last executing test programs: 3.778129612s ago: executing program 3 (id=2144): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000048832e487b2151434e11fdedbb545791974eebaf32cbfd100ece1ea5db9bcf4f329d154c5f1338d3b79b5cbe7db4cb7d6a9658fcf1dcb7eb63c8c394cf07f7182d59d2fd5c5fd55b8ec1b54e10e99f81a2fb02913587e7d66ca541be20e8f0784148da5a0cb9ff4386373aa6335d29f2c22cf73a417c5dac0ce1689f164d9ec1392d36f9cfa39b4c0606e8be3c05ccdd49d29d033fb08236da900137bcc14c49f734dcca412191259c8358b00cf82af804902c5317090000001351a6b63ed77664e00a5388f0768dc03c01915572e98d50b0c167cd04e361dbd163", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x210) 3.71524226s ago: executing program 1 (id=2147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000031900850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7e}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) flock(r3, 0x2) dup3(r3, r2, 0x0) socket$inet(0x2, 0x2, 0x6a113fc2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.707048741s ago: executing program 3 (id=2148): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) 3.616119243s ago: executing program 1 (id=2150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 3.459860103s ago: executing program 1 (id=2152): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x9) getitimer(0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") memfd_create(0x0, 0x2) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 3.25278415s ago: executing program 1 (id=2158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.17279277s ago: executing program 3 (id=2160): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.164767681s ago: executing program 1 (id=2161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147142, 0x0) fallocate(r1, 0x0, 0x9, 0x10001) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000480)='./file1\x00', 0x14000d00) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x5, 0x1b5, 0x5}) 3.033114018s ago: executing program 1 (id=2165): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000010000)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000040000000000000004850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x3, [0x400, 0x3], 0x4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.857222881s ago: executing program 4 (id=2168): bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.135671644s ago: executing program 2 (id=2169): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000b6ae9710468b39ac43616a00b70400000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, 0x0, &(0x7f0000000540)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 2.08944683s ago: executing program 2 (id=2170): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x7, 0x7ff, 0x1be, 0x6e222, 0xffffffffffffffff, 0x40000007, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x5}, 0x50) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000001600000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) 1.761209303s ago: executing program 4 (id=2172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x4, 0xfffffffffffff000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 1.742776795s ago: executing program 4 (id=2173): syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800480000340002000000059061ac1e00010a0101f343bc06038903c6890200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000e0290780000"], 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4004}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x4100}, {}], 0x7, &(0x7f00000005c0)={r0, r1+10000000}, &(0x7f0000000600)={[0xd65a]}, 0x8) getsockopt(0xffffffffffffffff, 0x4, 0x6, &(0x7f0000000380)=""/84, &(0x7f0000000400)=0x54) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"851ae9f147e4bfd9cb4cce58f277d1d4", 0x0, 0x0, {0x7ff, 0x9}, {0x7, 0xffffff14}, 0xb84b, [0x5, 0x9, 0x3, 0x8, 0x1, 0x6, 0x6, 0x7, 0x7, 0x7fff, 0xfff, 0x5, 0x8, 0x2, 0x7, 0x8]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000ac0)={0x0, 0xf8d, 0x2}) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @local, 0x3}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e2200649078"], 0x0) 1.229338881s ago: executing program 2 (id=2174): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x6, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x3, &(0x7f0000000040)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000014006b030231a6080c000af32c0cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1000000e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x34}, 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2100, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000000fe0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) 1.090637479s ago: executing program 2 (id=2186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) getpid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000fbffffff14000a00b7001000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) sync_file_range(0xffffffffffffffff, 0x10000, 0x8, 0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 888.944155ms ago: executing program 4 (id=2176): r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x401c4d0}, 0x8044) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x100c404, &(0x7f0000000040)=ANY=[@ANYBLOB='dots,dmask=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB="5539d16f3d", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,flush,nodots,usefree,dots,nodots,nfs=stale_rw,nodots,dots,dots,dots,nodots,nodots,flush,nodots,dots,dots,\x00'], 0x0, 0x1f5, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000005000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 886.647545ms ago: executing program 2 (id=2188): bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) pidfd_send_signal(0xffffffffffffffff, 0x2a, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000400), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32], 0x28}], 0x1}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 876.854377ms ago: executing program 0 (id=2177): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff00"], &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x12, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000070000000000000006000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000"], 0x0, 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x78, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000100)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x6, 0xfffffffc, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000780)=[{0x3, 0x5, 0xf, 0xa}, {0x3, 0x3, 0x2, 0x9}, {0x2, 0x5, 0xb, 0x4}, {0x5, 0x1, 0x1, 0x6}, {0x1, 0x3, 0x6, 0x7}], 0x10, 0x1000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1100000}], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000006c0)=@can, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e00)=""/116, 0x74}, 0x2020) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f940071b4cf6ee08000a0bace8017cbec4c2ee5a7cef4090000001fb79119d0d68898b8a722a2643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9a0509d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xcb}, {&(0x7f0000000140)="256df43cbbe0ded0344fd1d8164a", 0xe}, {0x0}, {&(0x7f00000003c0)}, {0x0}, {0x0}], 0x6}, 0x60044084) 858.479749ms ago: executing program 4 (id=2178): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) tgkill(0x0, 0x0, 0x21) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2719, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 673.308363ms ago: executing program 2 (id=2180): timer_create(0x2, &(0x7f00000006c0)={0x0, 0x11, 0x2}, &(0x7f0000000540)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x22, 0x0, &(0x7f0000000280)="a979d76acc8b1ad4c8007b5b08001f9ee8ce7e7d8b3a24f037e8c1b0ab71dcb9f26d", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 671.226493ms ago: executing program 0 (id=2192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, &(0x7f0000000f00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xffe0, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 604.375282ms ago: executing program 0 (id=2181): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 495.863716ms ago: executing program 0 (id=2182): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100003052abd7000040000129871a860", @ANYRES32=0x0, @ANYBLOB="3a000000a00102001c00128009000100766c616e000000000c0002800600050088a800000a000100aaaaaaaaaaaa0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=@newtaction={0x4b0, 0x30, 0x1ed699ce35e6c035, 0x5, 0xffffffff, {}, [{0x49c, 0x1, [@m_ct={0x120, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x1ff, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0xb0, 0x6, "f36ebbb6dfb2ea4c535406eed1caa61c7e1612142031b2957448cfcccda8590d71eaeaa8d8cbca0f77a2b0b3e1a73aa1b9135eb1bce545b72362d75e5f870bedf3e80395e21e7f9ab52092af7fe0132cd22e38b590ec7d797c4aa24df97eddcc8298dc6be4d7e2fa991adbe6fc6929ef562264a4dd1040922d4b7fc4c42b6f9317aa21170ddb537acd914c3bea7539b99c777822f2591a83d6698a337a08c05d4ddd5981bd64d5fddd81b82b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_skbedit={0x70, 0x18, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xe}}]}, {0x34, 0x6, "6a0b8c12520444fef8e8a7389d4b8c52170ab31dd0117eddd909adcdd383189a367e12894eb0e74c63ff4b31c1945795"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x140, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x4, 0x0, 0x6, 0x400}}]}, {0xfc, 0x6, "253b754c34c3eeb06d833bb092b49c5dd4be8e5272202d4eb2345dfef5dcf3755aeef66604ddf2780beca8f9a6a077fcaa5023286e35bf75abe125addc08aeec4a52ab58ed52ca6ec44c9a47634b47dec8d81ee61737b219727e349cbd2b72bc47fbc81d20755d47fe659b53fcea5f8435ba9b54e15b7073862fbc63a1525e3996eaf7a76e469a79905fc0f821fde0afe3fdfa78570e533d7367902c3daf8aa34b51aebd17ea5232a3a5ca8fe968ddd27504791370d3b243712254fcf05d57c687b2bf92af1f373d85f8e2d7a00baa3f64d2850a421e34e60d3e17fb4df0f75434fe5c23f74c442c7b199502fdf94d7664a9964a4786249e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xac, 0xb, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xf, 0x6, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x8, 0x6, 0x1, 0x9}, {0x4, 0x6, 0x1, 0xa}, {0x0, 0x2, 0x1, 0x7}, {0x0, 0xf, 0x64, 0x8}, {0xa13d, 0x1, 0x2c, 0x1}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x200, 0x2, 0x40, 0x4}, {0x9, 0x2b, 0x6, 0x1}, {0x7, 0xa, 0x7}, {0xb65, 0x7a, 0x7, 0x1}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5, 0x6, "8c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mpls={0x11c, 0x19, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x60}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x79850}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x3, 0x8, 0x7fffffff, 0xb}, 0x4}}]}, {0xb3, 0x6, "d0f6cf274979c8a0a1f6723060897531f0fbe1213088fae710bfee8da241a7909c279e54d3515a7c4e5c21b8fd0e7cb852c156af9f7d3b5e403d5d8395b2fe4638d1eb994dc4a34c6efb80a6599159be5b3aa0978680f66bae694189ef982d923f7ab4dbfc760387f0ed3a348cf434477b50a4195413867453c4bf619d28945a0078a0d1426e024a119003aa85e32436e1fff46d8c98f1ea28a3f73ae40121b7e9c3c48eee6c741b921bd6231f02b7"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x8890}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0xa97) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) 416.536026ms ago: executing program 0 (id=2183): memfd_create(0x0, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) fsopen(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000001a40)=ANY=[], 0x66) 160.842689ms ago: executing program 0 (id=2184): socket$netlink(0x10, 0x3, 0x0) statx(0xffffffffffffff9c, 0x0, 0x6000, 0xfd0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) wait4(0x0, &(0x7f00000003c0), 0x80000001, &(0x7f0000000500)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1) 157.68471ms ago: executing program 3 (id=2185): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x7}, 0x1, 0xa09, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x42c, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x2, 0x8001, 0x200, 0x2, 0x7}, 0xffffff80, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0xb, 0x5, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x80, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x3, 0xa0, 0xad4, 0x7, 0x4, 0x1, 0x7, 0x4, 0x102, 0x5, 0x4, 0x402, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0xffffffff, 0x5, 0x1, 0x18001, 0x5, 0x94, 0x2, 0x9, 0x2fcb, 0x3, 0x5, 0x7, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x0, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0xfe, 0x8, 0x0, 0x1, 0x2, 0x9, 0x6, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x407, 0x2, 0x0, 0xd, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x9, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x81, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x45c}}, 0x8000) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000a001, 0x0, 0xc267, 0xe3df, 0xc265, 0x2, 0x800, 0x9, 0x0, 0x10, 0x3c, 0x3ff, 0xfff, 0x6, 0x4, 0x1ff, 0x2, 0x2135, 0x8918, 0x18, 0x3, 0x0, 0x8, 0x9, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x4, 0x200, 0x3, 0x8, 0x107a, 0x5, 0x3, 0xd6bc, 0x3, 0x7, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0x80ff, 0x1400, 0x7, 0x3, 0x7ff, 0x807fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x0, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0xffff0000, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0xb209, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x3, 0xfff, 0x8, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x408, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff7, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x1ff, 0x8, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x3, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0x1, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x9, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0xa, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x2, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0x100000c8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0x4, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x7fff, 0x9, 0x6}}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 106.317526ms ago: executing program 3 (id=2187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES8=r0], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') 82.336539ms ago: executing program 3 (id=2189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 0s ago: executing program 4 (id=2190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) kernel console output (not intermixed with test programs): to 1024 [ 138.814568][ T7392] futex_wake_op: syz.4.1285 tries to shift op by -1; fix this program [ 138.904161][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 138.915365][ T7391] loop1: detected capacity change from 0 to 512 [ 139.313986][ T7410] lo speed is unknown, defaulting to 1000 [ 139.320262][ T7410] lo speed is unknown, defaulting to 1000 [ 139.327402][ T7410] lo speed is unknown, defaulting to 1000 [ 139.334626][ T7410] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.344197][ T7410] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.357465][ T7410] lo speed is unknown, defaulting to 1000 [ 139.373740][ T7410] lo speed is unknown, defaulting to 1000 [ 139.395405][ T7410] lo speed is unknown, defaulting to 1000 [ 139.401633][ T7410] lo speed is unknown, defaulting to 1000 [ 139.413701][ T7410] lo speed is unknown, defaulting to 1000 [ 139.785623][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 139.785648][ T29] audit: type=1326 audit(1768333302.707:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 139.873749][ T29] audit: type=1326 audit(1768333302.737:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 139.897248][ T29] audit: type=1326 audit(1768333302.737:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 139.920743][ T29] audit: type=1326 audit(1768333302.737:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 139.945070][ T29] audit: type=1326 audit(1768333302.737:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 139.968828][ T29] audit: type=1326 audit(1768333302.737:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 139.975757][ T7437] syz.3.1299 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 139.993041][ T29] audit: type=1326 audit(1768333302.737:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 140.026994][ T29] audit: type=1326 audit(1768333302.737:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 140.050921][ T29] audit: type=1326 audit(1768333302.737:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 140.074844][ T29] audit: type=1326 audit(1768333302.737:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7430 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 140.153652][ T7440] loop2: detected capacity change from 0 to 2048 [ 140.165416][ T7440] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 140.201335][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 140.299457][ T7446] wireguard0: entered promiscuous mode [ 140.305279][ T7446] wireguard0: entered allmulticast mode [ 140.464718][ T7452] usb usb9: usbfs: process 7452 (syz.0.1305) did not claim interface 0 before use [ 140.714049][ T7473] futex_wake_op: syz.2.1309 tries to shift op by -1; fix this program [ 140.742567][ T7475] tipc: New replicast peer: 255.255.255.255 [ 140.749059][ T7475] tipc: Enabled bearer , priority 10 [ 140.825632][ T7481] lo speed is unknown, defaulting to 1000 [ 140.864589][ T7481] lo speed is unknown, defaulting to 1000 [ 140.877671][ T7484] rdma_rxe: rxe_newlink: failed to add lo [ 140.901024][ T7471] loop3: detected capacity change from 0 to 512 [ 141.011601][ T7486] erspan1: entered allmulticast mode [ 141.119250][ T7496] wireguard0: entered promiscuous mode [ 141.125100][ T7496] wireguard0: entered allmulticast mode [ 141.177192][ T7500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1320'. [ 141.243694][ T7502] netlink: 'syz.2.1320': attribute type 13 has an invalid length. [ 141.374730][ T7507] loop3: detected capacity change from 0 to 512 [ 141.382060][ T7507] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 141.486405][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.493921][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.608650][ T7504] lo speed is unknown, defaulting to 1000 [ 141.672794][ T7504] lo speed is unknown, defaulting to 1000 [ 141.708057][ T3661] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.717487][ T3661] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.727217][ T3661] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.745852][ T3661] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.870683][ T7520] tipc: New replicast peer: 255.255.255.255 [ 141.877043][ T7520] tipc: Enabled bearer , priority 10 [ 141.980284][ T7522] syzkaller0: entered promiscuous mode [ 141.986290][ T7522] syzkaller0: entered allmulticast mode [ 142.123591][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1329'. [ 142.134227][ T7530] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1339'. [ 142.149676][ T7532] bond2: entered promiscuous mode [ 142.155061][ T7532] bond2: entered allmulticast mode [ 142.160752][ T7532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.173757][ T7530] hsr_slave_0: left promiscuous mode [ 142.179851][ T7530] hsr_slave_1: left promiscuous mode [ 142.191382][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1329'. [ 142.212659][ T7532] bond2 (unregistering): Released all slaves [ 143.488728][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 143.506133][ T7578] vlan2: entered promiscuous mode [ 143.511370][ T7578] gretap0: entered promiscuous mode [ 144.348595][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 144.395466][ T7615] loop4: detected capacity change from 0 to 128 [ 144.481205][ T7622] bio_check_eod: 12056 callbacks suppressed [ 144.481227][ T7622] syz.4.1352: attempt to access beyond end of device [ 144.481227][ T7622] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 144.489698][ T7621] erspan1: entered allmulticast mode [ 144.518302][ T7622] syz.4.1352: attempt to access beyond end of device [ 144.518302][ T7622] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 144.532536][ T7622] syz.4.1352: attempt to access beyond end of device [ 144.532536][ T7622] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 144.548440][ T7622] syz.4.1352: attempt to access beyond end of device [ 144.548440][ T7622] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 144.569808][ T7624] loop3: detected capacity change from 0 to 128 [ 144.597434][ T7622] syz.4.1352: attempt to access beyond end of device [ 144.597434][ T7622] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 144.608519][ T7626] veth10: entered promiscuous mode [ 144.612464][ T7622] syz.4.1352: attempt to access beyond end of device [ 144.612464][ T7622] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 144.630998][ T7622] syz.4.1352: attempt to access beyond end of device [ 144.630998][ T7622] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 144.658582][ T7622] syz.4.1352: attempt to access beyond end of device [ 144.658582][ T7622] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 144.673100][ T7622] syz.4.1352: attempt to access beyond end of device [ 144.673100][ T7622] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 144.688222][ T7622] syz.4.1352: attempt to access beyond end of device [ 144.688222][ T7622] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 145.191103][ T7639] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1360'. [ 145.215652][ T7639] hsr_slave_0: left promiscuous mode [ 145.231155][ T7639] hsr_slave_1: left promiscuous mode [ 145.516298][ T7658] siw: device registration error -23 [ 145.526734][ T7656] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.576198][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 145.814153][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 145.814223][ T29] audit: type=1326 audit(1768333308.737:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.0.1371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x0 [ 146.534768][ T7665] syz.2.1370 (7665) used greatest stack depth: 6120 bytes left [ 146.615726][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1377'. [ 146.654617][ T7685] vlan2: entered promiscuous mode [ 146.740165][ T7697] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1379'. [ 146.774568][ T7697] netlink: 'syz.4.1379': attribute type 13 has an invalid length. [ 146.818210][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.825914][ T7697] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.996209][ T7697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.006688][ T7697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.064959][ T3632] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.074898][ T3632] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.083709][ T3632] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.092168][ T3632] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.607303][ T7708] netlink: 'syz.4.1382': attribute type 10 has an invalid length. [ 147.615377][ T7708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1382'. [ 147.636788][ T7708] bridge0: Device is already in use. [ 148.066457][ T29] audit: type=1400 audit(1768333310.987:6017): avc: denied { create } for pid=7715 comm="syz.4.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.135864][ T7717] lo speed is unknown, defaulting to 1000 [ 148.167601][ T7721] netlink: 'syz.3.1387': attribute type 12 has an invalid length. [ 148.342111][ T7717] lo speed is unknown, defaulting to 1000 [ 148.349404][ T29] audit: type=1326 audit(1768333311.277:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 148.374799][ T29] audit: type=1326 audit(1768333311.277:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 148.399057][ T29] audit: type=1326 audit(1768333311.277:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 148.422997][ T29] audit: type=1326 audit(1768333311.277:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 148.446813][ T29] audit: type=1326 audit(1768333311.277:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 148.470622][ T29] audit: type=1326 audit(1768333311.277:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 148.495130][ T29] audit: type=1326 audit(1768333311.277:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 148.519116][ T29] audit: type=1326 audit(1768333311.277:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.1.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 148.651046][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 148.661918][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.738780][ T7743] wireguard0: entered promiscuous mode [ 148.744639][ T7743] wireguard0: entered allmulticast mode [ 148.858612][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 148.874612][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 149.054862][ T7762] ip6gre0: entered promiscuous mode [ 149.061967][ T7762] team0: Port device ip6gre0 added [ 149.076318][ T7762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.259648][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 149.277729][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 149.820655][ T7784] loop3: detected capacity change from 0 to 128 [ 149.859934][ T7784] bio_check_eod: 9825 callbacks suppressed [ 149.859957][ T7784] syz.3.1418: attempt to access beyond end of device [ 149.859957][ T7784] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 149.889940][ T7784] syz.3.1418: attempt to access beyond end of device [ 149.889940][ T7784] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 149.904748][ T7784] syz.3.1418: attempt to access beyond end of device [ 149.904748][ T7784] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 149.931512][ T7784] syz.3.1418: attempt to access beyond end of device [ 149.931512][ T7784] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 149.945915][ T7784] syz.3.1418: attempt to access beyond end of device [ 149.945915][ T7784] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 149.960237][ T7784] syz.3.1418: attempt to access beyond end of device [ 149.960237][ T7784] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 149.974595][ T7784] syz.3.1418: attempt to access beyond end of device [ 149.974595][ T7784] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 149.989502][ T7784] syz.3.1418: attempt to access beyond end of device [ 149.989502][ T7784] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 150.003495][ T7784] syz.3.1418: attempt to access beyond end of device [ 150.003495][ T7784] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 150.017711][ T7784] syz.3.1418: attempt to access beyond end of device [ 150.017711][ T7784] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 150.308729][ T7791] loop4: detected capacity change from 0 to 512 [ 150.440585][ T7797] wireguard0: entered promiscuous mode [ 150.446428][ T7797] wireguard0: entered allmulticast mode [ 150.453058][ T7791] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1409: bg 0: block 248: padding at end of block bitmap is not set [ 150.505265][ T7791] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1409: Failed to acquire dquot type 1 [ 150.540864][ T7791] EXT4-fs (loop4): 1 truncate cleaned up [ 150.550718][ T7791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.581384][ T7791] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.668440][ T7791] erspan1: entered allmulticast mode [ 150.716608][ T7806] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.1409: deleted inode referenced: 12 [ 150.793736][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.924141][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.003973][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.165509][ T7862] netlink: 'syz.1.1419': attribute type 10 has an invalid length. [ 151.173583][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1419'. [ 151.552847][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 151.552865][ T29] audit: type=1326 audit(1768333314.467:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 151.586814][ T29] audit: type=1326 audit(1768333314.467:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 151.588131][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 151.611346][ T29] audit: type=1326 audit(1768333314.477:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 151.611385][ T29] audit: type=1326 audit(1768333314.477:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 151.669517][ T29] audit: type=1326 audit(1768333314.477:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 151.693765][ T29] audit: type=1326 audit(1768333314.477:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 151.693822][ T29] audit: type=1326 audit(1768333314.477:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 151.693856][ T29] audit: type=1326 audit(1768333314.477:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 151.693946][ T29] audit: type=1326 audit(1768333314.477:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 151.693985][ T29] audit: type=1326 audit(1768333314.477:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 151.776987][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1424'. [ 151.783868][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1424'. [ 151.968012][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 151.984479][ T7889] loop4: detected capacity change from 0 to 128 [ 152.059934][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.068733][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.677898][ T7916] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1451'. [ 152.688354][ T7916] netlink: zone id is out of range [ 152.693577][ T7916] netlink: zone id is out of range [ 152.709830][ T7916] netlink: set zone limit has 8 unknown bytes [ 152.793135][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'. [ 152.809132][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'. [ 153.600332][ T7932] wireguard0: entered promiscuous mode [ 153.606456][ T7932] wireguard0: entered allmulticast mode [ 153.620701][ T7928] erspan1: entered allmulticast mode [ 154.448754][ T7952] loop3: detected capacity change from 0 to 128 [ 154.512645][ T7959] veth0: entered promiscuous mode [ 154.521268][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1452'. [ 154.524151][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 154.531045][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1452'. [ 154.559197][ T7959] veth0 (unregistering): left promiscuous mode [ 155.658233][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 155.796620][ T3414] hid-generic 0004:0006:0006.0001: unknown main item tag 0x3 [ 155.827665][ T3414] hid-generic 0004:0006:0006.0001: hidraw0: HID va.7d Device [syz0] on syz1 [ 155.969837][ T7998] lo speed is unknown, defaulting to 1000 [ 156.008226][ T8001] xt_connbytes: Forcing CT accounting to be enabled [ 156.070299][ T8001] set match dimension is over the limit! [ 156.077824][ T7999] netlink: 'syz.2.1470': attribute type 10 has an invalid length. [ 156.089838][ T8007] loop4: detected capacity change from 0 to 128 [ 156.099814][ T7999] : entered promiscuous mode [ 156.112025][ T7999] bridge0: port 3() entered blocking state [ 156.118424][ T7999] bridge0: port 3() entered disabled state [ 156.154706][ T7999] : entered allmulticast mode [ 156.159708][ T7999] bridge0: entered allmulticast mode [ 156.169335][ T7999] : left allmulticast mode [ 156.174334][ T7999] bridge0: left allmulticast mode [ 156.182698][ T7998] lo speed is unknown, defaulting to 1000 [ 156.584135][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 156.584150][ T29] audit: type=1326 audit(1768333319.507:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8019 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 157.090680][ T29] audit: type=1326 audit(1768333320.007:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8029 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 157.122845][ T29] audit: type=1326 audit(1768333320.007:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8029 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 157.147496][ T29] audit: type=1326 audit(1768333320.017:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8029 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 157.225505][ T29] audit: type=1326 audit(1768333320.137:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8029 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 157.250002][ T29] audit: type=1326 audit(1768333320.137:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8029 comm="syz.0.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 157.277346][ T8037] syz.2.1480: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 157.292324][ T8037] CPU: 0 UID: 0 PID: 8037 Comm: syz.2.1480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.292353][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.292375][ T8037] Call Trace: [ 157.292381][ T8037] [ 157.292415][ T8037] __dump_stack+0x1d/0x30 [ 157.292444][ T8037] dump_stack_lvl+0x95/0xd0 [ 157.292464][ T8037] dump_stack+0x15/0x1b [ 157.292506][ T8037] warn_alloc+0x12b/0x1a0 [ 157.292528][ T8037] ? __schedule+0x85f/0xcd0 [ 157.292552][ T8037] ? __rcu_read_unlock+0x4f/0x70 [ 157.292570][ T8037] __vmalloc_node_range_noprof+0xa0/0x1310 [ 157.292648][ T8037] ? __futex_wait+0x1fa/0x260 [ 157.292667][ T8037] ? __pfx_futex_wake_mark+0x10/0x10 [ 157.292736][ T8037] ? __rcu_read_unlock+0x4f/0x70 [ 157.292847][ T8037] ? avc_has_perm_noaudit+0xab/0x130 [ 157.292910][ T8037] ? should_fail_ex+0x30/0x280 [ 157.292931][ T8037] ? should_failslab+0x8c/0xb0 [ 157.293029][ T8037] vmalloc_user_noprof+0x7d/0xb0 [ 157.293058][ T8037] ? xskq_create+0x80/0xe0 [ 157.293075][ T8037] xskq_create+0x80/0xe0 [ 157.293102][ T8037] xsk_init_queue+0x95/0xf0 [ 157.293133][ T8037] xsk_setsockopt+0x477/0x640 [ 157.293162][ T8037] ? __pfx_xsk_setsockopt+0x10/0x10 [ 157.293268][ T8037] __sys_setsockopt+0x184/0x200 [ 157.293328][ T8037] __x64_sys_setsockopt+0x64/0x80 [ 157.293366][ T8037] x64_sys_call+0x21d5/0x3000 [ 157.293398][ T8037] do_syscall_64+0xca/0x2b0 [ 157.293435][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.293460][ T8037] RIP: 0033:0x7ff5e243f749 [ 157.293474][ T8037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.293525][ T8037] RSP: 002b:00007ff5e0e9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.293542][ T8037] RAX: ffffffffffffffda RBX: 00007ff5e2695fa0 RCX: 00007ff5e243f749 [ 157.293554][ T8037] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 157.293565][ T8037] RBP: 00007ff5e24c3f91 R08: 0000000000000004 R09: 0000000000000000 [ 157.293577][ T8037] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 157.293588][ T8037] R13: 00007ff5e2696038 R14: 00007ff5e2695fa0 R15: 00007ffda24ab118 [ 157.293687][ T8037] [ 157.520899][ T8037] Mem-Info: [ 157.524450][ T8037] active_anon:24726 inactive_anon:9629 isolated_anon:0 [ 157.524450][ T8037] active_file:10372 inactive_file:4261 isolated_file:0 [ 157.524450][ T8037] unevictable:0 dirty:275 writeback:0 [ 157.524450][ T8037] slab_reclaimable:3532 slab_unreclaimable:174245 [ 157.524450][ T8037] mapped:28715 shmem:26388 pagetables:1196 [ 157.524450][ T8037] sec_pagetables:0 bounce:0 [ 157.524450][ T8037] kernel_misc_reclaimable:0 [ 157.524450][ T8037] free:1686364 free_pcp:29394 free_cma:0 [ 157.572164][ T8037] Node 0 active_anon:98904kB inactive_anon:38516kB active_file:41488kB inactive_file:17044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114860kB dirty:1100kB writeback:0kB shmem:105552kB kernel_stack:5120kB pagetables:4784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.601018][ T8037] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.631183][ T8037] lowmem_reserve[]: 0 2880 7859 7859 [ 157.636652][ T8037] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 157.668859][ T8037] lowmem_reserve[]: 0 0 4978 4978 [ 157.674214][ T8037] Node 0 Normal free:3784208kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:99020kB inactive_anon:38516kB active_file:41488kB inactive_file:17044kB unevictable:0kB writepending:1100kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:113804kB local_pcp:71796kB free_cma:0kB [ 157.709102][ T8037] lowmem_reserve[]: 0 0 0 0 [ 157.713831][ T8037] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.726949][ T8037] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 157.744013][ T8037] Node 0 Normal: 3327*4kB (UM) 1330*8kB (UM) 617*16kB (UME) 317*32kB (UM) 555*64kB (UM) 445*128kB (UM) 235*256kB (UME) 127*512kB (UME) 94*1024kB (UM) 39*2048kB (UM) 817*4096kB (UM) = 3784188kB [ 157.764139][ T8037] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 157.774435][ T8037] 41246 total pagecache pages [ 157.779143][ T8037] 229 pages in swap cache [ 157.783771][ T8037] Free swap = 26680kB [ 157.787847][ T8037] Total swap = 124996kB [ 157.792271][ T8037] 2097051 pages RAM [ 157.796183][ T8037] 0 pages HighMem/MovableOnly [ 157.801031][ T8037] 81271 pages reserved [ 158.525299][ T29] audit: type=1400 audit(1768333321.447:6284): avc: denied { connect } for pid=8062 comm="syz.1.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.618578][ T8065] lo speed is unknown, defaulting to 1000 [ 158.685000][ T8065] lo speed is unknown, defaulting to 1000 [ 158.734149][ T8066] loop4: detected capacity change from 0 to 512 [ 158.741260][ T8066] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 159.352855][ T29] audit: type=1326 audit(1768333322.237:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 159.377786][ T29] audit: type=1326 audit(1768333322.237:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 159.411890][ T29] audit: type=1326 audit(1768333322.327:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 159.610854][ T8084] lo speed is unknown, defaulting to 1000 [ 159.675705][ T8084] lo speed is unknown, defaulting to 1000 [ 159.808178][ T8084] loop4: detected capacity change from 0 to 512 [ 159.815249][ T8084] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 160.308802][ T8104] __nla_validate_parse: 2 callbacks suppressed [ 160.308817][ T8104] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1501'. [ 162.002205][ T8141] lo speed is unknown, defaulting to 1000 [ 162.065522][ T8141] lo speed is unknown, defaulting to 1000 [ 162.786136][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 162.786154][ T29] audit: type=1326 audit(1768333325.707:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 162.816903][ T29] audit: type=1326 audit(1768333325.707:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 162.840837][ T29] audit: type=1326 audit(1768333325.707:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 162.864964][ T29] audit: type=1326 audit(1768333325.707:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 162.874357][ T8152] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1527'. [ 162.889561][ T29] audit: type=1326 audit(1768333325.707:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 162.889599][ T29] audit: type=1326 audit(1768333325.707:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 162.948250][ T29] audit: type=1326 audit(1768333325.707:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 162.972377][ T29] audit: type=1326 audit(1768333325.707:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 162.996794][ T29] audit: type=1326 audit(1768333325.707:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 163.021287][ T29] audit: type=1326 audit(1768333325.707:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 163.113937][ T8154] lo speed is unknown, defaulting to 1000 [ 163.155161][ T8161] xt_connbytes: Forcing CT accounting to be enabled [ 163.162062][ T8161] Cannot find set identified by id 0 to match [ 163.204521][ T8154] lo speed is unknown, defaulting to 1000 [ 163.764294][ T8181] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1525'. [ 163.778183][ T8181] 1ªX¹¦À: renamed from 60ªX¹¦À [ 163.804440][ T8181] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 163.847677][ T8183] loop4: detected capacity change from 0 to 512 [ 163.893831][ T8183] EXT4-fs (loop4): too many log groups per flexible block group [ 163.906903][ T8183] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 163.921890][ T8183] EXT4-fs (loop4): mount failed [ 163.975445][ T8189] block device autoloading is deprecated and will be removed. [ 163.984906][ T8188] tipc: Failed to remove unknown binding: 66,0,0/2126:1339200674/1339200675 [ 163.994554][ T8188] tipc: Failed to remove unknown binding: 66,0,0/2126:1339200674/1339200675 [ 164.045261][ T8196] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.096952][ T8196] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.119989][ T8179] lo speed is unknown, defaulting to 1000 [ 164.146068][ T8196] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.159647][ T8190] tipc: Enabling of bearer rejected, failed to enable media [ 164.188740][ T8179] lo speed is unknown, defaulting to 1000 [ 164.197309][ T8196] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.272042][ T3661] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.295021][ T3661] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.314017][ T3661] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.343375][ T3661] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.400657][ T8207] lo speed is unknown, defaulting to 1000 [ 164.455541][ T8216] loop1: detected capacity change from 0 to 512 [ 164.468583][ T8218] xt_connbytes: Forcing CT accounting to be enabled [ 164.487174][ T8216] EXT4-fs (loop1): too many log groups per flexible block group [ 164.502269][ T8218] Cannot find set identified by id 0 to match [ 164.527357][ T8207] lo speed is unknown, defaulting to 1000 [ 164.615631][ T8216] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 164.641517][ T8216] EXT4-fs (loop1): mount failed [ 164.778809][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'. [ 165.109918][ T8242] lo speed is unknown, defaulting to 1000 [ 165.146831][ T8245] tipc: Failed to remove unknown binding: 66,0,0/721769842:961372898/961372899 [ 165.163009][ T8242] lo speed is unknown, defaulting to 1000 [ 165.166836][ T8245] tipc: Failed to remove unknown binding: 66,0,0/721769842:961372898/961372899 [ 165.409119][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1563'. [ 165.418644][ T8256] loop3: detected capacity change from 0 to 512 [ 165.434470][ T8256] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 165.442983][ T8256] EXT4-fs (loop3): orphan cleanup on readonly fs [ 165.452407][ T8256] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1552: corrupted inode contents [ 165.474668][ T8256] EXT4-fs (loop3): Remounting filesystem read-only [ 165.486025][ T8256] EXT4-fs (loop3): 1 truncate cleaned up [ 165.492002][ T3624] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 165.503202][ T3624] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 165.515992][ T3624] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 165.527186][ T8256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.553962][ T8256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.651504][ T8268] lo speed is unknown, defaulting to 1000 [ 165.692196][ T8271] xt_connbytes: Forcing CT accounting to be enabled [ 165.703548][ T8268] lo speed is unknown, defaulting to 1000 [ 165.709850][ T8271] set match dimension is over the limit! [ 165.868333][ T8273] ªªªªªª: renamed from wg2 [ 166.023495][ T8283] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.131250][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1566'. [ 166.170434][ T8291] lo speed is unknown, defaulting to 1000 [ 166.232405][ T8291] lo speed is unknown, defaulting to 1000 [ 166.806520][ T8313] lo speed is unknown, defaulting to 1000 [ 166.842840][ T8313] lo speed is unknown, defaulting to 1000 [ 166.849832][ T8314] set match dimension is over the limit! [ 167.510524][ T8321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1587'. [ 167.514608][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 167.542944][ T8322] ip6gre1: entered allmulticast mode [ 167.552142][ T8320] loop1: detected capacity change from 0 to 2048 [ 167.566282][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 167.584423][ T8320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.601484][ T8320] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 167.616618][ T8320] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 167.629317][ T8320] EXT4-fs (loop1): This should not happen!! Data will be lost [ 167.629317][ T8320] [ 167.639389][ T8320] EXT4-fs (loop1): Total free blocks count 0 [ 167.645621][ T8320] EXT4-fs (loop1): Free/Dirty block details [ 167.652066][ T8320] EXT4-fs (loop1): free_blocks=2415919504 [ 167.658027][ T8320] EXT4-fs (loop1): dirty_blocks=48 [ 167.663497][ T8320] EXT4-fs (loop1): Block reservation details [ 167.669762][ T8320] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 167.704241][ T3661] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 168.412739][ T8330] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.430075][ T29] kauditd_printk_skb: 571 callbacks suppressed [ 168.430094][ T29] audit: type=1326 audit(1768333331.347:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 168.460756][ T29] audit: type=1326 audit(1768333331.347:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 168.484868][ T29] audit: type=1326 audit(1768333331.347:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 168.509188][ T29] audit: type=1326 audit(1768333331.347:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 168.532990][ T29] audit: type=1326 audit(1768333331.347:6948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 168.557254][ T29] audit: type=1326 audit(1768333331.347:6949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 168.583176][ T29] audit: type=1326 audit(1768333331.347:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 168.635381][ T29] audit: type=1326 audit(1768333331.557:6951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 168.678103][ T29] audit: type=1326 audit(1768333331.597:6952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 168.702415][ T29] audit: type=1326 audit(1768333331.597:6953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 168.820968][ T8351] loop3: detected capacity change from 0 to 512 [ 168.845499][ T8348] infiniband !yz!: set down [ 168.850171][ T8348] infiniband !yz!: added team_slave_0 [ 168.860750][ T8351] EXT4-fs: inline encryption not supported [ 168.870428][ T8348] RDS/IB: !yz!: added [ 168.874698][ T8348] smc: adding ib device !yz! with port count 1 [ 168.881276][ T8348] smc: ib device !yz! port 1 has no pnetid [ 168.890184][ T8351] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.972605][ T8355] hub 9-0:1.0: USB hub found [ 168.977751][ T8355] hub 9-0:1.0: 8 ports detected [ 168.986165][ T8351] EXT4-fs (loop3): 1 truncate cleaned up [ 169.017529][ T8351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.220271][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.288312][ T4126] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.297701][ T4126] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.326828][ T8368] option changes via remount are deprecated (pid=8366 comm=syz.2.1596) [ 169.342723][ T8367] loop1: detected capacity change from 0 to 2048 [ 169.418854][ T8367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.465318][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 169.478832][ T8374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8374 comm=syz.0.1599 [ 169.585539][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 169.600175][ T8383] loop3: detected capacity change from 0 to 2048 [ 169.607353][ T8383] EXT4-fs (loop3): unsupported inode size: 84 [ 169.613798][ T8383] EXT4-fs (loop3): blocksize: 4096 [ 169.673999][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.713715][ T8392] kernel profiling enabled (shift: 9) [ 169.828858][ T8399] ref_ctr increment failed for inode: 0x73b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811aba3cc0 [ 169.946247][ T8406] xt_hashlimit: max too large, truncated to 1048576 [ 169.958498][ T8406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.075376][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 170.092841][ T8425] netlink: 'syz.1.1618': attribute type 4 has an invalid length. [ 170.103444][ T8425] netlink: 'syz.1.1618': attribute type 4 has an invalid length. [ 170.124288][ T3414] lo speed is unknown, defaulting to 1000 [ 170.130097][ T3414] syz1: Port: 1 Link ACTIVE [ 170.153305][ T4119] lo speed is unknown, defaulting to 1000 [ 170.237128][ T8437] tipc: New replicast peer: 255.255.255.83 [ 170.243982][ T8437] tipc: Enabled bearer , priority 10 [ 170.393756][ T8448] vhci_hcd vhci_hcd.4: invalid port number 146 [ 170.400145][ T8448] vhci_hcd vhci_hcd.4: default hub control req: 0006 v0302 i0092 l0 [ 170.672479][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1630'. [ 170.681800][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 171.123557][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 171.170863][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 171.435096][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'. [ 171.912515][ T8494] wireguard0: entered promiscuous mode [ 171.918187][ T8494] wireguard0: entered allmulticast mode [ 172.218783][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1649'. [ 172.381356][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 172.649174][ T8515] option changes via remount are deprecated (pid=8514 comm=syz.3.1653) [ 172.679245][ T8517] loop1: detected capacity change from 0 to 512 [ 172.700703][ T8517] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.739360][ T8517] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1654: invalid block [ 172.762526][ T8517] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1654: invalid indirect mapped block 4294967295 (level 1) [ 172.780434][ T8517] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1654: invalid indirect mapped block 4294967295 (level 1) [ 172.795327][ T8517] EXT4-fs (loop1): 2 truncates cleaned up [ 172.801422][ T8517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.835560][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.088999][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 173.118530][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 173.243990][ T8546] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8546 comm=syz.4.1666 [ 173.283353][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 173.407119][ T8558] loop3: detected capacity change from 0 to 1024 [ 173.429082][ T8558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 173.429194][ T8558] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.441952][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 173.441996][ T29] audit: type=1326 audit(1768333336.357:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f517c8065e7 code=0x7ffc0000 [ 173.483420][ T29] audit: type=1400 audit(1768333336.357:7428): avc: denied { getopt } for pid=8556 comm="syz.3.1671" lport=45619 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 173.508153][ T29] audit: type=1326 audit(1768333336.387:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f517c7ab829 code=0x7ffc0000 [ 173.532657][ T29] audit: type=1326 audit(1768333336.387:7430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f517c8065e7 code=0x7ffc0000 [ 173.557595][ T29] audit: type=1326 audit(1768333336.387:7431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f517c7ab829 code=0x7ffc0000 [ 173.557625][ T29] audit: type=1326 audit(1768333336.387:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 173.557657][ T29] audit: type=1326 audit(1768333336.387:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f517c8065e7 code=0x7ffc0000 [ 173.557717][ T29] audit: type=1326 audit(1768333336.387:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f517c7ab829 code=0x7ffc0000 [ 173.557751][ T29] audit: type=1326 audit(1768333336.387:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 173.558786][ T29] audit: type=1326 audit(1768333336.407:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f517c8065e7 code=0x7ffc0000 [ 173.705820][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.741057][ T8562] x_tables: duplicate underflow at hook 3 [ 173.775817][ T8562] loop3: detected capacity change from 0 to 1024 [ 173.797038][ T8562] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 173.797744][ T8562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.822747][ T8562] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1672: bg 0: block 88: padding at end of block bitmap is not set [ 173.921187][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.961157][ T8571] 9p: Bad value for 'wfdno' [ 174.016889][ T8574] loop1: detected capacity change from 0 to 1024 [ 174.049567][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.059311][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.126189][ T8574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.276135][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.602815][ T8603] loop3: detected capacity change from 0 to 512 [ 174.630055][ T8603] EXT4-fs: Ignoring removed bh option [ 174.643946][ T8603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.692716][ T8603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.708154][ T8603] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.755012][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.144694][ T8620] lo speed is unknown, defaulting to 1000 [ 175.167474][ T8627] loop3: detected capacity change from 0 to 512 [ 175.215137][ T8627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.229788][ T8620] lo speed is unknown, defaulting to 1000 [ 175.263700][ T8627] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.314208][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.632022][ T8637] futex_wake_op: syz.3.1695 tries to shift op by -1; fix this program [ 175.654293][ T8650] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 175.880650][ T8664] wireguard0: entered promiscuous mode [ 175.886819][ T8666] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 175.893579][ T8666] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 175.901406][ T8666] vhci_hcd vhci_hcd.0: Device attached [ 176.163369][ T4126] usb 8-1: SetAddress Request (2) to port 0 [ 176.174595][ T4126] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 176.339291][ T8680] __nla_validate_parse: 5 callbacks suppressed [ 176.339311][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'. [ 176.657528][ T8668] vhci_hcd: connection reset by peer [ 176.669961][ T588] vhci_hcd vhci_hcd.3: stop threads [ 176.675683][ T588] vhci_hcd vhci_hcd.3: release socket [ 176.681189][ T588] vhci_hcd vhci_hcd.3: disconnect device [ 176.699557][ T8697] x_tables: duplicate underflow at hook 3 [ 177.238061][ T588] Bluetooth: hci0: Frame reassembly failed (-84) [ 177.272258][ T8709] tipc: Enabled bearer , priority 0 [ 177.280533][ T8708] tipc: Resetting bearer [ 177.293796][ T8708] tipc: Disabling bearer [ 177.758228][ T8725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.767697][ T8725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.777767][ T4113] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 177.786206][ T4113] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 177.794825][ T4113] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 177.806958][ T4113] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 177.814899][ T4113] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 177.823398][ T4113] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 177.831940][ T4113] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 177.841357][ T4113] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 178.834155][ T29] kauditd_printk_skb: 1298 callbacks suppressed [ 178.834174][ T29] audit: type=1326 audit(1768333341.747:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 178.865004][ T29] audit: type=1326 audit(1768333341.757:8736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 178.901170][ T29] audit: type=1326 audit(1768333341.817:8737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 178.926555][ T29] audit: type=1326 audit(1768333341.817:8738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 178.950789][ T29] audit: type=1326 audit(1768333341.817:8739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 178.975101][ T29] audit: type=1326 audit(1768333341.847:8740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 178.999432][ T29] audit: type=1326 audit(1768333341.847:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 179.024098][ T29] audit: type=1326 audit(1768333341.847:8742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 179.048935][ T29] audit: type=1326 audit(1768333341.847:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 179.072925][ T29] audit: type=1326 audit(1768333341.847:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.2.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e243f749 code=0x7ffc0000 [ 179.314598][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 180.216453][ T8778] netlink: 'syz.1.1748': attribute type 4 has an invalid length. [ 180.319853][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'. [ 180.329078][ T8784] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 180.337202][ T8784] batman_adv: batadv0: Removing interface: veth1_vlan [ 180.382810][ T8786] xt_hashlimit: max too large, truncated to 1048576 [ 180.392325][ T8786] No such timeout policy "syz1" [ 180.505758][ T8790] bond1: (slave dummy0): Releasing active interface [ 180.512648][ T8790] dummy0: left promiscuous mode [ 180.518820][ T8790] dummy0: left allmulticast mode [ 180.629583][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 180.752535][ T8804] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 180.924855][ T8811] lo speed is unknown, defaulting to 1000 [ 180.986656][ T8811] lo speed is unknown, defaulting to 1000 [ 181.300489][ T4126] usb 8-1: device descriptor read/8, error -110 [ 181.403455][ T8820] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 181.414532][ T4126] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 181.427259][ T8820] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.437765][ T4126] usb 8-1: enqueue for inactive port 0 [ 181.450131][ T4126] usb 8-1: enqueue for inactive port 0 [ 181.469754][ T4126] usb 8-1: enqueue for inactive port 0 [ 181.626114][ T8828] loop3: detected capacity change from 0 to 1024 [ 181.657914][ T8828] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 181.696558][ T8828] System zones: 0-1, 3-36 [ 181.738367][ T8828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.788516][ T8828] bond0: (slave veth0_to_hsr): Device is not bonding slave [ 181.796133][ T8828] bond0: option active_slave: invalid value (veth0_to_hsr) [ 181.881896][ T8838] veth0: entered promiscuous mode [ 181.887451][ T8838] veth0: entered allmulticast mode [ 182.017941][ T8847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1773'. [ 182.090967][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'. [ 182.124319][ T8852] bridge_slave_1: left allmulticast mode [ 182.124341][ T8852] bridge_slave_1: left promiscuous mode [ 182.124538][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.133461][ T8852] bridge_slave_0: left allmulticast mode [ 182.133486][ T8852] bridge_slave_0: left promiscuous mode [ 182.133605][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.194170][ T8856] loop4: detected capacity change from 0 to 512 [ 182.218971][ T8856] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1778: EA inode hash validation failed [ 182.238831][ T8856] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1778: corrupted inode contents [ 182.251913][ T8856] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.1778: mark_inode_dirty error [ 182.272136][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.283141][ T8856] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1778: corrupted inode contents [ 182.305471][ T8866] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1782'. [ 182.315203][ T8856] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.1778: mark_inode_dirty error [ 182.345279][ T8856] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.1778: mark inode dirty (error -117) [ 182.359212][ T8856] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 182.368813][ T8856] EXT4-fs (loop4): 1 orphan inode deleted [ 182.375056][ T8856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.464203][ T8874] lo speed is unknown, defaulting to 1000 [ 182.475112][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.533576][ T4126] usb usb8-port1: attempt power cycle [ 182.579982][ T8874] lo speed is unknown, defaulting to 1000 [ 182.692807][ T8882] serio: Serial port ptm0 [ 182.828492][ T8888] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1789'. [ 182.847134][ T8888] 1ªX¹¦À: renamed from 60ªX¹¦À [ 182.854903][ T8882] serio: Serial port ptm0 [ 182.862371][ T8888] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 182.957051][ T8890] loop1: detected capacity change from 0 to 8192 [ 182.966160][ T8894] loop4: detected capacity change from 0 to 128 [ 183.140137][ T8903] loop4: detected capacity change from 0 to 1024 [ 183.245202][ T8903] EXT4-fs: Ignoring removed orlov option [ 183.325784][ T8903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.388777][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 183.438555][ T8901] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1795'. [ 183.513099][ T8901] 1ªX¹¦À: renamed from 60ªX¹¦À [ 183.667327][ T8901] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 183.701371][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.725618][ T8920] x_tables: duplicate underflow at hook 3 [ 183.748870][ T8920] loop4: detected capacity change from 0 to 1024 [ 183.846185][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 183.846236][ T29] audit: type=1400 audit(1768333346.767:9042): avc: denied { write } for pid=8913 comm="syz.0.1799" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.036028][ T8926] netlink: 64 bytes leftover after parsing attributes in process `GPL'. [ 184.049247][ T8920] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 184.093668][ T8920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.155445][ T29] audit: type=1400 audit(1768333346.927:9043): avc: denied { create } for pid=8924 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.177454][ T29] audit: type=1400 audit(1768333346.937:9044): avc: denied { bind } for pid=8924 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.198155][ T29] audit: type=1400 audit(1768333346.937:9045): avc: denied { setopt } for pid=8924 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.218919][ T29] audit: type=1400 audit(1768333346.957:9046): avc: denied { write } for pid=8924 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.239185][ T29] audit: type=1400 audit(1768333346.957:9047): avc: denied { nlmsg_write } for pid=8924 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.260565][ T8920] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1801: bg 0: block 88: padding at end of block bitmap is not set [ 184.322191][ T29] audit: type=1326 audit(1768333347.147:9048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad13dadf90 code=0x7ffc0000 [ 184.347344][ T29] audit: type=1326 audit(1768333347.147:9049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fad13dae497 code=0x7ffc0000 [ 184.373350][ T29] audit: type=1326 audit(1768333347.147:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad13dadf90 code=0x7ffc0000 [ 184.397498][ T29] audit: type=1326 audit(1768333347.147:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 184.466704][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.553470][ T8931] wireguard0: entered promiscuous mode [ 184.720165][ T8942] loop4: detected capacity change from 0 to 512 [ 184.735274][ T8942] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.858305][ T8942] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1808: invalid block [ 184.895909][ T8942] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1808: invalid indirect mapped block 4294967295 (level 1) [ 184.919204][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 184.929690][ T8947] hsr_slave_0: left promiscuous mode [ 184.932328][ T8942] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1808: invalid indirect mapped block 4294967295 (level 1) [ 184.950718][ T8947] hsr_slave_1: left promiscuous mode [ 184.952034][ T8942] EXT4-fs (loop4): 2 truncates cleaned up [ 184.963450][ T8942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.980195][ T8942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.004754][ T8949] loop1: detected capacity change from 0 to 512 [ 185.049410][ T8949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.086311][ T8949] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.211764][ T8959] tipc: Enabling of bearer rejected, already enabled [ 185.222754][ T8958] lo speed is unknown, defaulting to 1000 [ 185.255762][ T8960] set match dimension is over the limit! [ 185.283591][ T4126] usb usb8-port1: unable to enumerate USB device [ 185.296700][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.361735][ T8958] lo speed is unknown, defaulting to 1000 [ 186.024311][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 186.053362][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 186.254951][ T8986] batadv1: left allmulticast mode [ 186.260294][ T8986] batadv1: left promiscuous mode [ 186.265417][ T8986] bridge0: port 1(batadv1) entered disabled state [ 186.344123][ T8990] loop3: detected capacity change from 0 to 512 [ 186.356476][ T8989] loop1: detected capacity change from 0 to 512 [ 186.366514][ T8989] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.366620][ T8990] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 186.390722][ T8989] EXT4-fs (loop1): 1 truncate cleaned up [ 186.403763][ T8989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.436398][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.464761][ T8996] hub 9-0:1.0: USB hub found [ 186.488782][ T8996] hub 9-0:1.0: 8 ports detected [ 186.959629][ T9012] lo speed is unknown, defaulting to 1000 [ 187.126959][ T9012] lo speed is unknown, defaulting to 1000 [ 187.352868][ T9023] loop1: detected capacity change from 0 to 1024 [ 187.360366][ T9023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.444341][ T9023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.469871][ T9030] __nla_validate_parse: 4 callbacks suppressed [ 187.469888][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 187.508672][ T9030] batadv1: left allmulticast mode [ 187.514256][ T9030] batadv1: left promiscuous mode [ 187.519646][ T9030] bridge0: port 3(batadv1) entered disabled state [ 187.527430][ T9030] bridge_slave_1: left allmulticast mode [ 187.533463][ T9030] bridge_slave_1: left promiscuous mode [ 187.540354][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.549147][ T9030] bridge_slave_0: left allmulticast mode [ 187.555311][ T9030] bridge_slave_0: left promiscuous mode [ 187.561557][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.573030][ T9030] bridge0 (unregistering): left promiscuous mode [ 187.627665][ T9045] loop4: detected capacity change from 0 to 512 [ 187.637132][ T9045] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 187.670530][ T9036] lo speed is unknown, defaulting to 1000 [ 187.734234][ T9048] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 187.783516][ T9051] loop4: detected capacity change from 0 to 1024 [ 187.864225][ T9051] EXT4-fs: Ignoring removed bh option [ 187.899015][ T9036] lo speed is unknown, defaulting to 1000 [ 187.961187][ T9051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.018539][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.337849][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.594715][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'. [ 188.607821][ T9082] loop1: detected capacity change from 0 to 512 [ 188.614927][ T9082] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 188.936544][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 188.936563][ T29] audit: type=1400 audit(1768333351.857:9751): avc: denied { read write } for pid=9100 comm="syz.4.1863" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 188.967744][ T29] audit: type=1400 audit(1768333351.857:9752): avc: denied { open } for pid=9100 comm="syz.4.1863" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 188.993933][ T9101] tipc: Can't bind to reserved service type 1 [ 189.145765][ T29] audit: type=1400 audit(1768333352.067:9753): avc: denied { sqpoll } for pid=9102 comm="syz.0.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 189.451435][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'. [ 189.575227][ T29] audit: type=1400 audit(1768333352.497:9754): avc: denied { ioctl } for pid=9106 comm="syz.3.1865" path="socket:[28820]" dev="sockfs" ino=28820 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.604968][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 189.657176][ T9109] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 189.686324][ T9109] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.758031][ T29] audit: type=1400 audit(1768333352.677:9755): avc: denied { setopt } for pid=9110 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.760422][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 189.794030][ T9113] loop1: detected capacity change from 0 to 128 [ 189.818985][ T9113] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.843683][ T9113] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.854585][ T29] audit: type=1400 audit(1768333352.767:9756): avc: denied { bind } for pid=9110 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.904858][ T29] audit: type=1400 audit(1768333352.827:9757): avc: denied { create } for pid=9111 comm="syz.1.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.924998][ T29] audit: type=1400 audit(1768333352.827:9758): avc: denied { setopt } for pid=9111 comm="syz.1.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.001349][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.003865][ T29] audit: type=1400 audit(1768333352.917:9759): avc: denied { read } for pid=9118 comm="syz.4.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 190.068907][ T9121] loop1: detected capacity change from 0 to 764 [ 190.095997][ T9122] loop4: detected capacity change from 0 to 2048 [ 190.115516][ T29] audit: type=1400 audit(1768333353.027:9760): avc: denied { mount } for pid=9120 comm="syz.1.1871" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 190.181636][ T9122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.207511][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 190.244217][ T9119] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 190.299761][ T9119] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 190.312813][ T9119] EXT4-fs (loop4): This should not happen!! Data will be lost [ 190.312813][ T9119] [ 190.322809][ T9119] EXT4-fs (loop4): Total free blocks count 0 [ 190.329239][ T9119] EXT4-fs (loop4): Free/Dirty block details [ 190.335206][ T9119] EXT4-fs (loop4): free_blocks=2415919504 [ 190.341202][ T9119] EXT4-fs (loop4): dirty_blocks=48 [ 190.346649][ T9119] EXT4-fs (loop4): Block reservation details [ 190.353114][ T9119] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 190.420970][ T3661] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 190.456914][ T9134] loop1: detected capacity change from 0 to 512 [ 190.465021][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1873'. [ 190.514612][ T9134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.650524][ T9134] tipc: Enabled bearer , priority 0 [ 190.695309][ T9134] tipc: Disabling bearer [ 190.798039][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.815655][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 190.824765][ T9142] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 190.853705][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 190.859370][ T9142] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.925904][ T9146] loop4: detected capacity change from 0 to 512 [ 190.954197][ T9146] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 190.969027][ T9146] EXT4-fs (loop4): orphan cleanup on readonly fs [ 190.982783][ T9146] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.1879: corrupted inode contents [ 190.997032][ T9146] EXT4-fs (loop4): Remounting filesystem read-only [ 191.010636][ T9146] EXT4-fs (loop4): 1 truncate cleaned up [ 191.038448][ T3661] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 191.049398][ T3661] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 191.062466][ T3661] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 191.074153][ T9146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.089711][ T9146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.158809][ T9152] lo speed is unknown, defaulting to 1000 [ 191.222130][ T9152] lo speed is unknown, defaulting to 1000 [ 191.562670][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1882'. [ 191.677872][ T9156] vlan2: entered promiscuous mode [ 191.683500][ T9156] bridge2: entered promiscuous mode [ 191.689005][ T9156] vlan2: entered allmulticast mode [ 191.694895][ T9156] bridge2: entered allmulticast mode [ 191.814475][ T9162] loop1: detected capacity change from 0 to 1024 [ 191.821629][ T9162] EXT4-fs: Ignoring removed nobh option [ 191.827700][ T9162] EXT4-fs: inline encryption not supported [ 191.849021][ T9162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.866789][ T9165] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 191.917263][ T9162] lo speed is unknown, defaulting to 1000 [ 191.971287][ T9162] lo speed is unknown, defaulting to 1000 [ 192.145049][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.211713][ T9184] EXT4-fs: Ignoring removed bh option [ 192.226990][ T9184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.265766][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.290665][ T9189] xt_hashlimit: max too large, truncated to 1048576 [ 192.298854][ T9189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.310964][ T9189] netlink: 'syz.1.1894': attribute type 10 has an invalid length. [ 192.375961][ T9193] set_capacity_and_notify: 1 callbacks suppressed [ 192.375981][ T9193] loop1: detected capacity change from 0 to 128 [ 192.696690][ T9198] lo speed is unknown, defaulting to 1000 [ 192.758586][ T9198] lo speed is unknown, defaulting to 1000 [ 193.215563][ T9207] loop3: detected capacity change from 0 to 256 [ 193.232922][ T9206] lo speed is unknown, defaulting to 1000 [ 193.278797][ T9206] lo speed is unknown, defaulting to 1000 [ 193.798626][ T9217] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.894529][ T9217] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.000860][ T9217] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.024663][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 194.024739][ T29] audit: type=1326 audit(1768333356.947:9899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9230 comm="syz.0.1908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ba6b4f749 code=0x0 [ 194.097365][ T9217] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.159940][ T9233] loop4: detected capacity change from 0 to 1024 [ 194.240144][ T9233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.264751][ T3675] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.279835][ T3675] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.297542][ T3675] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.313728][ T3675] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.415430][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.473491][ T29] audit: type=1400 audit(1768333357.367:9900): avc: denied { create } for pid=9242 comm="syz.3.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.494179][ T29] audit: type=1400 audit(1768333357.367:9901): avc: denied { connect } for pid=9242 comm="syz.3.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.541100][ T9245] loop3: detected capacity change from 0 to 512 [ 194.551826][ T9245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 194.586040][ T9245] tipc: Enabled bearer , priority 0 [ 194.596560][ T9245] tipc: Disabling bearer [ 194.682812][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.996925][ T9252] ref_ctr increment failed for inode: 0x844 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005d7c0 [ 195.029962][ T29] audit: type=1400 audit(1768333357.947:9902): avc: denied { read write } for pid=9255 comm="syz.2.1919" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 195.056220][ T29] audit: type=1400 audit(1768333357.947:9903): avc: denied { open } for pid=9255 comm="syz.2.1919" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 195.082025][ T29] audit: type=1400 audit(1768333357.997:9904): avc: denied { map } for pid=9255 comm="syz.2.1919" path="socket:[30386]" dev="sockfs" ino=30386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.105589][ T29] audit: type=1400 audit(1768333357.997:9905): avc: denied { read accept } for pid=9255 comm="syz.2.1919" path="socket:[30386]" dev="sockfs" ino=30386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.163553][ T9260] pim6reg1: entered promiscuous mode [ 195.169394][ T9260] pim6reg1: entered allmulticast mode [ 195.242938][ T29] audit: type=1326 audit(1768333358.157:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2c69f749 code=0x7ffc0000 [ 195.269981][ T29] audit: type=1326 audit(1768333358.157:9907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2c69f749 code=0x7ffc0000 [ 195.295759][ T29] audit: type=1326 audit(1768333358.167:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6b2c69f749 code=0x7ffc0000 [ 196.048580][ T9284] wireguard0: entered promiscuous mode [ 196.054479][ T9284] wireguard0: entered allmulticast mode [ 196.124571][ T9290] __nla_validate_parse: 3 callbacks suppressed [ 196.124592][ T9290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1930'. [ 196.153915][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1930'. [ 196.431562][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 196.591330][ T9300] lo speed is unknown, defaulting to 1000 [ 196.655422][ T9300] lo speed is unknown, defaulting to 1000 [ 197.316833][ T9305] tipc: Enabling of bearer rejected, already enabled [ 198.042100][ T9298] lo speed is unknown, defaulting to 1000 [ 198.130083][ T9298] lo speed is unknown, defaulting to 1000 [ 198.284523][ T9316] xt_hashlimit: max too large, truncated to 1048576 [ 198.304543][ T9316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.555015][ T9334] loop3: detected capacity change from 0 to 128 [ 198.571072][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1949'. [ 198.614079][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'. [ 198.720638][ T9342] lo speed is unknown, defaulting to 1000 [ 198.798671][ T9342] lo speed is unknown, defaulting to 1000 [ 199.645776][ T9359] loop4: detected capacity change from 0 to 1024 [ 199.660844][ T9359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.718401][ T9362] lo speed is unknown, defaulting to 1000 [ 199.782691][ T9362] lo speed is unknown, defaulting to 1000 [ 200.046908][ T9359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.522410][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 200.522428][ T29] audit: type=1326 audit(1768333363.437:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9375 comm="syz.1.1961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f517c80f749 code=0x0 [ 201.261864][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1964'. [ 201.305853][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 201.331893][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.428644][ T9392] lo speed is unknown, defaulting to 1000 [ 201.479612][ T9396] wireguard0: entered promiscuous mode [ 201.485552][ T9396] wireguard0: entered allmulticast mode [ 201.523568][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1966'. [ 201.553543][ T9392] lo speed is unknown, defaulting to 1000 [ 201.607824][ T29] audit: type=1400 audit(1768333364.527:10292): avc: denied { kexec_image_load } for pid=9385 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 201.697680][ T9404] loop1: detected capacity change from 0 to 128 [ 201.728491][ T29] audit: type=1400 audit(1768333364.647:10293): avc: denied { setopt } for pid=9405 comm="syz.2.1972" lport=59432 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 201.773933][ T4126] Process accounting resumed [ 201.823253][ T29] audit: type=1326 audit(1768333364.687:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 201.848038][ T29] audit: type=1326 audit(1768333364.687:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 201.872890][ T29] audit: type=1326 audit(1768333364.687:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 201.897286][ T29] audit: type=1326 audit(1768333364.687:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 201.899445][ T9414] futex_wake_op: syz.2.1974 tries to shift op by -1; fix this program [ 201.921513][ T29] audit: type=1326 audit(1768333364.687:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 201.921561][ T29] audit: type=1326 audit(1768333364.687:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 201.921589][ T29] audit: type=1326 audit(1768333364.687:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9403 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 202.090688][ T9423] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 202.097810][ T9423] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.105620][ T9423] vhci_hcd vhci_hcd.0: Device attached [ 202.189894][ T9430] lo speed is unknown, defaulting to 1000 [ 202.247857][ T9430] lo speed is unknown, defaulting to 1000 [ 202.425160][ T1041] usb 2-1: SetAddress Request (2) to port 0 [ 202.431447][ T1041] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 202.505911][ T9441] lo speed is unknown, defaulting to 1000 [ 202.561414][ T9441] lo speed is unknown, defaulting to 1000 [ 202.576259][ T9442] loop4: detected capacity change from 0 to 512 [ 202.583581][ T9442] EXT4-fs: dax option not supported [ 203.026203][ T9424] vhci_hcd: connection reset by peer [ 203.058227][ T3620] vhci_hcd vhci_hcd.0: stop threads [ 203.063911][ T3620] vhci_hcd vhci_hcd.0: release socket [ 203.069452][ T3620] vhci_hcd vhci_hcd.0: disconnect device [ 203.834793][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.857318][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.880261][ T9460] lo speed is unknown, defaulting to 1000 [ 204.115007][ T9460] lo speed is unknown, defaulting to 1000 [ 204.573460][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1995'. [ 204.749257][ T9483] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1996'. [ 204.902332][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1997'. [ 204.952852][ T9489] vhci_hcd vhci_hcd.0: invalid port number 23 [ 204.983733][ T9489] netlink: 'syz.4.1998': attribute type 13 has an invalid length. [ 205.423905][ T9502] lo speed is unknown, defaulting to 1000 [ 205.506738][ T9511] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2007'. [ 205.529999][ T9502] lo speed is unknown, defaulting to 1000 [ 205.603369][ T29] kauditd_printk_skb: 506 callbacks suppressed [ 205.603386][ T29] audit: type=1326 audit(1768333368.527:10807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 205.673270][ T29] audit: type=1326 audit(1768333368.557:10808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad13daf783 code=0x7ffc0000 [ 205.697279][ T29] audit: type=1326 audit(1768333368.557:10809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fad13daf807 code=0x7ffc0000 [ 205.721841][ T29] audit: type=1326 audit(1768333368.557:10810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fad13d66bdd code=0x7ffc0000 [ 205.745563][ T29] audit: type=1326 audit(1768333368.557:10811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fad13de3e89 code=0x7ffc0000 [ 205.770226][ T29] audit: type=1326 audit(1768333368.557:10812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fad13d66c47 code=0x7ffc0000 [ 205.795375][ T29] audit: type=1326 audit(1768333368.557:10813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 205.819626][ T29] audit: type=1326 audit(1768333368.557:10814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad13daf749 code=0x7ffc0000 [ 205.844368][ T29] audit: type=1326 audit(1768333368.557:10815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fad13d66357 code=0x7ffc0000 [ 205.869036][ T29] audit: type=1326 audit(1768333368.557:10816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fad13d663b6 code=0x7ffc0000 [ 205.940728][ T9521] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 206.004951][ T9498] loop4: detected capacity change from 0 to 32768 [ 206.060702][ T9529] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.075566][ T9498] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 206.081124][ T9498] loop4: p1 start 460800 is beyond EOD, truncated [ 206.087896][ T9498] loop4: p2 size 83886080 extends beyond EOD, truncated [ 206.115962][ T9498] loop4: p5 start 460800 is beyond EOD, truncated [ 206.122767][ T9498] loop4: p6 size 83886080 extends beyond EOD, truncated [ 206.181044][ T9529] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.280990][ T9529] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.351736][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 206.397039][ T9529] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.539973][ T3661] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.622292][ T3661] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.654828][ T3632] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.699125][ T3632] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.042661][ T9560] loop1: detected capacity change from 0 to 512 [ 207.050708][ T9560] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 207.121053][ T9562] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 207.467085][ T9578] loop4: detected capacity change from 0 to 1024 [ 207.473983][ T1041] usb 2-1: device descriptor read/8, error -110 [ 207.481338][ T9578] SELinux: security_context_str_to_sid (sysadm_) failed with errno=-22 [ 207.584144][ T1041] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 207.605964][ T1041] usb 2-1: enqueue for inactive port 0 [ 207.618760][ T1041] usb 2-1: enqueue for inactive port 0 [ 207.632145][ T1041] usb 2-1: enqueue for inactive port 0 [ 207.651601][ T9583] netlink: 'syz.0.2031': attribute type 12 has an invalid length. [ 207.735751][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 207.844792][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'. [ 207.989585][ T9592] loop3: detected capacity change from 0 to 1024 [ 208.015625][ T9592] EXT4-fs: Ignoring removed nobh option [ 208.021556][ T9592] EXT4-fs: Ignoring removed bh option [ 208.105273][ T9592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.162180][ T9592] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2035: Allocating blocks 385-513 which overlap fs metadata [ 208.237071][ T9596] EXT4-fs (loop3): pa ffff888107a6cb60: logic 16, phys. 129, len 24 [ 208.245449][ T9596] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 208.360980][ T9598] loop1: detected capacity change from 0 to 2048 [ 208.386360][ T9598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.412562][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.424778][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.454909][ T9604] loop3: detected capacity change from 0 to 512 [ 208.462294][ T9604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.477390][ T9604] EXT4-fs (loop3): 1 truncate cleaned up [ 208.483735][ T9604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.499270][ T9604] EXT4-fs (loop3): shut down requested (0) [ 208.520402][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.534958][ T9609] loop1: detected capacity change from 0 to 512 [ 208.542012][ T9609] EXT4-fs: test_dummy_encryption option not supported [ 208.764381][ T9623] lo speed is unknown, defaulting to 1000 [ 208.785533][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2043'. [ 208.831391][ T9631] loop4: detected capacity change from 0 to 1024 [ 208.844992][ T9623] lo speed is unknown, defaulting to 1000 [ 208.848501][ T9631] EXT4-fs: Ignoring removed bh option [ 208.869124][ T9631] EXT4-fs: inline encryption not supported [ 208.889621][ T9631] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 208.914049][ T9631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 208.923697][ T9631] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.2045: lblock 2 mapped to illegal pblock 2 (length 1) [ 208.943458][ T1041] usb usb2-port1: attempt power cycle [ 209.003303][ T9631] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.2045: lblock 0 mapped to illegal pblock 48 (length 1) [ 209.026226][ T9631] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2045: Failed to acquire dquot type 0 [ 209.103399][ T9631] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 209.124622][ T9631] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.2045: mark_inode_dirty error [ 209.138386][ T9631] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 209.184545][ T9631] EXT4-fs (loop4): 1 orphan inode deleted [ 209.195445][ T9631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.209305][ T3668] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.229617][ T3668] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:59: Failed to release dquot type 0 [ 209.374658][ T9650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.383997][ T9650] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.2045: Invalid inode table block 1 in block_group 0 [ 209.419363][ T9650] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 209.433891][ T9649] syzkaller0: entered promiscuous mode [ 209.439545][ T9649] syzkaller0: entered allmulticast mode [ 209.455803][ T9650] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.2045: mark_inode_dirty error [ 209.471634][ T9649] tipc: Enabled bearer , priority 0 [ 209.497219][ T9648] tipc: Resetting bearer [ 209.524967][ T9648] tipc: Disabling bearer [ 209.916460][ T9656] loop3: detected capacity change from 0 to 512 [ 209.934926][ T9656] EXT4-fs: quotafile must be on filesystem root [ 209.986640][ T9656] loop3: detected capacity change from 0 to 2048 [ 210.090696][ T9656] GPT:first_usable_lbas don't match. [ 210.096285][ T9656] GPT:34 != 290 [ 210.100263][ T9656] GPT: Use GNU Parted to correct GPT errors. [ 210.106688][ T9656] loop3: p1 p2 p3 [ 210.192199][ T9665] netlink: 'syz.4.2058': attribute type 3 has an invalid length. [ 210.639453][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 210.639471][ T29] audit: type=1400 audit(1768333373.557:11329): avc: denied { create } for pid=9676 comm="syz.3.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 210.672872][ T9677] Cannot find del_set index 3 as target [ 210.759023][ T9686] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2067'. [ 210.936493][ T9691] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.041100][ T9691] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.203475][ T1041] usb usb2-port1: unable to enumerate USB device [ 211.333990][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 211.385055][ T9691] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.457234][ T29] audit: type=1326 audit(1768333374.377:11330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 211.510832][ T29] audit: type=1326 audit(1768333374.397:11331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 211.536360][ T29] audit: type=1326 audit(1768333374.397:11332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 211.565555][ T29] audit: type=1326 audit(1768333374.397:11333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 211.590624][ T29] audit: type=1326 audit(1768333374.397:11334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 211.614393][ T29] audit: type=1400 audit(1768333374.397:11335): avc: denied { ioctl } for pid=9699 comm="syz.1.2072" path="socket:[33010]" dev="sockfs" ino=33010 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.640224][ T29] audit: type=1326 audit(1768333374.407:11336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 211.664599][ T29] audit: type=1326 audit(1768333374.407:11337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 211.689424][ T29] audit: type=1326 audit(1768333374.407:11338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c80f749 code=0x7ffc0000 [ 211.883805][ T9691] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.926857][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 211.987436][ T3648] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.007192][ T3648] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.030474][ T3648] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.049411][ T3648] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.096760][ T9718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2080'. [ 212.904811][ T9733] lo speed is unknown, defaulting to 1000 [ 212.949290][ T9733] lo speed is unknown, defaulting to 1000 [ 213.847323][ T9739] loop1: detected capacity change from 0 to 1024 [ 213.867099][ T9739] EXT4-fs: Ignoring removed nobh option [ 213.873121][ T9739] EXT4-fs: Ignoring removed bh option [ 213.905821][ T9739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.945741][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.988403][ T9749] loop1: detected capacity change from 0 to 512 [ 214.024118][ T9749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.055266][ T9749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.080562][ T9749] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.179610][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.226112][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2092'. [ 214.255057][ T9759] bond6 (unregistering): Released all slaves [ 214.287483][ T9766] vhci_hcd vhci_hcd.0: invalid port number 23 [ 214.314692][ T9766] netlink: 'syz.0.2094': attribute type 13 has an invalid length. [ 214.406683][ T9779] lo speed is unknown, defaulting to 1000 [ 214.507420][ T9779] lo speed is unknown, defaulting to 1000 [ 214.541701][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.560189][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.764676][ T9787] Set syz1 is full, maxelem 65536 reached [ 214.820835][ T9790] raw_sendmsg: syz.0.2105 forgot to set AF_INET. Fix it! [ 214.893751][ T1041] usb usb8-port1: attempt power cycle [ 214.952443][ T9799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2108'. [ 215.163252][ T9810] lo speed is unknown, defaulting to 1000 [ 215.223027][ T9810] lo speed is unknown, defaulting to 1000 [ 215.637799][ T9816] netlink: 'syz.0.2114': attribute type 4 has an invalid length. [ 215.667992][ T9819] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 216.089703][ T9837] netlink: 'syz.1.2120': attribute type 10 has an invalid length. [ 216.123169][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 216.129621][ T29] audit: type=1326 audit(1768333379.037:11503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 216.154262][ T29] audit: type=1326 audit(1768333379.047:11504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 216.179262][ T29] audit: type=1326 audit(1768333379.047:11505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 216.203531][ T29] audit: type=1326 audit(1768333379.047:11506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 216.227993][ T29] audit: type=1326 audit(1768333379.047:11507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 216.252799][ T29] audit: type=1326 audit(1768333379.047:11508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 216.277120][ T29] audit: type=1326 audit(1768333379.047:11509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 216.301385][ T29] audit: type=1326 audit(1768333379.047:11510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 216.326058][ T29] audit: type=1326 audit(1768333379.047:11511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 216.350720][ T29] audit: type=1326 audit(1768333379.047:11512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 216.403560][ T9847] loop1: detected capacity change from 0 to 512 [ 216.423708][ T9847] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 216.432104][ T9847] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.2124: iget: bad i_size value: 12154757448730 [ 216.457442][ T9847] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2124: couldn't read orphan inode 13 (err -117) [ 216.480473][ T9847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.498011][ T9847] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.2124: corrupted in-inode xattr: overlapping e_value [ 216.527682][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.563822][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2130'. [ 216.599932][ T9864] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 216.915620][ T9876] netlink: 'syz.2.2134': attribute type 13 has an invalid length. [ 216.928017][ T9876] gretap0: refused to change device tx_queue_len [ 216.934973][ T9876] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 217.010659][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'. [ 217.039977][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 217.186430][ T9883] netlink: 'syz.2.2137': attribute type 4 has an invalid length. [ 217.386768][ T9889] syz.4.2140: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 217.401802][ T9889] CPU: 0 UID: 0 PID: 9889 Comm: syz.4.2140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 217.401832][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.401927][ T9889] Call Trace: [ 217.401937][ T9889] [ 217.401980][ T9889] __dump_stack+0x1d/0x30 [ 217.402016][ T9889] dump_stack_lvl+0x95/0xd0 [ 217.402041][ T9889] dump_stack+0x15/0x1b [ 217.402068][ T9889] warn_alloc+0x12b/0x1a0 [ 217.402104][ T9889] ? ctx_sched_in+0x34d/0x370 [ 217.402135][ T9889] __vmalloc_node_range_noprof+0xa0/0x1310 [ 217.402213][ T9889] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 217.402249][ T9889] ? _raw_spin_unlock+0x26/0x50 [ 217.402277][ T9889] ? finish_task_switch+0x7a/0x2a0 [ 217.402417][ T9889] ? should_fail_ex+0x30/0x280 [ 217.402497][ T9889] ? should_failslab+0x8c/0xb0 [ 217.402529][ T9889] vmalloc_user_noprof+0x7d/0xb0 [ 217.402609][ T9889] ? xskq_create+0x80/0xe0 [ 217.402626][ T9889] xskq_create+0x80/0xe0 [ 217.402722][ T9889] xsk_init_queue+0x95/0xf0 [ 217.402754][ T9889] xsk_setsockopt+0x3f5/0x640 [ 217.402792][ T9889] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.402834][ T9889] __sys_setsockopt+0x184/0x200 [ 217.402885][ T9889] __x64_sys_setsockopt+0x64/0x80 [ 217.402915][ T9889] x64_sys_call+0x21d5/0x3000 [ 217.402950][ T9889] do_syscall_64+0xca/0x2b0 [ 217.403013][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.403039][ T9889] RIP: 0033:0x7fad13daf749 [ 217.403061][ T9889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.403085][ T9889] RSP: 002b:00007fad1280f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.403112][ T9889] RAX: ffffffffffffffda RBX: 00007fad14005fa0 RCX: 00007fad13daf749 [ 217.403127][ T9889] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 217.403139][ T9889] RBP: 00007fad13e33f91 R08: 0000000000000004 R09: 0000000000000000 [ 217.403169][ T9889] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.403190][ T9889] R13: 00007fad14006038 R14: 00007fad14005fa0 R15: 00007ffeecff6fe8 [ 217.403215][ T9889] [ 217.472284][ T1041] usb usb8-port1: unable to enumerate USB device [ 217.476191][ T9889] Mem-Info: [ 217.630243][ T9889] active_anon:45525 inactive_anon:9618 isolated_anon:0 [ 217.630243][ T9889] active_file:20908 inactive_file:4499 isolated_file:0 [ 217.630243][ T9889] unevictable:0 dirty:200 writeback:0 [ 217.630243][ T9889] slab_reclaimable:3632 slab_unreclaimable:175948 [ 217.630243][ T9889] mapped:31651 shmem:47634 pagetables:1353 [ 217.630243][ T9889] sec_pagetables:0 bounce:0 [ 217.630243][ T9889] kernel_misc_reclaimable:0 [ 217.630243][ T9889] free:1659683 free_pcp:14265 free_cma:0 [ 217.677533][ T9889] Node 0 active_anon:182100kB inactive_anon:38472kB active_file:83632kB inactive_file:17996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126604kB dirty:800kB writeback:0kB shmem:190536kB kernel_stack:5184kB pagetables:5412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.706116][ T9889] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.737262][ T9889] lowmem_reserve[]: 0 2880 7859 7859 [ 217.742889][ T9889] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 217.774767][ T9889] lowmem_reserve[]: 0 0 4978 4978 [ 217.779861][ T9889] Node 0 Normal free:3677156kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:181980kB inactive_anon:38472kB active_file:83632kB inactive_file:17996kB unevictable:0kB writepending:876kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:53664kB local_pcp:35056kB free_cma:0kB [ 217.818212][ T9889] lowmem_reserve[]: 0 0 0 0 [ 217.822877][ T9889] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.825540][ T9896] syzkaller0: entered promiscuous mode [ 217.835846][ T9889] Node 0 DMA32: 2*4kB (M) [ 217.841602][ T9896] syzkaller0: entered allmulticast mode [ 217.846485][ T9889] 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 217.866377][ T9889] Node 0 Normal: 0*4kB 2*8kB (UM) 2*16kB (UM) 515*32kB (UM) 445*64kB (UME) 212*128kB (UME) 140*256kB (UME) 167*512kB (UME) 152*1024kB (UM) 85*2048kB (UM) 770*4096kB (UM) = 3677136kB [ 217.885064][ T9889] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 217.894884][ T9889] 73271 total pagecache pages [ 217.899912][ T9889] 235 pages in swap cache [ 217.904717][ T9889] Free swap = 26324kB [ 217.909156][ T9889] Total swap = 124996kB [ 217.913630][ T9889] 2097051 pages RAM [ 217.917460][ T9889] 0 pages HighMem/MovableOnly [ 217.922421][ T9889] 81271 pages reserved [ 218.047565][ T9899] SELinux: Context system_u:object_r:var_run_t:s0 is not valid (left unmapped). [ 218.126332][ T9906] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.176039][ T9906] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.233080][ T9913] syzkaller0: entered promiscuous mode [ 218.239089][ T9913] syzkaller0: entered allmulticast mode [ 218.255167][ T9906] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.325632][ T9906] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.405736][ T3677] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.426288][ T9919] loop1: detected capacity change from 0 to 1024 [ 218.444046][ T9924] netlink: 'syz.2.2155': attribute type 1 has an invalid length. [ 218.452516][ T3677] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.466471][ T9919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.479422][ T3677] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.511893][ T9924] bond6: entered promiscuous mode [ 218.517308][ T9924] bond6: entered allmulticast mode [ 218.525069][ T9924] 8021q: adding VLAN 0 to HW filter on device bond6 [ 218.532834][ T3677] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.547087][ T9932] erspan1: entered allmulticast mode [ 218.557459][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.584067][ T9932] bond6: (slave erspan1): making interface the new active one [ 218.592148][ T9932] erspan1: entered promiscuous mode [ 218.597469][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 218.600605][ T9932] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 218.650066][ T9924] bond6 (unregistering): (slave erspan1): Releasing active interface [ 218.658612][ T9924] erspan1: left promiscuous mode [ 218.669338][ T9924] bond6 (unregistering): Released all slaves [ 218.672306][ T9940] loop1: detected capacity change from 0 to 1024 [ 218.689779][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2162'. [ 218.704831][ T9943] veth0: entered promiscuous mode [ 218.718033][ T9938] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.731661][ T9940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.781623][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.782390][ T9938] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.826842][ T9938] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.885648][ T9938] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.689222][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 220.590544][T10083] netlink: 'syz.2.2174': attribute type 10 has an invalid length. [ 220.663498][ T3414] usb usb8-port1: attempt power cycle [ 220.726045][T10087] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 220.739335][T10087] bond3: entered promiscuous mode [ 220.744696][T10087] bond3: entered allmulticast mode [ 220.750125][T10087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.765807][T10087] erspan1: entered allmulticast mode [ 220.774055][T10087] bond3: (slave erspan1): making interface the new active one [ 220.781941][T10087] erspan1: entered promiscuous mode [ 220.788068][T10087] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 220.807505][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2175'. [ 220.834636][T10087] bond3 (unregistering): (slave erspan1): Releasing active interface [ 220.843176][T10087] erspan1: left promiscuous mode [ 220.850771][T10087] bond3 (unregistering): Released all slaves [ 220.993472][T10095] netlink: 'syz.0.2177': attribute type 4 has an invalid length. [ 221.001469][T10095] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2177'. [ 221.149481][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'. [ 221.176248][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.185437][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.214866][T10104] netlink: 'syz.0.2181': attribute type 13 has an invalid length. [ 221.241539][T10104] gretap0: refused to change device tx_queue_len [ 221.250549][T10104] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 221.267618][ T1041] lo speed is unknown, defaulting to 1000 [ 221.273502][ T1041] syz2: Port: 1 Link ACTIVE [ 221.327748][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 221.327766][ T29] audit: type=1326 audit(1768333384.247:11835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 221.358643][ T29] audit: type=1326 audit(1768333384.247:11836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 221.384078][ T29] audit: type=1326 audit(1768333384.247:11837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 221.409283][ T29] audit: type=1326 audit(1768333384.247:11838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 221.433767][ T29] audit: type=1326 audit(1768333384.247:11839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 221.458359][ T29] audit: type=1326 audit(1768333384.247:11840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 221.483330][ T29] audit: type=1326 audit(1768333384.247:11841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 221.507435][ T29] audit: type=1326 audit(1768333384.247:11842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 221.532411][ T29] audit: type=1326 audit(1768333384.247:11843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 221.557310][ T29] audit: type=1326 audit(1768333384.247:11844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10107 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba6b4f749 code=0x7ffc0000 [ 221.592006][ T3677] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.604910][ T3677] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.616603][ T3677] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.628870][ T3677] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.662193][T10114] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 221.740519][T10119] loop3: detected capacity change from 0 to 1024 [ 221.747706][T10119] EXT4-fs: Ignoring removed orlov option [ 221.756803][T10119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.350031][T10119] ================================================================== [ 222.358643][T10119] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 222.366775][T10119] [ 222.369129][T10119] write to 0xffff888107bb8fc4 of 4 bytes by task 10124 on cpu 0: [ 222.377247][T10119] xas_set_mark+0x12b/0x140 [ 222.381823][T10119] tag_pages_for_writeback+0xc2/0x290 [ 222.387338][T10119] ext4_do_writepages+0x6a8/0x27e0 [ 222.392597][T10119] ext4_writepages+0x179/0x300 [ 222.398013][T10119] do_writepages+0x1c6/0x310 [ 222.402774][T10119] file_write_and_wait_range+0x156/0x2c0 [ 222.408636][T10119] generic_buffers_fsync_noflush+0x45/0x130 [ 222.414570][T10119] ext4_sync_file+0x1ab/0x690 [ 222.419467][T10119] vfs_fsync_range+0x10d/0x130 [ 222.424360][T10119] ext4_buffered_write_iter+0x34f/0x3c0 [ 222.429968][T10119] ext4_file_write_iter+0x387/0xf60 [ 222.435484][T10119] iter_file_splice_write+0x66b/0xa20 [ 222.441123][T10119] direct_splice_actor+0x156/0x2a0 [ 222.446460][T10119] splice_direct_to_actor+0x312/0x680 [ 222.452069][T10119] do_splice_direct+0xda/0x150 [ 222.457049][T10119] do_sendfile+0x380/0x650 [ 222.461719][T10119] __x64_sys_sendfile64+0x105/0x150 [ 222.467112][T10119] x64_sys_call+0x2db1/0x3000 [ 222.472059][T10119] do_syscall_64+0xca/0x2b0 [ 222.476720][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.482831][T10119] [ 222.485187][T10119] read to 0xffff888107bb8fc4 of 4 bytes by task 10119 on cpu 1: [ 222.493278][T10119] file_write_and_wait_range+0x10e/0x2c0 [ 222.499220][T10119] generic_buffers_fsync_noflush+0x45/0x130 [ 222.505431][T10119] ext4_sync_file+0x1ab/0x690 [ 222.510351][T10119] vfs_fsync_range+0x10d/0x130 [ 222.515456][T10119] ext4_buffered_write_iter+0x34f/0x3c0 [ 222.521336][T10119] ext4_file_write_iter+0x387/0xf60 [ 222.526691][T10119] iter_file_splice_write+0x66b/0xa20 [ 222.532313][T10119] direct_splice_actor+0x156/0x2a0 [ 222.537544][T10119] splice_direct_to_actor+0x312/0x680 [ 222.543044][T10119] do_splice_direct+0xda/0x150 [ 222.548243][T10119] do_sendfile+0x380/0x650 [ 222.552789][T10119] __x64_sys_sendfile64+0x105/0x150 [ 222.558494][T10119] x64_sys_call+0x2db1/0x3000 [ 222.563483][T10119] do_syscall_64+0xca/0x2b0 [ 222.568130][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.574449][T10119] [ 222.576973][T10119] value changed: 0x02000021 -> 0x04000021 [ 222.582975][T10119] [ 222.585506][T10119] Reported by Kernel Concurrency Sanitizer on: [ 222.591770][T10119] CPU: 1 UID: 0 PID: 10119 Comm: syz.3.2189 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.601790][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.612137][T10119] ================================================================== [ 222.621517][ T3414] usb usb8-port1: unable to enumerate USB device [ 222.793554][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.