last executing test programs: 3.05780826s ago: executing program 2 (id=1078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.975216872s ago: executing program 2 (id=1080): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000000701"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r1}, 0x38) 2.539621486s ago: executing program 0 (id=1081): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "fff500000000"}}}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x810) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x77d}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=""/235, 0xeb}, 0x1}], 0x2, 0x41, 0x0) 2.487732938s ago: executing program 2 (id=1082): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x92c9, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x30) syz_emit_ethernet(0x82, &(0x7f0000000580)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getlink={0x20, 0x12, 0x1, 0x70bd25, 0x25dfdbfc, {0x7}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES64=r0, @ANYRES32=r2, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x4}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000", @ANYRES64=r4], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x4014) sendmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000"], 0x80}}, 0x8010) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x8000}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x454, &(0x7f0000000740)="$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") setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x5) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, &(0x7f0000000480)}, 0x20004b88) socket(0x15, 0x5, 0x0) 2.458528699s ago: executing program 0 (id=1083): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000240)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=""/154, 0x9a}, 0x4}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.166337799s ago: executing program 2 (id=1087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtfilter={0x114, 0x2c, 0xd2b, 0x70b52a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x6}, {}, {0xe, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x5, 0x5, 0xd, 0x5, 0x6, 0x0, 0x1, 0x1ff, [{0x3, 0x10001, 0x5, 0x67}, {0xf9af, 0x1, 0x1000, 0x7}, {0xfba, 0x44, 0xc3cc, 0x200}, {0xffffffff, 0x4, 0x1ff, 0x9}, {0x5, 0xfffffe00, 0x5, 0x5}, {0x8, 0x4fa, 0xe, 0x3}, {0x10001, 0xffffffff, 0x1, 0x173}, {0x2, 0x4, 0x66, 0x5}, {0x5, 0x2a, 0x8, 0x2}, {0x3, 0x1, 0x9, 0x5}, {0x3, 0x5, 0xfffffffe, 0xba}, {0x5, 0x8000, 0x4, 0x30}, {0x43a2aef2, 0xff, 0x3, 0xfff}]}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) 2.011479894s ago: executing program 2 (id=1093): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 1.941381376s ago: executing program 4 (id=1097): unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000110000000a000000090002008d001f106f194ea0050001"], 0x30}}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.609084247s ago: executing program 1 (id=1107): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b", 0x4c}, {&(0x7f0000000a40)="6e1be7cad520a0841d111ea6e5331394badbf041eb1ff738c4cdc2518094edf6fb75990e5de4c5465ea2bb07dfb97fe0b2ea473e7db53d9719facd8dc99d1484be1803ed2d3aea2a3e80262113bf835e96682018a4a5aede22d0febc6347ee2c7c52313f8a7ad65f002e37c09736574e6bea88f9c8f7eb8bed4ed9ec49661e806d92ba5c0ba5c533c391bcc6b1f7980992806a80fab3fbd0e88c3ae46e60ca4e966f7358f198243a012f76b9706aaef378891b965e758afb2986f07f277431ce8eef068f0be7cd8d059784764685575beb44ee91494e1e6da2f3", 0xda}, {&(0x7f0000000b40)="5051a8c0982b3b2dde64310aa3c76b31d1807add88136c7893922aa2aa40f1e81d2b13012b09bfceb3c97c458382f6bfe1a8c4e8309e32a6938bdf171cca83", 0x3f}, {&(0x7f0000000bc0)}], 0x4}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x2c6}], 0x1}}], 0x2, 0x42054) 1.590980628s ago: executing program 0 (id=1108): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="8995b3c271", 0x5, 0x4044880, 0x0, 0x0) 1.531742849s ago: executing program 1 (id=1110): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x8000400) pselect6(0x29, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x6, 0xa, 0x0, 0x800, 0xa}, 0x0, 0x0, 0x0, 0x0) 1.51793412s ago: executing program 1 (id=1111): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000300)={@empty, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x2d, 0x24, 0x66, 0x0, 0x3, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @local}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x6, 0x5, "e10734", 0x3, "900d3f"}}}}}}, 0x0) 1.439876753s ago: executing program 1 (id=1113): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.438956693s ago: executing program 2 (id=1114): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) 1.349599496s ago: executing program 1 (id=1116): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400800c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600000000000000000600", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.21600455s ago: executing program 3 (id=1117): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)) 1.21335932s ago: executing program 3 (id=1118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0x0, 0x2}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.111869313s ago: executing program 4 (id=1119): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x20000000) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.096216404s ago: executing program 3 (id=1120): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) 1.015959316s ago: executing program 4 (id=1121): unshare(0x6a040000) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 721.903456ms ago: executing program 0 (id=1122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) 596.27902ms ago: executing program 0 (id=1123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 483.362464ms ago: executing program 0 (id=1124): socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 427.770475ms ago: executing program 1 (id=1125): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) 326.430399ms ago: executing program 4 (id=1126): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x92c9, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x4}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000", @ANYRES64=r3], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x4014) sendmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000"], 0x80}}, 0x8010) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x8000}, 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x5) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, &(0x7f0000000480)}, 0x20004b88) socket(0x15, 0x5, 0x0) 243.858532ms ago: executing program 3 (id=1127): socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 169.960375ms ago: executing program 4 (id=1128): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[], 0x34}}, 0x0) 136.416036ms ago: executing program 3 (id=1129): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x2000c811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r3, r2}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x92, 0x0) 136.039696ms ago: executing program 4 (id=1130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 3 (id=1131): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) kernel console output (not intermixed with test programs): a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 156.136608][ T5126] EXT4-fs: failed to create workqueue [ 156.164418][ T5126] EXT4-fs (loop3): mount failed [ 156.173216][ T5144] loop1: detected capacity change from 0 to 512 [ 156.173657][ T3687] vhci_hcd vhci_hcd.2: stop threads [ 156.173680][ T3687] vhci_hcd vhci_hcd.2: release socket [ 156.173714][ T3687] vhci_hcd vhci_hcd.2: disconnect device [ 156.219695][ T3687] vhci_hcd vhci_hcd.2: stop threads [ 156.228837][ T5144] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.239336][ T3687] vhci_hcd vhci_hcd.2: release socket [ 156.248279][ T3687] vhci_hcd vhci_hcd.2: disconnect device [ 156.270590][ T5144] EXT4-fs (loop1): 1 truncate cleaned up [ 156.278531][ T5144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.422338][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.517595][ T5177] netlink: 'syz.3.334': attribute type 29 has an invalid length. [ 156.714681][ T5177] netlink: 372 bytes leftover after parsing attributes in process `syz.3.334'. [ 156.929598][ T5182] netlink: 'syz.2.336': attribute type 29 has an invalid length. [ 157.356983][ T5177] loop3: detected capacity change from 0 to 512 [ 157.488713][ T28] audit: type=1400 audit(1782073431.616:610): avc: denied { read } for pid=5187 comm="syz.2.339" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 157.512183][ T28] audit: type=1400 audit(1782073431.616:611): avc: denied { open } for pid=5187 comm="syz.2.339" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 158.337630][ T5177] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.348003][ T5191] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 158.354540][ T5191] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.362206][ T5191] vhci_hcd vhci_hcd.0: Device attached [ 158.404493][ T5192] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 158.411162][ T5192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.419011][ T5192] vhci_hcd vhci_hcd.0: Device attached [ 158.432208][ T5192] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 158.450973][ T5191] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11) [ 158.457647][ T5191] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.465345][ T5191] vhci_hcd vhci_hcd.0: Device attached [ 158.484377][ T5192] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 158.491042][ T5192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.498898][ T5192] vhci_hcd vhci_hcd.0: Device attached [ 158.510207][ T28] audit: type=1400 audit(1782073431.736:612): avc: denied { ioctl } for pid=5187 comm="syz.2.339" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 158.645279][ T5193] vhci_hcd: connection closed [ 158.645621][ T3687] vhci_hcd vhci_hcd.1: stop threads [ 158.655954][ T5194] vhci_hcd: connection closed [ 158.656470][ T5197] vhci_hcd: connection closed [ 158.661418][ T23] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 158.673656][ T3687] vhci_hcd vhci_hcd.1: release socket [ 158.687858][ T5201] vhci_hcd: connection closed [ 158.703335][ T5177] EXT4-fs (loop3): 1 truncate cleaned up [ 158.717133][ T3687] vhci_hcd vhci_hcd.1: disconnect device [ 158.786820][ T23] usb 3-1: enqueue for inactive port 0 [ 158.792687][ T3687] vhci_hcd vhci_hcd.1: stop threads [ 158.836646][ T3687] vhci_hcd vhci_hcd.1: release socket [ 158.857945][ T23] usb 3-1: enqueue for inactive port 0 [ 158.876843][ T5177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.934888][ T3687] vhci_hcd vhci_hcd.1: disconnect device [ 158.946177][ T23] usb 3-1: enqueue for inactive port 0 [ 158.992308][ T3687] vhci_hcd vhci_hcd.1: stop threads [ 159.068761][ T23] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 159.077756][ T3687] vhci_hcd vhci_hcd.1: release socket [ 159.130417][ T3687] vhci_hcd vhci_hcd.1: disconnect device [ 159.184814][ T3687] vhci_hcd vhci_hcd.1: stop threads [ 159.194289][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.245215][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.266257][ T3687] vhci_hcd vhci_hcd.1: release socket [ 159.299591][ T3687] vhci_hcd vhci_hcd.1: disconnect device [ 159.426493][ T5209] loop2: detected capacity change from 0 to 512 [ 159.671158][ T5219] netlink: 'syz.3.344': attribute type 29 has an invalid length. [ 159.681945][ T5219] netlink: 372 bytes leftover after parsing attributes in process `syz.3.344'. [ 159.784291][ T5209] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 159.912427][ T5209] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.342: corrupted in-inode xattr: e_value size too large [ 159.941231][ T5219] loop3: detected capacity change from 0 to 512 [ 160.011258][ T5219] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.037909][ T5209] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.038396][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 160.055268][ C1] EXT4-fs (loop2): initial error at time 1782073434: ext4_iget_extra_inode:5180: inode 15 [ 160.065650][ C1] EXT4-fs (loop2): last error at time 1782073434: ext4_iget_extra_inode:5180: inode 15 [ 160.152120][ T5219] EXT4-fs (loop3): 1 truncate cleaned up [ 160.176830][ T5219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.214690][ T5209] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.342: couldn't read orphan inode 15 (err -117) [ 160.260783][ T5209] loop2: lost filesystem error report for type 5 error -117 [ 160.286768][ T28] audit: type=1400 audit(1782073434.526:613): avc: denied { mounton } for pid=5229 comm="syz.0.350" path=2F38332F8006 dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.358417][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.394271][ T5209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.397501][ T28] audit: type=1400 audit(1782073434.636:614): avc: denied { append } for pid=5251 comm="syz.3.355" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.452039][ T5256] netlink: 'syz.4.358': attribute type 3 has an invalid length. [ 160.516114][ T28] audit: type=1400 audit(1782073434.706:615): avc: denied { write } for pid=5208 comm="syz.2.342" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.560704][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.575124][ T28] audit: type=1400 audit(1782073434.826:616): avc: denied { write } for pid=5263 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.604374][ T5270] loop1: detected capacity change from 0 to 256 [ 160.651404][ T5270] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 160.661120][ T5270] FAT-fs (loop1): Filesystem has been set read-only [ 160.677728][ T5276] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 160.691683][ T5270] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 160.722702][ T5276] netlink: 372 bytes leftover after parsing attributes in process `syz.0.367'. [ 160.732145][ T5282] loop2: detected capacity change from 0 to 512 [ 160.851070][ T5282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.880132][ T5282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.893022][ T5282] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.912347][ T5285] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 160.918950][ T5285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.926568][ T5285] vhci_hcd vhci_hcd.0: Device attached [ 160.935014][ T5285] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 160.941662][ T5285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.949238][ T5285] vhci_hcd vhci_hcd.0: Device attached [ 160.963491][ T5285] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 160.970141][ T5285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.977720][ T5285] vhci_hcd vhci_hcd.0: Device attached [ 160.983727][ T5285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.999639][ T5285] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 161.006308][ T5285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.014048][ T5285] vhci_hcd vhci_hcd.0: Device attached [ 161.152941][ T5306] netlink: 'syz.0.378': attribute type 29 has an invalid length. [ 161.162860][ T5306] netlink: 372 bytes leftover after parsing attributes in process `syz.0.378'. [ 161.188670][ T282] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 161.547540][ T5297] vhci_hcd: connection closed [ 161.547695][ T5289] vhci_hcd: connection reset by peer [ 161.547896][ T5294] vhci_hcd: connection closed [ 161.552492][ T5291] vhci_hcd: connection closed [ 161.562880][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 161.574095][ T3693] vhci_hcd vhci_hcd.4: release socket [ 161.586658][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 161.589182][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.612753][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 161.619885][ T3693] vhci_hcd vhci_hcd.4: release socket [ 161.626974][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 161.654310][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 161.671636][ T3693] vhci_hcd vhci_hcd.4: release socket [ 161.692046][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 161.724618][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 161.745335][ T3693] vhci_hcd vhci_hcd.4: release socket [ 161.767873][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 161.784880][ T28] audit: type=1400 audit(1782073436.026:617): avc: denied { setopt } for pid=5319 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.818671][ T5322] netlink: 'syz.3.384': attribute type 29 has an invalid length. [ 161.852801][ T5322] netlink: 372 bytes leftover after parsing attributes in process `syz.3.384'. [ 161.887905][ T5322] loop3: detected capacity change from 0 to 512 [ 161.921295][ T5322] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.933836][ T5327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 161.950352][ T5322] EXT4-fs (loop3): 1 truncate cleaned up [ 161.957465][ T5322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.977781][ T5325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.382'. [ 162.005226][ T5318] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 162.043556][ T28] audit: type=1400 audit(1782073436.286:618): avc: denied { ioctl } for pid=5333 comm="syz.2.389" path="socket:[9911]" dev="sockfs" ino=9911 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 162.124306][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.144499][ T28] audit: type=1400 audit(1782073436.386:619): avc: denied { bind } for pid=5343 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 162.286728][ T5363] netlink: 'syz.1.404': attribute type 29 has an invalid length. [ 162.337930][ T5363] netlink: 372 bytes leftover after parsing attributes in process `syz.1.404'. [ 162.450835][ T5375] loop1: detected capacity change from 0 to 512 [ 162.490884][ T5375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.525811][ T5375] EXT4-fs (loop1): 1 truncate cleaned up [ 162.532280][ T5375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.571261][ T5361] loop2: detected capacity change from 0 to 512 [ 162.632810][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.697606][ T5361] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 162.781936][ T5361] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.403: corrupted in-inode xattr: e_value size too large [ 162.843811][ T5361] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.846156][ T5361] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.403: couldn't read orphan inode 15 (err -117) [ 162.858187][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 162.858396][ C0] EXT4-fs (loop2): initial error at time 1782073437: ext4_iget_extra_inode:5180: inode 15 [ 162.858856][ C0] EXT4-fs (loop2): last error at time 1782073437: ext4_iget_extra_inode:5180: inode 15 [ 162.905422][ T5391] netlink: 36 bytes leftover after parsing attributes in process `syz.4.407'. [ 162.913247][ T5361] loop2: lost filesystem error report for type 5 error -117 [ 162.960825][ T5378] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 162.971159][ T5361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.008246][ T5399] loop1: detected capacity change from 0 to 128 [ 163.031573][ T5399] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 163.059577][ T5399] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.080514][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.168828][ T5406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.419'. [ 163.189591][ T5406] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 163.198499][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.235854][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 163.235870][ T28] audit: type=1400 audit(1782073437.476:621): avc: denied { append } for pid=5409 comm="syz.1.422" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.269662][ T28] audit: type=1400 audit(1782073437.516:622): avc: denied { ioctl } for pid=5409 comm="syz.1.422" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.336661][ T28] audit: type=1400 audit(1782073437.576:623): avc: denied { mounton } for pid=5416 comm="syz.2.426" path="/84/file0" dev="tmpfs" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 163.440214][ T5430] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 163.477509][ T5430] netlink: 372 bytes leftover after parsing attributes in process `syz.2.428'. [ 163.490976][ T5433] loop1: detected capacity change from 0 to 512 [ 163.508573][ T5433] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 163.527558][ T5439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 163.536804][ T5439] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 163.570135][ T5433] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.427: corrupted in-inode xattr: e_value size too large [ 163.620684][ T5430] loop2: detected capacity change from 0 to 512 [ 163.629256][ T5433] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.629511][ T5433] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.427: couldn't read orphan inode 15 (err -117) [ 163.638779][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 163.638798][ C0] EXT4-fs (loop1): initial error at time 1782073437: ext4_iget_extra_inode:5180: inode 15 [ 163.638842][ C0] EXT4-fs (loop1): last error at time 1782073437: ext4_iget_extra_inode:5180: inode 15 [ 163.689206][ T5430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.701472][ T5433] loop1: lost filesystem error report for type 5 error -117 [ 163.702110][ T5433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.750492][ T28] audit: type=1400 audit(1782073437.986:624): avc: denied { write } for pid=5420 comm="syz.1.427" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.799561][ T5430] EXT4-fs (loop2): 1 truncate cleaned up [ 163.806797][ T28] audit: type=1400 audit(1782073438.046:625): avc: denied { append } for pid=5450 comm="syz.3.437" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.841808][ T5430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.895287][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.923335][ T5455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 163.934207][ T5446] loop4: detected capacity change from 0 to 512 [ 163.943290][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 163.969237][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.051228][ T5446] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 164.071198][ T5446] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.436: corrupted in-inode xattr: e_value size too large [ 164.091398][ T5446] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.097200][ T5446] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.436: couldn't read orphan inode 15 (err -117) [ 164.107190][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 164.107218][ C0] EXT4-fs (loop4): initial error at time 1782073438: ext4_iget_extra_inode:5180: inode 15 [ 164.107328][ C0] EXT4-fs (loop4): last error at time 1782073438: ext4_iget_extra_inode:5180: inode 15 [ 164.123910][ T5468] loop1: detected capacity change from 0 to 512 [ 164.186628][ T5446] loop4: lost filesystem error report for type 5 error -117 [ 164.216619][ T5468] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 164.219436][ T5446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.244909][ T5460] loop3: detected capacity change from 0 to 512 [ 164.282204][ T5468] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.443: corrupted in-inode xattr: e_value size too large [ 164.298447][ T5462] loop2: detected capacity change from 0 to 512 [ 164.310334][ T28] audit: type=1400 audit(1782073438.526:626): avc: denied { write } for pid=5443 comm="syz.4.436" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.336544][ T5468] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.348682][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 164.366775][ C0] EXT4-fs (loop1): initial error at time 1782073438: ext4_iget_extra_inode:5180: inode 15 [ 164.378310][ C0] EXT4-fs (loop1): last error at time 1782073438: ext4_iget_extra_inode:5180: inode 15 [ 164.424870][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.425255][ T5460] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 164.434386][ T5468] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.443: couldn't read orphan inode 15 (err -117) [ 164.482248][ T5460] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.442: corrupted in-inode xattr: e_value size too large [ 164.508686][ T5462] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 164.511412][ T5462] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.441: corrupted in-inode xattr: e_value size too large [ 164.511454][ T5462] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.519583][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 164.519685][ C1] EXT4-fs (loop2): initial error at time 1782073438: ext4_iget_extra_inode:5180: inode 15 [ 164.520273][ C1] EXT4-fs (loop2): last error at time 1782073438: ext4_iget_extra_inode:5180: inode 15 [ 164.526301][ T5462] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.441: couldn't read orphan inode 15 (err -117) [ 164.568668][ T5468] loop1: lost filesystem error report for type 5 error -117 [ 164.581092][ T5462] loop2: lost filesystem error report for type 5 error -117 [ 164.585255][ T5460] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.634805][ T5462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.640459][ T5468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.658382][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 164.658407][ C1] EXT4-fs (loop3): initial error at time 1782073438: ext4_iget_extra_inode:5180: inode 15 [ 164.658461][ C1] EXT4-fs (loop3): last error at time 1782073438: ext4_iget_extra_inode:5180: inode 15 [ 164.687826][ T5460] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.442: couldn't read orphan inode 15 (err -117) [ 164.756580][ T5460] loop3: lost filesystem error report for type 5 error -117 [ 164.765034][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.825557][ T28] audit: type=1400 audit(1782073439.036:627): avc: denied { write } for pid=5466 comm="syz.1.443" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.842654][ T5460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.881783][ T5489] netlink: 'syz.4.451': attribute type 29 has an invalid length. [ 164.936674][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.948707][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.985571][ T5489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.999506][ T5495] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 165.047440][ T5495] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 165.057429][ T5495] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.453: Failed to acquire dquot type 0 [ 165.072950][ T5489] EXT4-fs (loop4): 1 truncate cleaned up [ 165.089626][ T5489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.110523][ T5495] loop2: lost filesystem error report for type 5 error -117 [ 165.112872][ T5495] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, [ 165.120283][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 165.120308][ C0] EXT4-fs (loop2): initial error at time 1782073439: ext4_acquire_dquot:7041 [ 165.120329][ C0] EXT4-fs (loop2): last error at time 1782073439: ext4_acquire_dquot:7041 [ 165.151934][ T5495] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 165.195027][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.219122][ T5495] EXT4-fs (loop2): 1 truncate cleaned up [ 165.226286][ T5495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.293303][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.404739][ T5540] netlink: 'syz.0.473': attribute type 29 has an invalid length. [ 165.426034][ T28] audit: type=1400 audit(1782073439.626:628): avc: denied { ioctl } for pid=5535 comm="syz.2.468" path="socket:[9043]" dev="sockfs" ino=9043 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.569062][ T5555] EXT4-fs (loop4): unable to read superblock [ 165.618161][ T5562] netlink: 'syz.1.483': attribute type 29 has an invalid length. [ 165.673163][ T5562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.696401][ T5562] EXT4-fs (loop1): 1 truncate cleaned up [ 165.706061][ T5562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.770448][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.819830][ T5566] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 165.837196][ T5566] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.484: corrupted in-inode xattr: e_value size too large [ 165.858887][ T5566] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.868418][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 165.876236][ T5576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.885336][ C1] EXT4-fs (loop3): initial error at time 1782073440: ext4_iget_extra_inode:5180: inode 15 [ 165.908639][ C1] EXT4-fs (loop3): last error at time 1782073440: ext4_iget_extra_inode:5180: inode 15 [ 165.981423][ T5566] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.484: couldn't read orphan inode 15 (err -117) [ 165.987451][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.994899][ T5566] loop3: lost filesystem error report for type 5 error -117 [ 166.015302][ T5591] xt_cluster: you have exceeded the maximum number of cluster nodes (9248 > 32) [ 166.062829][ T5587] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.092910][ T5587] EXT4-fs (loop1): 1 truncate cleaned up [ 166.094227][ T5566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.101637][ T5587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.167683][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.207201][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.268660][ T282] usb 9-1: enqueue for inactive port 0 [ 166.288050][ T282] usb 9-1: enqueue for inactive port 0 [ 166.315237][ T5606] tipc: Enabling of bearer rejected, failed to enable media [ 166.345427][ T5609] netlink: 'syz.1.497': attribute type 21 has an invalid length. [ 166.356522][ T5609] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 166.388373][ T282] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 167.098807][ T5617] __nla_validate_parse: 7 callbacks suppressed [ 167.098867][ T5617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.505'. [ 167.134446][ T5621] netlink: 372 bytes leftover after parsing attributes in process `syz.4.507'. [ 167.155514][ T5623] netlink: 372 bytes leftover after parsing attributes in process `syz.3.508'. [ 167.186039][ T5627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.510'. [ 167.206738][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 167.235002][ T5621] set_capacity_and_notify: 7 callbacks suppressed [ 167.235062][ T5621] loop4: detected capacity change from 0 to 512 [ 167.270621][ T5623] loop3: detected capacity change from 0 to 512 [ 167.279928][ T5621] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.311772][ T5623] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.345934][ T5621] EXT4-fs (loop4): 1 truncate cleaned up [ 167.368181][ T5623] EXT4-fs (loop3): 1 truncate cleaned up [ 167.372247][ T5621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.396643][ T5623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.441966][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.445349][ T5642] loop1: detected capacity change from 0 to 512 [ 167.542103][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.599287][ T5642] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 167.624442][ T5642] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.516: corrupted in-inode xattr: e_value size too large [ 167.673227][ T5642] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.678290][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 167.695163][ C0] EXT4-fs (loop1): initial error at time 1782073441: ext4_iget_extra_inode:5180: inode 15 [ 167.705830][ C0] EXT4-fs (loop1): last error at time 1782073441: ext4_iget_extra_inode:5180: inode 15 [ 167.717778][ T5642] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.516: couldn't read orphan inode 15 (err -117) [ 167.738491][ T5642] loop1: lost filesystem error report for type 5 error -117 [ 167.775687][ T5660] netlink: 372 bytes leftover after parsing attributes in process `syz.4.523'. [ 167.788844][ T5642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.971570][ T23] kernel read not supported for file /281/net/ip_vs_stats (pid: 23 comm: kworker/1:0) [ 168.011163][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.075509][ T5681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.097035][ T5681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.466008][ T5689] netlink: 372 bytes leftover after parsing attributes in process `syz.0.536'. [ 169.589032][ T5707] netlink: 'syz.1.544': attribute type 29 has an invalid length. [ 169.599441][ T5706] loop2: detected capacity change from 0 to 1024 [ 169.609357][ T5707] netlink: 372 bytes leftover after parsing attributes in process `syz.1.544'. [ 169.618094][ T5706] EXT4-fs: Ignoring removed bh option [ 169.666564][ T5706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.681368][ T5707] loop1: detected capacity change from 0 to 512 [ 169.705365][ T5707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.734633][ T5707] EXT4-fs (loop1): 1 truncate cleaned up [ 169.743052][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.758808][ T5707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.818441][ T5716] loop2: detected capacity change from 0 to 512 [ 169.839194][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.870823][ T5716] __quota_error: 12 callbacks suppressed [ 169.870883][ T5716] Quota error (device loop2): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 169.889203][ T5716] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 169.904050][ T5723] loop1: detected capacity change from 0 to 512 [ 169.911379][ T5716] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.547: Failed to acquire dquot type 1 [ 169.923119][ T5716] loop2: lost filesystem error report for type 5 error -117 [ 169.927745][ T5716] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.547: bg 0: block 495: padding at end of block bitmap is not set [ 169.935175][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 169.935226][ C1] EXT4-fs (loop2): initial error at time 1782073444: ext4_acquire_dquot:7041 [ 169.935252][ C1] EXT4-fs (loop2): last error at time 1782073444: ext4_acquire_dquot:7041 [ 169.996633][ T5723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 170.017699][ T5716] loop2: lost filesystem error report for type 5 error -117 [ 170.023552][ T5716] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 170.033124][ T5723] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.040060][ T5716] loop2: lost filesystem error report for type 5 error -117 [ 170.097663][ T5716] EXT4-fs (loop2): 1 truncate cleaned up [ 170.114101][ T5734] loop4: detected capacity change from 0 to 512 [ 170.122243][ T5716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.123355][ T28] audit: type=1400 audit(1782073444.366:641): avc: denied { read write } for pid=5722 comm="syz.1.549" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.135773][ T5716] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.178806][ T5734] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.192615][ T28] audit: type=1400 audit(1782073444.366:642): avc: denied { open } for pid=5722 comm="syz.1.549" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.230642][ T5734] EXT4-fs (loop4): 1 truncate cleaned up [ 170.240354][ T5734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.244038][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 170.305352][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.349874][ T28] audit: type=1400 audit(1782073444.596:643): avc: denied { setopt } for pid=5748 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 170.367890][ T5747] loop1: detected capacity change from 0 to 512 [ 170.418867][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.437546][ T28] audit: type=1400 audit(1782073444.676:644): avc: denied { connect } for pid=5757 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.443974][ T5747] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 170.475186][ T5747] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.559: corrupted in-inode xattr: e_value size too large [ 170.490921][ T5762] loop4: detected capacity change from 0 to 1024 [ 170.511274][ T5747] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 170.513452][ T5762] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 170.522706][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 170.522734][ C1] EXT4-fs (loop1): initial error at time 1782073444: ext4_iget_extra_inode:5180: inode 15 [ 170.522773][ C1] EXT4-fs (loop1): last error at time 1782073444: ext4_iget_extra_inode:5180: inode 15 [ 170.560986][ T5747] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.559: couldn't read orphan inode 15 (err -117) [ 170.574843][ T5747] loop1: lost filesystem error report for type 5 error -117 [ 170.577612][ T5762] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.564: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.616170][ T5762] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.618538][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 170.636910][ C1] EXT4-fs (loop4): initial error at time 1782073444: ext4_map_blocks:791: inode 3: block 2 [ 170.648642][ C1] EXT4-fs (loop4): last error at time 1782073444: ext4_map_blocks:791: inode 3: block 2 [ 170.661468][ T5762] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 170.669711][ T5762] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.564: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.675344][ T5747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.684611][ T5762] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.698117][ T5762] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 170.719151][ T5762] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.564: Failed to acquire dquot type 0 [ 170.723040][ T28] audit: type=1400 audit(1782073444.966:645): avc: denied { getopt } for pid=5767 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.731414][ T5762] loop4: lost filesystem error report for type 5 error -117 [ 170.751450][ T5762] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 170.768625][ T5762] loop4: lost filesystem error report for type 5 error -117 [ 170.769946][ T5762] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.564: mark_inode_dirty error [ 170.793262][ T5762] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.796245][ T5762] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 170.815717][ T28] audit: type=1400 audit(1782073445.056:646): avc: denied { write } for pid=5746 comm="syz.1.559" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.838638][ T5762] EXT4-fs (loop4): 1 orphan inode deleted [ 170.849498][ T5762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.861862][ T3693] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 170.886558][ T3693] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:14: Failed to release dquot type 0 [ 170.900949][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.911301][ T5774] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.935535][ T5774] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.976475][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.991663][ T3301] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 171.007328][ T3301] loop4: lost filesystem error report for type 5 error -117 [ 171.022866][ T3301] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 171.039815][ T3301] loop4: lost filesystem error report for type 5 error -117 [ 171.040032][ T3301] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 171.059544][ T3301] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 171.060213][ T3295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.166620][ T5799] bridge0: port 3(netdevsim1) entered blocking state [ 171.179373][ T5799] bridge0: port 3(netdevsim1) entered disabled state [ 171.210116][ T5799] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 171.232462][ T5799] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 171.240399][ T5799] bridge0: port 3(netdevsim1) entered blocking state [ 171.247256][ T5799] bridge0: port 3(netdevsim1) entered forwarding state [ 171.349206][ T5812] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 171.362570][ T5812] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.584: corrupted in-inode xattr: e_value size too large [ 171.390438][ T5812] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.398402][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 171.410055][ T5812] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.584: couldn't read orphan inode 15 (err -117) [ 171.415281][ C1] EXT4-fs (loop2): initial error at time 1782073445: ext4_iget_extra_inode:5180: inode 15 [ 171.415310][ C1] EXT4-fs (loop2): last error at time 1782073445: ext4_iget_extra_inode:5180: inode 15 [ 171.463347][ T5800] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 171.468395][ T5812] loop2: lost filesystem error report for type 5 error -117 [ 171.485249][ T5812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.517174][ T5800] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.582: corrupted in-inode xattr: e_value size too large [ 171.534002][ T5800] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.535909][ T5800] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.582: couldn't read orphan inode 15 (err -117) [ 171.545789][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 171.545893][ C0] EXT4-fs (loop1): initial error at time 1782073445: ext4_iget_extra_inode:5180: inode 15 [ 171.546259][ C0] EXT4-fs (loop1): last error at time 1782073445: ext4_iget_extra_inode:5180: inode 15 [ 171.570592][ T5823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.570673][ T5823] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.637386][ T5800] loop1: lost filesystem error report for type 5 error -117 [ 171.652841][ T5800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.653182][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.735706][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'. [ 171.822383][ T5844] 9p: Bad value for 'rfdno' [ 171.875312][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.018694][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 172.311830][ T5872] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 172.318470][ T5872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.326199][ T5872] vhci_hcd vhci_hcd.0: Device attached [ 172.363159][ T5872] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 172.369884][ T5872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.377527][ T5872] vhci_hcd vhci_hcd.0: Device attached [ 172.384272][ T5872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 172.395943][ T5872] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 172.402590][ T5872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.411533][ T5872] vhci_hcd vhci_hcd.0: Device attached [ 172.468461][ T5875] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 172.475163][ T5875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.482761][ T5875] vhci_hcd vhci_hcd.0: Device attached [ 172.579529][ T3396] usb 3-1: new low-speed USB device number 4 using vhci_hcd [ 172.779682][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.911414][ T5876] vhci_hcd: connection closed [ 172.911841][ T4819] vhci_hcd vhci_hcd.1: stop threads [ 172.922340][ T5874] vhci_hcd: connection reset by peer [ 172.927734][ T5879] vhci_hcd: connection closed [ 172.928007][ T5881] vhci_hcd: connection closed [ 172.949062][ T4819] vhci_hcd vhci_hcd.1: release socket [ 173.045636][ T4819] vhci_hcd vhci_hcd.1: disconnect device [ 173.097567][ T4819] vhci_hcd vhci_hcd.1: stop threads [ 173.165492][ T4819] vhci_hcd vhci_hcd.1: release socket [ 173.254872][ T4819] vhci_hcd vhci_hcd.1: disconnect device [ 173.280509][ T4819] vhci_hcd vhci_hcd.1: stop threads [ 173.304303][ T4819] vhci_hcd vhci_hcd.1: release socket [ 173.310093][ T4819] vhci_hcd vhci_hcd.1: disconnect device [ 173.316254][ T4819] vhci_hcd vhci_hcd.1: stop threads [ 173.322736][ T4819] vhci_hcd vhci_hcd.1: release socket [ 173.328666][ T4819] vhci_hcd vhci_hcd.1: disconnect device [ 173.450285][ T5904] netlink: 'syz.4.621': attribute type 21 has an invalid length. [ 173.483420][ T5904] __nla_validate_parse: 1 callbacks suppressed [ 173.483525][ T5904] netlink: 156 bytes leftover after parsing attributes in process `syz.4.621'. [ 173.910553][ T5908] set_capacity_and_notify: 5 callbacks suppressed [ 173.910675][ T5908] loop4: detected capacity change from 0 to 512 [ 174.029729][ T5923] xt_hashlimit: size too large, truncated to 1048576 [ 174.091441][ T5908] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 174.133020][ T5908] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.623: corrupted in-inode xattr: e_value size too large [ 174.159643][ T5928] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 174.161113][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 174.199066][ T5932] usb usb5: usbfs: process 5932 (syz.2.632) did not claim interface 0 before use [ 174.210414][ T5908] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.218280][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 174.234585][ C1] EXT4-fs (loop4): initial error at time 1782073448: ext4_iget_extra_inode:5180: inode 15 [ 174.246130][ C1] EXT4-fs (loop4): last error at time 1782073448: ext4_iget_extra_inode:5180: inode 15 [ 174.260520][ T5928] netlink: 372 bytes leftover after parsing attributes in process `syz.1.631'. [ 174.316796][ T5908] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.623: couldn't read orphan inode 15 (err -117) [ 174.331196][ T5937] netlink: 'syz.0.634': attribute type 29 has an invalid length. [ 174.355755][ T5908] loop4: lost filesystem error report for type 5 error -117 [ 174.364924][ T5937] netlink: 372 bytes leftover after parsing attributes in process `syz.0.634'. [ 174.385487][ T5928] loop1: detected capacity change from 0 to 512 [ 174.396535][ T5939] loop2: detected capacity change from 0 to 512 [ 174.432090][ T5928] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 174.455114][ T5908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.502923][ T5928] EXT4-fs (loop1): 1 truncate cleaned up [ 174.512564][ T5928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.586682][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.595613][ T5939] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 174.611311][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.637846][ T5939] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.635: corrupted in-inode xattr: e_value size too large [ 174.661257][ T5956] loop4: detected capacity change from 0 to 512 [ 174.691711][ T5939] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.693910][ T5939] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.635: couldn't read orphan inode 15 (err -117) [ 174.703691][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 174.703750][ C0] EXT4-fs (loop2): initial error at time 1782073448: ext4_iget_extra_inode:5180: inode 15 [ 174.705240][ C0] EXT4-fs (loop2): last error at time 1782073448: ext4_iget_extra_inode:5180: inode 15 [ 174.738447][ T5956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.769334][ T5939] loop2: lost filesystem error report for type 5 error -117 [ 174.785354][ T5956] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.859042][ T5939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.890386][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.902942][ T5972] loop3: detected capacity change from 0 to 512 [ 174.932819][ T5972] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.010585][ T5972] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.645: Allocating blocks 41-42 which overlap fs metadata [ 175.024548][ T5967] loop1: detected capacity change from 0 to 512 [ 175.029324][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 175.029398][ T28] audit: type=1400 audit(1782073449.266:667): avc: denied { write } for pid=5938 comm="syz.2.635" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.039132][ T5972] loop3: lost filesystem error report for type 5 error -117 [ 175.068279][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 175.082133][ C1] EXT4-fs (loop3): initial error at time 1782073449: ext4_mb_mark_diskspace_used:4222 [ 175.091746][ C1] EXT4-fs (loop3): last error at time 1782073449: ext4_mb_mark_diskspace_used:4222 [ 175.102363][ T5972] Quota error (device loop3): write_blk: dquota write failed [ 175.125713][ T5972] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 175.136507][ T5972] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 175.138425][ T5967] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 175.153263][ T5972] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.645: Failed to acquire dquot type 1 [ 175.153298][ T5972] loop3: lost filesystem error report for type 5 error -117 [ 175.160499][ T5972] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 175.186144][ T5967] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.644: corrupted in-inode xattr: e_value size too large [ 175.196188][ T5972] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #12: comm syz.3.645: corrupted inode contents [ 175.196223][ T5972] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 175.197316][ T5972] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #12: comm syz.3.645: mark_inode_dirty error [ 175.197369][ T5972] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 175.201801][ T5972] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #12: comm syz.3.645: corrupted inode contents [ 175.253207][ T5967] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.253762][ T5967] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.644: couldn't read orphan inode 15 (err -117) [ 175.265476][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 175.265566][ C0] EXT4-fs (loop1): initial error at time 1782073449: ext4_iget_extra_inode:5180: inode 15 [ 175.265776][ C0] EXT4-fs (loop1): last error at time 1782073449: ext4_iget_extra_inode:5180: inode 15 [ 175.276999][ T5972] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 175.287277][ T5972] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.645: mark_inode_dirty error [ 175.336668][ T5972] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 175.337214][ T5967] loop1: lost filesystem error report for type 5 error -117 [ 175.354863][ T5972] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #12: comm syz.3.645: corrupted inode contents [ 175.383058][ T5967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.402134][ T5972] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 175.419720][ T5972] loop3: lost filesystem error report for type 5 error -117 [ 175.419955][ T5972] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #12: comm syz.3.645: corrupted inode contents [ 175.451034][ T5972] EXT4-fs error (device loop3): ext4_truncate:4691: inode #12: comm syz.3.645: mark_inode_dirty error [ 175.462788][ T28] audit: type=1400 audit(1782073449.696:668): avc: denied { write } for pid=5966 comm="syz.1.644" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.488691][ T5972] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 175.499210][ T5972] EXT4-fs (loop3): 1 truncate cleaned up [ 175.505459][ T5972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.532711][ T28] audit: type=1400 audit(1782073449.776:669): avc: denied { write } for pid=5971 comm="syz.3.645" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.821475][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.833121][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.843563][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.852959][ T3687] Quota error (device loop3): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 175.874129][ T3687] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 1 [ 175.894189][ T28] audit: type=1400 audit(1782073450.136:670): avc: denied { connect } for pid=5983 comm="syz.2.648" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.916405][ T5982] netlink: 'syz.4.651': attribute type 29 has an invalid length. [ 175.940558][ T5982] netlink: 372 bytes leftover after parsing attributes in process `syz.4.651'. [ 176.082595][ T5998] loop3: detected capacity change from 0 to 512 [ 176.097871][ T6000] capability: warning: `syz.2.655' uses 32-bit capabilities (legacy support in use) [ 176.129993][ T5998] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 176.168579][ T5998] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.650: corrupted in-inode xattr: e_value size too large [ 176.220799][ T5998] fserror_report: 3 callbacks suppressed [ 176.220877][ T5998] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.229557][ T5998] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.650: couldn't read orphan inode 15 (err -117) [ 176.238768][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 176.238788][ C0] EXT4-fs (loop3): initial error at time 1782073450: ext4_iget_extra_inode:5180: inode 15 [ 176.238814][ C0] EXT4-fs (loop3): last error at time 1782073450: ext4_iget_extra_inode:5180: inode 15 [ 176.277328][ T5998] fserror_report: 2 callbacks suppressed [ 176.277342][ T5998] loop3: lost filesystem error report for type 5 error -117 [ 176.285236][ T5998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.288893][ T6005] loop4: detected capacity change from 0 to 4096 [ 176.316261][ T6010] loop2: detected capacity change from 0 to 1024 [ 176.328753][ T6010] EXT4-fs: inline encryption not supported [ 176.348659][ T6010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.370749][ T6005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.403836][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.416431][ T6010] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 176.435021][ T6010] System zones: 0-1, 3-36 [ 176.441824][ T28] audit: type=1400 audit(1782073450.686:671): avc: denied { write } for pid=6004 comm="syz.4.657" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.445527][ T6005] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.657: corrupted inode contents [ 176.489291][ T28] audit: type=1400 audit(1782073450.686:672): avc: denied { read write } for pid=6004 comm="syz.4.657" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.493825][ T6019] loop3: detected capacity change from 0 to 128 [ 176.522116][ T6010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.541327][ T6005] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.657: mark_inode_dirty error [ 176.581849][ T6005] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.657: corrupted inode contents [ 176.632818][ T6022] Attempt to read inode for relocated directory [ 176.645775][ T6013] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 176.648717][ T6005] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.657: mark_inode_dirty error [ 176.675103][ T6005] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.657: corrupted inode contents [ 176.692923][ T6013] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.660: corrupted in-inode xattr: e_value size too large [ 176.721447][ T6013] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.722988][ T6005] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.657: mark_inode_dirty error [ 176.723387][ T6013] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.660: couldn't read orphan inode 15 (err -117) [ 176.732422][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 176.732479][ C1] EXT4-fs (loop1): initial error at time 1782073450: ext4_iget_extra_inode:5180: inode 15 [ 176.733039][ C1] EXT4-fs (loop1): last error at time 1782073450: ext4_iget_extra_inode:5180: inode 15 [ 176.753945][ T6025] netlink: 'syz.3.663': attribute type 29 has an invalid length. [ 176.763562][ T6013] loop1: lost filesystem error report for type 5 error -117 [ 176.793886][ T6005] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.657: corrupted inode contents [ 176.795780][ T6005] EXT4-fs error (device loop4): ext4_truncate:4691: inode #15: comm syz.4.657: mark_inode_dirty error [ 176.833437][ T6005] EXT4-fs error (device loop4) in ext4_setattr:6172: Corrupt filesystem [ 176.844617][ T6020] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.657: corrupted inode contents [ 176.857792][ T6025] netlink: 372 bytes leftover after parsing attributes in process `syz.3.663'. [ 176.967779][ T6037] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.992291][ T6025] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.021003][ T6025] EXT4-fs (loop3): 1 truncate cleaned up [ 177.027538][ T6037] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.056460][ T6042] Illegal XDP return value 4294967274 on prog (id 106) dev N/A, expect packet loss! [ 177.071180][ T6044] netlink: 'syz.0.672': attribute type 29 has an invalid length. [ 177.121101][ T6044] netlink: 372 bytes leftover after parsing attributes in process `syz.0.672'. [ 177.244387][ T6055] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.270078][ T6055] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.677: corrupted inode contents [ 177.285647][ T6063] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.287873][ T6055] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #2: comm syz.2.677: mark_inode_dirty error [ 177.316473][ T6063] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 177.324920][ T6069] vlan2: entered promiscuous mode [ 177.326072][ T6055] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.677: corrupted inode contents [ 177.342447][ T6069] bond_slave_1: entered promiscuous mode [ 177.342712][ T6055] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.677: mark_inode_dirty error [ 177.349585][ T6063] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 177.375825][ T6063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 177.410379][ T6063] System zones: 0-2, 18-18, 34-35 [ 177.613900][ T6088] syz.2.688: attempt to access beyond end of device [ 177.613900][ T6088] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.628397][ T3396] usb 3-1: enqueue for inactive port 0 [ 177.643252][ T6088] Buffer I/O error on dev loop2, logical block 57847, async page read [ 177.645661][ T3396] usb 3-1: enqueue for inactive port 0 [ 177.666460][ T6088] syz.2.688: attempt to access beyond end of device [ 177.666460][ T6088] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.703568][ T6088] Buffer I/O error on dev loop2, logical block 57847, async page read [ 177.735464][ T6088] syz.2.688: attempt to access beyond end of device [ 177.735464][ T6088] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 177.738962][ T3396] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 177.760170][ T6088] Buffer I/O error on dev loop2, logical block 57847, async page read [ 177.997337][ T6110] EXT4-fs: Ignoring removed nobh option [ 178.021130][ T6110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.033920][ T6110] EXT4-fs (loop1): 1 truncate cleaned up [ 178.070712][ T6115] netlink: 88 bytes leftover after parsing attributes in process `syz.3.702'. [ 178.133128][ T6123] netlink: 87 bytes leftover after parsing attributes in process `syz.2.704'. [ 178.368119][ T6138] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 178.419390][ T6127] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 178.445302][ T6127] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.708: corrupted in-inode xattr: e_value size too large [ 178.452727][ T6141] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.471618][ T6138] netlink: 372 bytes leftover after parsing attributes in process `syz.2.712'. [ 178.482103][ T6127] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.488464][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 178.505965][ C1] EXT4-fs (loop1): initial error at time 1782073452: ext4_iget_extra_inode:5180: inode 15 [ 178.518355][ C1] EXT4-fs (loop1): last error at time 1782073452: ext4_iget_extra_inode:5180: inode 15 [ 178.525563][ T6127] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.708: couldn't read orphan inode 15 (err -117) [ 178.554126][ T6127] loop1: lost filesystem error report for type 5 error -117 [ 178.619627][ T6150] syz.3.716: attempt to access beyond end of device [ 178.619627][ T6150] loop3: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 178.707223][ T6152] netlink: 'syz.1.717': attribute type 29 has an invalid length. [ 178.732049][ T6152] netlink: 372 bytes leftover after parsing attributes in process `syz.1.717'. [ 178.798625][ T6152] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.820824][ T6152] EXT4-fs (loop1): 1 truncate cleaned up [ 178.949574][ T6167] set_capacity_and_notify: 15 callbacks suppressed [ 178.949682][ T6167] loop3: detected capacity change from 0 to 1024 [ 178.986622][ T6167] EXT4-fs: Ignoring removed bh option [ 179.046872][ T6167] EXT4-fs error (device loop3): empty_inline_dir:1778: inode #12: block 7: comm syz.3.722: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 179.066986][ T6167] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 179.088570][ T6160] loop2: detected capacity change from 0 to 512 [ 179.106538][ T6173] netlink: 'syz.0.724': attribute type 29 has an invalid length. [ 179.126129][ T6173] netlink: 372 bytes leftover after parsing attributes in process `syz.0.724'. [ 179.211066][ T6179] loop3: detected capacity change from 0 to 512 [ 179.256187][ T6179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 179.286770][ T6179] System zones: 1-12 [ 179.290480][ T6160] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 179.299874][ T6179] EXT4-fs (loop3): 1 truncate cleaned up [ 179.314210][ T6179] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full [ 179.324388][ T6160] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.721: corrupted in-inode xattr: e_value size too large [ 179.346891][ T6160] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.357352][ T6160] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.721: couldn't read orphan inode 15 (err -117) [ 179.367565][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 179.367723][ C0] EXT4-fs (loop2): initial error at time 1782073453: ext4_iget_extra_inode:5180: inode 15 [ 179.368831][ C0] EXT4-fs (loop2): last error at time 1782073453: ext4_iget_extra_inode:5180: inode 15 [ 179.421376][ T6187] netlink: 'syz.0.730': attribute type 29 has an invalid length. [ 179.448122][ T6189] loop3: detected capacity change from 0 to 8192 [ 179.448878][ T6160] loop2: lost filesystem error report for type 5 error -117 [ 179.465825][ T6187] netlink: 372 bytes leftover after parsing attributes in process `syz.0.730'. [ 179.497529][ T6189] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.528158][ T6191] loop4: detected capacity change from 0 to 512 [ 179.570786][ T6191] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.654606][ T6200] loop3: detected capacity change from 0 to 512 [ 179.662815][ T6200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.716608][ T6200] EXT4-fs (loop3): 1 truncate cleaned up [ 179.865742][ T6219] loop1: detected capacity change from 0 to 256 [ 179.922576][ T6200] EXT4-fs: Ignoring sb option on remount [ 179.922609][ T6200] EXT4-fs: inline encryption not supported [ 179.922638][ T6200] EXT4-fs: test_dummy_encryption option not supported [ 179.936648][ T6219] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 179.941336][ T6219] syz.1.745: attempt to access beyond end of device [ 179.941336][ T6219] loop1: rw=2049, sector=256, nr_sectors = 96 limit=256 [ 179.961101][ T6225] loop2: detected capacity change from 0 to 1024 [ 179.973927][ T6225] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 180.018875][ T6225] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 180.052304][ T6225] JBD2: no valid journal superblock found [ 180.052350][ T6225] EXT4-fs (loop2): Could not load journal inode [ 180.130397][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'. [ 180.137759][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 180.137840][ T28] audit: type=1400 audit(1782073454.376:696): avc: denied { setopt } for pid=6238 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 180.201921][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.202067][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.220898][ T6246] netlink: 'syz.3.758': attribute type 29 has an invalid length. [ 180.221367][ T6246] netlink: 372 bytes leftover after parsing attributes in process `syz.3.758'. [ 180.284258][ T28] audit: type=1400 audit(1782073454.526:697): avc: denied { connect } for pid=6250 comm="syz.3.760" lport=45056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.517466][ T6281] xt_hashlimit: size too large, truncated to 1048576 [ 180.640872][ T6268] loop4: detected capacity change from 0 to 512 [ 180.641053][ T6287] netlink: 104 bytes leftover after parsing attributes in process `syz.3.775'. [ 180.714147][ T6268] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 180.733317][ T6268] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.769: corrupted in-inode xattr: e_value size too large [ 180.755521][ T6268] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.758861][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 180.777067][ C1] EXT4-fs (loop4): initial error at time 1782073454: ext4_iget_extra_inode:5180: inode 15 [ 180.789590][ C1] EXT4-fs (loop4): last error at time 1782073454: ext4_iget_extra_inode:5180: inode 15 [ 180.805671][ T6268] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.769: couldn't read orphan inode 15 (err -117) [ 180.819149][ T6268] loop4: lost filesystem error report for type 5 error -117 [ 180.838599][ T6294] loop2: detected capacity change from 0 to 256 [ 180.857294][ T6292] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.888142][ T28] audit: type=1400 audit(1782073455.126:698): avc: denied { write } for pid=6267 comm="syz.4.769" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.915022][ T6292] EXT4-fs (loop3): 1 truncate cleaned up [ 180.939133][ T28] audit: type=1400 audit(1782073455.186:699): avc: denied { write } for pid=6291 comm="syz.3.777" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.309586][ T6330] netlink: 'syz.2.794': attribute type 10 has an invalid length. [ 181.335007][ T6330] team0: Port device dummy0 added [ 181.355359][ T6330] netlink: 'syz.2.794': attribute type 10 has an invalid length. [ 181.382502][ T6330] team0: Port device dummy0 removed [ 181.399452][ T6330] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 181.402494][ T6305] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 181.440694][ T6305] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.783: corrupted in-inode xattr: e_value size too large [ 181.480670][ T6305] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.493961][ T6305] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.783: couldn't read orphan inode 15 (err -117) [ 181.503872][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 181.503912][ C1] EXT4-fs (loop3): initial error at time 1782073455: ext4_iget_extra_inode:5180: inode 15 [ 181.505245][ C1] EXT4-fs (loop3): last error at time 1782073455: ext4_iget_extra_inode:5180: inode 15 [ 181.575613][ T6305] loop3: lost filesystem error report for type 5 error -117 [ 181.604256][ T28] audit: type=1400 audit(1782073455.846:700): avc: denied { write } for pid=6304 comm="syz.3.783" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.732176][ T6348] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 181.740125][ T6348] netlink: 'syz.0.802': attribute type 2 has an invalid length. [ 181.768425][ T6346] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 181.775048][ T6346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.782675][ T6346] vhci_hcd vhci_hcd.0: Device attached [ 181.790534][ T6346] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 181.797180][ T6346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.805065][ T6346] vhci_hcd vhci_hcd.0: Device attached [ 181.811548][ T6346] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 181.818193][ T6346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.825751][ T6346] vhci_hcd vhci_hcd.0: Device attached [ 181.831840][ T6346] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 181.843250][ T6346] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 181.849901][ T6346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.857486][ T6346] vhci_hcd vhci_hcd.0: Device attached [ 181.904295][ T6368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.808'. [ 181.919140][ T6368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.808'. [ 181.991253][ T6377] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.018700][ T28] audit: type=1400 audit(1782073456.256:701): avc: denied { read } for pid=6381 comm="syz.0.813" path="socket:[13316]" dev="sockfs" ino=13316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.048560][ T282] usb 9-1: new low-speed USB device number 3 using vhci_hcd [ 182.096015][ T6370] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 182.143628][ T6370] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.810: corrupted in-inode xattr: e_value size too large [ 182.167278][ T6370] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.168331][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 182.185458][ C0] EXT4-fs (loop2): initial error at time 1782073456: ext4_iget_extra_inode:5180: inode 15 [ 182.197166][ C0] EXT4-fs (loop2): last error at time 1782073456: ext4_iget_extra_inode:5180: inode 15 [ 182.201847][ T6384] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 182.232278][ T6384] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.814: corrupted in-inode xattr: e_value size too large [ 182.248520][ T6384] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.252171][ T6370] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.810: couldn't read orphan inode 15 (err -117) [ 182.262675][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 182.262704][ C1] EXT4-fs (loop3): initial error at time 1782073456: ext4_iget_extra_inode:5180: inode 15 [ 182.263662][ C1] EXT4-fs (loop3): last error at time 1782073456: ext4_iget_extra_inode:5180: inode 15 [ 182.278733][ T6384] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.814: couldn't read orphan inode 15 (err -117) [ 182.286295][ T6370] loop2: lost filesystem error report for type 5 error -117 [ 182.333106][ T6384] loop3: lost filesystem error report for type 5 error -117 [ 182.380718][ T6393] netlink: 'syz.1.816': attribute type 29 has an invalid length. [ 182.401910][ T6393] netlink: 372 bytes leftover after parsing attributes in process `syz.1.816'. [ 182.416178][ T6353] vhci_hcd: connection reset by peer [ 182.416703][ T6357] vhci_hcd: connection closed [ 182.421936][ T6360] vhci_hcd: connection closed [ 182.424770][ T6355] vhci_hcd: connection closed [ 182.431503][ T4819] vhci_hcd vhci_hcd.4: stop threads [ 182.441637][ T4819] vhci_hcd vhci_hcd.4: release socket [ 182.450275][ T4819] vhci_hcd vhci_hcd.4: disconnect device [ 182.467670][ T28] audit: type=1400 audit(1782073456.696:702): avc: denied { write } for pid=6383 comm="syz.3.814" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.491383][ T4819] vhci_hcd vhci_hcd.4: stop threads [ 182.496708][ T4819] vhci_hcd vhci_hcd.4: release socket [ 182.506643][ T4819] vhci_hcd vhci_hcd.4: disconnect device [ 182.525724][ T4819] vhci_hcd vhci_hcd.4: stop threads [ 182.534549][ T4819] vhci_hcd vhci_hcd.4: release socket [ 182.544605][ T4819] vhci_hcd vhci_hcd.4: disconnect device [ 182.552796][ T4819] vhci_hcd vhci_hcd.4: stop threads [ 182.558577][ T4819] vhci_hcd vhci_hcd.4: release socket [ 182.577579][ T4819] vhci_hcd vhci_hcd.4: disconnect device [ 182.590859][ T28] audit: type=1400 audit(1782073456.836:703): avc: denied { getopt } for pid=6398 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 182.619500][ T28] audit: type=1400 audit(1782073456.856:704): avc: denied { write } for pid=6400 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.652074][ T6403] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.821: invalid indirect mapped block 256 (level 2) [ 182.680757][ T6403] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 182.681720][ T6403] EXT4-fs (loop2): 2 truncates cleaned up [ 182.690965][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 182.690989][ C0] EXT4-fs (loop2): initial error at time 1782073456: ext4_free_branches:1023: inode 11 [ 182.691015][ C0] EXT4-fs (loop2): last error at time 1782073456: ext4_free_branches:1023: inode 11 [ 182.836477][ T28] audit: type=1400 audit(1782073457.076:705): avc: denied { connect } for pid=6421 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 183.387396][ T6465] netlink: 'syz.3.849': attribute type 29 has an invalid length. [ 183.398109][ T6465] netlink: 372 bytes leftover after parsing attributes in process `syz.3.849'. [ 183.460471][ T6465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.484328][ T6465] EXT4-fs (loop3): 1 truncate cleaned up [ 183.641037][ T6484] EXT4-fs: Ignoring removed oldalloc option [ 183.658814][ T6484] EXT4-fs: Ignoring removed oldalloc option [ 183.665642][ T6484] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 183.705345][ T6484] EXT4-fs (loop3): shut down requested (1) [ 183.721399][ T6479] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 183.735285][ T6479] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.855: corrupted in-inode xattr: e_value size too large [ 183.750442][ T6479] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 183.753982][ T6479] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.855: couldn't read orphan inode 15 (err -117) [ 183.766727][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 183.767294][ C0] EXT4-fs (loop4): initial error at time 1782073457: ext4_iget_extra_inode:5180: inode 15 [ 183.769863][ C0] EXT4-fs (loop4): last error at time 1782073457: ext4_iget_extra_inode:5180: inode 15 [ 183.821376][ T6479] loop4: lost filesystem error report for type 5 error -117 [ 183.964037][ T6489] set_capacity_and_notify: 9 callbacks suppressed [ 183.964250][ T6489] loop3: detected capacity change from 0 to 512 [ 184.058754][ T6489] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 184.071997][ T6489] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.857: corrupted in-inode xattr: e_value size too large [ 184.090090][ T6489] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.095016][ T6489] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.857: couldn't read orphan inode 15 (err -117) [ 184.105406][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 184.105794][ C1] EXT4-fs (loop3): initial error at time 1782073458: ext4_iget_extra_inode:5180: inode 15 [ 184.105964][ C1] EXT4-fs (loop3): last error at time 1782073458: ext4_iget_extra_inode:5180: inode 15 [ 184.149317][ T6489] loop3: lost filesystem error report for type 5 error -117 [ 184.172509][ T6505] loop2: detected capacity change from 0 to 512 [ 184.190060][ T6505] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 184.217737][ T6505] EXT4-fs (loop2): 1 truncate cleaned up [ 184.241157][ T6508] netlink: 'syz.4.864': attribute type 29 has an invalid length. [ 184.302513][ T6508] __nla_validate_parse: 2 callbacks suppressed [ 184.302587][ T6508] netlink: 372 bytes leftover after parsing attributes in process `syz.4.864'. [ 184.367603][ T6508] loop4: detected capacity change from 0 to 512 [ 184.402179][ T6508] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.435726][ T6508] EXT4-fs (loop4): 1 truncate cleaned up [ 184.538163][ T6521] netlink: 'syz.0.869': attribute type 29 has an invalid length. [ 184.561730][ T6526] netlink: 'syz.2.872': attribute type 29 has an invalid length. [ 184.572136][ T6526] netlink: 372 bytes leftover after parsing attributes in process `syz.2.872'. [ 184.586195][ T6521] netlink: 372 bytes leftover after parsing attributes in process `syz.0.869'. [ 184.752614][ T6544] veth0_macvtap: Caught tx_queue_len zero misconfig [ 184.821363][ T6550] netlink: 'syz.0.882': attribute type 29 has an invalid length. [ 184.836788][ T6550] netlink: 372 bytes leftover after parsing attributes in process `syz.0.882'. [ 184.939048][ T6555] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 184.945646][ T6555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.953395][ T6555] vhci_hcd vhci_hcd.0: Device attached [ 184.960076][ T6555] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 184.966737][ T6555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.974310][ T6555] vhci_hcd vhci_hcd.0: Device attached [ 185.030108][ T6555] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 185.036778][ T6555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.044452][ T6555] vhci_hcd vhci_hcd.0: Device attached [ 185.050722][ T6555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 185.059836][ T6555] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 185.066562][ T6555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.074230][ T6555] vhci_hcd vhci_hcd.0: Device attached [ 185.093724][ T6568] loop2: detected capacity change from 0 to 256 [ 185.115350][ T6568] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.154214][ T6568] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 185.167063][ T6533] loop3: detected capacity change from 0 to 512 [ 185.179183][ T6572] netlink: 372 bytes leftover after parsing attributes in process `syz.0.888'. [ 185.189030][ T6568] FAT-fs (loop2): Filesystem has been set read-only [ 185.236654][ T6533] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 185.257370][ T6533] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.876: corrupted in-inode xattr: e_value size too large [ 185.288026][ T6533] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.292121][ T6533] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.876: couldn't read orphan inode 15 (err -117) [ 185.302261][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 185.302311][ C1] EXT4-fs (loop3): initial error at time 1782073459: ext4_iget_extra_inode:5180: inode 15 [ 185.302558][ C1] EXT4-fs (loop3): last error at time 1782073459: ext4_iget_extra_inode:5180: inode 15 [ 185.527158][ T6556] vhci_hcd: connection closed [ 185.527484][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 185.537918][ T6559] vhci_hcd: connection closed [ 185.538124][ T6561] vhci_hcd: connection closed [ 185.543057][ T6566] vhci_hcd: connection closed [ 185.548084][ T3693] vhci_hcd vhci_hcd.4: release socket [ 185.570062][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 185.578958][ T6533] loop3: lost filesystem error report for type 5 error -117 [ 185.582682][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 185.613577][ T6581] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 185.620250][ T6581] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.627913][ T6581] vhci_hcd vhci_hcd.0: Device attached [ 185.635082][ T6581] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 185.641727][ T6581] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.649428][ T6581] vhci_hcd vhci_hcd.0: Device attached [ 185.656287][ T6581] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 185.662949][ T6581] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.670557][ T6581] vhci_hcd vhci_hcd.0: Device attached [ 185.676650][ T6581] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 185.685695][ T6581] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 185.692348][ T6581] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.700010][ T6581] vhci_hcd vhci_hcd.0: Device attached [ 185.720025][ T3693] vhci_hcd vhci_hcd.4: release socket [ 185.737096][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 185.749280][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 185.749298][ T28] audit: type=1400 audit(1782073459.996:715): avc: denied { write } for pid=6532 comm="syz.3.876" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.792534][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 185.804045][ T3693] vhci_hcd vhci_hcd.4: release socket [ 185.819269][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 185.857090][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 185.875985][ T3693] vhci_hcd vhci_hcd.4: release socket [ 185.888137][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 185.967364][ T6595] loop1: detected capacity change from 0 to 128 [ 186.226700][ T6582] vhci_hcd: connection closed [ 186.226997][ T6584] vhci_hcd: connection closed [ 186.231833][ T6586] vhci_hcd: connection closed [ 186.236941][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 186.247711][ T6588] vhci_hcd: connection closed [ 186.247941][ T3693] vhci_hcd vhci_hcd.2: release socket [ 186.266267][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 186.280658][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 186.292006][ T3693] vhci_hcd vhci_hcd.2: release socket [ 186.302815][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 186.314917][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 186.325809][ T3693] vhci_hcd vhci_hcd.2: release socket [ 186.339105][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 186.351523][ T3693] vhci_hcd vhci_hcd.2: stop threads [ 186.361569][ T3693] vhci_hcd vhci_hcd.2: release socket [ 186.373118][ T3693] vhci_hcd vhci_hcd.2: disconnect device [ 186.381791][ T6609] loop1: detected capacity change from 0 to 512 [ 186.432294][ T6609] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 186.445282][ T6609] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.902: corrupted in-inode xattr: e_value size too large [ 186.460735][ T6609] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.462555][ T6609] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.902: couldn't read orphan inode 15 (err -117) [ 186.472323][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 186.472495][ C1] EXT4-fs (loop1): initial error at time 1782073460: ext4_iget_extra_inode:5180: inode 15 [ 186.472754][ C1] EXT4-fs (loop1): last error at time 1782073460: ext4_iget_extra_inode:5180: inode 15 [ 186.517866][ T6609] loop1: lost filesystem error report for type 5 error -117 [ 186.692510][ T6626] loop3: detected capacity change from 0 to 512 [ 186.716241][ T6626] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 186.743662][ T6629] loop4: detected capacity change from 0 to 1024 [ 186.750378][ T6626] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 186.751227][ T6621] loop1: detected capacity change from 0 to 512 [ 186.764796][ T6629] EXT4-fs: Ignoring removed bh option [ 186.770034][ T6626] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.779991][ T6626] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.906: iget: bad i_size value: 12154761577498 [ 186.782646][ T6621] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 186.807882][ T6629] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 186.810905][ T6621] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.903: corrupted in-inode xattr: e_value size too large [ 186.818105][ T6626] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 186.818310][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 186.818333][ C0] EXT4-fs (loop3): initial error at time 1782073461: ext4_orphan_get:1399: inode 13 [ 186.818368][ C0] EXT4-fs (loop3): last error at time 1782073461: ext4_orphan_get:1399: inode 13 [ 186.818605][ T6626] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.906: couldn't read orphan inode 13 (err -117) [ 186.818640][ T6626] loop3: lost filesystem error report for type 5 error -117 [ 186.884922][ T6621] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.904755][ T6621] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.903: couldn't read orphan inode 15 (err -117) [ 186.910567][ T6629] EXT4-fs (loop4): shut down requested (2) [ 186.914646][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 186.940375][ C1] EXT4-fs (loop1): initial error at time 1782073461: ext4_iget_extra_inode:5180: inode 15 [ 186.952255][ C1] EXT4-fs (loop1): last error at time 1782073461: ext4_iget_extra_inode:5180: inode 15 [ 186.964525][ T6629] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 186.975884][ T6621] loop1: lost filesystem error report for type 5 error -117 [ 186.987208][ T6629] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 187.060951][ T28] audit: type=1400 audit(1782073461.306:716): avc: denied { watch } for pid=6641 comm="syz.4.912" path="/156" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 187.075380][ T282] usb 9-1: enqueue for inactive port 0 [ 187.104206][ T282] usb 9-1: enqueue for inactive port 0 [ 187.107788][ T28] audit: type=1400 audit(1782073461.346:717): avc: denied { write } for pid=6620 comm="syz.1.903" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.135593][ T6644] netlink: 372 bytes leftover after parsing attributes in process `syz.0.913'. [ 187.235369][ T282] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 187.256460][ T6658] validate_nla: 1 callbacks suppressed [ 187.256485][ T6658] netlink: 'syz.2.921': attribute type 29 has an invalid length. [ 187.296042][ T6658] netlink: 372 bytes leftover after parsing attributes in process `syz.2.921'. [ 187.333763][ T6664] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.346864][ T6664] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.359004][ T6664] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.370083][ T6664] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.381195][ T6664] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.391724][ T6664] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.415535][ T6664] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.437436][ T6664] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.463672][ T6669] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 187.470902][ T6664] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.488831][ T6658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.495235][ T6664] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.530618][ T6673] netlink: 'syz.0.927': attribute type 8 has an invalid length. [ 187.550636][ T6658] EXT4-fs (loop2): 1 truncate cleaned up [ 187.566964][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'. [ 187.669907][ T6684] bond0: entered promiscuous mode [ 187.680766][ T6684] bond_slave_0: entered promiscuous mode [ 187.691586][ T6684] bond_slave_1: entered promiscuous mode [ 187.712683][ T6684] batadv0: entered promiscuous mode [ 187.725006][ T6684] debugfs: 'hsr0' already exists in 'hsr' [ 187.747330][ T6684] Cannot create hsr debugfs directory [ 187.821070][ T6703] netlink: 'syz.1.941': attribute type 29 has an invalid length. [ 187.844465][ T6703] netlink: 372 bytes leftover after parsing attributes in process `syz.1.941'. [ 187.885446][ T6703] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.914417][ T6703] EXT4-fs (loop1): 1 truncate cleaned up [ 187.997062][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.005777][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.024331][ T6719] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 188.041372][ T6719] EXT4-fs (loop1): invalid journal inode [ 188.053345][ T6719] EXT4-fs (loop1): can't get journal size [ 188.074556][ T6719] EXT4-fs (loop1): 1 truncate cleaned up [ 188.212330][ T6707] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 188.235254][ T6707] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.943: corrupted in-inode xattr: e_value size too large [ 188.250468][ T6707] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.258212][ T6707] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.943: couldn't read orphan inode 15 (err -117) [ 188.258401][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 188.287715][ C0] EXT4-fs (loop2): initial error at time 1782073462: ext4_iget_extra_inode:5180: inode 15 [ 188.298870][ C0] EXT4-fs (loop2): last error at time 1782073462: ext4_iget_extra_inode:5180: inode 15 [ 188.317659][ T6732] netlink: 'syz.1.951': attribute type 3 has an invalid length. [ 188.317686][ T6732] netlink: 'syz.1.951': attribute type 3 has an invalid length. [ 188.344923][ T6707] loop2: lost filesystem error report for type 5 error -117 [ 188.379159][ T28] audit: type=1400 audit(1782073462.616:718): avc: denied { write } for pid=6706 comm="syz.2.943" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.419615][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.953'. [ 188.659419][ T28] audit: type=1400 audit(1782073462.896:719): avc: denied { ioctl } for pid=6759 comm="syz.0.962" path="socket:[13805]" dev="sockfs" ino=13805 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.756484][ T28] audit: type=1400 audit(1782073462.996:720): avc: denied { accept } for pid=6762 comm="syz.1.964" lport=38715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.883117][ T6753] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 188.897000][ T6753] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.960: corrupted in-inode xattr: e_value size too large [ 188.917170][ T6753] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.918422][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 188.935682][ C0] EXT4-fs (loop2): initial error at time 1782073463: ext4_iget_extra_inode:5180: inode 15 [ 188.946372][ C0] EXT4-fs (loop2): last error at time 1782073463: ext4_iget_extra_inode:5180: inode 15 [ 188.960734][ T6753] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.960: couldn't read orphan inode 15 (err -117) [ 188.974660][ T6753] loop2: lost filesystem error report for type 5 error -117 [ 189.017939][ T28] audit: type=1400 audit(1782073463.256:721): avc: denied { write } for pid=6752 comm="syz.2.960" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.377954][ T6782] __nla_validate_parse: 3 callbacks suppressed [ 189.378028][ T6782] netlink: 372 bytes leftover after parsing attributes in process `syz.2.972'. [ 189.571684][ T6782] set_capacity_and_notify: 6 callbacks suppressed [ 189.571727][ T6782] loop2: detected capacity change from 0 to 512 [ 189.596982][ T6782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.615240][ T6784] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 189.621840][ T6784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.629533][ T6784] vhci_hcd vhci_hcd.0: Device attached [ 189.639587][ T6784] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 189.646298][ T6784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.653915][ T6784] vhci_hcd vhci_hcd.0: Device attached [ 189.661303][ T6784] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 189.667946][ T6784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.675679][ T6784] vhci_hcd vhci_hcd.0: Device attached [ 189.681799][ T6784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.686923][ T6782] EXT4-fs (loop2): 1 truncate cleaned up [ 189.698837][ T6784] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15) [ 189.705532][ T6784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.713078][ T6784] vhci_hcd vhci_hcd.0: Device attached [ 189.719390][ T6791] vhci_hcd: connection closed [ 189.719692][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 189.720258][ T6786] vhci_hcd: connection closed [ 189.724587][ T3693] vhci_hcd vhci_hcd.4: release socket [ 189.729820][ T6788] vhci_hcd: connection closed [ 189.740384][ T6794] vhci_hcd: connection closed [ 189.770313][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 189.793747][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 189.800783][ T3693] vhci_hcd vhci_hcd.4: release socket [ 189.806908][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 189.838544][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 189.847951][ T3693] vhci_hcd vhci_hcd.4: release socket [ 189.853639][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 189.860861][ T3693] vhci_hcd vhci_hcd.4: stop threads [ 189.863942][ T6796] loop1: detected capacity change from 0 to 512 [ 189.866257][ T3693] vhci_hcd vhci_hcd.4: release socket [ 189.866348][ T3693] vhci_hcd vhci_hcd.4: disconnect device [ 190.005833][ T6796] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 190.022009][ T6796] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.974: corrupted in-inode xattr: e_value size too large [ 190.045974][ T6796] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.048808][ T6796] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.974: couldn't read orphan inode 15 (err -117) [ 190.059439][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 190.059469][ C0] EXT4-fs (loop1): initial error at time 1782073464: ext4_iget_extra_inode:5180: inode 15 [ 190.059628][ C0] EXT4-fs (loop1): last error at time 1782073464: ext4_iget_extra_inode:5180: inode 15 [ 190.115895][ T6796] loop1: lost filesystem error report for type 5 error -117 [ 190.139841][ T28] audit: type=1400 audit(1782073464.386:722): avc: denied { write } for pid=6793 comm="syz.1.974" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.255667][ T6822] loop1: detected capacity change from 0 to 512 [ 190.283262][ T6822] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 190.303753][ T6822] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.983: corrupted in-inode xattr: e_value size too large [ 190.318558][ T6822] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.328276][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 190.344031][ C1] EXT4-fs (loop1): initial error at time 1782073464: ext4_iget_extra_inode:5180: inode 15 [ 190.354041][ C1] EXT4-fs (loop1): last error at time 1782073464: ext4_iget_extra_inode:5180: inode 15 [ 190.365896][ T6822] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.983: couldn't read orphan inode 15 (err -117) [ 190.378405][ T6822] loop1: lost filesystem error report for type 5 error -117 [ 190.382247][ T28] audit: type=1400 audit(1782073464.626:723): avc: denied { write } for pid=6821 comm="syz.1.983" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.461381][ T6834] netlink: 'syz.1.987': attribute type 29 has an invalid length. [ 190.491336][ T6834] netlink: 372 bytes leftover after parsing attributes in process `syz.1.987'. [ 190.539077][ T6840] vhci_hcd vhci_hcd.0: invalid port number 59 [ 190.550595][ T6834] loop1: detected capacity change from 0 to 512 [ 190.556541][ T6840] vhci_hcd vhci_hcd.0: invalid port number 59 [ 190.569175][ T6834] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.612498][ T6834] EXT4-fs (loop1): 1 truncate cleaned up [ 190.722776][ T6858] loop1: detected capacity change from 0 to 1024 [ 190.732934][ T6848] loop4: detected capacity change from 0 to 512 [ 190.742233][ T6858] EXT4-fs: Ignoring removed i_version option [ 190.845753][ T6848] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 190.863093][ T6848] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.994: corrupted in-inode xattr: e_value size too large [ 190.894951][ T6848] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.897494][ T6848] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.994: couldn't read orphan inode 15 (err -117) [ 190.907586][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 190.907613][ C0] EXT4-fs (loop4): initial error at time 1782073465: ext4_iget_extra_inode:5180: inode 15 [ 190.907714][ C0] EXT4-fs (loop4): last error at time 1782073465: ext4_iget_extra_inode:5180: inode 15 [ 190.953634][ T3767] Bluetooth: hci0: sending frame failed (-49) [ 190.960374][ T3717] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 190.960566][ T6848] loop4: lost filesystem error report for type 5 error -117 [ 191.025027][ T28] audit: type=1400 audit(1782073465.266:724): avc: denied { write } for pid=6847 comm="syz.4.994" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.101012][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 191.120707][ T6877] team1: entered promiscuous mode [ 191.125878][ T6877] team1: entered allmulticast mode [ 191.133853][ T6877] 8021q: adding VLAN 0 to HW filter on device team1 [ 191.166447][ T6879] team0: No ports can be present during mode change [ 191.249739][ T6875] loop1: detected capacity change from 0 to 8192 [ 191.273179][ T6885] netlink: 372 bytes leftover after parsing attributes in process `syz.0.1008'. [ 191.462213][ T28] audit: type=1400 audit(1782073465.706:725): avc: denied { mount } for pid=6904 comm="syz.3.1014" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 191.495178][ T6897] loop1: detected capacity change from 0 to 512 [ 191.507476][ T28] audit: type=1400 audit(1782073465.726:726): avc: denied { unmount } for pid=6904 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 191.554506][ T6897] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 191.564173][ T6908] loop3: detected capacity change from 0 to 512 [ 191.566452][ T6895] lo speed is unknown, defaulting to 1000 [ 191.589110][ T6897] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1011: corrupted in-inode xattr: e_value size too large [ 191.605712][ T6908] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.615945][ T6897] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.622870][ T6908] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 191.622937][ T6897] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1011: couldn't read orphan inode 15 (err -117) [ 191.622971][ T6897] loop1: lost filesystem error report for type 5 error -117 [ 191.628340][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 191.666149][ C1] EXT4-fs (loop1): initial error at time 1782073465: ext4_iget_extra_inode:5180: inode 15 [ 191.676141][ C1] EXT4-fs (loop1): last error at time 1782073465: ext4_orphan_get:1404 [ 191.685062][ T28] audit: type=1400 audit(1782073465.916:727): avc: denied { write } for pid=6896 comm="syz.1.1011" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.873066][ T6920] netlink: 'syz.3.1020': attribute type 29 has an invalid length. [ 191.896730][ T6920] netlink: 372 bytes leftover after parsing attributes in process `syz.3.1020'. [ 191.937410][ T6920] loop3: detected capacity change from 0 to 512 [ 191.953714][ T6920] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.982324][ T6920] EXT4-fs (loop3): 1 truncate cleaned up [ 192.251979][ T6922] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 192.323025][ T6922] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1021: corrupted in-inode xattr: e_value size too large [ 192.342652][ T6922] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.344799][ T6922] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1021: couldn't read orphan inode 15 (err -117) [ 192.356708][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 192.356787][ C1] EXT4-fs (loop1): initial error at time 1782073466: ext4_iget_extra_inode:5180: inode 15 [ 192.357647][ C1] EXT4-fs (loop1): last error at time 1782073466: ext4_iget_extra_inode:5180: inode 15 [ 192.402715][ T6922] loop1: lost filesystem error report for type 5 error -117 [ 192.480756][ T28] audit: type=1400 audit(1782073466.716:728): avc: denied { write } for pid=6921 comm="syz.1.1021" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.565731][ T6936] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 192.578030][ T6936] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1025: corrupted in-inode xattr: e_value size too large [ 192.604431][ T6936] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.608659][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 192.627451][ C0] EXT4-fs (loop3): initial error at time 1782073466: ext4_iget_extra_inode:5180: inode 15 [ 192.638340][ C0] EXT4-fs (loop3): last error at time 1782073466: ext4_iget_extra_inode:5180: inode 15 [ 192.659139][ T6936] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1025: couldn't read orphan inode 15 (err -117) [ 192.673298][ T6936] loop3: lost filesystem error report for type 5 error -117 [ 192.770796][ T28] audit: type=1400 audit(1782073467.006:729): avc: denied { write } for pid=6935 comm="syz.3.1025" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.808598][ T6963] xt_hashlimit: size too large, truncated to 1048576 [ 192.976965][ T6981] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 192.986489][ T6981] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1042: corrupted in-inode xattr: e_value size too large [ 193.012467][ T6981] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.012629][ T6981] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1042: couldn't read orphan inode 15 (err -117) [ 193.021870][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 193.021896][ C1] EXT4-fs (loop3): initial error at time 1782073467: ext4_iget_extra_inode:5180: inode 15 [ 193.021937][ C1] EXT4-fs (loop3): last error at time 1782073467: ext4_iget_extra_inode:5180: inode 15 [ 193.101385][ T6981] loop3: lost filesystem error report for type 5 error -117 [ 193.110362][ T28] audit: type=1400 audit(1782073467.356:730): avc: denied { write } for pid=6980 comm="syz.3.1042" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.129169][ T6968] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 193.160178][ T6968] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1038: corrupted in-inode xattr: e_value size too large [ 193.177892][ T6968] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.178261][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 193.195352][ C1] EXT4-fs (loop1): initial error at time 1782073467: ext4_iget_extra_inode:5180: inode 15 [ 193.206753][ C1] EXT4-fs (loop1): last error at time 1782073467: ext4_iget_extra_inode:5180: inode 15 [ 193.221319][ T6968] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1038: couldn't read orphan inode 15 (err -117) [ 193.249012][ T6968] loop1: lost filesystem error report for type 5 error -117 [ 193.277681][ T28] audit: type=1400 audit(1782073467.516:731): avc: denied { write } for pid=6967 comm="syz.1.1038" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.481465][ T7003] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 193.493748][ T7003] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1050: corrupted in-inode xattr: e_value size too large [ 193.510522][ T7003] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.512950][ T7003] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1050: couldn't read orphan inode 15 (err -117) [ 193.523194][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 193.523441][ C1] EXT4-fs (loop3): initial error at time 1782073467: ext4_iget_extra_inode:5180: inode 15 [ 193.523839][ C1] EXT4-fs (loop3): last error at time 1782073467: ext4_iget_extra_inode:5180: inode 15 [ 193.567677][ T7003] loop3: lost filesystem error report for type 5 error -117 [ 193.572762][ T28] audit: type=1400 audit(1782073467.816:732): avc: denied { write } for pid=7001 comm="syz.3.1050" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.084956][ T7027] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 194.108351][ T7027] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1058: corrupted in-inode xattr: e_value size too large [ 194.126283][ T7027] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.128265][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 194.146887][ C1] EXT4-fs (loop2): initial error at time 1782073468: ext4_iget_extra_inode:5180: inode 15 [ 194.158466][ C1] EXT4-fs (loop2): last error at time 1782073468: ext4_iget_extra_inode:5180: inode 15 [ 194.170911][ T7027] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1058: couldn't read orphan inode 15 (err -117) [ 194.190403][ T7027] loop2: lost filesystem error report for type 5 error -117 [ 194.221194][ T28] audit: type=1400 audit(1782073468.456:733): avc: denied { write } for pid=7026 comm="syz.2.1058" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.265701][ T6887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.300018][ T3295] EXT4-fs unmount: 105 callbacks suppressed [ 194.300038][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.618006][ T7047] netlink: 372 bytes leftover after parsing attributes in process `syz.4.1065'. [ 194.690133][ T7049] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1066'. [ 194.707149][ T7047] set_capacity_and_notify: 6 callbacks suppressed [ 194.707198][ T7047] loop4: detected capacity change from 0 to 512 [ 194.732676][ T7047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 194.773073][ T7047] EXT4-fs (loop4): 1 truncate cleaned up [ 194.797007][ T7047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.831744][ T7049] loop1: detected capacity change from 0 to 512 [ 194.851328][ T7049] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.878600][ T7049] EXT4-fs (loop1): 1 truncate cleaned up [ 194.886132][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.891345][ T7049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.972159][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.989756][ T7051] lo speed is unknown, defaulting to 1000 [ 194.993463][ T7062] loop2: detected capacity change from 0 to 128 [ 195.242368][ T7076] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 195.320792][ T7070] syz.4.1075 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 195.360215][ T7070] CPU: 0 UID: 0 PID: 7070 Comm: syz.4.1075 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 195.360255][ T7070] Tainted: [W]=WARN [ 195.360295][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.360319][ T7070] Call Trace: [ 195.360326][ T7070] [ 195.360335][ T7070] __dump_stack+0x1d/0x30 [ 195.360362][ T7070] dump_stack_lvl+0x95/0xd0 [ 195.360387][ T7070] dump_stack+0x15/0x1b [ 195.360409][ T7070] dump_header+0x80/0x240 [ 195.360450][ T7070] oom_kill_process+0x295/0x350 [ 195.360485][ T7070] out_of_memory+0x981/0xbc0 [ 195.360520][ T7070] try_charge_memcg+0x621/0xa00 [ 195.360577][ T7070] charge_memcg+0x6d/0x120 [ 195.360610][ T7070] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 195.360647][ T7070] swap_cache_alloc_folio+0x47b/0x5e0 [ 195.360725][ T7070] swap_cluster_readahead+0x2b1/0x460 [ 195.360763][ T7070] swapin_readahead+0xd8/0x8a0 [ 195.360850][ T7070] ? _raw_spin_unlock+0x9/0x30 [ 195.360886][ T7070] ? swap_put_entries_cluster+0x49c/0x4c0 [ 195.360924][ T7070] ? wake_page_function+0x11a/0x1f0 [ 195.360996][ T7070] ? __wake_up_locked_key+0x3d/0x60 [ 195.361019][ T7070] ? __rcu_read_unlock+0x4e/0x70 [ 195.361132][ T7070] ? swap_cache_get_folio+0x1f7/0x200 [ 195.361165][ T7070] do_swap_page+0x2a2/0x1ec0 [ 195.361197][ T7070] ? __css_rstat_updated+0xbb/0x280 [ 195.361260][ T7070] ? __rcu_read_lock+0x36/0x50 [ 195.361348][ T7070] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 195.361454][ T7070] handle_mm_fault+0xb3c/0x2da0 [ 195.361496][ T7070] do_user_addr_fault+0x634/0x1060 [ 195.361528][ T7070] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 195.361565][ T7070] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 195.361598][ T7070] ? trace_page_fault_user+0x1f/0xa0 [ 195.361772][ T7070] exc_page_fault+0x62/0xa0 [ 195.361792][ T7070] asm_exc_page_fault+0x26/0x30 [ 195.361814][ T7070] RIP: 0033:0x7ff48787d976 [ 195.361831][ T7070] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 195.361851][ T7070] RSP: 002b:00007ffe0d6b1d10 EFLAGS: 00010246 [ 195.361876][ T7070] RAX: 000000000002fab3 RBX: 00007ff487af5fa0 RCX: 000000000002f9b8 [ 195.361910][ T7070] RDX: 00000000000000fb RSI: 0000000000000000 RDI: 00000000000003e8 [ 195.361990][ T7070] RBP: 00007ff487af7da0 R08: 000000000f01be1b R09: 3fffffffffffffff [ 195.362005][ T7070] R10: 4000000000000000 R11: 0000000000000246 R12: 000000000002fd2f [ 195.362020][ T7070] R13: 00007ff487af5fac R14: 000000000002fa2d R15: 00007ffe0d6b1e40 [ 195.362041][ T7070] [ 195.363251][ T7070] memory: usage 307200kB, limit 307200kB, failcnt 394 [ 195.670360][ T7070] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 195.689855][ T7070] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 195.697331][ T7070] Memory cgroup stats for /syz4: [ 195.697533][ T7070] cache 0 [ 195.705944][ T7070] rss 0 [ 195.708950][ T7070] shmem 0 [ 195.711937][ T7070] mapped_file 0 [ 195.715492][ T7070] dirty 0 [ 195.718517][ T7070] writeback 0 [ 195.721877][ T7070] workingset_refault_anon 14 [ 195.726577][ T7070] workingset_refault_file 64 [ 195.731434][ T7070] swap 188416 [ 195.734785][ T7070] swapcached 249856 [ 195.738765][ T7070] pgpgin 98245 [ 195.743465][ T7070] pgpgout 98244 [ 195.746973][ T7070] pgfault 123375 [ 195.750579][ T7070] pgmajfault 11 [ 195.757407][ T7070] inactive_anon 0 [ 195.761128][ T7070] active_anon 4096 [ 195.764894][ T7070] inactive_file 0 [ 195.768642][ T7070] active_file 0 [ 195.772173][ T7070] unevictable 0 [ 195.775663][ T7070] hierarchical_memory_limit 314572800 [ 195.781135][ T7070] hierarchical_memsw_limit 9223372036854771712 [ 195.787317][ T7070] total_cache 0 [ 195.791114][ T7070] total_rss 0 [ 195.803269][ T7070] total_shmem 0 [ 195.806789][ T7070] total_mapped_file 0 [ 195.812691][ T7070] total_dirty 0 [ 195.816574][ T7070] total_writeback 0 [ 195.827821][ T7070] total_workingset_refault_anon 14 [ 195.843214][ T7089] netlink: 372 bytes leftover after parsing attributes in process `syz.2.1082'. [ 195.869499][ T7070] total_workingset_refault_file 64 [ 195.883935][ T7070] total_swap 188416 [ 195.890466][ T7070] total_swapcached 249856 [ 195.905511][ T7070] total_pgpgin 98245 [ 195.909774][ T7070] total_pgpgout 98244 [ 195.917548][ T7070] total_pgfault 123375 [ 195.921989][ T7089] loop2: detected capacity change from 0 to 512 [ 195.929911][ T7070] total_pgmajfault 11 [ 195.946788][ T7070] total_inactive_anon 0 [ 195.958495][ T7089] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.969430][ T7070] total_active_anon 4096 [ 195.980270][ T7070] total_inactive_file 0 [ 195.991218][ T7070] total_active_file 0 [ 196.004417][ T7089] EXT4-fs (loop2): 1 truncate cleaned up [ 196.011480][ T7070] total_unevictable 0 [ 196.021329][ T7070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1075,pid=7070,uid=0 [ 196.038414][ T7089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.071666][ T7070] Memory cgroup out of memory: Killed process 7070 (syz.4.1075) total-vm:94036kB, anon-rss:1232kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 196.159501][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.288226][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.298148][ T7114] loop3: detected capacity change from 0 to 128 [ 196.304731][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.370074][ T7121] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1096'. [ 196.402421][ T7125] netlink: 'syz.3.1098': attribute type 29 has an invalid length. [ 196.412701][ T7125] netlink: 372 bytes leftover after parsing attributes in process `syz.3.1098'. [ 196.447921][ T7125] loop3: detected capacity change from 0 to 512 [ 196.463305][ T7125] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.482575][ T7125] EXT4-fs (loop3): 1 truncate cleaned up [ 196.495435][ T7125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.528971][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.541015][ T7123] lo speed is unknown, defaulting to 1000 [ 196.781202][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 196.781221][ T28] audit: type=1400 audit(1782073471.026:736): avc: denied { getopt } for pid=7151 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.077309][ T7170] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 197.083885][ T7170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.137257][ T7177] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 197.143989][ T7177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.170250][ T7170] vhci_hcd vhci_hcd.0: Device attached [ 197.185759][ T7180] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 197.192431][ T7180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.223968][ T7177] vhci_hcd vhci_hcd.0: Device attached [ 197.253883][ T7170] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.270359][ T7170] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(14) [ 197.277017][ T7170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.296404][ T7170] vhci_hcd vhci_hcd.0: Device attached [ 197.314416][ T7180] vhci_hcd vhci_hcd.0: Device attached [ 197.406384][ T7186] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 197.412973][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.420525][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 197.449033][ T7186] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 197.455603][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.463151][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 197.473741][ T7186] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 197.480398][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.488129][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 197.494593][ T7186] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.505452][ T7186] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15) [ 197.512108][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.519709][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 197.525898][ T7195] vhci_hcd: connection closed [ 197.526203][ T4819] vhci_hcd vhci_hcd.3: stop threads [ 197.536392][ T7193] vhci_hcd: connection closed [ 197.536840][ T4819] vhci_hcd vhci_hcd.3: release socket [ 197.541329][ T7199] vhci_hcd: connection closed [ 197.543551][ T7197] vhci_hcd: connection closed [ 197.562934][ T4819] vhci_hcd vhci_hcd.3: disconnect device [ 197.590173][ T7190] lo speed is unknown, defaulting to 1000 [ 197.596298][ T4819] vhci_hcd vhci_hcd.3: stop threads [ 197.612753][ T4819] vhci_hcd vhci_hcd.3: release socket [ 197.626244][ T4819] vhci_hcd vhci_hcd.3: disconnect device [ 197.647853][ T4819] vhci_hcd vhci_hcd.3: stop threads [ 197.656806][ T4819] vhci_hcd vhci_hcd.3: release socket [ 197.664402][ T4819] vhci_hcd vhci_hcd.3: disconnect device [ 197.678481][ T3396] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 197.687282][ T3396] usb 7-1: enqueue for inactive port 0 [ 197.699568][ T4819] vhci_hcd vhci_hcd.3: stop threads [ 197.703238][ T3396] usb 7-1: enqueue for inactive port 0 [ 197.717964][ T4819] vhci_hcd vhci_hcd.3: release socket [ 197.737602][ T3396] usb 7-1: enqueue for inactive port 0 [ 197.743533][ T4819] vhci_hcd vhci_hcd.3: disconnect device [ 197.753304][ T7181] vhci_hcd: connection closed [ 197.753417][ T7171] vhci_hcd: connection closed [ 197.753466][ T7187] vhci_hcd: connection closed [ 197.758420][ T4819] vhci_hcd vhci_hcd.2: stop threads [ 197.763484][ T7178] vhci_hcd: connection closed [ 197.781383][ T4819] vhci_hcd vhci_hcd.2: release socket [ 197.792128][ T4819] vhci_hcd vhci_hcd.2: disconnect device [ 197.808317][ T3396] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 197.826307][ T4819] vhci_hcd vhci_hcd.2: stop threads [ 197.851174][ T4819] vhci_hcd vhci_hcd.2: release socket [ 197.871151][ T4819] vhci_hcd vhci_hcd.2: disconnect device [ 197.893918][ T4819] vhci_hcd vhci_hcd.2: stop threads [ 197.899474][ T4819] vhci_hcd vhci_hcd.2: release socket [ 197.905122][ T4819] vhci_hcd vhci_hcd.2: disconnect device [ 198.018089][ T7216] netlink: 372 bytes leftover after parsing attributes in process `syz.4.1126'. [ 198.080329][ T4819] vhci_hcd vhci_hcd.2: stop threads [ 198.087266][ T4819] vhci_hcd vhci_hcd.2: release socket [ 198.098961][ T4819] vhci_hcd vhci_hcd.2: disconnect device [ 198.218129][ T7227] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 198.224774][ T7227] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.263670][ T7227] vhci_hcd vhci_hcd.0: Device attached [ 198.295072][ T7232] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 198.301747][ T7232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.340994][ T7232] vhci_hcd vhci_hcd.0: Device attached [ 198.374297][ T3477] ================================================================== [ 198.382456][ T3477] BUG: KCSAN: data-race in __stop_tty / pty_write [ 198.388919][ T3477] [ 198.391277][ T3477] write to 0xffff888104fa1994 of 1 bytes by task 7237 on cpu 1: [ 198.398933][ T3477] __stop_tty+0x36/0x90 [ 198.403139][ T3477] n_tty_ioctl_helper+0x2d1/0x370 [ 198.408208][ T3477] n_tty_ioctl+0x101/0x200 [ 198.412668][ T3477] tty_ioctl+0x83e/0xb80 [ 198.416982][ T3477] __se_sys_ioctl+0xce/0x140 [ 198.421631][ T3477] __x64_sys_ioctl+0x43/0x50 [ 198.426280][ T3477] x64_sys_call+0x1563/0x3020 [ 198.431003][ T3477] do_syscall_64+0x136/0x3c0 [ 198.435652][ T3477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.441593][ T3477] [ 198.443947][ T3477] read to 0xffff888104fa1994 of 1 bytes by task 3477 on cpu 0: [ 198.451524][ T3477] pty_write+0x24/0x90 [ 198.455659][ T3477] tty_put_char+0x8f/0xc0 [ 198.460044][ T3477] __process_echoes+0x309/0x6b0 [ 198.464951][ T3477] n_tty_receive_buf_common+0x90f/0xc10 [ 198.470558][ T3477] n_tty_receive_buf2+0x33/0x40 [ 198.475468][ T3477] tty_ldisc_receive_buf+0x66/0xf0 [ 198.480642][ T3477] tty_port_default_receive_buf+0x59/0x90 [ 198.486409][ T3477] flush_to_ldisc+0x13a/0x330 [ 198.487471][ T7232] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.491132][ T3477] process_scheduled_works+0x4d4/0x9a0 [ 198.491172][ T3477] worker_thread+0x569/0x750 [ 198.509372][ T3477] kthread+0x221/0x270 [ 198.513570][ T3477] ret_from_fork+0x146/0x330 [ 198.518212][ T3477] ret_from_fork_asm+0x1a/0x30 [ 198.523015][ T3477] [ 198.525364][ T3477] value changed: 0x00 -> 0x01 [ 198.530075][ T3477] [ 198.532425][ T3477] Reported by Kernel Concurrency Sanitizer on: [ 198.538612][ T3477] CPU: 0 UID: 0 PID: 3477 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 198.549720][ T3477] Tainted: [W]=WARN [ 198.553550][ T3477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.563642][ T3477] Workqueue: events_unbound flush_to_ldisc [ 198.569504][ T3477] ================================================================== [ 198.585102][ T7227] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 198.591762][ T7227] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.606822][ T7227] vhci_hcd vhci_hcd.0: Device attached [ 198.613735][ T7238] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 198.620380][ T7238] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.686099][ T7238] vhci_hcd vhci_hcd.0: Device attached [ 198.739987][ T282] usb 3-1: new low-speed USB device number 5 using vhci_hcd [ 198.766156][ T7239] vhci_hcd: connection closed [ 198.766427][ T7240] vhci_hcd: connection closed [ 198.766503][ T4819] vhci_hcd vhci_hcd.1: stop threads [ 198.766525][ T4819] vhci_hcd vhci_hcd.1: release socket [ 198.797504][ T7233] vhci_hcd: connection closed [ 198.801241][ T4819] vhci_hcd vhci_hcd.1: disconnect device [ 198.807555][ T7228] vhci_hcd: connection reset by peer [ 198.862919][ T4819] vhci_hcd vhci_hcd.1: stop threads [ 198.882645][ T4819] vhci_hcd vhci_hcd.1: release socket [ 198.896507][ T4819] vhci_hcd vhci_hcd.1: disconnect device [ 198.912728][ T4819] vhci_hcd vhci_hcd.1: stop threads [ 198.919913][ T4819] vhci_hcd vhci_hcd.1: release socket [ 198.926687][ T4819] vhci_hcd vhci_hcd.1: disconnect device [ 198.934206][ T4819] vhci_hcd vhci_hcd.1: stop threads [ 198.941155][ T4819] vhci_hcd vhci_hcd.1: release socket [ 198.951881][ T4819] vhci_hcd vhci_hcd.1: disconnect device [ 203.779995][ T282] usb 3-1: enqueue for inactive port 0 [ 203.786726][ T282] usb 3-1: enqueue for inactive port 0 [ 203.858370][ T282] vhci_hcd vhci_hcd.1: vhci_device speed not set