177.667094][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4066'. [ 177.686381][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4066'. [ 177.712078][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4066'. [ 177.722441][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4066'. [ 177.739942][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4066'. [ 177.785908][T13479] block device autoloading is deprecated and will be removed. [ 177.817789][T13439] vhci_hcd: connection reset by peer [ 177.823554][T11043] vhci_hcd: stop threads [ 177.827812][T11043] vhci_hcd: release socket [ 177.832293][T11043] vhci_hcd: disconnect device [ 177.837302][ T1036] usb 9-1: enqueue for inactive port 0 [ 177.915212][ T1036] vhci_hcd: vhci_device speed not set [ 178.019792][ T3386] usb 15-1: enqueue for inactive port 0 [ 178.025489][ T3386] usb 15-1: enqueue for inactive port 0 [ 178.095925][ T3386] vhci_hcd: vhci_device speed not set [ 178.276478][T13460] vhci_hcd: connection reset by peer [ 178.283257][T11028] vhci_hcd: stop threads [ 178.287550][T11028] vhci_hcd: release socket [ 178.291982][T11028] vhci_hcd: disconnect device [ 178.416362][T13500] loop4: detected capacity change from 0 to 128 [ 178.818851][T13536] __nla_validate_parse: 4 callbacks suppressed [ 178.818868][T13536] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4093'. [ 179.573245][ T29] kauditd_printk_skb: 869 callbacks suppressed [ 179.573268][ T29] audit: type=1326 audit(1759200099.781:24985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 179.603252][ T29] audit: type=1326 audit(1759200099.781:24986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 179.626951][ T29] audit: type=1326 audit(1759200099.781:24987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 179.650602][ T29] audit: type=1326 audit(1759200099.781:24988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 179.674306][ T29] audit: type=1326 audit(1759200099.781:24989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 179.697997][ T29] audit: type=1326 audit(1759200099.781:24990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 179.701240][T13556] rdma_op ffff88810028f980 conn xmit_rdma 0000000000000000 [ 179.721734][ T29] audit: type=1326 audit(1759200099.781:24991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 179.721825][ T29] audit: type=1326 audit(1759200099.781:24992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 179.721860][ T29] audit: type=1326 audit(1759200099.781:24993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 179.800065][ T29] audit: type=1326 audit(1759200099.781:24994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 179.854287][T13560] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 179.860861][T13560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.868410][T13560] vhci_hcd vhci_hcd.0: Device attached [ 179.884008][T13566] netlink: 'syz.7.4104': attribute type 11 has an invalid length. [ 179.914681][T13571] loop7: detected capacity change from 0 to 512 [ 179.996226][T13576] loop7: detected capacity change from 0 to 2048 [ 180.006564][T13576] EXT4-fs: Ignoring removed i_version option [ 180.032662][T13576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.066340][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.140508][T13586] loop7: detected capacity change from 0 to 2048 [ 180.157620][T13586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.248339][T13600] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 180.254941][T13600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 180.262571][T13600] vhci_hcd vhci_hcd.0: Device attached [ 180.313647][T13605] netlink: 'syz.0.4117': attribute type 11 has an invalid length. [ 180.381087][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.496073][ T23] usb 11-1: new low-speed USB device number 8 using vhci_hcd [ 180.502121][T13613] siw: device registration error -23 [ 180.642433][T13561] vhci_hcd: connection closed [ 180.642591][T11032] vhci_hcd: stop threads [ 180.651636][T11032] vhci_hcd: release socket [ 180.656068][T11032] vhci_hcd: disconnect device [ 181.049972][T13601] vhci_hcd: connection reset by peer [ 181.061411][T11028] vhci_hcd: stop threads [ 181.065742][T11028] vhci_hcd: release socket [ 181.070288][T11028] vhci_hcd: disconnect device [ 181.204027][T13641] loop4: detected capacity change from 0 to 512 [ 181.251764][T13647] loop6: detected capacity change from 0 to 2048 [ 181.269948][T13647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.291497][T13653] net_ratelimit: 5 callbacks suppressed [ 181.291517][T13653] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 181.308882][T13656] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4139'. [ 181.318473][T13657] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 181.325010][T13657] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.332623][T13657] vhci_hcd vhci_hcd.0: Device attached [ 181.361230][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.442009][T13677] loop6: detected capacity change from 0 to 1024 [ 181.469557][T13677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.482143][T13677] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.504979][T13677] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.4149: lblock 3 mapped to illegal pblock 3 (length 3) [ 181.521074][T13677] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 181.533535][T13677] EXT4-fs (loop6): This should not happen!! Data will be lost [ 181.533535][T13677] [ 181.548018][T13677] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.4149: lblock 3 mapped to illegal pblock 3 (length 1) [ 181.562538][T13677] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.4149: lblock 3 mapped to illegal pblock 3 (length 1) [ 181.576773][ T36] usb 1-1: new low-speed USB device number 14 using vhci_hcd [ 181.585755][T13677] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.4149: lblock 3 mapped to illegal pblock 3 (length 1) [ 181.600735][T13677] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.4149: lblock 3 mapped to illegal pblock 3 (length 1) [ 181.606966][T13691] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 181.618041][T13677] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.4149: lblock 3 mapped to illegal pblock 3 (length 1) [ 181.621506][T13691] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.621633][T13691] vhci_hcd vhci_hcd.0: Device attached [ 181.655705][T13677] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.4149: lblock 3 mapped to illegal pblock 3 (length 1) [ 181.670760][T13677] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.4149: lblock 3 mapped to illegal pblock 3 (length 1) [ 181.685757][T13677] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.4149: lblock 3 mapped to illegal pblock 3 (length 1) [ 181.700556][T13677] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: block 3: comm syz.6.4149: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.090726][T13658] vhci_hcd: connection reset by peer [ 182.097893][T11076] vhci_hcd: stop threads [ 182.102251][T11076] vhci_hcd: release socket [ 182.106693][T11076] vhci_hcd: disconnect device [ 182.292331][T11028] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 182.304807][T11028] EXT4-fs (loop6): This should not happen!! Data will be lost [ 182.304807][T11028] [ 182.316199][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 182.392763][T13715] loop6: detected capacity change from 0 to 512 [ 182.399413][T13692] vhci_hcd: connection closed [ 182.399586][T11028] vhci_hcd: stop threads [ 182.408641][T11028] vhci_hcd: release socket [ 182.413116][T11028] vhci_hcd: disconnect device [ 182.422283][T13715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.435522][T13715] ext4 filesystem being mounted at /595/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.453469][T13715] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4164: corrupted inode contents [ 182.465564][T13715] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4164: mark_inode_dirty error [ 182.480082][T13715] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4164: corrupted inode contents [ 182.499122][T13715] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4164: corrupted inode contents [ 182.529950][T13715] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4164: mark_inode_dirty error [ 182.543469][T13715] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4164: corrupted inode contents [ 182.552060][T13729] loop4: detected capacity change from 0 to 1024 [ 182.563124][T13715] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.4164: mark_inode_dirty error [ 182.566053][T13731] loop7: detected capacity change from 0 to 1024 [ 182.575432][T13715] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4164: corrupted inode contents [ 182.594360][T13715] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4164: mark_inode_dirty error [ 182.607038][T13729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 182.624282][T13731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.637255][T13729] ext4 filesystem being mounted at /956/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.653810][T13729] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.4169: lblock 3 mapped to illegal pblock 3 (length 3) [ 182.682639][T13731] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.4170: Allocating blocks 449-513 which overlap fs metadata [ 182.698638][T13729] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 182.710994][T13729] EXT4-fs (loop4): This should not happen!! Data will be lost [ 182.710994][T13729] [ 182.723614][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.723781][T13742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4173'. [ 182.735998][T13729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.4169: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.751527][T13740] EXT4-fs (loop7): pa ffff8881076a9700: logic 48, phys. 177, len 21 [ 182.763827][T13740] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 182.774224][ T3365] usb 13-1: enqueue for inactive port 0 [ 182.779842][ T3365] usb 13-1: enqueue for inactive port 0 [ 182.799672][T13729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.4169: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.815075][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.826460][T13729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.4169: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.843175][T13747] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 182.843336][T13729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.4169: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.849726][T13747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.849863][T13747] vhci_hcd vhci_hcd.0: Device attached [ 182.865871][T13729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.4169: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.917393][T13729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.4169: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.934863][T13729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.4169: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.952355][T13729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.4169: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.969292][T13729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.4169: lblock 3 mapped to illegal pblock 3 (length 1) [ 183.117001][T13771] siw: device registration error -23 [ 183.139384][T13779] syz_tun: entered allmulticast mode [ 183.145322][T13781] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 183.149478][T13779] dvmrp8: entered allmulticast mode [ 183.151873][T13781] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.160948][T13779] syz_tun: left allmulticast mode [ 183.164651][T13781] vhci_hcd vhci_hcd.0: Device attached [ 183.169876][T13779] dvmrp8: left allmulticast mode [ 183.353653][ T3365] usb 13-1: new low-speed USB device number 10 using vhci_hcd [ 183.386123][T11032] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 183.398485][T11032] EXT4-fs (loop4): This should not happen!! Data will be lost [ 183.398485][T11032] [ 183.410570][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 183.619305][T13749] vhci_hcd: connection reset by peer [ 183.625070][T11043] vhci_hcd: stop threads [ 183.629407][T11043] vhci_hcd: release socket [ 183.634007][T11043] vhci_hcd: disconnect device [ 183.850840][T13837] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 183.857446][T13837] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.865052][T13837] vhci_hcd vhci_hcd.0: Device attached [ 183.935539][T13782] vhci_hcd: connection closed [ 183.935850][T11028] vhci_hcd: stop threads [ 183.944964][T11028] vhci_hcd: release socket [ 183.949396][T11028] vhci_hcd: disconnect device [ 184.056671][T13859] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 184.064483][T13859] SELinux: failed to load policy [ 184.168876][T13871] syzkaller1: entered promiscuous mode [ 184.174483][T13871] syzkaller1: entered allmulticast mode [ 184.270552][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4232'. [ 184.319489][T13887] program syz.6.4236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.348879][ T29] kauditd_printk_skb: 989 callbacks suppressed [ 184.348911][ T29] audit: type=1326 audit(1759200104.789:25984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13836 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 184.382790][ T29] audit: type=1326 audit(1759200104.789:25985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.5.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 184.406495][ T29] audit: type=1326 audit(1759200104.800:25986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.5.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 184.430263][ T29] audit: type=1326 audit(1759200104.821:25987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.5.4189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 184.453920][ T29] audit: type=1326 audit(1759200104.831:25988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13836 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 184.491983][ T29] audit: type=1326 audit(1759200104.852:25989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13836 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 184.515744][ T29] audit: type=1326 audit(1759200104.884:25990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13836 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 184.539472][ T29] audit: type=1326 audit(1759200104.905:25991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13836 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 184.563123][ T29] audit: type=1326 audit(1759200104.926:25992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13836 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 184.586750][ T29] audit: type=1326 audit(1759200104.936:25993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13836 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 184.626295][T13899] loop7: detected capacity change from 0 to 1024 [ 184.643421][T13838] vhci_hcd: connection closed [ 184.643657][T11028] vhci_hcd: stop threads [ 184.648714][T13897] loop5: detected capacity change from 0 to 2048 [ 184.652783][T11028] vhci_hcd: release socket [ 184.663591][T11028] vhci_hcd: disconnect device [ 184.680268][T13899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.694298][T13897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.742529][T13899] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 184.763019][T13897] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.4242: bit already cleared for inode 15 [ 184.777151][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.798908][ T6764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.864895][T13923] loop7: detected capacity change from 0 to 512 [ 184.872122][T13923] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 184.886157][T13923] EXT4-fs (loop7): 1 truncate cleaned up [ 184.892426][T13923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.919756][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.939892][T13930] netlink: 'syz.7.4254': attribute type 1 has an invalid length. [ 185.032457][T13943] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4257'. [ 185.166360][T13965] openvswitch: netlink: Message has 6 unknown bytes. [ 185.194506][T13971] openvswitch: netlink: Message has 6 unknown bytes. [ 185.275291][T13985] bond2: entered promiscuous mode [ 185.280504][T13985] bond2: entered allmulticast mode [ 185.286057][T13985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.299438][T13985] bond2 (unregistering): Released all slaves [ 185.335001][ T23] usb 11-1: enqueue for inactive port 0 [ 185.353861][ T23] usb 11-1: enqueue for inactive port 0 [ 185.365449][T13997] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4282'. [ 185.409300][T14003] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4284'. [ 185.430044][ T23] vhci_hcd: vhci_device speed not set [ 185.555376][T14025] loop7: detected capacity change from 0 to 512 [ 185.564433][T14025] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4293: bg 0: block 5: invalid block bitmap [ 185.577521][T14025] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 185.586566][T14025] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4293: invalid indirect mapped block 3 (level 2) [ 185.601637][T14025] EXT4-fs (loop7): 2 truncates cleaned up [ 185.607942][T14025] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.612128][T14031] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 185.626910][T14031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.634492][T14031] vhci_hcd vhci_hcd.0: Device attached [ 185.658554][ T8683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.117706][T14065] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4308'. [ 186.369906][T14078] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 186.376464][T14078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.384011][T14078] vhci_hcd vhci_hcd.0: Device attached [ 186.403989][T14032] vhci_hcd: connection closed [ 186.404160][T11028] vhci_hcd: stop threads [ 186.413274][T11028] vhci_hcd: release socket [ 186.417941][T11028] vhci_hcd: disconnect device [ 186.499374][T14083] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4314'. [ 186.508571][T14083] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4314'. [ 186.532993][T14085] netlink: 'syz.5.4315': attribute type 1 has an invalid length. [ 186.667846][T14094] netlink: 'syz.5.4319': attribute type 29 has an invalid length. [ 186.676493][T14094] netlink: 'syz.5.4319': attribute type 29 has an invalid length. [ 186.685059][T14094] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4319'. [ 186.710943][T14096] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 186.835849][T14106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4325'. [ 186.845050][T14106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4325'. [ 187.028161][T14123] siw: device registration error -23 [ 187.049444][T14132] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 187.056020][T14132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.063771][T14132] vhci_hcd vhci_hcd.0: Device attached [ 187.162704][T14079] vhci_hcd: connection closed [ 187.163042][T11061] vhci_hcd: stop threads [ 187.172098][T11061] vhci_hcd: release socket [ 187.176564][T11061] vhci_hcd: disconnect device [ 187.214638][T14145] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 187.221184][T14145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.228817][T14145] vhci_hcd vhci_hcd.0: Device attached [ 187.315729][ T23] usb 15-1: new low-speed USB device number 6 using vhci_hcd [ 187.834982][T14133] vhci_hcd: connection reset by peer [ 187.851867][T11028] vhci_hcd: stop threads [ 187.856180][T11028] vhci_hcd: release socket [ 187.860789][T11028] vhci_hcd: disconnect device [ 187.954702][T14174] siw: device registration error -23 [ 187.977837][T14182] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 187.984406][T14182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.992025][T14182] vhci_hcd vhci_hcd.0: Device attached [ 188.014915][T14146] vhci_hcd: connection reset by peer [ 188.021190][T11032] vhci_hcd: stop threads [ 188.025504][T11032] vhci_hcd: release socket [ 188.029995][T11032] vhci_hcd: disconnect device [ 188.570504][T14195] siw: device registration error -23 [ 188.771213][T14183] vhci_hcd: connection reset by peer [ 188.776716][T11076] vhci_hcd: stop threads [ 188.781081][T11076] vhci_hcd: release socket [ 188.785567][T11076] vhci_hcd: disconnect device [ 188.796117][T14202] siw: device registration error -23 [ 189.083904][T14218] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 189.090462][T14218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.098055][T14218] vhci_hcd vhci_hcd.0: Device attached [ 189.118139][ T29] kauditd_printk_skb: 960 callbacks suppressed [ 189.118162][ T29] audit: type=1326 audit(1759200109.797:26954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 189.148577][ T29] audit: type=1326 audit(1759200109.797:26955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 189.172120][ T29] audit: type=1326 audit(1759200109.797:26956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 189.195828][ T29] audit: type=1326 audit(1759200109.797:26957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 189.219448][ T29] audit: type=1326 audit(1759200109.797:26958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 189.243158][ T29] audit: type=1326 audit(1759200109.797:26959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 189.266796][ T29] audit: type=1326 audit(1759200109.797:26960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 189.290407][ T29] audit: type=1326 audit(1759200109.797:26961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 189.313924][ T29] audit: type=1326 audit(1759200109.797:26962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 189.337553][ T29] audit: type=1326 audit(1759200109.797:26963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14217 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 189.523361][T14244] loop9: detected capacity change from 0 to 7 [ 189.529894][T14244] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.538038][T14244] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.545923][T14244] loop9: unable to read partition table [ 189.551739][T14244] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 189.551739][T14244] ) failed (rc=-5) [ 189.634605][T14257] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 189.641169][T14257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.648844][T14257] vhci_hcd vhci_hcd.0: Device attached [ 189.807575][T14279] loop6: detected capacity change from 0 to 512 [ 189.823470][T14279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.836689][T14279] ext4 filesystem being mounted at /655/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.876678][T14219] vhci_hcd: connection closed [ 189.876889][T11061] vhci_hcd: stop threads [ 189.878551][ T3943] usb 11-1: new low-speed USB device number 9 using vhci_hcd [ 189.881697][T11061] vhci_hcd: release socket [ 189.897774][T11061] vhci_hcd: disconnect device [ 189.914119][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.963286][T14288] ALSA: seq fatal error: cannot create timer (-22) [ 190.050746][T14298] __nla_validate_parse: 2 callbacks suppressed [ 190.050761][T14298] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4403'. [ 190.424777][T14258] vhci_hcd: connection reset by peer [ 190.431026][T11061] vhci_hcd: stop threads [ 190.435330][T11061] vhci_hcd: release socket [ 190.439766][T11061] vhci_hcd: disconnect device [ 190.705798][T14322] siw: device registration error -23 [ 190.950018][T14335] loop6: detected capacity change from 0 to 512 [ 190.969595][T14335] EXT4-fs warning (device loop6): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.009823][T14335] EXT4-fs (loop6): mount failed [ 191.014954][T14348] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 191.021555][T14348] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.029651][T14348] vhci_hcd vhci_hcd.0: Device attached [ 191.055600][T14354] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4426'. [ 191.103585][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4428'. [ 191.113127][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4428'. [ 191.141135][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4440'. [ 191.153231][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4440'. [ 191.230677][T11032] nci: nci_rx_work: unknown MT 0x4 [ 191.802252][T14349] vhci_hcd: connection reset by peer [ 191.807947][T11032] vhci_hcd: stop threads [ 191.812340][T11032] vhci_hcd: release socket [ 191.816829][T11032] vhci_hcd: disconnect device [ 192.019489][T14383] loop5: detected capacity change from 0 to 512 [ 192.043292][T14383] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.4436: Failed to acquire dquot type 1 [ 192.056665][T14383] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.4436: Failed to acquire dquot type 1 [ 192.070823][T14383] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4436: bg 0: block 248: padding at end of block bitmap is not set [ 192.085542][T14383] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 192.094706][T14383] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.4436: Failed to acquire dquot type 1 [ 192.106299][T14383] EXT4-fs (loop5): 1 orphan inode deleted [ 192.113935][T14383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.128865][T14383] ext4 filesystem being mounted at /598/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.135316][ T23] usb 15-1: enqueue for inactive port 0 [ 192.148534][ T23] usb 15-1: enqueue for inactive port 0 [ 192.165925][ T6764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.220992][ T23] vhci_hcd: vhci_device speed not set [ 192.756151][T14437] loop5: detected capacity change from 0 to 764 [ 192.768243][T14441] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.781385][T14437] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 192.841152][T14451] SELinux: security_context_str_to_sid () failed with errno=-22 [ 192.855897][T14455] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4469'. [ 193.063565][T14478] lo speed is unknown, defaulting to 1000 [ 193.127041][T14486] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4483'. [ 193.136243][T14486] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4483'. [ 193.145382][T14486] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4483'. [ 193.162307][T14482] siw: device registration error -23 [ 193.188271][T14490] SELinux: failed to load policy [ 193.211689][T14494] atomic_op ffff88812f296128 conn xmit_atomic 0000000000000000 [ 193.239932][T14497] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 193.246497][T14497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.254051][T14497] vhci_hcd vhci_hcd.0: Device attached [ 193.563759][ T3365] usb 13-1: enqueue for inactive port 0 [ 193.630430][ T3365] vhci_hcd: vhci_device speed not set [ 193.888569][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 193.888588][ T29] audit: type=1326 audit(1759200114.805:27369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 193.918619][ T29] audit: type=1326 audit(1759200114.837:27370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 193.942566][ T29] audit: type=1326 audit(1759200114.858:27371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 193.968446][ T29] audit: type=1326 audit(1759200114.889:27372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 193.992992][ T29] audit: type=1326 audit(1759200114.921:27373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 194.017302][ T29] audit: type=1326 audit(1759200114.921:27374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 194.041024][ T29] audit: type=1326 audit(1759200114.921:27375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 194.044325][ T29] audit: type=1326 audit(1759200114.942:27376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 194.088291][ T29] audit: type=1326 audit(1759200114.942:27377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 194.097790][T14499] vhci_hcd: connection reset by peer [ 194.112088][ T29] audit: type=1326 audit(1759200114.942:27378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.0.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 194.135735][T11032] vhci_hcd: stop threads [ 194.145234][T11032] vhci_hcd: release socket [ 194.149690][T11032] vhci_hcd: disconnect device [ 194.340033][T14530] loop6: detected capacity change from 0 to 1024 [ 194.348046][T14530] EXT4-fs: Ignoring removed orlov option [ 194.365862][T14530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.404388][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.718722][ T3943] usb 11-1: enqueue for inactive port 0 [ 194.718750][ T3943] usb 11-1: enqueue for inactive port 0 [ 194.792447][ T3943] vhci_hcd: vhci_device speed not set [ 195.322137][T14562] SELinux: ebitmap: truncated map [ 195.332417][T14562] SELinux: failed to load policy [ 195.355162][T14568] loop6: detected capacity change from 0 to 512 [ 195.362259][T14568] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.578610][T14605] loop6: detected capacity change from 0 to 128 [ 195.622359][T14609] loop6: detected capacity change from 0 to 512 [ 195.631945][T14609] EXT4-fs (loop6): too many log groups per flexible block group [ 195.639653][T14609] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 195.646617][T14609] EXT4-fs (loop6): mount failed [ 196.148490][T14626] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.195785][T14626] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.243743][T14626] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.291228][T14626] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.343991][T11061] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.355609][T11046] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.375351][T11061] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.386108][T11061] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.475949][T14637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4547'. [ 196.485207][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4547'. [ 196.533999][T14631] siw: device registration error -23 [ 196.550683][T14642] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 196.638536][T14653] loop6: detected capacity change from 0 to 512 [ 196.646745][T14653] EXT4-fs error (device loop6): ext4_init_orphan_info:585: comm syz.6.4554: inode #0: comm syz.6.4554: iget: illegal inode # [ 196.661098][T14653] EXT4-fs (loop6): get orphan inode failed [ 196.667107][T14653] EXT4-fs (loop6): mount failed [ 196.697445][ T36] vhci_hcd: vhci_device speed not set [ 196.905863][T14682] loop6: detected capacity change from 0 to 1024 [ 196.928240][T14682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.945388][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4570'. [ 196.950716][T14682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.4568: inode #64: comm syz.6.4568: iget: illegal inode # [ 196.954489][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4570'. [ 196.954509][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4570'. [ 196.985972][T14682] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.4568: error while reading EA inode 64 err=-117 [ 196.996825][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4570'. [ 197.007284][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4570'. [ 197.016424][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4570'. [ 197.031390][ T6940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.053046][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4570'. [ 197.062257][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4570'. [ 197.356964][T14733] loop5: detected capacity change from 0 to 512 [ 197.390873][T14733] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 197.405156][T14735] SELinux: failed to load policy [ 197.406857][T14733] System zones: 0-2, 18-18, 34-35 [ 197.424953][T14733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.442809][T14733] ext4 filesystem being mounted at /633/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.492227][T14743] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 197.498839][T14743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.506557][T14743] vhci_hcd vhci_hcd.0: Device attached [ 197.517510][ T6764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.616184][T14754] ALSA: seq fatal error: cannot create timer (-19) [ 197.625031][T14757] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 197.631586][T14757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.639261][T14757] vhci_hcd vhci_hcd.0: Device attached [ 197.690933][T14764] sch_tbf: burst 6 is lower than device ip6gre0 mtu (39785) ! [ 197.700536][T14760] siw: device registration error -23 [ 197.734101][T14767] loop4: detected capacity change from 0 to 764 [ 197.735456][ T3365] usb 13-1: new low-speed USB device number 11 using vhci_hcd [ 197.754304][T14767] rock: directory entry would overflow storage [ 197.760845][T14767] rock: sig=0x4f50, size=4, remaining=3 [ 197.766518][T14767] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 197.869038][ T1036] usb 15-1: new low-speed USB device number 7 using vhci_hcd [ 198.000448][T14785] loop4: detected capacity change from 0 to 128 [ 198.007316][T14785] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.024539][T14785] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.062067][T14792] netlink: 'syz.4.4614': attribute type 1 has an invalid length. [ 198.250747][T14821] lo speed is unknown, defaulting to 1000 [ 198.284317][T14744] vhci_hcd: connection reset by peer [ 198.290456][T11061] vhci_hcd: stop threads [ 198.294794][T11061] vhci_hcd: release socket [ 198.299377][T11061] vhci_hcd: disconnect device [ 198.404760][T14758] vhci_hcd: connection reset by peer [ 198.410540][T11061] vhci_hcd: stop threads [ 198.415028][T11061] vhci_hcd: release socket [ 198.419504][T11061] vhci_hcd: disconnect device [ 198.666830][T14870] siw: device registration error -23 [ 198.954476][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 198.954496][ T29] audit: type=1326 audit(1759200120.118:27660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7a4deec9 code=0x7ffc0000 [ 198.984493][ T29] audit: type=1326 audit(1759200120.118:27661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7a4deec9 code=0x7ffc0000 [ 199.008949][ T29] audit: type=1326 audit(1759200120.129:27662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14895 comm="syz.0.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 199.032755][ T29] audit: type=1326 audit(1759200120.129:27663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14895 comm="syz.0.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effca5feec9 code=0x7ffc0000 [ 199.056367][ T29] audit: type=1326 audit(1759200120.129:27664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14895 comm="syz.0.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7effca600e1a code=0x7ffc0000 [ 199.079945][ T29] audit: type=1326 audit(1759200120.129:27665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14895 comm="syz.0.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effca5fd710 code=0x7ffc0000 [ 199.103585][ T29] audit: type=1326 audit(1759200120.129:27666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14895 comm="syz.0.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effca5fd97f code=0x7ffc0000 [ 199.128215][T14896] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 199.128464][T14891] siw: device registration error -23 [ 199.134764][T14896] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.147626][T14896] vhci_hcd vhci_hcd.0: Device attached [ 199.148033][ T29] audit: type=1326 audit(1759200120.286:27667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdf7a4e0e1a code=0x7ffc0000 [ 199.155337][T14894] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 199.176698][ T29] audit: type=1326 audit(1759200120.286:27668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf7a4dd710 code=0x7ffc0000 [ 199.183145][T14894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.206710][ T29] audit: type=1326 audit(1759200120.286:27669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf7a4dd97f code=0x7ffc0000 [ 199.214452][T14894] vhci_hcd vhci_hcd.0: Device attached [ 199.373742][ T9] usb 1-1: new low-speed USB device number 15 using vhci_hcd [ 199.391729][T14911] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 199.398316][T14911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.406050][T14911] vhci_hcd vhci_hcd.0: Device attached [ 199.509372][T14916] siw: device registration error -23 [ 199.640382][ T23] usb 9-1: new low-speed USB device number 14 using vhci_hcd [ 199.745676][T14900] vhci_hcd: connection closed [ 199.745915][T11032] vhci_hcd: stop threads [ 199.755073][T11032] vhci_hcd: release socket [ 199.759532][T11032] vhci_hcd: disconnect device [ 199.767436][T14898] vhci_hcd: connection reset by peer [ 199.772863][T11076] vhci_hcd: stop threads [ 199.777296][T11076] vhci_hcd: release socket [ 199.779765][T14921] SELinux: ebitmap: truncated map [ 199.781845][T11076] vhci_hcd: disconnect device [ 199.790560][T14921] SELinux: failed to load policy [ 199.812888][T14923] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 199.819554][T14923] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.827293][T14923] vhci_hcd vhci_hcd.0: Device attached [ 200.182928][T14912] vhci_hcd: connection reset by peer [ 200.188455][T11076] vhci_hcd: stop threads [ 200.192777][T11076] vhci_hcd: release socket [ 200.197239][T11076] vhci_hcd: disconnect device [ 200.422074][T14952] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 200.428763][T14952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.436308][T14952] vhci_hcd vhci_hcd.0: Device attached [ 200.468551][T11032] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.520497][T11032] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.559011][T11032] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.605144][T14924] vhci_hcd: connection closed [ 200.605267][T11036] vhci_hcd: stop threads [ 200.611093][T14957] lo speed is unknown, defaulting to 1000 [ 200.614283][T11036] vhci_hcd: release socket [ 200.614301][T11036] vhci_hcd: disconnect device [ 200.632648][T11032] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.688511][ T3467] usb 11-1: new low-speed USB device number 10 using vhci_hcd [ 200.736600][T14957] chnl_net:caif_netlink_parms(): no params data found [ 200.752342][T11032] bridge_slave_1: left allmulticast mode [ 200.758088][T11032] bridge_slave_1: left promiscuous mode [ 200.763852][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.772016][T11032] bridge_slave_0: left allmulticast mode [ 200.777804][T11032] bridge_slave_0: left promiscuous mode [ 200.783580][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.864061][T11032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.874311][T11032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.885523][T11032] bond0 (unregistering): Released all slaves [ 200.922521][T14957] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.929673][T14957] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.936927][T14957] bridge_slave_0: entered allmulticast mode [ 200.943582][T14957] bridge_slave_0: entered promiscuous mode [ 200.950851][T14957] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.958093][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.965373][T14957] bridge_slave_1: entered allmulticast mode [ 200.972342][T14957] bridge_slave_1: entered promiscuous mode [ 200.980853][T11032] hsr_slave_0: left promiscuous mode [ 200.987482][T11032] hsr_slave_1: left promiscuous mode [ 200.994331][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.001771][T11032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.009475][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.016912][T11032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.027322][T11032] veth1_macvtap: left promiscuous mode [ 201.032890][T11032] veth0_macvtap: left promiscuous mode [ 201.038407][T11032] veth1_vlan: left promiscuous mode [ 201.043736][T11032] veth0_vlan: left promiscuous mode [ 201.127308][T11032] team0 (unregistering): Port device team_slave_1 removed [ 201.145965][T11032] team0 (unregistering): Port device team_slave_0 removed [ 201.224534][T14953] vhci_hcd: connection reset by peer [ 201.226676][T14957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.242986][T11076] vhci_hcd: stop threads [ 201.247344][T11076] vhci_hcd: release socket [ 201.251826][T11076] vhci_hcd: disconnect device [ 201.258586][T14957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.290635][T14957] team0: Port device team_slave_0 added [ 201.299195][T14957] team0: Port device team_slave_1 added [ 201.328867][T14957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.335983][T14957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.362039][T14957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.387998][T14957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.395028][T14957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.421188][T14957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.437410][T14994] __nla_validate_parse: 9 callbacks suppressed [ 201.437425][T14994] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4696'. [ 201.489092][T14957] hsr_slave_0: entered promiscuous mode [ 201.497871][T14957] hsr_slave_1: entered promiscuous mode [ 201.505985][T11032] IPVS: stop unused estimator thread 0... [ 201.652993][T14957] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 201.666055][T14957] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 201.676387][T14957] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 201.687013][T14957] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 201.748400][T14957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.763739][T14957] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.782409][T11036] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.789564][T11036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.815868][T11076] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.823083][T11076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.848330][T14957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.858858][T14957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.906458][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4709'. [ 201.935143][T15036] ALSA: seq fatal error: cannot create timer (-22) [ 201.949508][T14957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.124739][T15060] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 202.131303][T15060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.138930][T15060] vhci_hcd vhci_hcd.0: Device attached [ 202.172162][T14957] veth0_vlan: entered promiscuous mode [ 202.182187][T14957] veth1_vlan: entered promiscuous mode [ 202.205218][T14957] veth0_macvtap: entered promiscuous mode [ 202.213106][T14957] veth1_macvtap: entered promiscuous mode [ 202.225901][T14957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.240328][T14957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.259030][T11043] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.268661][T11043] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.320638][T11043] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.345738][T11043] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.463995][T15076] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4720'. [ 202.513461][T15077] siw: device registration error -23 [ 202.554982][ T3365] usb 13-1: enqueue for inactive port 0 [ 202.560948][ T3365] usb 13-1: enqueue for inactive port 0 [ 202.641072][ T3365] vhci_hcd: vhci_device speed not set [ 202.666985][T15086] loop8: detected capacity change from 0 to 1024 [ 202.686601][T15086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.708329][ T1036] usb 15-1: enqueue for inactive port 0 [ 202.714056][T15086] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.736059][ T1036] usb 15-1: enqueue for inactive port 0 [ 202.777848][T14957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 202.803058][ T1036] vhci_hcd: vhci_device speed not set [ 202.909180][T15062] vhci_hcd: connection closed [ 202.909521][T11032] vhci_hcd: stop threads [ 202.918511][T11032] vhci_hcd: release socket [ 202.922965][T11032] vhci_hcd: disconnect device [ 202.967740][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4728'. [ 203.018142][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4731'. [ 203.096042][T15119] netlink: 'syz.0.4736': attribute type 12 has an invalid length. [ 203.149697][T15126] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 203.156288][T15126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.163836][T15126] vhci_hcd vhci_hcd.0: Device attached [ 203.194116][T15133] loop4: detected capacity change from 0 to 512 [ 203.200916][T15133] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.209736][T15133] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.223160][T15133] EXT4-fs (loop4): 1 truncate cleaned up [ 203.229691][T15133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.336423][T15150] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4746'. [ 203.412168][T15156] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 203.418814][T15156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.426612][T15156] vhci_hcd vhci_hcd.0: Device attached [ 203.432272][ T3386] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 203.452046][T15160] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 203.470005][T15162] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 203.476573][T15162] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.484175][T15162] vhci_hcd vhci_hcd.0: Device attached [ 203.555766][T15144] ================================================================== [ 203.563912][T15144] BUG: KCSAN: data-race in touch_atime / touch_atime [ 203.570634][T15144] [ 203.572974][T15144] write to 0xffff888107640180 of 4 bytes by task 15133 on cpu 1: [ 203.580717][T15144] touch_atime+0x1e8/0x340 [ 203.585182][T15144] filemap_splice_read+0x6ba/0x740 [ 203.590322][T15144] ext4_file_splice_read+0x8f/0xb0 [ 203.595476][T15144] splice_direct_to_actor+0x26f/0x680 [ 203.600886][T15144] do_splice_direct+0xda/0x150 [ 203.605686][T15144] do_sendfile+0x380/0x650 [ 203.610143][T15144] __x64_sys_sendfile64+0x105/0x150 [ 203.615387][T15144] x64_sys_call+0x2bb0/0x2ff0 [ 203.620098][T15144] do_syscall_64+0xd2/0x200 [ 203.624631][T15144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.630645][T15144] [ 203.632985][T15144] read to 0xffff888107640180 of 4 bytes by task 15144 on cpu 0: [ 203.640730][T15144] touch_atime+0x194/0x340 [ 203.645184][T15144] filemap_splice_read+0x6ba/0x740 [ 203.650325][T15144] ext4_file_splice_read+0x8f/0xb0 [ 203.655492][T15144] splice_direct_to_actor+0x26f/0x680 [ 203.660899][T15144] do_splice_direct+0xda/0x150 [ 203.665683][T15144] do_sendfile+0x380/0x650 [ 203.670129][T15144] __x64_sys_sendfile64+0x105/0x150 [ 203.675395][T15144] x64_sys_call+0x2bb0/0x2ff0 [ 203.680102][T15144] do_syscall_64+0xd2/0x200 [ 203.684632][T15144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.690556][T15144] [ 203.692898][T15144] value changed: 0x38846bf4 -> 0x3924a080 [ 203.698638][T15144] [ 203.700968][T15144] Reported by Kernel Concurrency Sanitizer on: [ 203.707148][T15144] CPU: 0 UID: 0 PID: 15144 Comm: syz.4.4740 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.718545][T15144] Tainted: [W]=WARN [ 203.722377][T15144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.732456][T15144] ================================================================== [ 203.740687][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 203.740700][ T29] audit: type=1326 audit(1759200124.958:28214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.5.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 203.770631][ T29] audit: type=1326 audit(1759200124.969:28215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.5.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 203.794277][ T29] audit: type=1326 audit(1759200124.979:28216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.5.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 203.817928][ T29] audit: type=1326 audit(1759200124.990:28217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.5.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 203.841651][ T29] audit: type=1326 audit(1759200125.000:28218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.5.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 203.865247][ T29] audit: type=1326 audit(1759200125.011:28219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.5.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 203.888852][ T29] audit: type=1326 audit(1759200125.021:28220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.5.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 203.912485][ T29] audit: type=1326 audit(1759200125.032:28221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.5.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 203.936106][ T29] audit: type=1326 audit(1759200125.042:28222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.5.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 203.959884][ T29] audit: type=1326 audit(1759200125.053:28223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15161 comm="syz.5.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5a6367eec9 code=0x7ffc0000 [ 204.011897][T15127] vhci_hcd: connection reset by peer [ 204.019010][T11043] vhci_hcd: stop threads [ 204.023405][T11043] vhci_hcd: release socket [ 204.027851][T11043] vhci_hcd: disconnect device [ 204.087852][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.190406][T15158] vhci_hcd: connection reset by peer [ 204.196250][T11043] vhci_hcd: stop threads [ 204.200597][T11043] vhci_hcd: release socket [ 204.205103][T11043] vhci_hcd: disconnect device [ 204.209969][ T9] usb 1-1: enqueue for inactive port 0 [ 204.215493][ T9] usb 1-1: enqueue for inactive port 0 [ 204.244741][T15163] vhci_hcd: connection closed [ 204.245005][T11076] vhci_hcd: stop threads [ 204.254050][T11076] vhci_hcd: release socket [ 204.258526][T11076] vhci_hcd: disconnect device [ 204.288372][ T9] vhci_hcd: vhci_device speed not set [ 204.459806][ T23] usb 9-1: enqueue for inactive port 0 [ 204.465349][ T23] usb 9-1: enqueue for inactive port 0 [ 204.536098][ T23] vhci_hcd: vhci_device speed not set [ 205.527024][ T3467] usb 11-1: enqueue for inactive port 0 [ 205.532681][ T3467] usb 11-1: enqueue for inactive port 0 [ 205.602801][ T3467] vhci_hcd: vhci_device speed not set [ 208.270079][ T3386] usb 17-1: enqueue for inactive port 0 [ 208.275743][ T3386] usb 17-1: enqueue for inactive port 0 [ 208.347811][ T3386] vhci_hcd: vhci_device speed not set