last executing test programs: 7.880677468s ago: executing program 3 (id=2115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/164}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_usbip_server_init(0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22020000"], 0xfdef) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x100000000, 0x1, 0xe7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r6, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, &(0x7f00000004c0)=""/75, 0x4b}}], 0x1, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000000)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r7 = syz_clone(0x8014a000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) waitid(0x0, 0x0, 0x0, 0x4, 0x0) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) dup3(r2, r2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) 4.823572979s ago: executing program 3 (id=2141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000840)=[{{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 4.766375074s ago: executing program 3 (id=2143): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000300)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0xd}}, {@orlov}]}, 0xff, 0x490, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0xe, 0x5, 0x3, 0x6, 0x0, 0x6, 0x8000, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x6, @perf_bp={0x0}, 0x11880c, 0x9, 0x7fffffff, 0x5, 0x1, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7}, r0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x7, 0x9, 0x4, 0x0, 0xa, 0x80, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x5}, 0x0, 0x9, 0x5, 0x3, 0x4, 0x7, 0x7, 0x0, 0x2, 0x0, 0x846}, r1, 0xc, r2, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x3, 0xea) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x48) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) keyctl$session_to_parent(0x12) 3.869324275s ago: executing program 3 (id=2151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/164}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_usbip_server_init(0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22020000"], 0xfdef) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x100000000, 0x1, 0xe7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r6, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, &(0x7f00000004c0)=""/75, 0x4b}}], 0x1, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000000)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r7 = syz_clone(0x8014a000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) waitid(0x0, 0x0, 0x0, 0x4, 0x0) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) dup3(r2, r2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) 1.966839275s ago: executing program 0 (id=2177): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r7, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 1.380761401s ago: executing program 0 (id=2194): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 1.205543615s ago: executing program 0 (id=2195): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') 1.098083413s ago: executing program 0 (id=2197): mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x3}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0xfff7fffc, 0x0, 0xffffffff, 0x0, "fb00"}) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x500, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 891.805069ms ago: executing program 2 (id=2202): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0003", @ANYRES8], 0x20) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 834.396614ms ago: executing program 2 (id=2204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e000300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 792.432107ms ago: executing program 3 (id=2206): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 770.250449ms ago: executing program 3 (id=2207): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x200, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000480)=0xfffffffe, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1b) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f00000002c0)=0x1c, 0x80000) recvfrom$inet6(r2, &(0x7f0000000380)=""/160, 0xa0, 0x2102, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xf, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x10, &(0x7f00000005c0)={&(0x7f0000000140)=@can={{}, 0x86, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x4c}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000440)='mmap_lock_acquire_returned\x00', r7}, 0x10) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000bdc000/0x2000)=nil, 0x2000, 0xa) 758.17262ms ago: executing program 2 (id=2208): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43, 0x0, 0x0, 0x0, 0x14}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_procs(r0, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/240, 0xf0}], 0x1, 0x2, 0x0) 729.534712ms ago: executing program 2 (id=2209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000840)=[{{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 698.190675ms ago: executing program 2 (id=2211): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x6, 0x810, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) write$tun(0xffffffffffffffff, &(0x7f00000014c0)={@val={0x0, 0x800}, @val={0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x20}}}}}, 0x66) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x0, &(0x7f0000000200)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0) 467.240243ms ago: executing program 2 (id=2216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/164}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00'}, 0x10) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_usbip_server_init(0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22020000"], 0xfdef) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x100000000, 0x1, 0xe7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r6, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, &(0x7f00000004c0)=""/75, 0x4b}}], 0x1, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000000)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r7 = syz_clone(0x8014a000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) waitid(0x0, 0x0, 0x0, 0x4, 0x0) splice(r4, 0x0, r5, 0x0, 0x8ec0, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) dup3(r2, r2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) 391.069029ms ago: executing program 1 (id=2217): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 389.135119ms ago: executing program 4 (id=2219): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43, 0x0, 0x0, 0x0, 0x14}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_procs(r0, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/240, 0xf0}], 0x1, 0x2, 0x0) 352.435462ms ago: executing program 4 (id=2220): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 332.384054ms ago: executing program 4 (id=2221): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 245.41464ms ago: executing program 1 (id=2222): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) accept$inet6(r0, 0x0, 0x0) 220.495292ms ago: executing program 1 (id=2223): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) accept$inet6(r0, 0x0, 0x0) 218.330132ms ago: executing program 0 (id=2224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x6000, &(0x7f0000000440)) 199.740134ms ago: executing program 4 (id=2225): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x5}]}) 167.908656ms ago: executing program 0 (id=2226): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x200000) r1 = io_uring_setup(0x26f2, &(0x7f0000000180)={0x0, 0x0, 0x404, 0x8, 0xfffffffd}) io_uring_enter(r1, 0xbb9, 0x4fef, 0x4, &(0x7f0000000440)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) syz_open_pts(r2, 0x40000) mlockall(0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x1, 0x80, 0x322, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xc}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9, 0x0, r3}, 0x48) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = dup3(r5, r6, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = syz_io_uring_setup(0x2c92, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r9, 0x567, 0x0, 0x0, 0x0, 0x0) r12 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f803000000440002007a17d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) gettid() epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) r14 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$binfmt_misc(r14, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a308ea4f611384d5b2b00000000"], 0x10) 167.657716ms ago: executing program 1 (id=2227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 111.051981ms ago: executing program 4 (id=2228): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x6, 0x810, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) write$tun(0xffffffffffffffff, &(0x7f00000014c0)={@val={0x0, 0x800}, @val={0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x20}}}}}, 0x66) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x0, &(0x7f0000000200)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0) 110.790001ms ago: executing program 1 (id=2229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e000300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.554258ms ago: executing program 1 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 0s ago: executing program 4 (id=2231): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) kernel console output (not intermixed with test programs): t_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 194.512792][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.527461][ T9825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.663428][T10748] loop3: detected capacity change from 0 to 512 [ 194.681916][T10748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.694794][T10748] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.717817][ T9825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.155770][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 195.155787][ T29] audit: type=1326 audit(1725388970.214:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 195.185811][ T29] audit: type=1326 audit(1725388970.214:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 195.209789][ T29] audit: type=1326 audit(1725388970.214:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 195.233485][ T29] audit: type=1326 audit(1725388970.214:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 195.257203][ T29] audit: type=1326 audit(1725388970.214:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 195.280850][ T29] audit: type=1326 audit(1725388970.214:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 195.304424][ T29] audit: type=1326 audit(1725388970.214:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 195.327978][ T29] audit: type=1326 audit(1725388970.214:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 195.351553][ T29] audit: type=1326 audit(1725388970.214:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 195.375334][ T29] audit: type=1326 audit(1725388970.214:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.3.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 195.495718][T10758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1370'. [ 195.545747][T10762] loop1: detected capacity change from 0 to 512 [ 195.553161][T10762] EXT4-fs: Ignoring removed orlov option [ 195.560997][T10762] EXT4-fs (loop1): 1 truncate cleaned up [ 195.561963][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 195.567274][T10762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.839329][T10688] vhci_hcd: connection reset by peer [ 195.861206][ T3276] vhci_hcd: stop threads [ 195.865569][ T3276] vhci_hcd: release socket [ 195.870035][ T3276] vhci_hcd: disconnect device [ 195.898109][T10769] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 195.936996][T10693] vhci_hcd: connection reset by peer [ 195.967254][ T58] vhci_hcd: stop threads [ 195.971691][ T58] vhci_hcd: release socket [ 195.976221][ T58] vhci_hcd: disconnect device [ 196.244351][T10783] loop3: detected capacity change from 0 to 128 [ 196.264677][ T3250] udevd[3250]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system [ 196.283096][T10783] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.296721][T10783] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.348944][ T9825] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.389313][T10789] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 196.395870][T10789] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 196.403534][T10789] vhci_hcd vhci_hcd.0: Device attached [ 196.434494][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.609666][ T977] vhci_hcd: vhci_device speed not set [ 196.704166][ T977] usb 7-1: new full-speed USB device number 10 using vhci_hcd [ 196.798634][T10803] loop1: detected capacity change from 0 to 128 [ 196.863815][T10803] syz.1.1385: attempt to access beyond end of device [ 196.863815][T10803] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 196.905090][T10805] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 197.073381][T10818] loop2: detected capacity change from 0 to 128 [ 197.087378][T10818] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.087768][T10820] loop1: detected capacity change from 0 to 512 [ 197.100022][T10818] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.111671][T10820] EXT4-fs: Ignoring removed orlov option [ 197.131793][ T3252] udevd[3252]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 197.147798][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system [ 197.172216][T10820] EXT4-fs (loop1): 1 truncate cleaned up [ 197.179556][T10820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.194213][T10824] loop0: detected capacity change from 0 to 128 [ 197.220105][T10824] syz.0.1394[10824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.220174][T10824] syz.0.1394[10824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.235081][T10123] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.269082][T10824] syz.0.1394: attempt to access beyond end of device [ 197.269082][T10824] loop0: rw=0, sector=121, nr_sectors = 127 limit=128 [ 197.388353][T10831] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 197.486177][T10838] loop0: detected capacity change from 0 to 2048 [ 197.500635][T10838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.518267][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 197.702003][T10843] loop4: detected capacity change from 0 to 256 [ 198.258883][ T8] usb 1-1: enqueue for inactive port 0 [ 198.263850][ T3581] usb 5-1: enqueue for inactive port 0 [ 198.272425][ T3581] usb 5-1: enqueue for inactive port 0 [ 198.280196][ T8] usb 1-1: enqueue for inactive port 0 [ 198.331373][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.356703][ T3581] vhci_hcd: vhci_device speed not set [ 198.363197][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.374374][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 198.386025][ T8] vhci_hcd: vhci_device speed not set [ 198.407323][T10861] loop0: detected capacity change from 0 to 128 [ 198.422313][T10861] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.422786][ T3252] udevd[3252]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 198.436366][T10861] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.455717][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 198.497283][ T3269] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.542519][T10869] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 198.593421][T10875] loop2: detected capacity change from 0 to 128 [ 198.602207][T10875] syz.2.1410[10875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.602280][T10875] syz.2.1410[10875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.623824][T10875] syz.2.1410: attempt to access beyond end of device [ 198.623824][T10875] loop2: rw=0, sector=121, nr_sectors = 127 limit=128 [ 198.883322][T10883] loop2: detected capacity change from 0 to 512 [ 198.920571][T10885] loop2: detected capacity change from 0 to 512 [ 198.927214][T10885] EXT4-fs: Ignoring removed orlov option [ 198.934160][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 198.935277][T10885] EXT4-fs (loop2): 1 truncate cleaned up [ 198.952534][T10885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.247839][T10890] loop1: detected capacity change from 0 to 2048 [ 199.264679][T10890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.376047][T10791] vhci_hcd: connection reset by peer [ 199.381693][ T36] vhci_hcd: stop threads [ 199.385970][ T36] vhci_hcd: release socket [ 199.390534][ T36] vhci_hcd: disconnect device [ 199.748941][T10907] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 199.953901][T10916] loop3: detected capacity change from 0 to 1024 [ 199.971855][T10916] EXT4-fs: Ignoring removed orlov option [ 199.977568][T10916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.004078][T10915] loop4: detected capacity change from 0 to 256 [ 200.012261][T10916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.041825][ T9825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.080697][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 200.107236][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.131332][ T3252] udevd[3252]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 200.165379][T10123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.176143][T10928] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1423'. [ 200.183928][T10930] loop1: detected capacity change from 0 to 1024 [ 200.192342][T10930] EXT4-fs: Ignoring removed orlov option [ 200.198164][T10930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.209931][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 200.227497][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 200.227513][ T29] audit: type=1326 audit(1725388975.284:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 200.233381][T10932] loop2: detected capacity change from 0 to 512 [ 200.234591][ T29] audit: type=1326 audit(1725388975.284:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 200.287086][ T29] audit: type=1326 audit(1725388975.284:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 200.292731][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 200.310637][ T29] audit: type=1326 audit(1725388975.284:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 200.326922][T10930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.345461][ T29] audit: type=1326 audit(1725388975.284:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 200.345500][ T29] audit: type=1326 audit(1725388975.284:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 200.345532][ T29] audit: type=1326 audit(1725388975.284:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 200.386249][T10932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.404456][ T29] audit: type=1326 audit(1725388975.294:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 200.431166][T10932] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.440452][ T29] audit: type=1326 audit(1725388975.294:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f07d529cef3 code=0x7ffc0000 [ 200.440490][ T29] audit: type=1326 audit(1725388975.294:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.2.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f07d529b99f code=0x7ffc0000 [ 200.522654][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.523599][T10123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.546901][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 200.603499][T10947] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 200.738016][T10954] loop0: detected capacity change from 0 to 1024 [ 200.745654][T10954] EXT4-fs: Ignoring removed orlov option [ 200.751532][T10954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.752792][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 200.780979][T10954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.805604][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.828150][T10958] loop4: detected capacity change from 0 to 512 [ 200.839525][T10958] EXT4-fs: Ignoring removed orlov option [ 200.841526][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 200.855273][T10960] loop0: detected capacity change from 0 to 2048 [ 200.865959][T10958] EXT4-fs (loop4): 1 truncate cleaned up [ 200.870952][ T3252] udevd[3252]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 200.873606][T10958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.886164][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 200.905410][ T3252] udevd[3252]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 200.936105][T10960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.744264][T10981] loop1: detected capacity change from 0 to 512 [ 201.781219][ T977] usb 7-1: enqueue for inactive port 0 [ 201.796009][ T977] usb 7-1: enqueue for inactive port 0 [ 201.803713][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.820708][T10981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.859087][T10981] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.890897][T10986] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 201.919120][ T977] vhci_hcd: vhci_device speed not set [ 201.947744][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.960729][T10992] loop0: detected capacity change from 0 to 1024 [ 201.968552][T10992] EXT4-fs: Ignoring removed orlov option [ 201.974321][T10992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.002185][T10992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.028212][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.067345][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.262028][T11016] loop4: detected capacity change from 0 to 2048 [ 202.262158][T11015] loop0: detected capacity change from 0 to 2048 [ 202.281271][T11016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.301872][T11015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.443349][T11027] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 202.607938][T11031] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 202.734559][T11035] loop2: detected capacity change from 0 to 512 [ 202.744959][T11035] EXT4-fs: Ignoring removed orlov option [ 202.816691][T11037] loop3: detected capacity change from 0 to 128 [ 202.850029][T11035] EXT4-fs (loop2): 1 truncate cleaned up [ 202.864860][T11037] syz.3.1461[11037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.864940][T11037] syz.3.1461[11037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.966450][T11037] syz.3.1461: attempt to access beyond end of device [ 202.966450][T11037] loop3: rw=0, sector=121, nr_sectors = 127 limit=128 [ 203.496985][T11068] loop0: detected capacity change from 0 to 128 [ 203.506372][T11063] loop4: detected capacity change from 0 to 256 [ 203.623923][T11073] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1466'. [ 203.636402][T11074] loop2: detected capacity change from 0 to 2048 [ 203.803298][T11084] loop0: detected capacity change from 0 to 2048 [ 203.830662][T11082] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.344093][T11092] loop3: detected capacity change from 0 to 2048 [ 204.469429][T11108] loop1: detected capacity change from 0 to 512 [ 204.476086][T11108] EXT4-fs: Ignoring removed orlov option [ 204.478890][T11102] loop4: detected capacity change from 0 to 256 [ 204.497536][T11108] EXT4-fs (loop1): 1 truncate cleaned up [ 204.745131][T11113] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.931027][T11123] loop0: detected capacity change from 0 to 512 [ 204.954800][T11124] loop2: detected capacity change from 0 to 2048 [ 205.004674][T11123] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.135094][T11131] loop0: detected capacity change from 0 to 2048 [ 205.148637][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 205.330999][T11019] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 205.562312][T11136] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 205.923319][ T3252] udevd[3252]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 205.961724][T11140] loop3: detected capacity change from 0 to 256 [ 206.073614][T11159] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1489'. [ 206.084495][T11155] loop4: detected capacity change from 0 to 2048 [ 206.094749][T11156] loop0: detected capacity change from 0 to 256 [ 206.112929][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 206.169105][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 206.169124][ T29] audit: type=1326 audit(1725388981.224:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 206.199197][ T29] audit: type=1326 audit(1725388981.224:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 206.223708][ T29] audit: type=1326 audit(1725388981.224:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 206.247438][ T29] audit: type=1326 audit(1725388981.224:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 206.271367][ T29] audit: type=1326 audit(1725388981.224:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 206.294940][ T29] audit: type=1326 audit(1725388981.224:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 206.318778][ T29] audit: type=1326 audit(1725388981.224:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 206.342725][ T29] audit: type=1326 audit(1725388981.224:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 206.366599][ T29] audit: type=1326 audit(1725388981.224:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 206.390466][ T29] audit: type=1326 audit(1725388981.224:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 206.793849][T11179] loop1: detected capacity change from 0 to 2048 [ 206.834456][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 206.955770][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 207.043421][T11193] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 207.133209][T11188] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 207.139943][T11188] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 207.147584][T11188] vhci_hcd vhci_hcd.0: Device attached [ 207.207645][T11202] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 207.349878][T11207] loop2: detected capacity change from 0 to 128 [ 207.377411][ T3338] vhci_hcd: vhci_device speed not set [ 207.386961][T11209] serio: Serial port pts0 [ 207.388213][T11207] syz.2.1505: attempt to access beyond end of device [ 207.388213][T11207] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 207.469138][ T3338] usb 9-1: new full-speed USB device number 9 using vhci_hcd [ 207.510600][T11212] loop2: detected capacity change from 0 to 1024 [ 207.517538][T11212] EXT4-fs: Ignoring removed orlov option [ 207.520283][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 207.523330][T11212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.572692][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 207.676366][T11222] loop1: detected capacity change from 0 to 2048 [ 207.679257][T11224] loop2: detected capacity change from 0 to 512 [ 207.695219][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 207.702358][ T3252] udevd[3252]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 207.723037][T11224] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.815287][T11230] loop3: detected capacity change from 0 to 512 [ 207.831842][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 207.846713][T11233] loop2: detected capacity change from 0 to 256 [ 207.861616][T11230] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.268747][T11245] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 208.332241][T11249] loop0: detected capacity change from 0 to 128 [ 208.340696][T11249] syz.0.1517[11249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.340886][T11249] syz.0.1517[11249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.400085][T11254] loop0: detected capacity change from 0 to 1024 [ 208.418498][T11254] EXT4-fs: Ignoring removed orlov option [ 208.424304][T11254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.484116][T11260] loop0: detected capacity change from 0 to 2048 [ 208.608681][T11265] loop1: detected capacity change from 0 to 128 [ 208.617357][T11265] syz.1.1522[11265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.617420][T11265] syz.1.1522[11265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.643726][T11265] syz.1.1522: attempt to access beyond end of device [ 208.643726][T11265] loop1: rw=0, sector=121, nr_sectors = 127 limit=128 [ 208.702259][T11266] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 208.952774][T11268] loop1: detected capacity change from 0 to 128 [ 208.965091][T11268] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.096054][T11273] loop1: detected capacity change from 0 to 2048 [ 209.255473][T11279] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 209.959646][T11195] vhci_hcd: connection reset by peer [ 209.979465][ T1612] vhci_hcd: stop threads [ 209.983779][ T1612] vhci_hcd: release socket [ 209.988257][ T1612] vhci_hcd: disconnect device [ 210.054417][T11293] loop2: detected capacity change from 0 to 2048 [ 210.083698][T11300] loop3: detected capacity change from 0 to 4096 [ 210.181012][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 210.246370][T11319] loop0: detected capacity change from 0 to 128 [ 210.263238][T11314] loop3: detected capacity change from 0 to 128 [ 210.293157][T11314] syz.3.1538[11314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.293306][T11314] syz.3.1538[11314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.340381][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 210.376985][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 210.418130][T11319] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.661528][T11331] loop3: detected capacity change from 0 to 2048 [ 210.823062][T11338] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 210.897399][T11340] loop2: detected capacity change from 0 to 2048 [ 210.912857][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 211.077804][T11348] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.513316][T11355] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 211.530027][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 211.568913][T11357] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 211.575497][T11357] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 211.583252][T11357] vhci_hcd vhci_hcd.0: Device attached [ 211.610485][T11364] loop0: detected capacity change from 0 to 1024 [ 211.617165][T11364] EXT4-fs: Ignoring removed orlov option [ 211.622992][T11364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.624463][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 211.668461][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 211.680032][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 211.680046][ T29] audit: type=1326 audit(1725388986.724:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 211.691481][T11371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.709986][ T29] audit: type=1326 audit(1725388986.724:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 211.741896][ T29] audit: type=1326 audit(1725388986.724:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 211.765777][ T29] audit: type=1326 audit(1725388986.724:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 211.789624][T11371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.806556][ T9] vhci_hcd: vhci_device speed not set [ 211.818553][ T29] audit: type=1326 audit(1725388986.744:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 211.818595][ T29] audit: type=1326 audit(1725388986.744:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 211.818628][ T29] audit: type=1326 audit(1725388986.744:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 211.818665][ T29] audit: type=1326 audit(1725388986.744:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 211.818692][ T29] audit: type=1326 audit(1725388986.744:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 211.818725][ T29] audit: type=1326 audit(1725388986.744:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 211.895792][ T9] usb 7-1: new full-speed USB device number 11 using vhci_hcd [ 212.489133][ T3338] usb 9-1: enqueue for inactive port 0 [ 212.494731][ T3338] usb 9-1: enqueue for inactive port 0 [ 212.524857][T11387] loop0: detected capacity change from 0 to 128 [ 212.534126][T11387] syz.0.1560[11387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.534423][T11387] syz.0.1560[11387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.579067][ T3338] vhci_hcd: vhci_device speed not set [ 212.954091][T11403] serio: Serial port pts1 [ 213.597636][T11411] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 213.653501][T11415] loop4: detected capacity change from 0 to 128 [ 213.662085][T11415] syz.4.1571[11415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.662188][T11415] syz.4.1571[11415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.701011][T11417] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 214.286546][T11440] loop0: detected capacity change from 0 to 512 [ 214.295375][T11440] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1582: bg 0: block 393: padding at end of block bitmap is not set [ 214.300397][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 214.312547][T11440] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 214.331166][T11440] EXT4-fs (loop0): 2 truncates cleaned up [ 214.392015][T11445] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 214.541983][T11359] vhci_hcd: connection reset by peer [ 214.547619][ T1612] vhci_hcd: stop threads [ 214.551930][ T1612] vhci_hcd: release socket [ 214.556377][ T1612] vhci_hcd: disconnect device [ 214.637140][T11456] loop4: detected capacity change from 0 to 2048 [ 214.647101][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 214.668276][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 215.085779][T11478] loop2: detected capacity change from 0 to 512 [ 215.104424][T11478] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1594: bg 0: block 393: padding at end of block bitmap is not set [ 215.145432][T11478] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 215.155314][T11478] EXT4-fs (loop2): 2 truncates cleaned up [ 215.211322][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 215.214499][T11481] loop2: detected capacity change from 0 to 1024 [ 215.230106][T11481] EXT4-fs: Ignoring removed orlov option [ 215.235950][T11481] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.238619][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 215.260083][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 215.294842][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 215.321135][T11487] loop0: detected capacity change from 0 to 256 [ 215.686230][T11509] loop1: detected capacity change from 0 to 512 [ 215.693242][T11509] EXT4-fs: Ignoring removed orlov option [ 215.701937][T11509] EXT4-fs (loop1): 1 truncate cleaned up [ 215.702967][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 216.305915][T11519] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 216.625269][T11533] FAULT_INJECTION: forcing a failure. [ 216.625269][T11533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.638553][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.1.1612 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 216.649619][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.659784][T11533] Call Trace: [ 216.663316][T11533] [ 216.666305][T11533] dump_stack_lvl+0xf2/0x150 [ 216.670993][T11533] dump_stack+0x15/0x20 [ 216.675201][T11533] should_fail_ex+0x229/0x230 [ 216.680020][T11533] should_fail+0xb/0x10 [ 216.684311][T11533] should_fail_usercopy+0x1a/0x20 [ 216.689422][T11533] _copy_from_user+0x1e/0xd0 [ 216.694237][T11533] kstrtouint_from_user+0x76/0xe0 [ 216.699338][T11533] proc_fail_nth_write+0x4f/0x160 [ 216.704396][T11533] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.710130][T11533] vfs_write+0x28b/0x900 [ 216.714403][T11533] ? __fget_files+0x1da/0x210 [ 216.719124][T11533] ksys_write+0xeb/0x1b0 [ 216.723428][T11533] __x64_sys_write+0x42/0x50 [ 216.728115][T11533] x64_sys_call+0x27dd/0x2d60 [ 216.732802][T11533] do_syscall_64+0xc9/0x1c0 [ 216.737402][T11533] ? clear_bhb_loop+0x55/0xb0 [ 216.742104][T11533] ? clear_bhb_loop+0x55/0xb0 [ 216.746805][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.752718][T11533] RIP: 0033:0x7f8dd060b99f [ 216.757226][T11533] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 216.776958][T11533] RSP: 002b:00007f8dcf287030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 216.785452][T11533] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8dd060b99f [ 216.793462][T11533] RDX: 0000000000000001 RSI: 00007f8dcf2870a0 RDI: 0000000000000005 [ 216.801554][T11533] RBP: 00007f8dcf287090 R08: 0000000000000000 R09: 0000000000000000 [ 216.809588][T11533] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 216.817567][T11533] R13: 0000000000000000 R14: 00007f8dd07c5f80 R15: 00007fffe717a0d8 [ 216.825556][T11533] [ 216.874773][T11539] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 216.934222][T11541] loop1: detected capacity change from 0 to 256 [ 216.969115][ T9] usb 7-1: enqueue for inactive port 0 [ 216.979474][ T9] usb 7-1: enqueue for inactive port 0 [ 217.059630][ T9] vhci_hcd: vhci_device speed not set [ 217.075957][T11547] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 217.217677][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 217.217695][ T29] audit: type=1400 audit(1725388992.274:5876): avc: denied { setopt } for pid=11554 comm="syz.0.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 217.244647][ T29] audit: type=1400 audit(1725388992.274:5877): avc: denied { setopt } for pid=11554 comm="syz.0.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.265050][ T29] audit: type=1400 audit(1725388992.284:5878): avc: denied { view } for pid=11554 comm="syz.0.1619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 217.284480][ T29] audit: type=1400 audit(1725388992.284:5879): avc: denied { bind } for pid=11554 comm="syz.0.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.284520][ T29] audit: type=1400 audit(1725388992.284:5880): avc: denied { listen } for pid=11554 comm="syz.0.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.309072][T11560] loop4: detected capacity change from 0 to 128 [ 217.326308][ T29] audit: type=1400 audit(1725388992.344:5881): avc: denied { setopt } for pid=11554 comm="syz.0.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.358753][T11560] syz.4.1621[11560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.358847][T11560] syz.4.1621[11560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.383401][T11560] syz.4.1621: attempt to access beyond end of device [ 217.383401][T11560] loop4: rw=0, sector=121, nr_sectors = 127 limit=128 [ 217.605842][ T29] audit: type=1326 audit(1725388992.664:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11562 comm="syz.3.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 217.629609][ T29] audit: type=1326 audit(1725388992.664:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11562 comm="syz.3.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 217.653199][ T29] audit: type=1326 audit(1725388992.664:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11562 comm="syz.3.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 217.676847][ T29] audit: type=1326 audit(1725388992.664:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11562 comm="syz.3.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 217.787393][T11570] loop1: detected capacity change from 0 to 1024 [ 217.795953][T11570] EXT4-fs: Ignoring removed orlov option [ 217.801732][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 217.801768][T11570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.826659][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 217.866307][T11574] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 217.946675][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 218.084693][T11591] loop0: detected capacity change from 0 to 2048 [ 218.099196][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 218.283289][T11603] loop4: detected capacity change from 0 to 128 [ 218.291637][T11601] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 218.297078][T11603] EXT4-fs mount: 63 callbacks suppressed [ 218.297097][T11603] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.311308][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:4' failed: Read-only file system [ 218.312618][T11603] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.391257][ T9257] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.452982][T11610] loop4: detected capacity change from 0 to 128 [ 218.461385][T11610] syz.4.1641[11610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.461460][T11610] syz.4.1641[11610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.485010][T11610] syz.4.1641: attempt to access beyond end of device [ 218.485010][T11610] loop4: rw=0, sector=121, nr_sectors = 127 limit=128 [ 218.517224][T11614] loop3: detected capacity change from 0 to 256 [ 218.760106][T11621] loop1: detected capacity change from 0 to 128 [ 218.768454][T11621] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.774884][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system [ 218.781342][T11621] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.854349][T10437] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.972761][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.018486][T11631] loop0: detected capacity change from 0 to 512 [ 219.043058][T11636] batadv0: entered promiscuous mode [ 219.054793][T11638] loop2: detected capacity change from 0 to 1024 [ 219.062657][T11638] EXT4-fs: Ignoring removed orlov option [ 219.062934][T11631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.068420][T11638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.092289][T11631] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.120651][T11638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.134523][T11642] loop1: detected capacity change from 0 to 128 [ 219.151969][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.162027][T11642] syz.1.1653[11642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.162165][T11642] syz.1.1653[11642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.175257][T10123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.200499][T11642] syz.1.1653: attempt to access beyond end of device [ 219.200499][T11642] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 219.519145][T11675] loop0: detected capacity change from 0 to 1024 [ 219.528364][T11675] EXT4-fs: Ignoring removed orlov option [ 219.534213][T11675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.562040][T11675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.597118][T11682] loop1: detected capacity change from 0 to 128 [ 219.612717][T11686] loop4: detected capacity change from 0 to 128 [ 219.619912][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.627174][T11686] syz.4.1669[11686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.629475][T11686] syz.4.1669[11686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.642455][T11682] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.667770][T11682] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.692519][T11689] loop0: detected capacity change from 0 to 128 [ 219.700245][T11686] syz.4.1669: attempt to access beyond end of device [ 219.700245][T11686] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 219.703925][T11689] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.730242][T11689] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.755976][T10437] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.810369][ T3269] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.884718][T11702] loop0: detected capacity change from 0 to 512 [ 219.914056][T11702] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1673: bg 0: block 393: padding at end of block bitmap is not set [ 219.960634][T11702] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 219.989798][T11702] EXT4-fs (loop0): 2 truncates cleaned up [ 220.006988][T11713] loop4: detected capacity change from 0 to 1024 [ 220.007461][T11702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.024409][T11713] EXT4-fs: Ignoring removed orlov option [ 220.031920][T11713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.062226][T11713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.083400][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.103531][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.145743][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'. [ 220.162304][T11729] loop0: detected capacity change from 0 to 128 [ 220.172527][T11729] syz.0.1686[11729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.172602][T11729] syz.0.1686[11729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.195742][T11729] syz.0.1686: attempt to access beyond end of device [ 220.195742][T11729] loop0: rw=0, sector=121, nr_sectors = 119 limit=128 [ 220.871250][T11738] loop3: detected capacity change from 0 to 512 [ 220.880840][T11738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.893572][T11738] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.916494][T11743] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 220.947957][ T9825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.991472][T11747] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 220.998037][T11747] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 221.005715][T11747] vhci_hcd vhci_hcd.0: Device attached [ 221.145453][T11765] loop3: detected capacity change from 0 to 128 [ 221.155096][T11765] syz.3.1698[11765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.155241][T11765] syz.3.1698[11765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.177129][T11765] syz.3.1698: attempt to access beyond end of device [ 221.177129][T11765] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 221.209083][ T3338] vhci_hcd: vhci_device speed not set [ 221.282858][ T3338] usb 3-1: new full-speed USB device number 10 using vhci_hcd [ 221.321329][T11774] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 222.951282][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 222.951300][ T29] audit: type=1400 audit(1725388998.014:6208): avc: denied { bind } for pid=11815 comm="syz.4.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 223.069053][ T29] audit: type=1400 audit(1725388998.124:6209): avc: denied { connect } for pid=11822 comm="syz.0.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 223.157492][T11834] No such timeout policy "syz0" [ 223.162654][T11836] loop0: detected capacity change from 0 to 512 [ 223.172682][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 223.180936][T11836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.197014][T11836] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.200125][T11838] loop3: detected capacity change from 0 to 128 [ 223.223612][T11838] syz.3.1726[11838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.223668][T11838] syz.3.1726[11838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.246187][T11838] syz.3.1726: attempt to access beyond end of device [ 223.246187][T11838] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 223.246769][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.316971][T11845] loop4: detected capacity change from 0 to 1024 [ 223.324033][T11845] EXT4-fs: Ignoring removed orlov option [ 223.329804][T11845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.339665][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 223.353880][T11847] loop3: detected capacity change from 0 to 128 [ 223.364914][T11845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.397214][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.419577][T11853] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 223.480046][T11857] loop3: detected capacity change from 0 to 256 [ 223.490713][ T29] audit: type=1400 audit(1725388998.554:6210): avc: denied { shutdown } for pid=11856 comm="syz.3.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.511004][ T29] audit: type=1400 audit(1725388998.554:6211): avc: denied { read } for pid=11856 comm="syz.3.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.545446][ T29] audit: type=1400 audit(1725388998.594:6212): avc: denied { bind } for pid=11856 comm="syz.3.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.564979][ T29] audit: type=1400 audit(1725388998.594:6213): avc: denied { name_bind } for pid=11856 comm="syz.3.1733" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 223.587047][ T29] audit: type=1400 audit(1725388998.594:6214): avc: denied { node_bind } for pid=11856 comm="syz.3.1733" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 223.609343][ T29] audit: type=1400 audit(1725388998.604:6215): avc: denied { listen } for pid=11856 comm="syz.3.1733" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.631119][ T29] audit: type=1400 audit(1725388998.604:6216): avc: denied { accept } for pid=11856 comm="syz.3.1733" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.774869][ T29] audit: type=1400 audit(1725388998.834:6217): avc: denied { read } for pid=11869 comm="syz.2.1738" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.844748][T11876] loop3: detected capacity change from 0 to 128 [ 223.865828][T11876] syz.3.1740: attempt to access beyond end of device [ 223.865828][T11876] loop3: rw=0, sector=121, nr_sectors = 127 limit=128 [ 223.891085][T11879] loop2: detected capacity change from 0 to 128 [ 223.934399][T11881] loop2: detected capacity change from 0 to 2048 [ 223.947251][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 223.963259][T11881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.980023][T11751] vhci_hcd: connection reset by peer [ 223.985539][ T1612] vhci_hcd: stop threads [ 223.989959][ T1612] vhci_hcd: release socket [ 223.994418][ T1612] vhci_hcd: disconnect device [ 224.005779][T11885] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 224.157460][T11893] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 224.332415][T11905] netlink: 'syz.0.1751': attribute type 21 has an invalid length. [ 224.340582][T11905] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1751'. [ 224.371126][T11908] netlink: 'syz.0.1752': attribute type 21 has an invalid length. [ 224.405108][T11910] loop4: detected capacity change from 0 to 2048 [ 224.420090][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 224.425457][T11912] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 224.436642][T11910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.438317][T11912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.458268][T11912] vhci_hcd vhci_hcd.0: Device attached [ 224.593026][T11920] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 224.659047][ T3503] vhci_hcd: vhci_device speed not set [ 224.729080][ T3503] usb 1-1: new full-speed USB device number 12 using vhci_hcd [ 224.796102][T10123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.813000][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 224.827428][T11924] loop2: detected capacity change from 0 to 128 [ 224.845298][T11924] syz.2.1755: attempt to access beyond end of device [ 224.845298][T11924] loop2: rw=0, sector=121, nr_sectors = 127 limit=128 [ 224.882401][T11926] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 224.924132][T11928] loop1: detected capacity change from 0 to 128 [ 225.052800][T11938] loop1: detected capacity change from 0 to 2048 [ 225.066753][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 225.082459][T11938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.133093][T11945] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 225.274590][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.587207][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 225.604029][T11954] loop4: detected capacity change from 0 to 512 [ 225.617573][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 225.640901][T11954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.653617][T11954] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.689342][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.702810][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 225.757614][T11960] loop4: detected capacity change from 0 to 1024 [ 225.764785][T11960] EXT4-fs: Ignoring removed orlov option [ 225.770580][T11960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.773668][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 225.810994][T11960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.835088][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.855400][T11964] netlink: 'syz.4.1770': attribute type 10 has an invalid length. [ 225.893583][T11964] team0: Failed to send options change via netlink (err -105) [ 225.901165][T11964] team0: Port device netdevsim1 added [ 225.924777][ T36] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 225.940579][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.988713][T11972] loop4: detected capacity change from 0 to 128 [ 226.056589][T11972] syz.4.1774: attempt to access beyond end of device [ 226.056589][T11972] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 226.077197][T11976] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 226.136032][T11982] loop1: detected capacity change from 0 to 1024 [ 226.146623][T11985] netlink: 'syz.2.1777': attribute type 10 has an invalid length. [ 226.172158][T11985] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 226.184983][T11982] loop1: detected capacity change from 0 to 512 [ 226.234188][T11982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 226.247041][T11982] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.273554][T11995] loop3: detected capacity change from 0 to 2048 [ 226.291349][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 226.293941][T11995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.405506][ T3338] usb 3-1: enqueue for inactive port 0 [ 226.411131][ T3338] usb 3-1: enqueue for inactive port 0 [ 226.489190][ T3338] vhci_hcd: vhci_device speed not set [ 227.077923][T12012] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 227.151081][ T9825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.186155][T12018] loop3: detected capacity change from 0 to 128 [ 227.194540][T12018] syz.3.1791[12018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.194636][T12018] syz.3.1791[12018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.307006][T12026] loop4: detected capacity change from 0 to 128 [ 227.351166][T12026] syz.4.1794: attempt to access beyond end of device [ 227.351166][T12026] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 227.409754][T11915] vhci_hcd: connection reset by peer [ 227.415319][ T50] vhci_hcd: stop threads [ 227.419694][ T50] vhci_hcd: release socket [ 227.424424][ T50] vhci_hcd: disconnect device [ 227.432036][T12034] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 227.485505][T12044] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 227.703676][T12054] mmap: syz.0.1806 (12054) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.775516][T12060] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 227.782176][T12060] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 227.790071][T12060] vhci_hcd vhci_hcd.0: Device attached [ 227.989144][ T3310] vhci_hcd: vhci_device speed not set [ 228.059078][ T3310] usb 5-1: new full-speed USB device number 12 using vhci_hcd [ 228.196639][T12072] loop1: detected capacity change from 0 to 128 [ 228.214426][T12072] syz.1.1811: attempt to access beyond end of device [ 228.214426][T12072] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 228.339283][T12077] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 228.448182][T12086] loop4: detected capacity change from 0 to 1024 [ 228.455430][T12086] EXT4-fs: Ignoring removed orlov option [ 228.461202][T12086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.476117][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 228.492304][T12086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.515551][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.833014][T12104] loop0: detected capacity change from 0 to 128 [ 228.850986][T12104] syz.0.1824: attempt to access beyond end of device [ 228.850986][T12104] loop0: rw=0, sector=121, nr_sectors = 119 limit=128 [ 228.952271][T12106] loop0: detected capacity change from 0 to 1024 [ 228.965451][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 228.972473][T12106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.999457][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 228.999474][ T29] audit: type=1326 audit(1725389004.064:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 229.029810][ T29] audit: type=1326 audit(1725389004.064:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 229.053319][ T29] audit: type=1326 audit(1725389004.064:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 229.060465][T12106] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2792: inode #12: comm syz.0.1825: corrupted in-inode xattr: bad magic number in in-inode xattr [ 229.077360][ T29] audit: type=1326 audit(1725389004.064:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 229.116698][ T29] audit: type=1326 audit(1725389004.064:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 229.140220][ T29] audit: type=1326 audit(1725389004.064:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 229.173268][ T29] audit: type=1326 audit(1725389004.114:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 229.196975][ T29] audit: type=1326 audit(1725389004.114:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 229.220645][ T29] audit: type=1326 audit(1725389004.124:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 229.244166][ T29] audit: type=1326 audit(1725389004.154:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.0.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fc16ceb9 code=0x7ffc0000 [ 229.268948][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.449583][T12123] loop3: detected capacity change from 0 to 512 [ 229.462602][T12123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 229.481864][ T3250] udevd[3250]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:3' failed: Read-only file system [ 229.485894][T12123] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.513346][T12128] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 229.522662][T12123] FAULT_INJECTION: forcing a failure. [ 229.522662][T12123] name failslab, interval 1, probability 0, space 0, times 0 [ 229.535634][T12123] CPU: 0 UID: 0 PID: 12123 Comm: syz.3.1832 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 229.546705][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 229.556798][T12123] Call Trace: [ 229.560115][T12123] [ 229.563078][T12123] dump_stack_lvl+0xf2/0x150 [ 229.567720][T12123] dump_stack+0x15/0x20 [ 229.572504][T12123] should_fail_ex+0x229/0x230 [ 229.577306][T12123] ? __es_insert_extent+0x575/0xf60 [ 229.582563][T12123] should_failslab+0x8f/0xb0 [ 229.587209][T12123] kmem_cache_alloc_noprof+0x4c/0x290 [ 229.592697][T12123] __es_insert_extent+0x575/0xf60 [ 229.597830][T12123] ext4_es_insert_extent+0x3e5/0x1c10 [ 229.603393][T12123] ext4_map_blocks+0x3ee/0xf50 [ 229.608225][T12123] ext4_getblk+0x112/0x500 [ 229.612754][T12123] ext4_bread_batch+0x5b/0x360 [ 229.617613][T12123] __ext4_find_entry+0x9d3/0x10a0 [ 229.622725][T12123] ? d_alloc_parallel+0xbfe/0xc80 [ 229.627966][T12123] ? selinux_inode_permission+0x337/0x400 [ 229.633740][T12123] ext4_lookup+0xba/0x390 [ 229.638169][T12123] __lookup_slow+0x184/0x250 [ 229.642813][T12123] lookup_slow+0x3c/0x60 [ 229.647144][T12123] walk_component+0x1f5/0x230 [ 229.651865][T12123] ? path_lookupat+0xfd/0x2b0 [ 229.656552][T12123] path_lookupat+0x10a/0x2b0 [ 229.661225][T12123] filename_lookup+0x127/0x300 [ 229.666132][T12123] user_path_at+0x3c/0x110 [ 229.670561][T12123] __se_sys_move_mount+0x13c/0x730 [ 229.675712][T12123] __x64_sys_move_mount+0x67/0x80 [ 229.680924][T12123] x64_sys_call+0x1b80/0x2d60 [ 229.685809][T12123] do_syscall_64+0xc9/0x1c0 [ 229.690344][T12123] ? clear_bhb_loop+0x55/0xb0 [ 229.695089][T12123] ? clear_bhb_loop+0x55/0xb0 [ 229.699780][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.705882][T12123] RIP: 0033:0x7fa057b1ceb9 [ 229.710504][T12123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.730440][T12123] RSP: 002b:00007fa056797038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 229.738855][T12123] RAX: ffffffffffffffda RBX: 00007fa057cd5f80 RCX: 00007fa057b1ceb9 [ 229.746847][T12123] RDX: ffffffffffffff9c RSI: 0000000020000140 RDI: 0000000000000007 [ 229.754833][T12123] RBP: 00007fa056797090 R08: 0000000000000000 R09: 0000000000000000 [ 229.762883][T12123] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000002 [ 229.770872][T12123] R13: 0000000000000000 R14: 00007fa057cd5f80 R15: 00007ffd21e6f618 [ 229.778962][T12123] [ 229.783322][ T3503] usb 1-1: enqueue for inactive port 0 [ 229.788840][ T3503] usb 1-1: enqueue for inactive port 0 [ 229.814489][T12135] serio: Serial port pts0 [ 229.821501][ T9825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 229.879015][ T3503] vhci_hcd: vhci_device speed not set [ 230.208651][T12154] loop0: detected capacity change from 0 to 1024 [ 230.215463][T12154] EXT4-fs: Ignoring removed orlov option [ 230.221295][T12154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.223887][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 230.250983][T12154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.276006][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.299948][T12160] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 230.759250][T12182] loop4: detected capacity change from 0 to 512 [ 230.767781][T12062] vhci_hcd: connection reset by peer [ 230.795260][ T1612] vhci_hcd: stop threads [ 230.799604][ T1612] vhci_hcd: release socket [ 230.804072][ T1612] vhci_hcd: disconnect device [ 230.820948][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 230.836170][T12184] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 230.846827][T12182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.870218][T12182] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.996481][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.096919][T12202] loop4: detected capacity change from 0 to 1024 [ 231.106034][T12202] EXT4-fs: Ignoring removed orlov option [ 231.111928][T12202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.125277][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 231.160648][T12202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.197075][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.233063][T12208] loop3: detected capacity change from 0 to 512 [ 231.241209][T12208] EXT4-fs: Ignoring removed orlov option [ 231.253361][T12208] EXT4-fs (loop3): 1 truncate cleaned up [ 231.275876][T12208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.321937][T12213] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 231.328510][T12213] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 231.336138][T12213] vhci_hcd vhci_hcd.0: Device attached [ 231.559051][ T3503] vhci_hcd: vhci_device speed not set [ 231.629134][ T3503] usb 9-1: new full-speed USB device number 10 using vhci_hcd [ 231.782653][T12235] loop2: detected capacity change from 0 to 512 [ 231.792752][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 231.811577][T12235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.819368][T12240] loop1: detected capacity change from 0 to 1024 [ 231.825240][T12235] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.833289][T12240] EXT4-fs: Ignoring removed orlov option [ 231.847106][T12240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.850941][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 231.870534][T12240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.897611][T10123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.908261][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.970853][T12250] loop1: detected capacity change from 0 to 128 [ 231.995966][T12254] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 232.001694][T12250] syz.1.1880: attempt to access beyond end of device [ 232.001694][T12250] loop1: rw=0, sector=121, nr_sectors = 119 limit=128 [ 232.108648][ T9825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.150337][T12260] loop2: detected capacity change from 0 to 128 [ 232.160248][T12260] syz.2.1886[12260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.160320][T12260] syz.2.1886[12260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.181180][T12260] syz.2.1886: attempt to access beyond end of device [ 232.181180][T12260] loop2: rw=0, sector=121, nr_sectors = 127 limit=128 [ 232.338181][T12268] loop0: detected capacity change from 0 to 512 [ 232.346135][T12270] loop2: detected capacity change from 0 to 2048 [ 232.358529][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 232.364028][ T3252] udevd[3252]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 232.375495][T12270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.385264][T12268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.406263][T12268] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.447348][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.527840][T12283] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 232.571128][T12285] loop0: detected capacity change from 0 to 512 [ 232.577781][T12285] EXT4-fs: Ignoring removed orlov option [ 232.585084][T12285] EXT4-fs (loop0): 1 truncate cleaned up [ 232.591366][T12285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.982983][T12289] loop3: detected capacity change from 0 to 128 [ 233.006537][T12289] syz.3.1895: attempt to access beyond end of device [ 233.006537][T12289] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 233.116716][T12298] loop3: detected capacity change from 0 to 128 [ 233.127647][T12298] syz.3.1899[12298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.127715][T12298] syz.3.1899[12298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.148561][T12298] syz.3.1899: attempt to access beyond end of device [ 233.148561][T12298] loop3: rw=0, sector=121, nr_sectors = 127 limit=128 [ 233.149950][ T3310] usb 5-1: enqueue for inactive port 0 [ 233.180165][ T3310] usb 5-1: enqueue for inactive port 0 [ 233.224210][T10123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.269036][ T3310] vhci_hcd: vhci_device speed not set [ 233.308828][T12308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.310588][T12307] serio: Serial port pts1 [ 233.441136][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.899655][T12317] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 234.155304][T12324] loop2: detected capacity change from 0 to 512 [ 234.168494][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 234.190268][T12326] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 234.190838][T12324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.214724][T12324] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.229376][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 234.229393][ T29] audit: type=1326 audit(1725389009.284:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.3.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 234.233624][T12324] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.1910: corrupted inode contents [ 234.235650][ T29] audit: type=1326 audit(1725389009.284:6596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.3.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 234.271637][T12324] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.1910: mark_inode_dirty error [ 234.294819][ T29] audit: type=1326 audit(1725389009.284:6597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.3.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 234.329769][ T29] audit: type=1326 audit(1725389009.284:6598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.3.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 234.330405][T12324] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.1910: corrupted inode contents [ 234.368295][T12215] vhci_hcd: connection reset by peer [ 234.381593][ T36] vhci_hcd: stop threads [ 234.385991][ T36] vhci_hcd: release socket [ 234.390570][ T36] vhci_hcd: disconnect device [ 234.417260][T12333] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.1910: Directory hole found for htree leaf block 0 [ 234.417597][ T29] audit: type=1326 audit(1725389009.474:6599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e24aceb9 code=0x7ffc0000 [ 234.454446][ T29] audit: type=1326 audit(1725389009.474:6600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e24aceb9 code=0x7ffc0000 [ 234.477410][T12341] loop3: detected capacity change from 0 to 512 [ 234.478055][ T29] audit: type=1326 audit(1725389009.474:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f29e24aceb9 code=0x7ffc0000 [ 234.507856][ T29] audit: type=1326 audit(1725389009.474:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.4.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e24aceb9 code=0x7ffc0000 [ 234.511045][T12341] EXT4-fs: Ignoring removed orlov option [ 234.541758][T12324] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.1910: Directory hole found for htree leaf block 0 [ 234.560454][T12341] EXT4-fs (loop3): 1 truncate cleaned up [ 234.576173][T12348] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 234.689542][T12351] loop2: detected capacity change from 0 to 2048 [ 234.708865][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 234.713108][ T29] audit: type=1326 audit(1725389009.774:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.4.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e24aceb9 code=0x7ffc0000 [ 234.969491][T12361] loop1: detected capacity change from 0 to 1024 [ 234.985121][ T29] audit: type=1326 audit(1725389009.784:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.4.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f29e24aceb9 code=0x7ffc0000 [ 235.025498][T12361] EXT4-fs: Ignoring removed orlov option [ 235.031329][T12361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.143744][T12369] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 235.150432][T12369] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 235.158235][T12369] vhci_hcd vhci_hcd.0: Device attached [ 235.172690][T12367] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 235.359034][ T3338] vhci_hcd: vhci_device speed not set [ 235.368594][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 235.450402][ T3338] usb 3-1: new full-speed USB device number 11 using vhci_hcd [ 235.486311][T12389] loop0: detected capacity change from 0 to 512 [ 235.571339][T12391] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 235.637568][T12396] loop2: detected capacity change from 0 to 128 [ 235.655894][T12396] syz.2.1934: attempt to access beyond end of device [ 235.655894][T12396] loop2: rw=0, sector=121, nr_sectors = 127 limit=128 [ 235.771958][T12398] loop2: detected capacity change from 0 to 1024 [ 235.778698][T12398] EXT4-fs: Ignoring removed orlov option [ 235.784622][T12398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.795930][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 235.868179][T12406] loop2: detected capacity change from 0 to 2048 [ 235.881294][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 236.347400][T12413] loop3: detected capacity change from 0 to 512 [ 236.355700][T12413] EXT4-fs: Ignoring removed orlov option [ 236.385246][T12413] EXT4-fs (loop3): 1 truncate cleaned up [ 236.512121][T12419] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 236.661029][ T3503] usb 9-1: enqueue for inactive port 0 [ 236.944119][T12426] loop0: detected capacity change from 0 to 2048 [ 236.959573][ T3503] usb 9-1: enqueue for inactive port 0 [ 236.978243][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 236.982928][T12432] loop2: detected capacity change from 0 to 512 [ 237.008630][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 237.020143][T12432] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.024126][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 237.043031][ T3503] vhci_hcd: vhci_device speed not set [ 237.133865][T12426] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 237.151038][T12444] loop2: detected capacity change from 0 to 1024 [ 237.158894][T12444] EXT4-fs: Ignoring removed orlov option [ 237.164730][T12444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.201726][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 237.231116][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 237.259238][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 237.261629][T12452] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 237.308398][T12456] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 237.810003][T12471] loop4: detected capacity change from 0 to 128 [ 237.828472][T12471] syz.4.1960: attempt to access beyond end of device [ 237.828472][T12471] loop4: rw=0, sector=121, nr_sectors = 127 limit=128 [ 237.935332][T12473] loop4: detected capacity change from 0 to 2048 [ 237.985341][T12478] loop2: detected capacity change from 0 to 512 [ 237.993143][T12478] EXT4-fs: Ignoring removed orlov option [ 238.011245][T12478] EXT4-fs (loop2): 1 truncate cleaned up [ 238.132320][T12473] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 238.147716][T12371] vhci_hcd: connection reset by peer [ 238.250683][ T28] vhci_hcd: stop threads [ 238.254980][ T28] vhci_hcd: release socket [ 238.259472][ T28] vhci_hcd: disconnect device [ 238.378723][T12490] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 238.531336][T12498] loop4: detected capacity change from 0 to 128 [ 238.612432][T12504] loop1: detected capacity change from 0 to 256 [ 238.878519][T12516] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 238.885183][T12516] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.892885][T12516] vhci_hcd vhci_hcd.0: Device attached [ 239.083149][T12527] loop0: detected capacity change from 0 to 2048 [ 239.109613][ T3502] vhci_hcd: vhci_device speed not set [ 239.179037][ T3502] usb 5-1: new full-speed USB device number 13 using vhci_hcd [ 239.191799][T12527] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 239.258462][T12533] loop0: detected capacity change from 0 to 128 [ 239.276064][T12533] syz.0.1977: attempt to access beyond end of device [ 239.276064][T12533] loop0: rw=0, sector=121, nr_sectors = 127 limit=128 [ 239.402070][T12537] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 239.421996][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 239.454753][T12544] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 239.522115][T12551] loop4: detected capacity change from 0 to 2048 [ 239.548637][T12553] loop0: detected capacity change from 0 to 2048 [ 239.553817][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 239.576305][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 239.643652][T12564] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 240.170245][T12569] loop1: detected capacity change from 0 to 128 [ 240.187889][T12569] syz.1.1990: attempt to access beyond end of device [ 240.187889][T12569] loop1: rw=0, sector=121, nr_sectors = 127 limit=128 [ 240.311135][T12571] loop1: detected capacity change from 0 to 1024 [ 240.317946][T12571] EXT4-fs: Ignoring removed orlov option [ 240.323740][T12571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.326600][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 240.374065][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 240.396821][ T3252] udevd[3252]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 240.425748][T12579] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 240.459701][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'. [ 240.467673][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 240.467692][ T29] audit: type=1326 audit(1725389015.524:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 240.489740][ T3338] usb 3-1: enqueue for inactive port 0 [ 240.513095][ T29] audit: type=1326 audit(1725389015.564:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 240.513792][T12585] loop3: detected capacity change from 0 to 512 [ 240.536806][ T29] audit: type=1326 audit(1725389015.574:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 240.536844][ T29] audit: type=1326 audit(1725389015.574:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 240.548548][ T3338] usb 3-1: enqueue for inactive port 0 [ 240.566634][ T29] audit: type=1326 audit(1725389015.574:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 240.619257][ T29] audit: type=1326 audit(1725389015.574:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 240.643066][ T29] audit: type=1326 audit(1725389015.574:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 240.666582][ T29] audit: type=1326 audit(1725389015.574:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 240.670686][ T3338] vhci_hcd: vhci_device speed not set [ 240.690332][ T29] audit: type=1326 audit(1725389015.574:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 240.719652][ T29] audit: type=1326 audit(1725389015.574:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 240.748415][T12590] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 240.757464][T12585] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.835284][T12597] loop0: detected capacity change from 0 to 128 [ 240.900515][T12601] loop4: detected capacity change from 0 to 1024 [ 240.907196][T12601] EXT4-fs: Ignoring removed orlov option [ 240.912974][T12601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.914780][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 241.009793][T12616] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 241.022369][T12612] loop4: detected capacity change from 0 to 256 [ 241.048451][T12618] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 241.108129][T12625] loop0: detected capacity change from 0 to 128 [ 241.132879][T12625] syz.0.2012: attempt to access beyond end of device [ 241.132879][T12625] loop0: rw=0, sector=121, nr_sectors = 127 limit=128 [ 241.235817][T12631] loop0: detected capacity change from 0 to 128 [ 241.342266][T12639] loop1: detected capacity change from 0 to 512 [ 241.352866][T12641] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 241.363874][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 241.382231][T12639] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.414877][T12647] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 241.476301][T12654] loop0: detected capacity change from 0 to 128 [ 241.511881][T12658] loop1: detected capacity change from 0 to 128 [ 241.513018][T12654] syz.0.2024: attempt to access beyond end of device [ 241.513018][T12654] loop0: rw=0, sector=121, nr_sectors = 127 limit=128 [ 241.538755][T12658] syz.1.2025: attempt to access beyond end of device [ 241.538755][T12658] loop1: rw=0, sector=121, nr_sectors = 127 limit=128 [ 241.671619][T12664] loop0: detected capacity change from 0 to 512 [ 241.682374][T12664] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.685474][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 241.738387][T12669] loop0: detected capacity change from 0 to 2048 [ 241.751266][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 241.806038][T12672] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 241.859220][T12674] loop4: detected capacity change from 0 to 128 [ 241.871138][T12518] vhci_hcd: connection reset by peer [ 241.882452][ T28] vhci_hcd: stop threads [ 241.887074][ T28] vhci_hcd: release socket [ 241.891585][ T28] vhci_hcd: disconnect device [ 241.992078][T12686] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 242.098254][T12693] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 242.191701][T12696] loop4: detected capacity change from 0 to 256 [ 242.306218][T12703] loop3: detected capacity change from 0 to 2048 [ 242.497649][T12712] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 242.540687][T12714] loop1: detected capacity change from 0 to 1024 [ 242.547548][T12714] EXT4-fs: Ignoring removed orlov option [ 242.553412][T12714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.572913][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 242.674748][T12722] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 242.758802][T12728] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 242.819394][T12732] loop0: detected capacity change from 0 to 512 [ 242.841269][T12732] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.896450][T12739] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 242.945800][T12744] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 242.952517][T12744] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 242.960143][T12744] vhci_hcd vhci_hcd.0: Device attached [ 243.059698][T12753] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 243.159133][ T3339] vhci_hcd: vhci_device speed not set [ 243.187272][T12759] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 243.229056][ T3339] usb 1-1: new full-speed USB device number 13 using vhci_hcd [ 243.652089][T12773] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 243.717113][T12777] loop1: detected capacity change from 0 to 256 [ 243.728807][T12781] loop2: detected capacity change from 0 to 512 [ 243.735917][T12781] EXT4-fs: Ignoring removed orlov option [ 243.743424][T12781] EXT4-fs (loop2): 1 truncate cleaned up [ 244.256826][ T3502] usb 5-1: enqueue for inactive port 0 [ 244.262557][ T3502] usb 5-1: enqueue for inactive port 0 [ 244.295729][T12804] loop4: detected capacity change from 0 to 1024 [ 244.308444][T12804] EXT4-fs: Ignoring removed orlov option [ 244.314271][T12804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.339155][ T3502] vhci_hcd: vhci_device speed not set [ 244.357974][T12810] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 244.404437][T12815] loop4: detected capacity change from 0 to 512 [ 244.411244][T12815] EXT4-fs: Ignoring removed orlov option [ 244.418927][T12815] EXT4-fs (loop4): 1 truncate cleaned up [ 244.698337][T12823] loop1: detected capacity change from 0 to 512 [ 244.732095][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 244.751639][T12823] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.947189][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 244.966249][ T3252] udevd[3252]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 244.981795][T12831] loop1: detected capacity change from 0 to 512 [ 244.993947][T12833] EXT4-fs: 1 callbacks suppressed [ 244.993963][T12833] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 245.001772][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 245.022570][T12831] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.024377][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 245.093484][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 245.094742][T12841] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 245.116594][T12839] loop2: detected capacity change from 0 to 1024 [ 245.124301][T12839] EXT4-fs: Ignoring removed orlov option [ 245.130215][T12839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.141893][T12843] loop1: detected capacity change from 0 to 128 [ 245.156082][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 245.164438][T12843] syz.1.2089: attempt to access beyond end of device [ 245.164438][T12843] loop1: rw=0, sector=121, nr_sectors = 127 limit=128 [ 245.210636][T12845] loop3: detected capacity change from 0 to 256 [ 245.228962][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 245.318507][T12856] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 245.537555][T12876] loop1: detected capacity change from 0 to 2048 [ 245.550318][T12876] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2099: bad orphan inode 8192 [ 245.551414][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 245.574592][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 245.574608][ T29] audit: type=1400 audit(1725389020.634:6973): avc: denied { bind } for pid=12875 comm="syz.1.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.580131][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 245.609067][T12876] bridge_slave_1: left allmulticast mode [ 245.614741][T12876] bridge_slave_1: left promiscuous mode [ 245.620419][T12876] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.628580][T12876] bridge_slave_0: left allmulticast mode [ 245.634316][T12876] bridge_slave_0: left promiscuous mode [ 245.640038][T12876] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.938194][T12746] vhci_hcd: connection reset by peer [ 245.944114][ T58] vhci_hcd: stop threads [ 245.948615][ T58] vhci_hcd: release socket [ 245.953111][ T58] vhci_hcd: disconnect device [ 245.981316][T12897] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 246.070879][ T29] audit: type=1326 audit(1725389021.134:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 246.104453][ T29] audit: type=1326 audit(1725389021.134:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 246.111329][T12905] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 246.128192][ T29] audit: type=1326 audit(1725389021.134:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 246.160001][ T29] audit: type=1326 audit(1725389021.134:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa057b1ceb9 code=0x7ffc0000 [ 246.219812][T12907] loop2: detected capacity change from 0 to 512 [ 246.229108][ T29] audit: type=1400 audit(1725389021.284:6978): avc: denied { create } for pid=12908 comm="syz.0.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.239570][T12909] loop0: detected capacity change from 0 to 128 [ 246.261765][T12909] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 246.282461][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 246.283463][T12907] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.318271][T12917] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 246.319133][ T29] audit: type=1400 audit(1725389021.374:6979): avc: denied { write } for pid=12908 comm="syz.0.2113" path="socket:[28264]" dev="sockfs" ino=28264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 246.324954][T12917] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 246.357230][T12917] vhci_hcd vhci_hcd.0: Device attached [ 246.389054][ T29] audit: type=1326 audit(1725389021.434:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 246.412932][ T29] audit: type=1326 audit(1725389021.434:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 246.436768][ T29] audit: type=1326 audit(1725389021.434:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.2.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f07d529ceb9 code=0x7ffc0000 [ 246.437202][T12911] loop4: detected capacity change from 0 to 8192 [ 246.478668][T12923] bond0: (slave syz_tun): Releasing backup interface [ 246.492045][T12911] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.538408][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.564425][ T3556] vhci_hcd: vhci_device speed not set [ 246.624676][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.655365][ T3556] usb 7-1: new full-speed USB device number 12 using vhci_hcd [ 246.685937][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.742565][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.864639][ T58] bridge_slave_1: left allmulticast mode [ 246.870434][ T58] bridge_slave_1: left promiscuous mode [ 246.876203][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.901097][T12959] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 246.911767][ T58] bridge_slave_0: left allmulticast mode [ 246.917506][ T58] bridge_slave_0: left promiscuous mode [ 246.923418][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.082229][T12972] loop0: detected capacity change from 0 to 512 [ 247.088914][T12972] EXT4-fs: Ignoring removed orlov option [ 247.096285][T12972] EXT4-fs (loop0): 1 truncate cleaned up [ 247.107782][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.121011][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.132704][ T58] bond0 (unregistering): Released all slaves [ 247.205015][T12935] chnl_net:caif_netlink_parms(): no params data found [ 247.246069][T12935] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.253299][T12935] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.261513][T12935] bridge_slave_0: entered allmulticast mode [ 247.268770][T12935] bridge_slave_0: entered promiscuous mode [ 247.336285][ T58] hsr_slave_0: left promiscuous mode [ 247.346244][ T58] hsr_slave_1: left promiscuous mode [ 247.358524][T12983] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 247.373515][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.381312][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.391775][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.399283][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.413692][ T58] veth1_macvtap: left promiscuous mode [ 247.419371][ T58] veth0_macvtap: left promiscuous mode [ 247.424886][ T58] veth1_vlan: left promiscuous mode [ 247.430204][ T58] veth0_vlan: left promiscuous mode [ 247.603569][ T58] team0 (unregistering): Port device team_slave_1 removed [ 247.621672][ T58] team0 (unregistering): Port device team_slave_0 removed [ 247.665189][T12935] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.672364][T12935] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.680590][T12935] bridge_slave_1: entered allmulticast mode [ 247.687306][T12935] bridge_slave_1: entered promiscuous mode [ 247.714221][T12935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.746634][T12935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.770930][T12935] team0: Port device team_slave_0 added [ 247.777918][T12935] team0: Port device team_slave_1 added [ 247.796371][T12935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.803450][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.829530][T12935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.856723][T12935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.863768][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.889889][T12935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.932987][T12935] hsr_slave_0: entered promiscuous mode [ 247.957495][T12935] hsr_slave_1: entered promiscuous mode [ 247.968704][T12935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.976376][T12935] Cannot create hsr debugfs directory [ 247.986073][T13017] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 248.253146][ T3339] usb 1-1: enqueue for inactive port 0 [ 248.262282][ T3339] usb 1-1: enqueue for inactive port 0 [ 248.349028][ T3339] vhci_hcd: vhci_device speed not set [ 248.458223][T12935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.496198][T12935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.514832][T12935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.525454][T13067] serio: Serial port pts0 [ 248.536848][T12935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.617701][T12935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.638935][T12935] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.661312][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.668491][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.688902][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.696194][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.724575][T12935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.735150][T12935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.835956][T12935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.993268][T12935] veth0_vlan: entered promiscuous mode [ 249.002834][T12935] veth1_vlan: entered promiscuous mode [ 249.033478][T12935] veth0_macvtap: entered promiscuous mode [ 249.041502][T12935] veth1_macvtap: entered promiscuous mode [ 249.058786][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.069606][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.079504][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.090013][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.099972][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.110590][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.120555][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.131097][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.155998][T12935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.167504][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.178191][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.188158][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.198706][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.208597][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.219096][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.228967][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.240090][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.253347][T12935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.270745][T12935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.279571][T12935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.288450][T12935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.297347][T12935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.306954][T12919] vhci_hcd: connection reset by peer [ 249.315709][ T3276] vhci_hcd: stop threads [ 249.320195][ T3276] vhci_hcd: release socket [ 249.324064][T13125] loop1: detected capacity change from 0 to 128 [ 249.324707][ T3276] vhci_hcd: disconnect device [ 249.448807][T13133] loop3: detected capacity change from 0 to 512 [ 249.469484][T13133] EXT4-fs: Ignoring removed orlov option [ 249.473141][T13143] loop2: detected capacity change from 0 to 256 [ 249.525160][T13133] EXT4-fs (loop3): 1 truncate cleaned up [ 249.540587][T13133] EXT4-fs mount: 65 callbacks suppressed [ 249.540623][T13133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.549306][T13156] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 249.712812][T13179] 9pnet_virtio: no channels available for device syz [ 250.294102][ T9825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.346107][T13196] serio: Serial port pts0 [ 250.367497][T13197] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 250.374066][T13197] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 250.381757][T13197] vhci_hcd vhci_hcd.0: Device attached [ 250.408258][T13205] loop2: detected capacity change from 0 to 128 [ 250.438277][T13205] syz.2.2154: attempt to access beyond end of device [ 250.438277][T13205] loop2: rw=0, sector=121, nr_sectors = 127 limit=128 [ 250.617978][T13210] loop1: detected capacity change from 0 to 2048 [ 250.646643][T13215] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 250.667299][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 250.683279][T13210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.795619][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 250.795637][ T29] audit: type=1326 audit(1725389025.854:7065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fab81ceb9 code=0x7ffc0000 [ 250.845563][ T29] audit: type=1326 audit(1725389025.854:7066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fab81ceb9 code=0x7ffc0000 [ 250.869461][ T29] audit: type=1326 audit(1725389025.854:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fab81ceb9 code=0x7ffc0000 [ 250.893052][ T29] audit: type=1326 audit(1725389025.854:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fab81ceb9 code=0x7ffc0000 [ 250.910719][T13210] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 250.916798][ T29] audit: type=1326 audit(1725389025.854:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fab81ceb9 code=0x7ffc0000 [ 250.956613][ T29] audit: type=1326 audit(1725389025.914:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fab81ceb9 code=0x7ffc0000 [ 250.980179][ T29] audit: type=1326 audit(1725389025.914:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fab81ceb9 code=0x7ffc0000 [ 251.003910][ T29] audit: type=1326 audit(1725389026.004:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fab81ceb9 code=0x7ffc0000 [ 251.027551][ T29] audit: type=1326 audit(1725389026.004:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fab81ceb9 code=0x7ffc0000 [ 251.048732][T13226] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 251.051486][ T29] audit: type=1326 audit(1725389026.004:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fab81ceb9 code=0x7ffc0000 [ 251.083875][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.115965][T13225] loop2: detected capacity change from 0 to 512 [ 251.122561][T13225] EXT4-fs: Ignoring removed orlov option [ 251.134586][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 251.156200][T13225] EXT4-fs (loop2): 1 truncate cleaned up [ 251.163911][T13225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.285536][T13237] loop0: detected capacity change from 0 to 256 [ 251.902553][T12935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.924174][T13251] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 251.982085][T13255] loop1: detected capacity change from 0 to 1024 [ 251.990521][T13257] loop2: detected capacity change from 0 to 512 [ 251.998052][T13255] EXT4-fs: Ignoring removed orlov option [ 252.003269][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 252.003793][T13255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.021404][ T3252] udevd[3252]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 252.040939][T13257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.041082][T13255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.054872][T13257] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.102095][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.134829][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 252.137116][T12935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.253495][T13282] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 252.334357][T13293] loop4: detected capacity change from 0 to 1024 [ 252.342938][T13293] EXT4-fs: Ignoring removed orlov option [ 252.348670][T13293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.359251][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 252.372077][T13293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.401343][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.437664][T13297] loop4: detected capacity change from 0 to 512 [ 252.452869][T13297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.467304][ T3250] udevd[3250]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 252.481484][T13297] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.531235][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.709595][T13312] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 252.790215][T13318] loop0: detected capacity change from 0 to 128 [ 252.853867][T13318] syz.0.2194: attempt to access beyond end of device [ 252.853867][T13318] loop0: rw=0, sector=121, nr_sectors = 127 limit=128 [ 252.970984][T13322] loop0: detected capacity change from 0 to 1024 [ 252.977832][T13322] EXT4-fs: Ignoring removed orlov option [ 252.983423][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 252.983655][T13322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.009944][ T3250] udevd[3250]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 253.023861][T13322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.063679][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.073894][T13328] loop1: detected capacity change from 0 to 512 [ 253.095561][ T3250] udevd[3250]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 253.112284][T13328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.128733][T13328] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.224703][T10437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.300229][T13345] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 253.339399][T13201] vhci_hcd: connection reset by peer [ 253.351036][ T50] vhci_hcd: stop threads [ 253.355437][ T50] vhci_hcd: release socket [ 253.359904][ T50] vhci_hcd: disconnect device [ 253.412474][T13351] sctp: [Deprecated]: syz.1.2205 (pid 13351) Use of int in max_burst socket option. [ 253.412474][T13351] Use struct sctp_assoc_value instead [ 253.527956][T13362] loop2: detected capacity change from 0 to 512 [ 253.551781][T13362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.576045][T13362] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.692177][T12935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.747307][T13375] loop1: detected capacity change from 0 to 128 [ 253.784894][T13378] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 253.791455][T13378] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 253.799115][T13378] vhci_hcd vhci_hcd.0: Device attached [ 253.808933][T13375] syz.1.2217: attempt to access beyond end of device [ 253.808933][T13375] loop1: rw=0, sector=121, nr_sectors = 127 limit=128 [ 253.831432][T13388] loop4: detected capacity change from 0 to 128 [ 253.855651][T13388] syz.4.2221: attempt to access beyond end of device [ 253.855651][T13388] loop4: rw=0, sector=121, nr_sectors = 127 limit=128 [ 253.999092][ T3502] vhci_hcd: vhci_device speed not set [ 254.026056][T13405] loop4: detected capacity change from 0 to 512 [ 254.059206][T13405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.077866][T13405] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.080999][ T3502] usb 5-1: new full-speed USB device number 14 using vhci_hcd [ 254.161509][ T9257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.178800][ T9257] ================================================================== [ 254.187038][ T9257] BUG: KCSAN: data-race in folios_put_refs / need_mlock_drain [ 254.194542][ T9257] [ 254.196883][ T9257] write to 0xffff888237c2b370 of 1 bytes by task 13399 on cpu 0: [ 254.204702][ T9257] folios_put_refs+0x266/0x2b0 [ 254.209587][ T9257] mlock_folio_batch+0x319d/0x31d0 [ 254.214726][ T9257] mlock_new_folio+0x1a3/0x200 [ 254.219620][ T9257] folio_add_lru_vma+0x5d/0x60 [ 254.224419][ T9257] handle_mm_fault+0x246c/0x2a30 [ 254.229383][ T9257] __get_user_pages+0x499/0x10d0 [ 254.234350][ T9257] __mm_populate+0x25b/0x3b0 [ 254.238978][ T9257] __se_sys_mlockall+0x2c5/0x370 [ 254.243962][ T9257] __x64_sys_mlockall+0x1f/0x30 [ 254.248955][ T9257] x64_sys_call+0x1e3a/0x2d60 [ 254.253675][ T9257] do_syscall_64+0xc9/0x1c0 [ 254.258198][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.264120][ T9257] [ 254.266459][ T9257] read to 0xffff888237c2b370 of 1 bytes by task 9257 on cpu 1: [ 254.274186][ T9257] need_mlock_drain+0x30/0x50 [ 254.278896][ T9257] __lru_add_drain_all+0x235/0x410 [ 254.284135][ T9257] lru_add_drain_all+0x10/0x20 [ 254.288958][ T9257] invalidate_bdev+0x47/0x70 [ 254.293581][ T9257] ext4_put_super+0x571/0x840 [ 254.298385][ T9257] generic_shutdown_super+0xde/0x210 [ 254.303695][ T9257] kill_block_super+0x2a/0x70 [ 254.308400][ T9257] ext4_kill_sb+0x44/0x80 [ 254.312858][ T9257] deactivate_locked_super+0x7d/0x1c0 [ 254.318244][ T9257] deactivate_super+0x9f/0xb0 [ 254.322923][ T9257] cleanup_mnt+0x268/0x2e0 [ 254.327347][ T9257] __cleanup_mnt+0x19/0x20 [ 254.331772][ T9257] task_work_run+0x13a/0x1a0 [ 254.336400][ T9257] syscall_exit_to_user_mode+0xbe/0x130 [ 254.341994][ T9257] do_syscall_64+0xd6/0x1c0 [ 254.346512][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.352423][ T9257] [ 254.354742][ T9257] value changed: 0x1f -> 0x01 [ 254.359414][ T9257] [ 254.361741][ T9257] Reported by Kernel Concurrency Sanitizer on: [ 254.367906][ T9257] CPU: 1 UID: 0 PID: 9257 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 254.378787][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 254.388866][ T9257] ================================================================== [ 256.745032][T13383] vhci_hcd: connection reset by peer [ 256.750830][ T28] vhci_hcd: stop threads [ 256.755205][ T28] vhci_hcd: release socket [ 256.759669][ T28] vhci_hcd: disconnect device [ 258.409073][ T3556] usb 7-1: enqueue for inactive port 0 [ 258.499110][ T3556] vhci_hcd: vhci_device speed not set [ 259.129070][ T3502] usb 5-1: enqueue for inactive port 0 [ 259.134713][ T3502] usb 5-1: enqueue for inactive port 0 [ 259.219045][ T3502] vhci_hcd: vhci_device speed not set