last executing test programs: 2.067741857s ago: executing program 2 (id=1032): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x917, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x1000000, 0x0, 0x20000800}, 0x800) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000380)) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x0, 0x9, 0x3, 0x5}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x610c84, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r10 = memfd_secret(0x0) fchownat(r10, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r10, 0x80605414, &(0x7f0000000100)) 1.810824569s ago: executing program 2 (id=1033): openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a1) ptrace(0x10, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 'id1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3") setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000003000000000000000000000000ef4a53ff6c54496085f96a9c6d36000000000000000000000000001d00"/102], 0x58) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) socket(0x2d, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000002004000"], 0x48) 1.69308473s ago: executing program 2 (id=1036): prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@nombcache}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc1400000011"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0x11b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x3, 0x1, 0xf7, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x230}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x1, 0x6, "5ac9c2"}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x3, "ca"}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x1, 0x2, [0x1, 0x9], 0xd8}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0xf7, "6695e2"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x1, 0x3, 0xe}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x5, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0xff, 0x2, "84c7", '0'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x5, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x5, 0x5, 'b\a', "93e2"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x10, 0x4, 0xed, 0x3, "73e94bb89b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0xfc, 0x9, '\"j', "e95b"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0xa, 0x2, "8771", "c7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0xc, 0x3, {0x7, 0x25, 0x1, 0x80, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xa75, 0xfffd, 0x9, "71bf1cd37badca845f"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x2, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x2, 0xf8, 0x5b, "6337c13225"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xb, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x2, 0xd}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x33, 0x6, 0xf, {0x7, 0x25, 0x1, 0x80, 0x1, 0x58a9}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x7, 0x2f, 0x7, 0x10, 0x5}, 0x57, &(0x7f0000000180)={0x5, 0xf, 0x57, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0xf, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x1, 0x40, 0x3ff, 0x7}, @generic={0x3a, 0x10, 0x1, "db253bb6d3c2ec58ffdb1ac5435b2b7dbe31995f13801554d9a41911e088815449cf6de6b6d1f3370c9f128aead2674280da05fbc83b94"}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x455}}, {0xd5, &(0x7f0000000280)=@string={0xd5, 0x3, "243a5851ccb041c78aee15f147f76d7a8946b9f50946bf385dbecdc7217d947bf2d6322ccd7d5eade277f03f671b17df3c43f781b7661d277a29c48d53f8ab8e8ef76d3a5b17f52d314ce284cf71e6485aad5183f6a209a7efdef7aa7c94073fb9d812d8eb3a7a1e6be18ef71ad90e0dfbb6f0c8ec83adcf16b75b742434d9e29f5b59689b32facd06ace1307546d572164b764f924096879c5d99711b0f244000ff5c18a35c84135f338dcd0f1b44745e6eee4565e22a0e29cc3d36f589c914b2fd44a73bcba9560e33675af432ec92a8e582"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x414}}, {0x4f, &(0x7f0000000400)=@string={0x4f, 0x3, "0e97af2c3d41f94c7557fc56450ac4a004672f2cefaf48d5663bf38aff78acee688c03e22cee99a84d1c21302fc4f4061337c9819663071340f536113d556591235a4930bf5717211c91887bdf"}}, {0xbb, &(0x7f0000000480)=@string={0xbb, 0x3, "7f0013ed633e4c0f37609255e4e5692bee6e8696ce530fc64f29925f676551be0f5d44ba004d4022900c9e6a86fc874683d7a6eef4d46f571e72215e336bd8ad18e9dd6fcce2e54b724ed965a271978066868b09437da0ce4f2206824477a2d7888f0b08cce56c394f96ed6c8df710917d0eb4dc1c50a93c4776454fbc1c898aad19037ffde8995c07d5eb5f512b90f774c06faf31796ef9519b4de7df36cf9a86126e7107f89d940e2c0a45a485a27d5c61017831d86ac310"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x455}}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x12, &(0x7f0000000200), 0x4) 1.381798507s ago: executing program 3 (id=1044): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000004c40)="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", 0x2ef}], 0x1}}], 0x6, 0x200040d1) 1.043033737s ago: executing program 2 (id=1050): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) 967.811534ms ago: executing program 0 (id=1052): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 921.391388ms ago: executing program 0 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x973, &(0x7f0000000380)=0x0) r4 = eventfd2(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r12, r11, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) recvmsg$unix(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 776.227891ms ago: executing program 1 (id=1055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x917, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x1000000, 0x0, 0x20000800}, 0x800) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000380)) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x0, 0x9, 0x3, 0x5}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x610c84, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r10 = memfd_secret(0x0) fchownat(r10, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r10, 0x80605414, &(0x7f0000000100)) 681.633189ms ago: executing program 1 (id=1056): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000004c40)="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", 0x5c6}], 0x1}}], 0x6, 0x200040d1) 615.933755ms ago: executing program 0 (id=1058): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) capget(&(0x7f00000001c0)={0x19980330}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000010000000000000000008510000006000000180000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xa, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0xbc}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000180)='GPL\x00', 0x5, 0x1000, &(0x7f0000001780)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000003c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r3, r1, r2, r2], 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='dlm_bast\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 557.09607ms ago: executing program 1 (id=1060): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x2000, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x128) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, 0x0) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000009a000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x61880, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) 514.249134ms ago: executing program 3 (id=1061): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="620ac4ff0000000071101a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='flush_foreign\x00', r2, 0x0, 0x5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 513.680364ms ago: executing program 4 (id=1062): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004580)=@delchain={0x24, 0x28, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 513.225374ms ago: executing program 0 (id=1063): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000011c0), 0x0, 0x4e5, &(0x7f0000000980)="$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") 463.687368ms ago: executing program 3 (id=1064): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x404c844, 0x0, 0x0) 460.161449ms ago: executing program 4 (id=1065): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2008404, &(0x7f0000000200)={[{@grpquota}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@resgid}]}, 0x3, 0x446, &(0x7f0000002000)="$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") 441.61661ms ago: executing program 1 (id=1066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x917, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x1000000, 0x0, 0x20000800}, 0x800) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000380)) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x0, 0x9, 0x3, 0x5}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x610c84, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$eJzs3c1rHOUfAPDvbJImTfv7JYLgyykgaKB0Y2psFTxUPIhgoaBn22WzDTWbbMluShMCWkTwIqh4EPTSsy/15tWXq/4XHsRSNS1WPEhkNjvtttndJmmSrd3PByb7PDOzeZ7vzjMzz+48zATQs8bSP7mIxyLigyRipDE/iYiBeqo/4vj6ejdWV4rplMTa2mu/J/V1rq+uFKPpPakDjcyjEfH9uxGHchvLrS4tzxbK5dJCIz9Rmzs3UV1aPnx2rjBTminNH52cmjpy7NljR3cu1j9/Wj545cOXn/rq+N/vPHL5/R+SOB4HG8ua49gpYzHW+EwG0o/wNi/tdGFdlnS7AmxLtmv2R3oMGIm+egoAeJC9FRFrAECPSZz/AaDHZL8DXF9dKWZTd3+R2FtXX4yIofX4s+ub60v6G9fshurXQYevJ7ddGUkiYnQHyh+LiM++eeOLdIpdug4J0MrbFyPi9OjYxuN/smHMwlY93WHZvsbr2B3zHf9g73yb9n+ea9X/y93s/0SL/s9gi313O+66/+/fgUI6SPt/LzSNbbvRFH/DaF8j9796n28gOXO2XEqPbf+PiPEYGEzzkx3KGL/2z7V2y5r7f3989Obnafnp6601cr/2D97+nulCrXAvMTe7ejHi8f5W8Sc3t3/Spv97cpNlvPL8e5+2W5bGn8abTRvjj8bopN2xdiniyZbb/9aItqTj+MSJenOYyBpFC1///Mlwu/Kbt386peVn3wU66dtWtBul23+4c/yjSfN4zerWy/jx0sh37ZbdPf7W7X9f8no9nfUjLhRqtYXJiH3JqxvnH7n13iyfrZ/GP/5E6/2/U/tPvxOe3mT8/Vd++3L78e+uNP7pLW3/rScu35ht21w3t/2n6qnxxpzNHP82W8F7+ewAAAAAAAAAAAAAAAAAAAAAAAAAYLNyEXEwklz+ZjqXy+fXn+H9cAznypVq7dCZyuL8dNSflT0aA7nsVpcjTfdDnWzcDz/LH7kj/0xEPBQRHw/uT7L7KE53OXYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyBxo8/z/1C+D3a4dALBrhrpdAQBgzzn/A0Dvcf4HgN7j/A8Avcf5HwB6z9BAt2sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAA+7kiRPptPbX6koxzU+fX1qcrZw/PF2qzubnFov5YmXhXH6mUpkpl/LFytzd/l+5Ujk3FfOLFyZqpWptorq0fGqusjhfO3V2rjBTOlUa2JOoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBrqkvLs4VyubQgsY3E2v1Rje4n+hrNaY8Kvb9ab3J/VGOHE907JgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8l/wbAAD//xhTH5Y=") r10 = memfd_secret(0x0) fchownat(r10, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r10, 0x80605414, &(0x7f0000000100)) 290.524744ms ago: executing program 3 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0xee00) keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff) 256.536677ms ago: executing program 4 (id=1068): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x88046) fstatfs(r0, &(0x7f0000000000)=""/85) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140"], 0xa4}}, 0x0) 194.330272ms ago: executing program 3 (id=1069): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) pipe2$9p(&(0x7f0000000000), 0x80800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000dd0e0d860002"], 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = epoll_create1(0x0) r5 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) ioctl$MON_IOCX_GETX(r7, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 164.640505ms ago: executing program 1 (id=1070): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000004c40)="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", 0x5c6}], 0x1}}], 0x6, 0x200040d1) 125.071638ms ago: executing program 4 (id=1071): socket$inet6(0xa, 0x80003, 0xff) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$batadv(0x0, r1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e65aea7657673696d0000000f0002006e657464677673696d30000087a196392ff88a8092d871fbbf8eef680818028676b92d08db2297cf93783fe38e5f0cd4"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0xd, 0x0, 0x2, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex, r4, 0x31, 0x4, r2, @void, @value=r2, @void, @void, r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 124.164338ms ago: executing program 0 (id=1072): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r0) 107.73651ms ago: executing program 2 (id=1073): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 84.159232ms ago: executing program 4 (id=1074): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="620ac4ff0000000071101a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='flush_foreign\x00', r2, 0x0, 0x5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 30.428437ms ago: executing program 0 (id=1075): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004580)=@delchain={0x24, 0x28, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 20.270588ms ago: executing program 3 (id=1076): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x2000, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x128) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, 0x0) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000009a000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x61880, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) 19.729588ms ago: executing program 2 (id=1077): name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1600) 19.061178ms ago: executing program 1 (id=1078): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1079): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): ournal. Quota mode: none. [ 76.768368][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.841861][ T5545] loop1: detected capacity change from 0 to 2048 [ 76.856789][ T5545] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 76.866617][ T5545] EXT4-fs (loop1): group descriptors corrupted! [ 76.920196][ T29] audit: type=1326 audit(1767607183.076:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c28f749 code=0x7ffc0000 [ 76.963477][ T5550] loop0: detected capacity change from 0 to 512 [ 76.970500][ T29] audit: type=1326 audit(1767607183.076:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f101c28f749 code=0x7ffc0000 [ 76.970689][ T29] audit: type=1326 audit(1767607183.086:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f101c28f783 code=0x7ffc0000 [ 76.970784][ T29] audit: type=1326 audit(1767607183.106:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f101c28e1ff code=0x7ffc0000 [ 76.970824][ T29] audit: type=1326 audit(1767607183.116:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f101c28f7d7 code=0x7ffc0000 [ 76.970911][ T29] audit: type=1326 audit(1767607183.116:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f101c28df90 code=0x7ffc0000 [ 76.970952][ T29] audit: type=1326 audit(1767607183.116:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.0.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f101c28f34b code=0x7ffc0000 [ 77.144207][ T5550] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.630: corrupted inode contents [ 77.157031][ T5550] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.630: mark_inode_dirty error [ 77.169875][ T5550] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.630: corrupted inode contents [ 77.186798][ T5550] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.630: mark_inode_dirty error [ 77.199687][ T5550] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.630: mark inode dirty (error -117) [ 77.213912][ T5550] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 77.230960][ T5550] EXT4-fs (loop0): 1 orphan inode deleted [ 77.233635][ T5556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.632'. [ 77.253707][ T5550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.315035][ T5561] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 77.321622][ T5561] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 77.329395][ T5561] vhci_hcd vhci_hcd.0: Device attached [ 77.337490][ T5561] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 77.344053][ T5561] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.351591][ T5561] vhci_hcd vhci_hcd.0: Device attached [ 77.360161][ T5566] vhci_hcd: connection closed [ 77.360333][ T2450] vhci_hcd vhci_hcd.1: stop threads [ 77.360763][ T5563] vhci_hcd: connection closed [ 77.365076][ T2450] vhci_hcd vhci_hcd.1: release socket [ 77.380550][ T2450] vhci_hcd vhci_hcd.1: disconnect device [ 77.389685][ T2450] vhci_hcd vhci_hcd.1: stop threads [ 77.394937][ T2450] vhci_hcd vhci_hcd.1: release socket [ 77.398521][ T5569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.636'. [ 77.400416][ T2450] vhci_hcd vhci_hcd.1: disconnect device [ 77.444994][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 77.453983][ T5573] openvswitch: netlink: Flow key attr not present in new flow. [ 77.462242][ T5571] loop2: detected capacity change from 0 to 512 [ 77.487717][ T5575] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 77.494332][ T5575] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 77.502181][ T5575] vhci_hcd vhci_hcd.0: Device attached [ 77.510371][ T5571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.520871][ T5575] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 77.527420][ T5575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.535007][ T5575] vhci_hcd vhci_hcd.0: Device attached [ 77.550048][ T5571] EXT4-fs (loop2): 1 truncate cleaned up [ 77.557319][ T5571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.571056][ T5581] vhci_hcd: connection closed [ 77.571433][ T5576] vhci_hcd: connection closed [ 77.574584][ T1012] vhci_hcd vhci_hcd.4: stop threads [ 77.586330][ T1012] vhci_hcd vhci_hcd.4: release socket [ 77.591743][ T1012] vhci_hcd vhci_hcd.4: disconnect device [ 77.599116][ T1012] vhci_hcd vhci_hcd.4: stop threads [ 77.604388][ T1012] vhci_hcd vhci_hcd.4: release socket [ 77.609861][ T1012] vhci_hcd vhci_hcd.4: disconnect device [ 77.630579][ T5571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.640019][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.661281][ T5587] loop3: detected capacity change from 0 to 2048 [ 77.668638][ T5587] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 77.678599][ T5587] EXT4-fs (loop3): group descriptors corrupted! [ 77.736398][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.816366][ T5596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.644'. [ 77.882833][ T5601] loop0: detected capacity change from 0 to 512 [ 77.890553][ T5601] ext4: Unknown parameter 'dont_hash' [ 77.919150][ T5604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.647'. [ 78.107214][ T5616] loop4: detected capacity change from 0 to 2048 [ 78.115225][ T5616] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 78.125147][ T5616] EXT4-fs (loop4): group descriptors corrupted! [ 78.169537][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.285594][ T5622] loop4: detected capacity change from 0 to 512 [ 78.315591][ T5622] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.653: corrupted inode contents [ 78.330704][ T5622] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.653: mark_inode_dirty error [ 78.344170][ T5622] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.653: corrupted inode contents [ 78.357764][ T5622] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.653: mark_inode_dirty error [ 78.371556][ T5622] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.653: mark inode dirty (error -117) [ 78.385920][ T5622] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 78.396132][ T5622] EXT4-fs (loop4): 1 orphan inode deleted [ 78.407772][ T5622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.439627][ T5630] FAULT_INJECTION: forcing a failure. [ 78.439627][ T5630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.452761][ T5630] CPU: 1 UID: 0 PID: 5630 Comm: syz.2.656 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.452793][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.452809][ T5630] Call Trace: [ 78.452816][ T5630] [ 78.452890][ T5630] __dump_stack+0x1d/0x30 [ 78.452914][ T5630] dump_stack_lvl+0x95/0xd0 [ 78.452941][ T5630] dump_stack+0x15/0x1b [ 78.452973][ T5630] should_fail_ex+0x265/0x280 [ 78.453001][ T5630] should_fail+0xb/0x20 [ 78.453038][ T5630] should_fail_usercopy+0x1a/0x20 [ 78.453067][ T5630] _copy_from_user+0x1c/0xb0 [ 78.453103][ T5630] vsock_connectible_setsockopt+0x590/0x6d0 [ 78.453133][ T5630] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 78.453155][ T5630] __sys_setsockopt+0x184/0x200 [ 78.453196][ T5630] __x64_sys_setsockopt+0x64/0x80 [ 78.453229][ T5630] x64_sys_call+0x21d5/0x3000 [ 78.453271][ T5630] do_syscall_64+0xca/0x2b0 [ 78.453310][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.453399][ T5630] RIP: 0033:0x7f502315f749 [ 78.453418][ T5630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.453439][ T5630] RSP: 002b:00007f5021bbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.453457][ T5630] RAX: ffffffffffffffda RBX: 00007f50233b5fa0 RCX: 00007f502315f749 [ 78.453469][ T5630] RDX: 0000000000000001 RSI: 0000000000000028 RDI: 0000000000000003 [ 78.453592][ T5630] RBP: 00007f5021bbf090 R08: 0000000000000112 R09: 0000000000000000 [ 78.453609][ T5630] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 78.453624][ T5630] R13: 00007f50233b6038 R14: 00007f50233b5fa0 R15: 00007ffc2d60cf78 [ 78.453650][ T5630] [ 78.641565][ T5632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'. [ 78.675092][ T5635] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 78.681726][ T5635] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 78.689655][ T5635] vhci_hcd vhci_hcd.0: Device attached [ 78.697208][ T5635] selinux_netlink_send: 6 callbacks suppressed [ 78.697224][ T5635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=5635 comm=syz.2.658 [ 78.715958][ T5635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=5635 comm=syz.2.658 [ 78.733944][ T5635] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 78.740492][ T5635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.748180][ T5635] vhci_hcd vhci_hcd.0: Device attached [ 78.762297][ T5641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.659'. [ 78.799152][ T5638] vhci_hcd: connection closed [ 78.799486][ T5636] vhci_hcd: connection closed [ 78.804316][ T1012] vhci_hcd vhci_hcd.2: stop threads [ 78.814417][ T1012] vhci_hcd vhci_hcd.2: release socket [ 78.820098][ T1012] vhci_hcd vhci_hcd.2: disconnect device [ 78.829879][ T5645] pimreg: entered allmulticast mode [ 78.836800][ T5645] pimreg: left allmulticast mode [ 78.845033][ T1012] vhci_hcd vhci_hcd.2: stop threads [ 78.850445][ T1012] vhci_hcd vhci_hcd.2: release socket [ 78.856013][ T1012] vhci_hcd vhci_hcd.2: disconnect device [ 78.915327][ T5652] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 78.921883][ T5652] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 78.929643][ T5652] vhci_hcd vhci_hcd.0: Device attached [ 78.939179][ T5652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=5652 comm=syz.0.663 [ 78.951732][ T5652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=5652 comm=syz.0.663 [ 78.965219][ T5652] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 78.971752][ T5652] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.979487][ T5652] vhci_hcd vhci_hcd.0: Device attached [ 79.002198][ T5656] vhci_hcd: connection closed [ 79.002274][ T5653] vhci_hcd: connection closed [ 79.007148][ T1012] vhci_hcd vhci_hcd.0: stop threads [ 79.017172][ T1012] vhci_hcd vhci_hcd.0: release socket [ 79.022569][ T1012] vhci_hcd vhci_hcd.0: disconnect device [ 79.028275][ T1012] vhci_hcd vhci_hcd.0: stop threads [ 79.033492][ T1012] vhci_hcd vhci_hcd.0: release socket [ 79.038937][ T1012] vhci_hcd vhci_hcd.0: disconnect device [ 79.069414][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.088963][ T5661] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 79.098841][ T5661] EXT4-fs (loop1): group descriptors corrupted! [ 79.134162][ T5663] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.163998][ T5663] EXT4-fs (loop4): 1 truncate cleaned up [ 79.176413][ T5663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.200322][ T5663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.210853][ T5663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.334023][ T5675] ext4: Unknown parameter 'dont_hash' [ 79.340568][ T5677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.670'. [ 79.598782][ T5686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 79.748565][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.842104][ T5697] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 79.852007][ T5697] EXT4-fs (loop4): group descriptors corrupted! [ 79.967128][ T5706] FAULT_INJECTION: forcing a failure. [ 79.967128][ T5706] name failslab, interval 1, probability 0, space 0, times 0 [ 79.979848][ T5706] CPU: 1 UID: 0 PID: 5706 Comm: syz.0.680 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.979883][ T5706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.979900][ T5706] Call Trace: [ 79.979960][ T5706] [ 79.979967][ T5706] __dump_stack+0x1d/0x30 [ 79.980051][ T5706] dump_stack_lvl+0x95/0xd0 [ 79.980073][ T5706] dump_stack+0x15/0x1b [ 79.980092][ T5706] should_fail_ex+0x265/0x280 [ 79.980122][ T5706] should_failslab+0x8c/0xb0 [ 79.980151][ T5706] kmem_cache_alloc_noprof+0x69/0x4b0 [ 79.980185][ T5706] ? audit_log_start+0x342/0x720 [ 79.980215][ T5706] audit_log_start+0x342/0x720 [ 79.980260][ T5706] ? kstrtouint+0x76/0xc0 [ 79.980286][ T5706] audit_seccomp+0x48/0x100 [ 79.980327][ T5706] ? __seccomp_filter+0x832/0x1260 [ 79.980424][ T5706] __seccomp_filter+0x843/0x1260 [ 79.980460][ T5706] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 79.980529][ T5706] ? vfs_write+0x7e8/0x960 [ 79.980574][ T5706] ? __rcu_read_unlock+0x4f/0x70 [ 79.980628][ T5706] ? __fget_files+0x184/0x1c0 [ 79.980657][ T5706] __secure_computing+0x82/0x150 [ 79.980684][ T5706] syscall_trace_enter+0xcf/0x1e0 [ 79.980708][ T5706] do_syscall_64+0xa4/0x2b0 [ 79.980752][ T5706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.980791][ T5706] RIP: 0033:0x7f101c28f749 [ 79.980808][ T5706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.980827][ T5706] RSP: 002b:00007f101acef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 79.980845][ T5706] RAX: ffffffffffffffda RBX: 00007f101c4e5fa0 RCX: 00007f101c28f749 [ 79.980857][ T5706] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 79.980928][ T5706] RBP: 00007f101acef090 R08: 0000000000000000 R09: 0000000000000000 [ 79.980943][ T5706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.980970][ T5706] R13: 00007f101c4e6038 R14: 00007f101c4e5fa0 R15: 00007ffd02b13ec8 [ 79.980990][ T5706] [ 80.240469][ T5709] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 80.243581][ T5713] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 80.247028][ T5709] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.253538][ T5713] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.261365][ T5709] vhci_hcd vhci_hcd.0: Device attached [ 80.269190][ T5713] vhci_hcd vhci_hcd.0: Device attached [ 80.283249][ T5698] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.675: corrupted inode contents [ 80.283941][ T5713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=5713 comm=syz.2.683 [ 80.307712][ T5713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=5713 comm=syz.2.683 [ 80.322031][ T5698] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.675: mark_inode_dirty error [ 80.335637][ T5713] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 80.342181][ T5713] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.349733][ T5713] vhci_hcd vhci_hcd.0: Device attached [ 80.356650][ T5719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=5719 comm=syz.0.681 [ 80.369054][ T5719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=5719 comm=syz.0.681 [ 80.374268][ T5698] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.675: corrupted inode contents [ 80.396643][ T5698] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.675: mark_inode_dirty error [ 80.412728][ T5698] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.675: mark inode dirty (error -117) [ 80.429608][ T5709] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 80.436269][ T5709] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.443897][ T5709] vhci_hcd vhci_hcd.0: Device attached [ 80.454110][ T5698] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 80.467229][ T5698] EXT4-fs (loop3): 1 orphan inode deleted [ 80.494246][ T5722] vhci_hcd: connection closed [ 80.494325][ T5714] vhci_hcd: connection closed [ 80.499218][ T52] vhci_hcd vhci_hcd.2: stop threads [ 80.503603][ T5698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.504024][ T52] vhci_hcd vhci_hcd.2: release socket [ 80.504051][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 80.505869][ T52] vhci_hcd vhci_hcd.2: stop threads [ 80.531626][ T5727] vhci_hcd: connection closed [ 80.532805][ T52] vhci_hcd vhci_hcd.2: release socket [ 80.532856][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 80.545914][ T5717] vhci_hcd: connection closed [ 80.558921][ T52] vhci_hcd vhci_hcd.0: stop threads [ 80.566493][ T23] usb 6-1: enqueue for inactive port 0 [ 80.569530][ T52] vhci_hcd vhci_hcd.0: release socket [ 80.579900][ T52] vhci_hcd vhci_hcd.0: disconnect device [ 80.588153][ T52] vhci_hcd vhci_hcd.0: stop threads [ 80.593463][ T52] vhci_hcd vhci_hcd.0: release socket [ 80.598983][ T52] vhci_hcd vhci_hcd.0: disconnect device [ 80.627977][ T5741] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.658012][ T5741] EXT4-fs (loop1): 1 truncate cleaned up [ 80.664406][ T5741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.685505][ T5741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.694905][ T5745] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 80.704693][ T5745] EXT4-fs (loop4): group descriptors corrupted! [ 80.711404][ T5741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.739733][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.776419][ T23] usb 6-1: enqueue for inactive port 0 [ 80.861486][ T5756] ext4: Unknown parameter 'dont_hash' [ 81.065433][ T3513] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 81.171183][ T5774] set_capacity_and_notify: 9 callbacks suppressed [ 81.171198][ T5774] loop2: detected capacity change from 0 to 2048 [ 81.185965][ T5774] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 81.195819][ T5774] EXT4-fs (loop2): group descriptors corrupted! [ 81.206485][ T3820] loop0: unable to read partition table [ 81.214561][ T3820] loop0: partition table beyond EOD, truncated [ 81.247288][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.327296][ T5769] loop0: unable to read partition table [ 81.333049][ T5769] loop0: partition table beyond EOD, truncated [ 81.339277][ T5769] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 81.378510][ T5769] serio: Serial port ttyS3 [ 81.428962][ T5782] loop1: detected capacity change from 0 to 512 [ 81.464805][ T5787] FAULT_INJECTION: forcing a failure. [ 81.464805][ T5787] name failslab, interval 1, probability 0, space 0, times 0 [ 81.477504][ T5787] CPU: 0 UID: 0 PID: 5787 Comm: syz.2.705 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.477537][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.477554][ T5787] Call Trace: [ 81.477562][ T5787] [ 81.477571][ T5787] __dump_stack+0x1d/0x30 [ 81.477601][ T5787] dump_stack_lvl+0x95/0xd0 [ 81.477691][ T5787] dump_stack+0x15/0x1b [ 81.477714][ T5787] should_fail_ex+0x265/0x280 [ 81.477744][ T5787] should_failslab+0x8c/0xb0 [ 81.477769][ T5787] kmem_cache_alloc_noprof+0x69/0x4b0 [ 81.477833][ T5787] ? prepare_creds+0x39/0x550 [ 81.477859][ T5787] prepare_creds+0x39/0x550 [ 81.477885][ T5787] lookup_user_key+0x12a/0xd10 [ 81.478030][ T5787] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 81.478064][ T5787] __se_sys_add_key+0x268/0x350 [ 81.478108][ T5787] __x64_sys_add_key+0x67/0x80 [ 81.478201][ T5787] x64_sys_call+0x2ea3/0x3000 [ 81.478228][ T5787] do_syscall_64+0xca/0x2b0 [ 81.478281][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.478342][ T5787] RIP: 0033:0x7f502315f749 [ 81.478362][ T5787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.478385][ T5787] RSP: 002b:00007f5021bbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 81.478434][ T5787] RAX: ffffffffffffffda RBX: 00007f50233b5fa0 RCX: 00007f502315f749 [ 81.478450][ T5787] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 00002000000006c0 [ 81.478465][ T5787] RBP: 00007f5021bbf090 R08: ffffffffffffffff R09: 0000000000000000 [ 81.478481][ T5787] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 81.478496][ T5787] R13: 00007f50233b6038 R14: 00007f50233b5fa0 R15: 00007ffc2d60cf78 [ 81.478568][ T5787] [ 81.661659][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 81.661702][ T29] audit: type=1326 audit(1767607187.826:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.0.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c2c2005 code=0x7ffc0000 [ 81.693049][ T29] audit: type=1326 audit(1767607187.826:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.0.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c2c2005 code=0x7ffc0000 [ 81.716485][ T29] audit: type=1326 audit(1767607187.826:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.0.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c2c2005 code=0x7ffc0000 [ 81.741116][ T5790] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 81.747663][ T5790] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 81.755565][ T5790] vhci_hcd vhci_hcd.0: Device attached [ 81.757392][ T29] audit: type=1326 audit(1767607187.846:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.0.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c2c2005 code=0x7ffc0000 [ 81.784405][ T29] audit: type=1326 audit(1767607187.846:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.0.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c2c2005 code=0x7ffc0000 [ 81.807807][ T29] audit: type=1326 audit(1767607187.866:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.0.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c2c2005 code=0x7ffc0000 [ 81.817578][ T5782] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.703: corrupted inode contents [ 81.831130][ T29] audit: type=1326 audit(1767607187.866:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.0.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c2c2005 code=0x7ffc0000 [ 81.831200][ T29] audit: type=1326 audit(1767607187.876:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.0.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c2c2005 code=0x7ffc0000 [ 81.831237][ T29] audit: type=1326 audit(1767607187.886:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.0.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c2c2005 code=0x7ffc0000 [ 81.831277][ T29] audit: type=1326 audit(1767607187.886:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.0.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101c2c2005 code=0x7ffc0000 [ 81.943036][ T5790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=5790 comm=syz.2.706 [ 81.955551][ T5790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=5790 comm=syz.2.706 [ 81.971001][ T5790] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 81.977543][ T5790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.985169][ T5790] vhci_hcd vhci_hcd.0: Device attached [ 81.991155][ T5782] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.703: mark_inode_dirty error [ 82.005573][ T23] usb 6-1: SetAddress Request (8) to port 0 [ 82.011597][ T23] usb 6-1: new SuperSpeed USB device number 8 using vhci_hcd [ 82.023297][ T5782] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.703: corrupted inode contents [ 82.035907][ T5801] __nla_validate_parse: 6 callbacks suppressed [ 82.035922][ T5801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.709'. [ 82.047662][ T3013] loop0: unable to read partition table [ 82.062158][ T5802] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 82.068779][ T5802] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 82.075546][ T3013] loop0: partition table beyond EOD, truncated [ 82.076542][ T5802] vhci_hcd vhci_hcd.0: Device attached [ 82.096788][ T5806] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 82.103343][ T5806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.111004][ T5806] vhci_hcd vhci_hcd.0: Device attached [ 82.122795][ T5782] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.703: mark_inode_dirty error [ 82.136133][ T5810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'. [ 82.147090][ T5807] vhci_hcd: connection closed [ 82.147284][ T2359] vhci_hcd vhci_hcd.3: stop threads [ 82.157302][ T2359] vhci_hcd vhci_hcd.3: release socket [ 82.162706][ T2359] vhci_hcd vhci_hcd.3: disconnect device [ 82.168470][ T5791] vhci_hcd: connection reset by peer [ 82.174028][ T5797] vhci_hcd: connection closed [ 82.176153][ T5782] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.703: mark inode dirty (error -117) [ 82.196769][ T2359] vhci_hcd vhci_hcd.2: stop threads [ 82.202028][ T2359] vhci_hcd vhci_hcd.2: release socket [ 82.207457][ T2359] vhci_hcd vhci_hcd.2: disconnect device [ 82.215030][ T5782] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 82.228622][ T2359] vhci_hcd vhci_hcd.2: stop threads [ 82.228642][ T2359] vhci_hcd vhci_hcd.2: release socket [ 82.228666][ T2359] vhci_hcd vhci_hcd.2: disconnect device [ 82.248632][ T5782] EXT4-fs (loop1): 1 orphan inode deleted [ 82.251414][ T3013] loop0: unable to read partition table [ 82.260548][ T3013] loop0: partition table beyond EOD, truncated [ 82.270045][ T5803] vhci_hcd: connection closed [ 82.270506][ T2359] vhci_hcd vhci_hcd.3: stop threads [ 82.280678][ T2359] vhci_hcd vhci_hcd.3: release socket [ 82.283865][ T5782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.286227][ T2359] vhci_hcd vhci_hcd.3: disconnect device [ 82.334707][ T5822] loop0: detected capacity change from 0 to 512 [ 82.347826][ T5820] loop4: detected capacity change from 0 to 2048 [ 82.360471][ T5822] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.371505][ T5822] EXT4-fs (loop0): 1 truncate cleaned up [ 82.378338][ T5822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.393067][ T5820] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 82.403003][ T5820] EXT4-fs (loop4): group descriptors corrupted! [ 82.424000][ T5822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.443021][ T5822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.535319][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.652224][ T5837] loop4: detected capacity change from 0 to 512 [ 82.676577][ T5837] ext4: Unknown parameter 'dont_hash' [ 82.794532][ T5844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.722'. [ 82.891059][ T5849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.724'. [ 82.969255][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.002104][ T5854] loop0: detected capacity change from 0 to 2048 [ 83.009590][ T5854] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 83.019379][ T5854] EXT4-fs (loop0): group descriptors corrupted! [ 83.053463][ T5856] FAULT_INJECTION: forcing a failure. [ 83.053463][ T5856] name failslab, interval 1, probability 0, space 0, times 0 [ 83.066186][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz.3.727 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.066293][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.066369][ T5856] Call Trace: [ 83.066377][ T5856] [ 83.066386][ T5856] __dump_stack+0x1d/0x30 [ 83.066486][ T5856] dump_stack_lvl+0x95/0xd0 [ 83.066510][ T5856] dump_stack+0x15/0x1b [ 83.066530][ T5856] should_fail_ex+0x265/0x280 [ 83.066552][ T5856] should_failslab+0x8c/0xb0 [ 83.066578][ T5856] kmem_cache_alloc_noprof+0x69/0x4b0 [ 83.066617][ T5856] ? security_inode_alloc+0x37/0x100 [ 83.066647][ T5856] security_inode_alloc+0x37/0x100 [ 83.066673][ T5856] inode_init_always_gfp+0x4b7/0x500 [ 83.066704][ T5856] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 83.066790][ T5856] alloc_inode+0x58/0x170 [ 83.066815][ T5856] new_inode+0x1d/0xe0 [ 83.066844][ T5856] shmem_get_inode+0x246/0x750 [ 83.066882][ T5856] __shmem_file_setup+0x113/0x210 [ 83.066982][ T5856] shmem_file_setup+0x3b/0x50 [ 83.067105][ T5856] __se_sys_memfd_create+0x2f7/0x6b0 [ 83.067177][ T5856] __x64_sys_memfd_create+0x31/0x40 [ 83.067255][ T5856] x64_sys_call+0x28cb/0x3000 [ 83.067326][ T5856] do_syscall_64+0xca/0x2b0 [ 83.067365][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.067460][ T5856] RIP: 0033:0x7f1b01bff749 [ 83.067478][ T5856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.067502][ T5856] RSP: 002b:00007f1b00666d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 83.067526][ T5856] RAX: ffffffffffffffda RBX: 0000000000004094 RCX: 00007f1b01bff749 [ 83.067542][ T5856] RDX: 00007f1b00666dec RSI: 0000000000000000 RDI: 00007f1b01c84960 [ 83.067554][ T5856] RBP: 00002000000040c0 R08: 00007f1b00666b07 R09: 0000000000000000 [ 83.067630][ T5856] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 83.067642][ T5856] R13: 00007f1b00666dec R14: 00007f1b00666df0 R15: 00007ffce914d1b8 [ 83.067661][ T5856] [ 83.444415][ T5870] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 83.450973][ T5870] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 83.458796][ T5870] vhci_hcd vhci_hcd.0: Device attached [ 83.468016][ T5873] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 83.474572][ T5873] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 83.482379][ T5873] vhci_hcd vhci_hcd.0: Device attached [ 83.488801][ T5870] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 83.495384][ T5870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.502951][ T5870] vhci_hcd vhci_hcd.0: Device attached [ 83.521033][ T5862] loop0: detected capacity change from 0 to 512 [ 83.554466][ T5878] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 83.554780][ T5884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.733'. [ 83.561008][ T5878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.561414][ T5878] vhci_hcd vhci_hcd.0: Device attached [ 83.579576][ T5876] vhci_hcd: connection closed [ 83.584061][ T5871] vhci_hcd: connection closed [ 83.593492][ T12] vhci_hcd vhci_hcd.1: stop threads [ 83.603577][ T12] vhci_hcd vhci_hcd.1: release socket [ 83.609083][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 83.629232][ T12] vhci_hcd vhci_hcd.1: stop threads [ 83.634470][ T12] vhci_hcd vhci_hcd.1: release socket [ 83.636666][ T5862] /dev/loop0: Can't open blockdev [ 83.639949][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 83.652093][ T5882] vhci_hcd: connection closed [ 83.652365][ T5874] vhci_hcd: connection closed [ 83.657372][ T12] vhci_hcd vhci_hcd.3: stop threads [ 83.667405][ T12] vhci_hcd vhci_hcd.3: release socket [ 83.672807][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 83.689408][ T12] vhci_hcd vhci_hcd.3: stop threads [ 83.694661][ T12] vhci_hcd vhci_hcd.3: release socket [ 83.700197][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 83.706093][ T5889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.735'. [ 83.781535][ T5895] loop2: detected capacity change from 0 to 512 [ 83.796935][ T5895] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.801005][ T5897] loop4: detected capacity change from 0 to 2048 [ 83.816190][ T5897] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 83.826020][ T5897] EXT4-fs (loop4): group descriptors corrupted! [ 83.828594][ T5895] EXT4-fs (loop2): 1 truncate cleaned up [ 83.856172][ T5895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.887341][ T5895] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 83.902940][ T5895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.913434][ T5895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.933595][ T5903] loop4: detected capacity change from 0 to 8192 [ 83.990440][ T3324] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 83.998406][ T3324] FAT-fs (loop4): Filesystem has been set read-only [ 84.144598][ T5915] ext4: Unknown parameter 'dont_hash' [ 84.157481][ T5917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.745'. [ 84.174288][ T5919] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.746: bad orphan inode 134217728 [ 84.185819][ T5919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.228381][ T5924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.747'. [ 84.297384][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.412801][ T5933] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 84.422732][ T5933] EXT4-fs (loop0): group descriptors corrupted! [ 84.456904][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.562797][ T5942] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 84.569362][ T5942] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 84.577244][ T5942] vhci_hcd vhci_hcd.0: Device attached [ 84.605864][ T5942] selinux_netlink_send: 6 callbacks suppressed [ 84.605879][ T5942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=5942 comm=syz.0.754 [ 84.624570][ T5942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=5942 comm=syz.0.754 [ 84.666802][ T5937] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.752: corrupted inode contents [ 84.679593][ T5942] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 84.686217][ T5942] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.693743][ T5942] vhci_hcd vhci_hcd.0: Device attached [ 84.700362][ T5937] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.752: mark_inode_dirty error [ 84.716433][ T5937] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.752: corrupted inode contents [ 84.729642][ T5937] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.752: mark_inode_dirty error [ 84.742841][ T5937] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.752: mark inode dirty (error -117) [ 84.756781][ T5937] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 84.767608][ T5937] EXT4-fs (loop4): 1 orphan inode deleted [ 84.793430][ T5950] vhci_hcd: connection closed [ 84.793588][ T12] vhci_hcd vhci_hcd.0: stop threads [ 84.802018][ T5937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.803656][ T12] vhci_hcd vhci_hcd.0: release socket [ 84.803680][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 84.803701][ T5943] vhci_hcd: connection closed [ 84.831352][ T12] vhci_hcd vhci_hcd.0: stop threads [ 84.841318][ T12] vhci_hcd vhci_hcd.0: release socket [ 84.846762][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 84.977014][ T5965] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 84.983610][ T5965] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 84.991519][ T5965] vhci_hcd vhci_hcd.0: Device attached [ 85.003587][ T5965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=5965 comm=syz.1.759 [ 85.016055][ T5965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=5965 comm=syz.1.759 [ 85.030268][ T5969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 85.066434][ T5965] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 85.073064][ T5965] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.080682][ T5965] vhci_hcd vhci_hcd.0: Device attached [ 85.109905][ T5972] vhci_hcd: connection closed [ 85.110106][ T1012] vhci_hcd vhci_hcd.1: stop threads [ 85.116330][ T5966] vhci_hcd: connection closed [ 85.120129][ T1012] vhci_hcd vhci_hcd.1: release socket [ 85.130281][ T1012] vhci_hcd vhci_hcd.1: disconnect device [ 85.136112][ T1012] vhci_hcd vhci_hcd.1: stop threads [ 85.141352][ T1012] vhci_hcd vhci_hcd.1: release socket [ 85.146806][ T1012] vhci_hcd vhci_hcd.1: disconnect device [ 85.168833][ T5980] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.178798][ T5980] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.227399][ T5980] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.237331][ T5980] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.276362][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.288627][ T5980] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.298442][ T5980] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.319896][ T5983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.338603][ T5983] EXT4-fs (loop4): 1 truncate cleaned up [ 85.355766][ T5983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.370897][ T5986] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 85.380742][ T5986] EXT4-fs (loop0): group descriptors corrupted! [ 85.397970][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.398338][ T5980] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.406905][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.416182][ T5980] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.509569][ T31] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.517919][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.536429][ T31] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.544673][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.557363][ T31] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.565618][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.578133][ T31] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.586391][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.681423][ T6001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.709622][ T6005] ext4: Unknown parameter 'dont_hash' [ 85.776483][ T6001] serio: Serial port ttyS3 [ 85.966223][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.996103][ T6019] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 86.002720][ T6019] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.010478][ T6019] vhci_hcd vhci_hcd.0: Device attached [ 86.034217][ T6019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6019 comm=syz.4.776 [ 86.046667][ T6019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6019 comm=syz.4.776 [ 86.088219][ T6025] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 86.090425][ T6016] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.775: corrupted inode contents [ 86.094782][ T6025] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.094837][ T6025] vhci_hcd vhci_hcd.0: Device attached [ 86.130180][ T6016] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.775: mark_inode_dirty error [ 86.142482][ T6024] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 86.152364][ T6024] EXT4-fs (loop2): group descriptors corrupted! [ 86.167018][ T6016] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.775: corrupted inode contents [ 86.174242][ T6026] vhci_hcd: connection closed [ 86.180957][ T6016] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.775: mark_inode_dirty error [ 86.181079][ T6020] vhci_hcd: connection closed [ 86.186617][ T2450] vhci_hcd vhci_hcd.4: stop threads [ 86.186647][ T2450] vhci_hcd vhci_hcd.4: release socket [ 86.186666][ T2450] vhci_hcd vhci_hcd.4: disconnect device [ 86.186883][ T2450] vhci_hcd vhci_hcd.4: stop threads [ 86.186900][ T2450] vhci_hcd vhci_hcd.4: release socket [ 86.186922][ T2450] vhci_hcd vhci_hcd.4: disconnect device [ 86.240829][ T6016] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.775: mark inode dirty (error -117) [ 86.261170][ T6016] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 86.283231][ T6016] EXT4-fs (loop3): 1 orphan inode deleted [ 86.301692][ T6016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.496500][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.554416][ T6038] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 86.560987][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.568980][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 86.588095][ T6038] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6038 comm=syz.1.781 [ 86.600613][ T6038] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6038 comm=syz.1.781 [ 86.614222][ T6038] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 86.620821][ T6038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.628512][ T6038] vhci_hcd vhci_hcd.0: Device attached [ 86.660362][ T6043] vhci_hcd: connection closed [ 86.660424][ T6039] vhci_hcd: connection closed [ 86.665303][ T1012] vhci_hcd vhci_hcd.1: stop threads [ 86.675843][ T1012] vhci_hcd vhci_hcd.1: release socket [ 86.681241][ T1012] vhci_hcd vhci_hcd.1: disconnect device [ 86.688646][ T1012] vhci_hcd vhci_hcd.1: stop threads [ 86.693897][ T1012] vhci_hcd vhci_hcd.1: release socket [ 86.699406][ T1012] vhci_hcd vhci_hcd.1: disconnect device [ 86.810983][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.832849][ T6059] set_capacity_and_notify: 11 callbacks suppressed [ 86.832864][ T6059] loop0: detected capacity change from 0 to 512 [ 86.849064][ T6059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.863725][ T6059] EXT4-fs (loop0): 1 truncate cleaned up [ 86.885351][ T6059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.917846][ T6065] FAULT_INJECTION: forcing a failure. [ 86.917846][ T6065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.923012][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.931024][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.4.788 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.931195][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.931280][ T6065] Call Trace: [ 86.931300][ T6065] [ 86.931321][ T6065] __dump_stack+0x1d/0x30 [ 86.931440][ T6065] dump_stack_lvl+0x95/0xd0 [ 86.931511][ T6065] dump_stack+0x15/0x1b [ 86.931574][ T6065] should_fail_ex+0x265/0x280 [ 86.931696][ T6065] should_fail+0xb/0x20 [ 86.931759][ T6065] should_fail_usercopy+0x1a/0x20 [ 86.931841][ T6065] _copy_to_user+0x20/0xa0 [ 86.931932][ T6065] simple_read_from_buffer+0xb5/0x130 [ 86.932021][ T6065] proc_fail_nth_read+0x10e/0x150 [ 86.932188][ T6065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.932279][ T6065] vfs_read+0x1a8/0x770 [ 86.932332][ T6065] ? __rcu_read_unlock+0x4f/0x70 [ 86.932402][ T6065] ? __fget_files+0x184/0x1c0 [ 86.932479][ T6065] ? mutex_lock+0x58/0x90 [ 86.932675][ T6065] ksys_read+0xda/0x1a0 [ 86.932740][ T6065] __x64_sys_read+0x40/0x50 [ 86.932799][ T6065] x64_sys_call+0x2889/0x3000 [ 86.932886][ T6065] do_syscall_64+0xca/0x2b0 [ 86.933038][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.933094][ T6065] RIP: 0033:0x7f88121ce15c [ 86.933142][ T6065] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 86.933187][ T6065] RSP: 002b:00007f8810c37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.933246][ T6065] RAX: ffffffffffffffda RBX: 00007f8812425fa0 RCX: 00007f88121ce15c [ 86.933280][ T6065] RDX: 000000000000000f RSI: 00007f8810c370a0 RDI: 0000000000000004 [ 86.933313][ T6065] RBP: 00007f8810c37090 R08: 0000000000000000 R09: 0000000000000000 [ 86.933434][ T6065] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.933484][ T6065] R13: 00007f8812426038 R14: 00007f8812425fa0 R15: 00007ffe157e2f38 [ 86.933546][ T6065] [ 87.134538][ T23] usb 6-1: device descriptor read/8, error -110 [ 87.137043][ T6067] loop4: detected capacity change from 0 to 2048 [ 87.147410][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.163045][ T6067] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 87.172839][ T6067] EXT4-fs (loop4): group descriptors corrupted! [ 87.213815][ T6073] loop4: detected capacity change from 0 to 512 [ 87.220316][ T6069] loop3: detected capacity change from 0 to 512 [ 87.236945][ T6073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.246827][ T23] usb 6-1: new SuperSpeed USB device number 8 using vhci_hcd [ 87.254074][ T6069] ext4: Unknown parameter 'dont_hash' [ 87.266261][ T6076] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 87.272899][ T6076] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 87.275506][ T23] usb 6-1: enqueue for inactive port 0 [ 87.280701][ T6076] vhci_hcd vhci_hcd.0: Device attached [ 87.292481][ T6073] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 87.295659][ T23] usb 6-1: enqueue for inactive port 0 [ 87.309296][ T6073] EXT4-fs (loop4): 1 truncate cleaned up [ 87.321241][ T6073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.328304][ T6076] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6076 comm=syz.1.794 [ 87.346171][ T6076] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6076 comm=syz.1.794 [ 87.363308][ T23] usb 6-1: enqueue for inactive port 0 [ 87.376438][ T29] kauditd_printk_skb: 686 callbacks suppressed [ 87.376456][ T29] audit: type=1400 audit(1767607193.536:3454): avc: denied { write } for pid=6071 comm="syz.4.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.408134][ T6082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 87.414684][ T6082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.422289][ T6082] vhci_hcd vhci_hcd.0: Device attached [ 87.436518][ T6084] vhci_hcd: connection closed [ 87.436595][ T1012] vhci_hcd vhci_hcd.1: stop threads [ 87.446592][ T1012] vhci_hcd vhci_hcd.1: release socket [ 87.452043][ T1012] vhci_hcd vhci_hcd.1: disconnect device [ 87.458210][ T6077] vhci_hcd: connection closed [ 87.458555][ T1012] vhci_hcd vhci_hcd.1: stop threads [ 87.468495][ T1012] vhci_hcd vhci_hcd.1: release socket [ 87.473945][ T1012] vhci_hcd vhci_hcd.1: disconnect device [ 87.480209][ T23] usb usb6-port1: attempt power cycle [ 87.521679][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.565626][ T3513] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 87.672768][ T6097] __nla_validate_parse: 6 callbacks suppressed [ 87.672786][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.797'. [ 87.724274][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.799422][ T29] audit: type=1326 audit(1767607193.956:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 87.823690][ T29] audit: type=1326 audit(1767607193.956:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 87.847190][ T29] audit: type=1326 audit(1767607193.956:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 87.852704][ T6102] loop4: detected capacity change from 0 to 512 [ 87.870546][ T29] audit: type=1326 audit(1767607193.956:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88121cf783 code=0x7ffc0000 [ 87.871056][ T29] audit: type=1326 audit(1767607193.986:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88121ce1ff code=0x7ffc0000 [ 87.871174][ T29] audit: type=1326 audit(1767607193.996:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f88121cf7d7 code=0x7ffc0000 [ 87.871214][ T29] audit: type=1326 audit(1767607194.006:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88121cdf90 code=0x7ffc0000 [ 87.871307][ T29] audit: type=1326 audit(1767607194.006:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88121cf34b code=0x7ffc0000 [ 88.036797][ T29] audit: type=1326 audit(1767607194.176:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6098 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f88121ce3aa code=0x7ffc0000 [ 88.062875][ T6110] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 88.069487][ T6110] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 88.077226][ T6110] vhci_hcd vhci_hcd.0: Device attached [ 88.104572][ T6114] loop3: detected capacity change from 0 to 2048 [ 88.110992][ T6110] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 88.117644][ T6110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.125337][ T6110] vhci_hcd vhci_hcd.0: Device attached [ 88.132838][ T6114] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 88.142829][ T6114] EXT4-fs (loop3): group descriptors corrupted! [ 88.187995][ T6116] vhci_hcd: connection closed [ 88.188242][ T12] vhci_hcd vhci_hcd.1: stop threads [ 88.188381][ T6111] vhci_hcd: connection closed [ 88.193117][ T12] vhci_hcd vhci_hcd.1: release socket [ 88.208366][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 88.233862][ T12] vhci_hcd vhci_hcd.1: stop threads [ 88.237845][ T6102] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.798: corrupted inode contents [ 88.239148][ T12] vhci_hcd vhci_hcd.1: release socket [ 88.239172][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 88.243143][ T6124] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 88.258292][ T6102] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.798: mark_inode_dirty error [ 88.284228][ T6102] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.798: corrupted inode contents [ 88.297683][ T6102] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.798: mark_inode_dirty error [ 88.311771][ T6102] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.798: mark inode dirty (error -117) [ 88.326506][ T6102] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 88.336403][ T6102] EXT4-fs (loop4): 1 orphan inode deleted [ 88.348978][ T6102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.739699][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.002437][ T6138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.808'. [ 89.052633][ T6140] loop1: detected capacity change from 0 to 512 [ 89.080168][ T6140] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.098936][ T6146] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 89.105494][ T6146] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.113378][ T6146] vhci_hcd vhci_hcd.0: Device attached [ 89.114859][ T6140] EXT4-fs (loop1): 1 truncate cleaned up [ 89.133190][ T6140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.154127][ T6150] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 89.160670][ T6150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.168429][ T6150] vhci_hcd vhci_hcd.0: Device attached [ 89.175109][ T6154] loop4: detected capacity change from 0 to 512 [ 89.181867][ T6151] vhci_hcd: connection closed [ 89.182100][ T827] vhci_hcd vhci_hcd.3: stop threads [ 89.186323][ T6148] vhci_hcd: connection closed [ 89.187039][ T827] vhci_hcd vhci_hcd.3: release socket [ 89.202270][ T827] vhci_hcd vhci_hcd.3: disconnect device [ 89.208744][ T6154] ext4: Unknown parameter 'dont_hash' [ 89.214431][ T827] vhci_hcd vhci_hcd.3: stop threads [ 89.219733][ T827] vhci_hcd vhci_hcd.3: release socket [ 89.225203][ T827] vhci_hcd vhci_hcd.3: disconnect device [ 89.225516][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 89.248687][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.265133][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.319698][ T6160] loop0: detected capacity change from 0 to 2048 [ 89.331678][ T6160] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 89.341493][ T6160] EXT4-fs (loop0): group descriptors corrupted! [ 89.506143][ T6165] loop0: detected capacity change from 0 to 512 [ 89.529837][ T6165] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.817: corrupted inode contents [ 89.543674][ T6165] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.817: mark_inode_dirty error [ 89.558773][ T6165] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.817: corrupted inode contents [ 89.571663][ T6165] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.817: mark_inode_dirty error [ 89.584597][ T6165] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.817: mark inode dirty (error -117) [ 89.597980][ T6165] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 89.607801][ T6165] EXT4-fs (loop0): 1 orphan inode deleted [ 89.615680][ T6165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.715135][ T6169] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 89.721685][ T6169] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.729449][ T6169] vhci_hcd vhci_hcd.0: Device attached [ 89.737498][ T6169] selinux_netlink_send: 4 callbacks suppressed [ 89.737514][ T6169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6169 comm=syz.3.818 [ 89.756094][ T6169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6169 comm=syz.3.818 [ 89.769654][ T6169] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 89.776187][ T6169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.783777][ T6169] vhci_hcd vhci_hcd.0: Device attached [ 89.791676][ T6172] vhci_hcd: connection closed [ 89.791898][ T12] vhci_hcd vhci_hcd.3: stop threads [ 89.798903][ T6170] vhci_hcd: connection closed [ 89.801942][ T12] vhci_hcd vhci_hcd.3: release socket [ 89.812092][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 89.818015][ T12] vhci_hcd vhci_hcd.3: stop threads [ 89.823283][ T12] vhci_hcd vhci_hcd.3: release socket [ 89.828711][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 89.838763][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.026888][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.822'. [ 90.152113][ T6194] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 90.161914][ T6194] EXT4-fs (loop1): group descriptors corrupted! [ 90.201322][ T6202] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 90.207893][ T6202] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 90.215618][ T6202] vhci_hcd vhci_hcd.0: Device attached [ 90.225141][ T6202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6202 comm=syz.1.829 [ 90.237652][ T6202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6202 comm=syz.1.829 [ 90.252910][ T6202] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 90.259453][ T6202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.267159][ T6202] vhci_hcd vhci_hcd.0: Device attached [ 90.273971][ T6206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.278435][ T6207] vhci_hcd: connection closed [ 90.284154][ T31] vhci_hcd vhci_hcd.1: stop threads [ 90.284600][ T23] usb usb6-port1: unable to enumerate USB device [ 90.288931][ T31] vhci_hcd vhci_hcd.1: release socket [ 90.305943][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 90.312094][ T6203] vhci_hcd: connection closed [ 90.312621][ T31] vhci_hcd vhci_hcd.1: stop threads [ 90.322615][ T31] vhci_hcd vhci_hcd.1: release socket [ 90.328148][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 90.334444][ T6206] EXT4-fs (loop4): 1 truncate cleaned up [ 90.354674][ T6206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.388411][ T6206] netlink: 8 bytes leftover after parsing attributes in process `ÿ'. [ 90.400117][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.423055][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.442463][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.835'. [ 90.468765][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.515712][ T6223] ext4: Unknown parameter 'dont_hash' [ 90.535704][ T6226] EXT4-fs: Ignoring removed oldalloc option [ 90.559496][ T6226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.610339][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.714864][ T6236] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 90.724824][ T6236] EXT4-fs (loop2): group descriptors corrupted! [ 90.758874][ T6239] EXT4-fs: Ignoring removed oldalloc option [ 90.827226][ T6242] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 90.833782][ T6242] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 90.841597][ T6242] vhci_hcd vhci_hcd.0: Device attached [ 90.857446][ T6242] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6242 comm=syz.2.842 [ 90.869883][ T6242] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6242 comm=syz.2.842 [ 90.890597][ T6242] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 90.897143][ T6242] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.904778][ T6242] vhci_hcd vhci_hcd.0: Device attached [ 90.912653][ T6246] SELinux: failed to load policy [ 90.938047][ T6246] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.945596][ T6247] vhci_hcd: connection closed [ 90.971251][ T6243] vhci_hcd: connection closed [ 90.985686][ T31] vhci_hcd vhci_hcd.2: stop threads [ 90.995639][ T31] vhci_hcd vhci_hcd.2: release socket [ 91.001169][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 91.064251][ T31] vhci_hcd vhci_hcd.2: stop threads [ 91.069528][ T31] vhci_hcd vhci_hcd.2: release socket [ 91.074933][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 91.115500][ T10] usb 6-1: enqueue for inactive port 0 [ 91.211066][ T6262] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.844: corrupted inode contents [ 91.224504][ T6262] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.844: mark_inode_dirty error [ 91.243801][ T6262] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.844: corrupted inode contents [ 91.258151][ T6262] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.844: mark_inode_dirty error [ 91.271523][ T6262] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.844: mark inode dirty (error -117) [ 91.287521][ T6262] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 91.297736][ T6262] EXT4-fs (loop1): 1 orphan inode deleted [ 91.327019][ T10] usb 6-1: enqueue for inactive port 0 [ 91.357668][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.847'. [ 91.469461][ T6270] syz.0.849: attempt to access beyond end of device [ 91.469461][ T6270] loop0: rw=2049, sector=169, nr_sectors = 72 limit=128 [ 91.483246][ T6270] syz.0.849: attempt to access beyond end of device [ 91.483246][ T6270] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 91.505709][ T6270] syz.0.849: attempt to access beyond end of device [ 91.505709][ T6270] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 91.522745][ T6270] syz.0.849: attempt to access beyond end of device [ 91.522745][ T6270] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 91.542149][ T6270] syz.0.849: attempt to access beyond end of device [ 91.542149][ T6270] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 91.555619][ T6270] syz.0.849: attempt to access beyond end of device [ 91.555619][ T6270] loop0: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 91.572764][ T6270] syz.0.849: attempt to access beyond end of device [ 91.572764][ T6270] loop0: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 91.586305][ T6270] syz.0.849: attempt to access beyond end of device [ 91.586305][ T6270] loop0: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 91.600068][ T6270] syz.0.849: attempt to access beyond end of device [ 91.600068][ T6270] loop0: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 91.613744][ T6270] syz.0.849: attempt to access beyond end of device [ 91.613744][ T6270] loop0: rw=2049, sector=377, nr_sectors = 8 limit=128 [ 91.668103][ T6280] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 91.678041][ T6280] EXT4-fs (loop2): group descriptors corrupted! [ 91.707133][ T6284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 91.713737][ T6284] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 91.721569][ T6284] vhci_hcd vhci_hcd.0: Device attached [ 91.739623][ T6284] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6284 comm=syz.0.854 [ 91.752129][ T6284] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6284 comm=syz.0.854 [ 91.767963][ T6284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 91.774534][ T6284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.782180][ T6284] vhci_hcd vhci_hcd.0: Device attached [ 91.806344][ T6290] vhci_hcd: connection closed [ 91.806442][ T6285] vhci_hcd: connection closed [ 91.811228][ T2450] vhci_hcd vhci_hcd.0: stop threads [ 91.821324][ T2450] vhci_hcd vhci_hcd.0: release socket [ 91.825787][ T6296] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 91.826972][ T2450] vhci_hcd vhci_hcd.0: disconnect device [ 91.841954][ T2450] vhci_hcd vhci_hcd.0: stop threads [ 91.847234][ T2450] vhci_hcd vhci_hcd.0: release socket [ 91.852710][ T2450] vhci_hcd vhci_hcd.0: disconnect device [ 91.879657][ T6299] set_capacity_and_notify: 10 callbacks suppressed [ 91.879669][ T6299] loop2: detected capacity change from 0 to 512 [ 91.893273][ T6299] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.904592][ T6299] EXT4-fs (loop2): 1 truncate cleaned up [ 91.914251][ T6299] netlink: 8 bytes leftover after parsing attributes in process `ÿ'. [ 91.930723][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.939934][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.005013][ T6307] loop4: detected capacity change from 0 to 512 [ 92.014342][ T6307] ext4: Unknown parameter 'dont_hash' [ 92.027593][ T6309] netlink: 40 bytes leftover after parsing attributes in process `syz.1.860'. [ 92.053603][ T6311] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 92.060168][ T6311] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 92.067954][ T6311] vhci_hcd vhci_hcd.0: Device attached [ 92.076534][ T6311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6311 comm=syz.1.861 [ 92.089035][ T6311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6311 comm=syz.1.861 [ 92.102731][ T6311] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 92.109263][ T6311] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.116809][ T6311] vhci_hcd vhci_hcd.0: Device attached [ 92.142269][ T6314] vhci_hcd: connection closed [ 92.142574][ T1016] vhci_hcd vhci_hcd.1: stop threads [ 92.152543][ T1016] vhci_hcd vhci_hcd.1: release socket [ 92.158193][ T1016] vhci_hcd vhci_hcd.1: disconnect device [ 92.163620][ T6312] vhci_hcd: connection closed [ 92.164267][ T1016] vhci_hcd vhci_hcd.1: stop threads [ 92.170912][ T6319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.862'. [ 92.174578][ T1016] vhci_hcd vhci_hcd.1: release socket [ 92.189033][ T1016] vhci_hcd vhci_hcd.1: disconnect device [ 92.348642][ T6327] loop0: detected capacity change from 0 to 2048 [ 92.357368][ T6327] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 92.367344][ T6327] EXT4-fs (loop0): group descriptors corrupted! [ 92.445606][ T10] usb usb6-port1: attempt power cycle [ 92.508757][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 92.508775][ T29] audit: type=1400 audit(1767607198.666:3817): avc: denied { ioctl } for pid=6334 comm="syz.2.868" path="socket:[13634]" dev="sockfs" ino=13634 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.662906][ T29] audit: type=1326 audit(1767607198.816:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c28f749 code=0x7ffc0000 [ 92.706684][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 92.890278][ T6337] loop0: detected capacity change from 0 to 512 [ 92.925764][ T29] audit: type=1326 audit(1767607198.846:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f101c28f749 code=0x7ffc0000 [ 92.949137][ T29] audit: type=1326 audit(1767607198.846:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f101c28f783 code=0x7ffc0000 [ 92.972432][ T29] audit: type=1326 audit(1767607198.926:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f101c28e1ff code=0x7ffc0000 [ 92.995603][ T29] audit: type=1400 audit(1767607198.976:3822): avc: denied { read write } for pid=6340 comm="syz.1.869" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.018960][ T29] audit: type=1400 audit(1767607198.976:3823): avc: denied { open } for pid=6340 comm="syz.1.869" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.042187][ T29] audit: type=1326 audit(1767607199.006:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f101c28f7d7 code=0x7ffc0000 [ 93.065502][ T29] audit: type=1326 audit(1767607199.016:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f101c28df90 code=0x7ffc0000 [ 93.088827][ T29] audit: type=1326 audit(1767607199.016:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f101c28f34b code=0x7ffc0000 [ 93.199615][ T6347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.871'. [ 93.299761][ T6354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.873'. [ 93.301784][ T6337] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.867: corrupted inode contents [ 93.325702][ T6337] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.867: mark_inode_dirty error [ 93.338789][ T6337] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.867: corrupted inode contents [ 93.354504][ T6337] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.867: mark_inode_dirty error [ 93.377389][ T6337] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.867: mark inode dirty (error -117) [ 93.393393][ T6337] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 93.404069][ T6361] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 93.404744][ T6337] EXT4-fs (loop0): 1 orphan inode deleted [ 93.410620][ T6361] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 93.410773][ T6361] vhci_hcd vhci_hcd.0: Device attached [ 93.451865][ T6361] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 93.458453][ T6361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.466123][ T6361] vhci_hcd vhci_hcd.0: Device attached [ 93.478476][ T6368] vhci_hcd: connection closed [ 93.478644][ T2450] vhci_hcd vhci_hcd.1: stop threads [ 93.488658][ T2450] vhci_hcd vhci_hcd.1: release socket [ 93.494057][ T2450] vhci_hcd vhci_hcd.1: disconnect device [ 93.499735][ T6363] vhci_hcd: connection closed [ 93.500525][ T2450] vhci_hcd vhci_hcd.1: stop threads [ 93.510580][ T2450] vhci_hcd vhci_hcd.1: release socket [ 93.516080][ T2450] vhci_hcd vhci_hcd.1: disconnect device [ 93.551545][ T6372] loop3: detected capacity change from 0 to 512 [ 93.561813][ T6372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.581566][ T6372] EXT4-fs (loop3): 1 truncate cleaned up [ 93.597314][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.608104][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.633821][ T6375] loop2: detected capacity change from 0 to 2048 [ 93.646043][ T6375] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 93.656167][ T6375] EXT4-fs (loop2): group descriptors corrupted! [ 93.694315][ T6377] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 93.700922][ T6377] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 93.708789][ T6377] vhci_hcd vhci_hcd.0: Device attached [ 93.720481][ T6381] loop2: detected capacity change from 0 to 128 [ 93.723076][ T6377] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 93.733329][ T6377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.740951][ T6377] vhci_hcd vhci_hcd.0: Device attached [ 93.750360][ T6381] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.793153][ T6382] vhci_hcd: connection closed [ 93.793381][ T2450] vhci_hcd vhci_hcd.0: stop threads [ 93.801756][ T6378] vhci_hcd: connection closed [ 93.803528][ T2450] vhci_hcd vhci_hcd.0: release socket [ 93.803552][ T2450] vhci_hcd vhci_hcd.0: disconnect device [ 93.824003][ T1012] vhci_hcd vhci_hcd.0: stop threads [ 93.829335][ T1012] vhci_hcd vhci_hcd.0: release socket [ 93.834864][ T1012] vhci_hcd vhci_hcd.0: disconnect device [ 93.844356][ T6388] FAULT_INJECTION: forcing a failure. [ 93.844356][ T6388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.857469][ T6388] CPU: 1 UID: 0 PID: 6388 Comm: syz.2.882 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.857569][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.857582][ T6388] Call Trace: [ 93.857588][ T6388] [ 93.857597][ T6388] __dump_stack+0x1d/0x30 [ 93.857626][ T6388] dump_stack_lvl+0x95/0xd0 [ 93.857648][ T6388] dump_stack+0x15/0x1b [ 93.857667][ T6388] should_fail_ex+0x265/0x280 [ 93.857758][ T6388] should_fail+0xb/0x20 [ 93.857775][ T6388] should_fail_usercopy+0x1a/0x20 [ 93.857796][ T6388] _copy_from_user+0x1c/0xb0 [ 93.857820][ T6388] kstrtouint_from_user+0x69/0xf0 [ 93.857840][ T6388] ? 0xffffffff81000000 [ 93.857913][ T6388] ? selinux_file_permission+0x1e2/0x320 [ 93.857941][ T6388] proc_fail_nth_write+0x50/0x160 [ 93.858010][ T6388] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 93.858048][ T6388] vfs_write+0x269/0x960 [ 93.858091][ T6388] ? vfs_read+0x4e6/0x770 [ 93.858104][ T6388] ? __rcu_read_unlock+0x4f/0x70 [ 93.858122][ T6388] ? __fget_files+0x184/0x1c0 [ 93.858141][ T6388] ? mutex_lock+0x58/0x90 [ 93.858220][ T6388] ksys_write+0xda/0x1a0 [ 93.858237][ T6388] __x64_sys_write+0x40/0x50 [ 93.858292][ T6388] x64_sys_call+0x2847/0x3000 [ 93.858350][ T6388] do_syscall_64+0xca/0x2b0 [ 93.858380][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.858401][ T6388] RIP: 0033:0x7f502315e1ff [ 93.858414][ T6388] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 93.858510][ T6388] RSP: 002b:00007f5021bbf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 93.858527][ T6388] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f502315e1ff [ 93.858644][ T6388] RDX: 0000000000000001 RSI: 00007f5021bbf0a0 RDI: 0000000000000004 [ 93.858654][ T6388] RBP: 00007f5021bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 93.858665][ T6388] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 93.858675][ T6388] R13: 00007f50233b6038 R14: 00007f50233b5fa0 R15: 00007ffc2d60cf78 [ 93.858692][ T6388] [ 94.087482][ T6390] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.097639][ T6390] loop2: detected capacity change from 0 to 512 [ 94.104272][ T6390] ext4: Unknown parameter 'dont_hash' [ 94.113665][ T6392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.884'. [ 94.171779][ T6397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.886'. [ 94.561229][ T6442] loop0: detected capacity change from 0 to 2048 [ 94.577056][ T6442] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 94.586927][ T6442] EXT4-fs (loop0): group descriptors corrupted! [ 94.607980][ T6436] loop1: detected capacity change from 0 to 512 [ 94.672786][ T6436] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.891: corrupted inode contents [ 94.690414][ T6436] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.891: mark_inode_dirty error [ 94.702897][ T6436] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.891: corrupted inode contents [ 94.718866][ T6436] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.891: mark_inode_dirty error [ 94.733420][ T6436] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.891: mark inode dirty (error -117) [ 94.747318][ T6436] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 94.756672][ T6436] EXT4-fs (loop1): 1 orphan inode deleted [ 94.830949][ T6455] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 94.837551][ T6455] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 94.845317][ T6455] vhci_hcd vhci_hcd.0: Device attached [ 94.854453][ T6455] selinux_netlink_send: 4 callbacks suppressed [ 94.854471][ T6455] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6455 comm=syz.0.895 [ 94.873286][ T6455] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6455 comm=syz.0.895 [ 94.886914][ T6455] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 94.893442][ T6455] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.901136][ T6455] vhci_hcd vhci_hcd.0: Device attached [ 94.927693][ T6458] vhci_hcd: connection closed [ 94.927794][ T6456] vhci_hcd: connection closed [ 94.928209][ T2450] vhci_hcd vhci_hcd.0: stop threads [ 94.942570][ T2450] vhci_hcd vhci_hcd.0: release socket [ 94.947997][ T2450] vhci_hcd vhci_hcd.0: disconnect device [ 94.953841][ T2450] vhci_hcd vhci_hcd.0: stop threads [ 94.959151][ T2450] vhci_hcd vhci_hcd.0: release socket [ 94.964569][ T2450] vhci_hcd vhci_hcd.0: disconnect device [ 94.976411][ T10] usb usb6-port1: unable to enumerate USB device [ 95.016136][ T6466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.897'. [ 95.026188][ T6468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.898'. [ 95.081681][ T6472] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.093327][ T6472] EXT4-fs (loop2): 1 truncate cleaned up [ 95.135078][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.145759][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.373884][ T6486] 9p: Bad value for 'wfdno' [ 95.391977][ T6488] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 95.416669][ T6488] ext4: Unknown parameter 'dont_hash' [ 95.470111][ T6494] EXT4-fs: Ignoring removed nobh option [ 95.487441][ T6494] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.908: corrupted inode contents [ 95.503063][ T6494] EXT4-fs (loop0): Remounting filesystem read-only [ 95.523264][ T6494] EXT4-fs (loop0): 1 truncate cleaned up [ 95.533250][ T6494] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.550742][ T6500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 95.584561][ T6502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.911'. [ 95.654276][ T6508] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.761925][ T6513] FAULT_INJECTION: forcing a failure. [ 95.761925][ T6513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.775117][ T6513] CPU: 0 UID: 0 PID: 6513 Comm: syz.2.916 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.775144][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.775210][ T6513] Call Trace: [ 95.775218][ T6513] [ 95.775227][ T6513] __dump_stack+0x1d/0x30 [ 95.775259][ T6513] dump_stack_lvl+0x95/0xd0 [ 95.775286][ T6513] dump_stack+0x15/0x1b [ 95.775317][ T6513] should_fail_ex+0x265/0x280 [ 95.775341][ T6513] should_fail+0xb/0x20 [ 95.775360][ T6513] should_fail_usercopy+0x1a/0x20 [ 95.775473][ T6513] _copy_from_user+0x1c/0xb0 [ 95.775505][ T6513] vmemdup_user+0x5e/0xd0 [ 95.775523][ T6513] con_set_unimap+0x3f/0x700 [ 95.775558][ T6513] ? selinux_capable+0x31/0x40 [ 95.775631][ T6513] ? should_fail_ex+0xdb/0x280 [ 95.775664][ T6513] vt_ioctl+0xfbb/0x18a0 [ 95.775707][ T6513] ? tty_jobctrl_ioctl+0x29e/0x810 [ 95.775739][ T6513] tty_ioctl+0x7d8/0xb80 [ 95.775812][ T6513] ? __pfx_tty_ioctl+0x10/0x10 [ 95.775838][ T6513] __se_sys_ioctl+0xce/0x140 [ 95.775878][ T6513] __x64_sys_ioctl+0x43/0x50 [ 95.775981][ T6513] x64_sys_call+0x14b0/0x3000 [ 95.776088][ T6513] do_syscall_64+0xca/0x2b0 [ 95.776127][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.776155][ T6513] RIP: 0033:0x7f502315f749 [ 95.776214][ T6513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.776238][ T6513] RSP: 002b:00007f5021bbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.776260][ T6513] RAX: ffffffffffffffda RBX: 00007f50233b5fa0 RCX: 00007f502315f749 [ 95.776272][ T6513] RDX: 0000200000000380 RSI: 0000000000004b67 RDI: 0000000000000006 [ 95.776284][ T6513] RBP: 00007f5021bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 95.776295][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.776340][ T6513] R13: 00007f50233b6038 R14: 00007f50233b5fa0 R15: 00007ffc2d60cf78 [ 95.776364][ T6513] [ 96.001324][ T6517] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 96.007933][ T6517] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 96.015774][ T6517] vhci_hcd vhci_hcd.0: Device attached [ 96.052072][ T6517] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6517 comm=syz.0.918 [ 96.064525][ T6517] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6517 comm=syz.0.918 [ 96.078324][ T6517] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 96.084945][ T6517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.092531][ T6517] vhci_hcd vhci_hcd.0: Device attached [ 96.123690][ T6525] vhci_hcd: connection closed [ 96.123788][ T6518] vhci_hcd: connection closed [ 96.124293][ T12] vhci_hcd vhci_hcd.0: stop threads [ 96.138525][ T12] vhci_hcd vhci_hcd.0: release socket [ 96.143928][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 96.149758][ T12] vhci_hcd vhci_hcd.0: stop threads [ 96.154986][ T12] vhci_hcd vhci_hcd.0: release socket [ 96.160427][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 96.238471][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.921'. [ 96.306162][ T6540] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 96.314511][ T6540] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.321337][ T6540] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.337171][ T6540] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 96.344926][ T6540] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.923: bg 0: block 15: invalid block bitmap [ 96.358622][ T6540] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 96.367953][ T6540] EXT4-fs (loop1): 1 truncate cleaned up [ 96.660777][ T6548] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.678077][ T6548] EXT4-fs (loop0): 1 truncate cleaned up [ 96.698497][ T6548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.707975][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.912275][ T6556] set_capacity_and_notify: 9 callbacks suppressed [ 96.912290][ T6556] loop2: detected capacity change from 0 to 8192 [ 96.978827][ T6560] loop3: detected capacity change from 0 to 1024 [ 96.986615][ T6560] EXT4-fs: Ignoring removed bh option [ 96.992100][ T6560] ext4: Unknown parameter 'noacl' [ 96.996764][ T6558] loop2: detected capacity change from 0 to 512 [ 97.021126][ T6558] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.043805][ T6558] netlink: 'syz.2.929': attribute type 1 has an invalid length. [ 97.113306][ T6570] !yz!: rxe_newlink: already configured on team_slave_0 [ 97.123650][ T6570] loop3: detected capacity change from 0 to 512 [ 97.133804][ T6570] ext4: Unknown parameter 'dont_hash' [ 97.165977][ T6574] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 97.172604][ T6574] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.180458][ T6574] vhci_hcd vhci_hcd.0: Device attached [ 97.189002][ T6574] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6574 comm=syz.4.934 [ 97.201407][ T6574] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6574 comm=syz.4.934 [ 97.229108][ T6574] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 97.235733][ T6574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.243385][ T6574] vhci_hcd vhci_hcd.0: Device attached [ 97.261014][ T6578] vhci_hcd: connection closed [ 97.261136][ T6575] vhci_hcd: connection closed [ 97.266020][ T12] vhci_hcd vhci_hcd.4: stop threads [ 97.276101][ T12] vhci_hcd vhci_hcd.4: release socket [ 97.281505][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 97.299137][ T12] vhci_hcd vhci_hcd.4: stop threads [ 97.304414][ T12] vhci_hcd vhci_hcd.4: release socket [ 97.309874][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 97.335215][ T6584] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 97.341825][ T6584] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.349603][ T6584] vhci_hcd vhci_hcd.0: Device attached [ 97.358073][ T6584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6584 comm=syz.2.936 [ 97.370545][ T6584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6584 comm=syz.2.936 [ 97.385616][ T6584] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 97.392159][ T6584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.399758][ T6584] vhci_hcd vhci_hcd.0: Device attached [ 97.452733][ T6588] vhci_hcd: connection closed [ 97.452836][ T1012] vhci_hcd vhci_hcd.2: stop threads [ 97.453143][ T6585] vhci_hcd: connection closed [ 97.457751][ T1012] vhci_hcd vhci_hcd.2: release socket [ 97.473105][ T1012] vhci_hcd vhci_hcd.2: disconnect device [ 97.479597][ T1012] vhci_hcd vhci_hcd.2: stop threads [ 97.485030][ T1012] vhci_hcd vhci_hcd.2: release socket [ 97.490475][ T1012] vhci_hcd vhci_hcd.2: disconnect device [ 97.496172][ T3513] usb 6-1: SetAddress Request (15) to port 0 [ 97.496200][ T3513] usb 6-1: new SuperSpeed USB device number 15 using vhci_hcd [ 97.519782][ T3513] usb 6-1: enqueue for inactive port 0 [ 97.525803][ T3513] usb 6-1: enqueue for inactive port 0 [ 97.531467][ T3513] usb 6-1: enqueue for inactive port 0 [ 97.645591][ T3513] usb 6-1: new SuperSpeed USB device number 15 using vhci_hcd [ 97.665425][ T3513] usb 6-1: enqueue for inactive port 0 [ 97.670975][ T3513] usb 6-1: enqueue for inactive port 0 [ 97.676624][ T3513] usb 6-1: enqueue for inactive port 0 [ 97.895651][ T29] kauditd_printk_skb: 2107 callbacks suppressed [ 97.895670][ T29] audit: type=1326 audit(1767607204.056:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 97.926088][ T29] audit: type=1326 audit(1767607204.056:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 97.949675][ T29] audit: type=1326 audit(1767607204.056:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 97.973483][ T29] audit: type=1326 audit(1767607204.056:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 97.996890][ T29] audit: type=1326 audit(1767607204.086:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 98.020358][ T29] audit: type=1326 audit(1767607204.086:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 98.055471][ T29] audit: type=1326 audit(1767607204.086:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 98.078874][ T29] audit: type=1326 audit(1767607204.086:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 98.102646][ T29] audit: type=1326 audit(1767607204.086:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 98.126046][ T29] audit: type=1326 audit(1767607204.086:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 98.305277][ T6616] loop0: detected capacity change from 0 to 512 [ 98.312502][ T6616] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.335187][ T6616] EXT4-fs (loop0): 1 truncate cleaned up [ 98.359214][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.368075][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.378976][ T6618] FAULT_INJECTION: forcing a failure. [ 98.378976][ T6618] name failslab, interval 1, probability 0, space 0, times 0 [ 98.391714][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.391813][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.391827][ T6618] Call Trace: [ 98.391832][ T6618] [ 98.391839][ T6618] __dump_stack+0x1d/0x30 [ 98.391866][ T6618] dump_stack_lvl+0x95/0xd0 [ 98.391895][ T6618] dump_stack+0x15/0x1b [ 98.391920][ T6618] should_fail_ex+0x265/0x280 [ 98.392024][ T6618] should_failslab+0x8c/0xb0 [ 98.392051][ T6618] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 98.392085][ T6618] ? dup_task_struct+0x5b/0x950 [ 98.392154][ T6618] dup_task_struct+0x5b/0x950 [ 98.392177][ T6618] ? copy_process+0x36c/0x1ef0 [ 98.392197][ T6618] copy_process+0x37d/0x1ef0 [ 98.392214][ T6618] ? kstrtouint+0x76/0xc0 [ 98.392266][ T6618] ? kstrtouint_from_user+0x9f/0xf0 [ 98.392294][ T6618] ? 0xffffffff81000000 [ 98.392316][ T6618] kernel_clone+0x16c/0x5c0 [ 98.392339][ T6618] ? vfs_write+0x7e8/0x960 [ 98.392359][ T6618] __x64_sys_clone+0xe6/0x120 [ 98.392442][ T6618] x64_sys_call+0x12d0/0x3000 [ 98.392484][ T6618] do_syscall_64+0xca/0x2b0 [ 98.392528][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.392615][ T6618] RIP: 0033:0x7f1b01bff749 [ 98.392629][ T6618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.392652][ T6618] RSP: 002b:00007f1b00624fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 98.392698][ T6618] RAX: ffffffffffffffda RBX: 00007f1b01e56180 RCX: 00007f1b01bff749 [ 98.392714][ T6618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004ca00200 [ 98.392758][ T6618] RBP: 00007f1b00625090 R08: 0000000000000000 R09: 0000000000000000 [ 98.392770][ T6618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 98.392781][ T6618] R13: 00007f1b01e56218 R14: 00007f1b01e56180 R15: 00007ffce914d1b8 [ 98.392803][ T6618] [ 98.715651][ T3513] usb usb6-port1: attempt power cycle [ 98.850665][ T6620] atomic_op ffff888133e1d928 conn xmit_atomic 0000000000000000 [ 98.880473][ T6620] __nla_validate_parse: 1 callbacks suppressed [ 98.880488][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 99.057693][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.949'. [ 99.196380][ T6629] loop4: detected capacity change from 0 to 512 [ 99.283988][ T6629] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.948: corrupted inode contents [ 99.306755][ T6629] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.948: mark_inode_dirty error [ 99.308684][ T6635] loop0: detected capacity change from 0 to 512 [ 99.319879][ T6629] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.948: corrupted inode contents [ 99.344674][ T6629] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.948: mark_inode_dirty error [ 99.370785][ T6629] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.948: mark inode dirty (error -117) [ 99.387488][ T6629] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 99.399974][ T6629] EXT4-fs (loop4): 1 orphan inode deleted [ 99.401042][ T6635] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.950: corrupted inode contents [ 99.419821][ T6635] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.950: mark_inode_dirty error [ 99.441310][ T6635] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.950: corrupted inode contents [ 99.456675][ T6635] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.950: mark_inode_dirty error [ 99.483363][ T6635] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.950: mark inode dirty (error -117) [ 99.506023][ T6635] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 99.528610][ T6635] EXT4-fs (loop0): 1 orphan inode deleted [ 99.893122][ T6643] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 99.899699][ T6643] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 99.907449][ T6643] vhci_hcd vhci_hcd.0: Device attached [ 99.915316][ T6643] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6643 comm=syz.4.952 [ 99.927919][ T6643] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6643 comm=syz.4.952 [ 99.942577][ T6643] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 99.949181][ T6643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.956934][ T6643] vhci_hcd vhci_hcd.0: Device attached [ 99.966839][ T6646] vhci_hcd: connection closed [ 99.967037][ T827] vhci_hcd vhci_hcd.4: stop threads [ 99.977081][ T827] vhci_hcd vhci_hcd.4: release socket [ 99.982500][ T827] vhci_hcd vhci_hcd.4: disconnect device [ 99.988366][ T6644] vhci_hcd: connection closed [ 99.988879][ T827] vhci_hcd vhci_hcd.4: stop threads [ 99.999142][ T827] vhci_hcd vhci_hcd.4: release socket [ 100.004592][ T827] vhci_hcd vhci_hcd.4: disconnect device [ 100.050125][ T3330] EXT4-fs unmount: 34 callbacks suppressed [ 100.050209][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.083012][ T6649] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 100.093952][ T6649] loop0: detected capacity change from 0 to 512 [ 100.105239][ T6649] ext4: Unknown parameter 'dont_hash' [ 100.507060][ T6657] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 100.513783][ T6657] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 100.521612][ T6657] vhci_hcd vhci_hcd.0: Device attached [ 100.530538][ T6657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6657 comm=syz.4.956 [ 100.543044][ T6657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6657 comm=syz.4.956 [ 100.556030][ T3513] usb usb6-port1: unable to enumerate USB device [ 100.561293][ T6657] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 100.568907][ T6657] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.576616][ T6657] vhci_hcd vhci_hcd.0: Device attached [ 100.606112][ T6664] FAULT_INJECTION: forcing a failure. [ 100.606112][ T6664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.619242][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.1.957 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.619269][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.619281][ T6664] Call Trace: [ 100.619287][ T6664] [ 100.619294][ T6664] __dump_stack+0x1d/0x30 [ 100.619344][ T6664] dump_stack_lvl+0x95/0xd0 [ 100.619372][ T6664] dump_stack+0x15/0x1b [ 100.619472][ T6664] should_fail_ex+0x265/0x280 [ 100.619502][ T6664] should_fail+0xb/0x20 [ 100.619527][ T6664] should_fail_usercopy+0x1a/0x20 [ 100.619596][ T6664] _copy_from_user+0x1c/0xb0 [ 100.619637][ T6664] kstrtouint_from_user+0x69/0xf0 [ 100.619666][ T6664] ? 0xffffffff81000000 [ 100.619679][ T6664] ? selinux_file_permission+0x1e2/0x320 [ 100.619793][ T6664] proc_fail_nth_write+0x50/0x160 [ 100.619828][ T6664] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.619865][ T6664] vfs_write+0x269/0x960 [ 100.619905][ T6664] ? vfs_read+0x4e6/0x770 [ 100.620001][ T6664] ? __rcu_read_unlock+0x4f/0x70 [ 100.620026][ T6664] ? __fget_files+0x184/0x1c0 [ 100.620053][ T6664] ? mutex_lock+0x58/0x90 [ 100.620106][ T6664] ksys_write+0xda/0x1a0 [ 100.620126][ T6664] __x64_sys_write+0x40/0x50 [ 100.620172][ T6664] x64_sys_call+0x2847/0x3000 [ 100.620219][ T6664] do_syscall_64+0xca/0x2b0 [ 100.620264][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.620313][ T6664] RIP: 0033:0x7f748ac9e1ff [ 100.620329][ T6664] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 100.620347][ T6664] RSP: 002b:00007f7489707030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 100.620366][ T6664] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f748ac9e1ff [ 100.620380][ T6664] RDX: 0000000000000001 RSI: 00007f74897070a0 RDI: 0000000000000004 [ 100.620396][ T6664] RBP: 00007f7489707090 R08: 0000000000000000 R09: 000000000000001c [ 100.620486][ T6664] R10: 000000000404c844 R11: 0000000000000293 R12: 0000000000000001 [ 100.620498][ T6664] R13: 00007f748aef6038 R14: 00007f748aef5fa0 R15: 00007ffe2cc78f48 [ 100.620585][ T6664] [ 100.850198][ T6660] vhci_hcd: connection closed [ 100.850304][ T6658] vhci_hcd: connection closed [ 100.850597][ T1012] vhci_hcd vhci_hcd.4: stop threads [ 100.865071][ T1012] vhci_hcd vhci_hcd.4: release socket [ 100.870577][ T1012] vhci_hcd vhci_hcd.4: disconnect device [ 100.885059][ T1012] vhci_hcd vhci_hcd.4: stop threads [ 100.890339][ T1012] vhci_hcd vhci_hcd.4: release socket [ 100.895824][ T1012] vhci_hcd vhci_hcd.4: disconnect device [ 100.919905][ T6668] loop2: detected capacity change from 0 to 2048 [ 100.938551][ T6668] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 100.948468][ T6668] EXT4-fs (loop2): group descriptors corrupted! [ 100.968400][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.960'. [ 101.071630][ T6682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 101.078187][ T6682] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.085958][ T6682] vhci_hcd vhci_hcd.0: Device attached [ 101.136366][ T6682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6682 comm=syz.0.963 [ 101.148923][ T6682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6682 comm=syz.0.963 [ 101.177140][ T6682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 101.183694][ T6682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.191379][ T6682] vhci_hcd vhci_hcd.0: Device attached [ 101.210367][ T6696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.967'. [ 101.242194][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'. [ 101.243995][ T6683] vhci_hcd: connection closed [ 101.251329][ T6692] vhci_hcd: connection closed [ 101.252609][ T2450] vhci_hcd vhci_hcd.0: stop threads [ 101.266075][ T2450] vhci_hcd vhci_hcd.0: release socket [ 101.271481][ T2450] vhci_hcd vhci_hcd.0: disconnect device [ 101.302989][ T2450] vhci_hcd vhci_hcd.0: stop threads [ 101.308330][ T2450] vhci_hcd vhci_hcd.0: release socket [ 101.313870][ T2450] vhci_hcd vhci_hcd.0: disconnect device [ 101.323858][ T6706] !yz!: rxe_newlink: already configured on team_slave_0 [ 101.333733][ T6705] loop1: detected capacity change from 0 to 2048 [ 101.344085][ T6706] ext4: Unknown parameter 'dont_hash' [ 101.356598][ T6705] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 101.366476][ T6705] EXT4-fs (loop1): group descriptors corrupted! [ 101.414798][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.972'. [ 101.550733][ T6727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.980'. [ 101.608702][ T6731] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 101.609176][ T6723] netlink: 'syz.4.978': attribute type 6 has an invalid length. [ 101.615309][ T6731] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.615572][ T6731] vhci_hcd vhci_hcd.0: Device attached [ 101.623534][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.978'. [ 101.647687][ T6731] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6731 comm=syz.2.982 [ 101.660091][ T6731] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6731 comm=syz.2.982 [ 101.674563][ T6731] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 101.676344][ T6723] bond1 (unregistering): Released all slaves [ 101.681138][ T6731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.694653][ T6731] vhci_hcd vhci_hcd.0: Device attached [ 101.700228][ T3513] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 101.701009][ T6737] netlink: 'syz.4.978': attribute type 10 has an invalid length. [ 101.714359][ T6737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.978'. [ 101.724010][ T6737] dummy0: entered promiscuous mode [ 101.729568][ T6737] dummy0: entered allmulticast mode [ 101.740545][ T6737] team0: Port device dummy0 removed [ 101.751490][ T6737] bridge0: port 3(dummy0) entered blocking state [ 101.757917][ T6737] bridge0: port 3(dummy0) entered disabled state [ 101.769427][ T6735] vhci_hcd: connection closed [ 101.769682][ T52] vhci_hcd vhci_hcd.2: stop threads [ 101.779674][ T52] vhci_hcd vhci_hcd.2: release socket [ 101.785060][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 101.791062][ T6732] vhci_hcd: connection closed [ 101.791652][ T52] vhci_hcd vhci_hcd.2: stop threads [ 101.793203][ T6740] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.796677][ T52] vhci_hcd vhci_hcd.2: release socket [ 101.817196][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 101.831372][ T6740] EXT4-fs (loop4): 1 truncate cleaned up [ 101.837558][ T6740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.869675][ T6745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.885995][ T6745] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.902663][ T6745] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 101.904695][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.942549][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.964038][ T6751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.986'. [ 102.186969][ T6763] set_capacity_and_notify: 4 callbacks suppressed [ 102.186985][ T6763] loop0: detected capacity change from 0 to 512 [ 102.452813][ T6780] loop2: detected capacity change from 0 to 128 [ 102.636550][ T6781] loop4: detected capacity change from 0 to 512 [ 102.704304][ T6791] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 102.713803][ T6791] loop2: detected capacity change from 0 to 512 [ 102.720832][ T6791] ext4: Unknown parameter 'dont_hash' [ 102.860273][ T6781] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.995: corrupted inode contents [ 102.903748][ T6781] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.995: mark_inode_dirty error [ 102.941905][ T6781] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.995: corrupted inode contents [ 102.957189][ T6805] loop0: detected capacity change from 0 to 512 [ 102.957703][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 102.957718][ T29] audit: type=1400 audit(1767607977.164:6342): avc: denied { mounton } for pid=6804 comm="syz.0.1006" path="/206/file1" dev="tmpfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.017460][ T6781] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.995: mark_inode_dirty error [ 103.032396][ T6805] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 103.040626][ T6805] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.048673][ T6781] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.995: mark inode dirty (error -117) [ 103.055233][ T6805] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 103.071429][ T6805] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 103.081025][ T6805] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1006: Failed to acquire dquot type 1 [ 103.092587][ T6781] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 103.102835][ T6805] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1006: bg 0: block 40: padding at end of block bitmap is not set [ 103.117641][ T6781] EXT4-fs (loop4): 1 orphan inode deleted [ 103.124547][ T6805] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 103.138194][ T6805] EXT4-fs (loop0): 1 truncate cleaned up [ 103.140511][ T6781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.151933][ T6805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.168565][ T29] audit: type=1326 audit(1767607977.374:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88121cdf90 code=0x7ffc0000 [ 103.187912][ T6805] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.192259][ T29] audit: type=1326 audit(1767607977.374:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88121cdf90 code=0x7ffc0000 [ 103.224216][ T29] audit: type=1326 audit(1767607977.374:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 103.247696][ T29] audit: type=1326 audit(1767607977.374:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88121cf749 code=0x7ffc0000 [ 103.274500][ T29] audit: type=1326 audit(1767607977.395:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.3.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b01bff749 code=0x7ffc0000 [ 103.281084][ T6808] loop3: detected capacity change from 0 to 512 [ 103.298095][ T29] audit: type=1326 audit(1767607977.395:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.3.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b01bff749 code=0x7ffc0000 [ 103.298246][ T29] audit: type=1326 audit(1767607977.426:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.3.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b01bff749 code=0x7ffc0000 [ 103.378819][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.450632][ T6808] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1001: corrupted inode contents [ 103.457844][ T6814] loop0: detected capacity change from 0 to 512 [ 103.470808][ T6808] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.1001: mark_inode_dirty error [ 103.484177][ T6808] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1001: corrupted inode contents [ 103.497518][ T6808] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.1001: mark_inode_dirty error [ 103.511566][ T6808] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.1001: mark inode dirty (error -117) [ 103.524762][ T6814] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.525603][ T6808] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 103.546380][ T6808] EXT4-fs (loop3): 1 orphan inode deleted [ 103.565517][ T6814] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 103.578875][ T6808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.610353][ T6814] EXT4-fs (loop0): 1 truncate cleaned up [ 103.618394][ T6814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.825842][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.841038][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.876638][ T6836] __nla_validate_parse: 6 callbacks suppressed [ 103.876651][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1014'. [ 103.936042][ T6838] loop0: detected capacity change from 0 to 512 [ 103.947650][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'. [ 103.966328][ T6838] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.014835][ T6838] EXT4-fs (loop0): 1 truncate cleaned up [ 104.041189][ T6842] loop3: detected capacity change from 0 to 2048 [ 104.050761][ T6838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.072530][ T6849] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 104.100899][ T6849] loop2: detected capacity change from 0 to 512 [ 104.116956][ T6849] ext4: Unknown parameter 'dont_hash' [ 104.128873][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.139852][ T6842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.159497][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.175698][ T6842] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1017: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 104.192734][ T6851] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 104.202523][ T6851] EXT4-fs (loop1): group descriptors corrupted! [ 104.213772][ T6842] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.223610][ T6842] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.265976][ T6842] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.275823][ T6842] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.288096][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1022'. [ 104.362015][ T6842] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.371861][ T6842] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.428053][ T6842] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.438037][ T6842] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.471160][ T6859] bio_check_eod: 91 callbacks suppressed [ 104.471173][ T6859] syz.1.1023: attempt to access beyond end of device [ 104.471173][ T6859] loop1: rw=2049, sector=169, nr_sectors = 72 limit=128 [ 104.490546][ T6859] syz.1.1023: attempt to access beyond end of device [ 104.490546][ T6859] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 104.504038][ T6859] syz.1.1023: attempt to access beyond end of device [ 104.504038][ T6859] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 104.517537][ T6859] syz.1.1023: attempt to access beyond end of device [ 104.517537][ T6859] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 104.532121][ T6859] syz.1.1023: attempt to access beyond end of device [ 104.532121][ T6859] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 104.545705][ T6859] syz.1.1023: attempt to access beyond end of device [ 104.545705][ T6859] loop1: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 104.559211][ T6859] syz.1.1023: attempt to access beyond end of device [ 104.559211][ T6859] loop1: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 104.574637][ T52] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.583080][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.585300][ T6859] syz.1.1023: attempt to access beyond end of device [ 104.585300][ T6859] loop1: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 104.603818][ T52] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.605588][ T6859] syz.1.1023: attempt to access beyond end of device [ 104.605588][ T6859] loop1: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 104.612891][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.626810][ T6859] syz.1.1023: attempt to access beyond end of device [ 104.626810][ T6859] loop1: rw=2049, sector=377, nr_sectors = 8 limit=128 [ 104.648916][ T52] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.657150][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.668412][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.677502][ T52] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.685765][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.727357][ T6868] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 104.729015][ T6867] IPVS: stopping master sync thread 6868 ... [ 104.762764][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.807028][ T6872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1027'. [ 104.866958][ T6876] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 104.873513][ T6876] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 104.881246][ T6876] vhci_hcd vhci_hcd.0: Device attached [ 104.911588][ T6876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6876 comm=syz.3.1029 [ 104.924155][ T6876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=6876 comm=syz.3.1029 [ 104.959905][ T6876] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 104.966452][ T6876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.973999][ T6876] vhci_hcd vhci_hcd.0: Device attached [ 105.021207][ T6880] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 105.031033][ T6880] EXT4-fs (loop2): group descriptors corrupted! [ 105.076246][ T6883] vhci_hcd: connection closed [ 105.076315][ T2359] vhci_hcd vhci_hcd.3: stop threads [ 105.077551][ T6877] vhci_hcd: connection closed [ 105.081613][ T2359] vhci_hcd vhci_hcd.3: release socket [ 105.096604][ T2359] vhci_hcd vhci_hcd.3: disconnect device [ 105.133426][ T2359] vhci_hcd vhci_hcd.3: stop threads [ 105.138718][ T2359] vhci_hcd vhci_hcd.3: release socket [ 105.144216][ T2359] vhci_hcd vhci_hcd.3: disconnect device [ 105.157470][ T9] usb 8-1: enqueue for inactive port 0 [ 105.236487][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1034'. [ 105.251300][ T6900] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.266777][ T6900] EXT4-fs (loop2): 1 truncate cleaned up [ 105.288749][ T6900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.358244][ T9] usb 8-1: enqueue for inactive port 0 [ 105.371107][ T6908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1039'. [ 105.382988][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.398116][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.429571][ T6909] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 105.439721][ T6909] EXT4-fs (loop0): group descriptors corrupted! [ 105.471772][ T6913] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 105.483610][ T6913] ext4: Unknown parameter 'dont_hash' [ 105.549505][ T6915] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 105.559579][ T6915] EXT4-fs (loop0): group descriptors corrupted! [ 105.623649][ T3682] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 105.925885][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1048'. [ 105.938097][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.978403][ T6945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1051'. [ 106.095475][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1049'. [ 106.230757][ T6969] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 106.240762][ T6969] EXT4-fs (loop1): group descriptors corrupted! [ 106.386373][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1058'. [ 106.511556][ T6995] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 106.526557][ T6995] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.534688][ T6995] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1063: Failed to acquire dquot type 1 [ 106.585857][ T7003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.613822][ T6995] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1063: bg 0: block 40: padding at end of block bitmap is not set [ 106.633830][ T7003] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 106.653992][ T7005] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 106.663865][ T7005] EXT4-fs (loop1): group descriptors corrupted! [ 106.671247][ T7003] EXT4-fs (loop4): 1 truncate cleaned up [ 106.678378][ T7003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.684166][ T6995] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 106.713009][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.730303][ T6995] EXT4-fs (loop0): 1 truncate cleaned up [ 106.739253][ T6995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.833126][ T3330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.973039][ T3317] ================================================================== [ 106.981183][ T3317] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 106.988346][ T3317] [ 106.990699][ T3317] write to 0xffff88810617382c of 4 bytes by task 3820 on cpu 0: [ 106.998345][ T3317] shmem_symlink+0x387/0x3b0 [ 107.002984][ T3317] vfs_symlink+0x1b4/0x1f0 [ 107.007420][ T3317] do_symlinkat+0xf0/0x470 [ 107.011868][ T3317] __x64_sys_symlink+0x50/0x60 [ 107.016651][ T3317] x64_sys_call+0x24a9/0x3000 [ 107.021362][ T3317] do_syscall_64+0xca/0x2b0 [ 107.025907][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.031825][ T3317] [ 107.034172][ T3317] read to 0xffff88810617382c of 4 bytes by task 3317 on cpu 1: [ 107.041746][ T3317] fill_mg_cmtime+0x5b/0x260 [ 107.046374][ T3317] generic_fillattr+0x24a/0x340 [ 107.051263][ T3317] shmem_getattr+0x181/0x200 [ 107.055892][ T3317] vfs_getattr_nosec+0x146/0x1e0 [ 107.060863][ T3317] vfs_statx+0x113/0x390 [ 107.065150][ T3317] vfs_fstatat+0x115/0x170 [ 107.069600][ T3317] __se_sys_newfstatat+0x55/0x260 [ 107.074659][ T3317] __x64_sys_newfstatat+0x55/0x70 [ 107.079709][ T3317] x64_sys_call+0x111f/0x3000 [ 107.084407][ T3317] do_syscall_64+0xca/0x2b0 [ 107.088933][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.094873][ T3317] [ 107.097208][ T3317] value changed: 0x162ddb17 -> 0x172f5ebc [ 107.102939][ T3317] [ 107.105279][ T3317] Reported by Kernel Concurrency Sanitizer on: [ 107.111437][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.120733][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.130800][ T3317] ================================================================== [ 107.150339][ T7039] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 107.156955][ T7039] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 107.164874][ T7039] vhci_hcd vhci_hcd.0: Device attached [ 107.190109][ T7039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=7039 comm=syz.1.1080 [ 107.202805][ T7039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=7039 comm=syz.1.1080 [ 107.233439][ T7039] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 107.236009][ T9] usb usb8-port1: attempt power cycle [ 107.240071][ T7039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.240530][ T7039] vhci_hcd vhci_hcd.0: Device attached [ 107.285754][ T7042] vhci_hcd: connection closed [ 107.286014][ T7040] vhci_hcd: connection closed [ 107.286260][ T2359] vhci_hcd vhci_hcd.1: stop threads [ 107.301261][ T2359] vhci_hcd vhci_hcd.1: release socket [ 107.306708][ T2359] vhci_hcd vhci_hcd.1: disconnect device [ 107.312560][ T2359] vhci_hcd vhci_hcd.1: stop threads [ 107.317834][ T2359] vhci_hcd vhci_hcd.1: release socket [ 107.323449][ T2359] vhci_hcd vhci_hcd.1: disconnect device [ 108.976570][ T9] usb usb8-port1: unable to enumerate USB device