last executing test programs: 8.380102927s ago: executing program 2 (id=2417): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'hugetlb'}]}, 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) rt_sigqueueinfo(0x0, 0x2b, &(0x7f0000000280)={0x22, 0x1, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='svcrdma_rq_post_err\x00'}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, 0x0, 0x0) 7.725930703s ago: executing program 2 (id=2424): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) setregid(r6, r7) 7.229053433s ago: executing program 2 (id=2430): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x6000000000000000, 0x39, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cf0e6dcf2f9d480d328655aca003927bd50ed49d4843c", &(0x7f0000000140)}, 0x50) syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x0) 3.967352941s ago: executing program 2 (id=2452): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205"], 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000000)) 3.716737816s ago: executing program 1 (id=2453): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getrlimit(0xe, &(0x7f0000000040)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) 3.410925537s ago: executing program 3 (id=2456): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r5, @ANYBLOB='ya \x00\x00\x00\x00\a\x00\x00~'], 0x1c}}, 0x0) 2.728559086s ago: executing program 0 (id=2461): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="63727566742c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303031362c636865636b3d72656c617865642c636865636b3d72656c617865642c004ebe02d83839c183098ea4c343c253a3817a1be99fce11d4eb199c8293a8e4edde99717f074b2f8657ce6ba6ad43223cc53c7956558e58c034cc0480ac8c6aa3dc369cd820bf5e83cbc56c0a80d15de24e02d679ed41f8c6c857ae056f277f0cf61fd89cdbf69e958ecb1fb37260f1579c4aa969bbd1f441590c9176efa1e5b98583b0ed66fdc6f1c3311d3033b260303cc6556bd6ce3d5e3c85b1d4cf3d35b7dbce8b8545f832c1346e6a0dd95ed6144444fba9592efe8559", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.526127436s ago: executing program 0 (id=2462): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'hugetlb'}]}, 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x7, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) rt_sigqueueinfo(0x0, 0x2b, &(0x7f0000000280)={0x22, 0x1, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='svcrdma_rq_post_err\x00'}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, 0x0, 0x0) 2.510013398s ago: executing program 3 (id=2463): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) setregid(r7, r8) 2.133786005s ago: executing program 4 (id=2465): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r2, 0x807f, 0x1000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b51"], 0x50) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000300)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYRESDEC], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 2.08711991s ago: executing program 3 (id=2466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x1a) getdents64(r1, &(0x7f0000000440)=""/85, 0x55) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r4, @ANYBLOB="00082dbd7000fcdbdf2603000000080006000100000008000400ca08000014000380060007004e23000008000100000000001400028006000e004e240000080005000400000008000500811500000c00028008000600ffff00000800040000000000080005000800000058000180060001000a00000008000800100000001400030000000000000000000000000000000001080006006f766600080009004e00000008000600776c6300080005000300000008000b00736970000600020021000000"], 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x97a3}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r10], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.954874244s ago: executing program 1 (id=2467): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) 1.914344818s ago: executing program 1 (id=2468): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) setregid(r7, r8) 1.728270366s ago: executing program 4 (id=2469): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.717893427s ago: executing program 0 (id=2470): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) 1.5934103s ago: executing program 3 (id=2471): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x2000) 1.481765501s ago: executing program 4 (id=2472): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x8, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r6], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xcf19312615311bfe, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000010000850000feb10fcdab3ca8ce5c61241e0095ec6312841f0a58d39e9236becca1629e44d7e93bb4846c8f63e14b66"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$bt_hci(0xffffffffffffffff, 0x0, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xffffffff}, 0x18) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000200", @ANYRES16=r9, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.408108528s ago: executing program 4 (id=2473): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r5, @ANYBLOB='ya \x00\x00\x00\x00\a\x00\x00~'], 0x1c}}, 0x0) 1.278335231s ago: executing program 0 (id=2474): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) setregid(r7, r8) 1.234368266s ago: executing program 1 (id=2475): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffff", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x1, 0x1006, 0x9, 0x0, 0x5, 0x0, 0x0, 0xcac4, 0xc2, 0x13, 0xd7, 0xc1b8511, 0x6, 0x10000001, 0x1]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r5, 0x4, 0x10}, &(0x7f0000000180)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0x8517, 0x40, 0xffffffff, 0x12f}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x280040, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 1.206284869s ago: executing program 3 (id=2476): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 1.174885492s ago: executing program 1 (id=2477): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$eJzs3d9r2+YawPFHaUJSF8rhnEMpIWnfpudACqmPbLcpppwLTX7tvK0sGUkuyVUJjVNCnW40Gyy5Gb3pNtj+iN7ujxj7h8pud5chyW6dX1ZIUzuE78e072vpsd5HstGDYksSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAglluz7ZIlnvHbq+pkbi0MmkPm95d370AzZFwRK/knMzNyM5t089+fZt9I/luQuezZnMwkzYzsXbvxj8f/mpzov35IQiOxs7v3ar3b7bwZdyJj0tC+iQLTdBpamShQ1asislKPVN14OlqLYt1UbqidOAjVontPlarVitLFtaDtN2qOp/sTH90v2/ayelJsaSeMAv9/T4qRu2I8z/iNNCaZncQ8Sj6IT02sYu00ldrc6nYqeUkmQaXTBJXzgsp2uVwqlcul5YfVh49se/LIBPsQORIx/g8txuuc9+DA2U306r94YsSXtqyKOvbhSk1CCaR5wvyefv3/7/TwcQfrf7/K3/w0e1bS+n8re3brpPp/Qi6je+zIruzJK1mXrnSlI2/GntFoHw3R4ouRSAIx0hQnnaJ6U5RUZVmWxZbnsiJ1iURJXYx4oiWSNYkkFp1+olwJRYsjsQQSipJFceWeKCnJ/nRVKqJES1HWJJC2+NKQmjjpUjZlK93ulSE5fgwqnSaoPCSI+o/Pd+77cOCs9vv1HwAAAAAAXFpW+tf35Ph/SuZFpiypG0/b404LAAAAAACco/Sb/7mkmUp682Jx/A8AAAAAwGVjpefYWSJSkNtZr38mFH8EAAAAAADgkki//7+VNIWkd1ssjv8BAAAAALhsfupffXfi0DV2/0inWpZErWnr9z8lDKest63V/1jbTjLD2b6Sve7K4SXG9Vnrem8habM82Xvm6jmrd/XLjxfB/NBrNvOu9W+dQwLyi9zJYu5sZO1Gf042SqFuPF10A+9xSRzn+kSsV+PvXm99L+nq/+w3r1uyudXtFF983d1Ic3mbLOXtdu8Cikeuozgkl29lPouZP36Np9ITMXrjFrJx7cH1n+i/cacf850sZDELhawtHFz/mWTMUvFxfz0OrX2WxfSMyGet+Tu5m8XcXbybNcdkUS6e9B70tkV5cPufaVucIotKXhaVvCyu/X9oFgAwLps5Vcg6WvjPsK8dTXV/J4tZzOJsumOdnD1mj27n7dHtz6zrvx25B9LxNbaUjvtrMu4PstXtlNJx3ycveH/iuJFXtkQmRfa3v5EbO7t797e21192XnZel8uVZfuBbT8sy9Tm1mTHTppux6b2AACOkX+PndwI60HOUfU/P/6koCgvRP7a39+QpfRsg/QXB8cutTDwM4SlnKPWwsAdXpZyjuoKAzd6OX1sZQTvBAAAo7OQU4dPU/+Xco67D9by4UfHg7UcAAB8GTr8YBXiH60wNK3npWq15MQrWoWB+1SFptbQyvixDt0Vx29o1QqDOHADL+k8MzUdqajdagVhrOpBqFpBZFbTO7+r3q3fI910/Ni4UcvTTqSVG/ix48aqZiJXtdpfeSZa0WH64qilXVM3rhObwFdR0A5dXVQq0nog0NS0H5u6Sbq+aoWm6YRr6lngtZta1XTkhqYVB9kC+2MZvx6EzXSxxXFvbAAALoid3b1X691u580X7Ix7HQEAwEFUaQAAAAAAAAAAAAAAAAAAAAAALr78E/iujuQcwYvVmb4YaYy7M3Ex0sg6M4Mf2wuQz7l1LLkQaRzujG+fBGA0/g4AAP//CXJN1A==") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) setregid(r7, r8) 1.137954365s ago: executing program 3 (id=2478): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getrlimit(0xe, &(0x7f0000000040)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) 915.028158ms ago: executing program 2 (id=2479): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r2, 0x807f, 0x1000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b51"], 0x50) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000300)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYRESDEC], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 808.823609ms ago: executing program 0 (id=2480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x160, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2, @in=@remote, 0x0, 0x20, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd26, 0xf}}]}, 0x160}, 0x1, 0x0, 0x0, 0x880}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000900), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a01010000000000000000020000080c00024000000000000000020900010073797a30000000000900010073797a3100000000bc0000001a0a030300000000000000000a000003080002400000000008000240000000030c000440"], 0x56c}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001480)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280), 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 610.503499ms ago: executing program 1 (id=2481): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'hugetlb'}]}, 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) rt_sigqueueinfo(0x0, 0x2b, &(0x7f0000000280)={0x22, 0x1, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='svcrdma_rq_post_err\x00'}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, 0x0, 0x0) 455.589864ms ago: executing program 4 (id=2482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 237.991626ms ago: executing program 0 (id=2483): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 227.347137ms ago: executing program 2 (id=2484): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 4 (id=2485): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) kernel console output (not intermixed with test programs): [ 269.620190][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.789121][ T9857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.798427][ T9857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.806874][ T9859] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 269.813427][ T9859] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 269.821695][ T9859] vhci_hcd vhci_hcd.0: Device attached [ 269.829882][ T9859] vhci_hcd vhci_hcd.0: port 0 already used [ 269.841978][ T9860] vhci_hcd: connection closed [ 269.842135][ T52] vhci_hcd: stop threads [ 269.851369][ T52] vhci_hcd: release socket [ 269.855871][ T52] vhci_hcd: disconnect device [ 270.135065][ T9867] loop4: detected capacity change from 0 to 2048 [ 270.170665][ T9867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.183177][ T9867] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.251103][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.292093][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.361470][ T9874] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2044: bg 0: block 345: padding at end of block bitmap is not set [ 270.384864][ T9874] EXT4-fs (loop4): Remounting filesystem read-only [ 270.396969][ T9877] loop0: detected capacity change from 0 to 164 [ 270.680887][ T9877] netlink: 'syz.0.2047': attribute type 13 has an invalid length. [ 270.700861][ T9877] gretap0: refused to change device tx_queue_len [ 270.716271][ T9877] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 270.737137][ T9867] __nla_validate_parse: 1 callbacks suppressed [ 270.737151][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 270.919913][ T9882] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 271.008724][ T9884] loop0: detected capacity change from 0 to 1024 [ 271.049470][ T9884] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 271.323882][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 271.323897][ T29] audit: type=1326 audit(1763158705.341:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 271.347611][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.353792][ T29] audit: type=1326 audit(1763158705.371:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 271.388532][ T29] audit: type=1326 audit(1763158705.401:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 271.412095][ T29] audit: type=1326 audit(1763158705.401:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 271.435587][ T29] audit: type=1326 audit(1763158705.401:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 271.436002][ T9890] loop1: detected capacity change from 0 to 164 [ 271.459296][ T29] audit: type=1326 audit(1763158705.401:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 271.488917][ T29] audit: type=1326 audit(1763158705.401:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 271.488933][ T9890] RRIP_1991 [ 271.512355][ T29] audit: type=1326 audit(1763158705.401:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 271.512382][ T29] audit: type=1326 audit(1763158705.401:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 271.512406][ T29] audit: type=1326 audit(1763158705.401:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 271.515529][ T9890] A [ 271.589634][ T9888] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 271.596147][ T9888] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 271.604315][ T9888] vhci_hcd vhci_hcd.0: Device attached [ 271.612932][ T9893] vhci_hcd vhci_hcd.0: port 0 already used [ 271.620414][ T9891] vhci_hcd: connection closed [ 271.620791][ T12] vhci_hcd: stop threads [ 271.629780][ T12] vhci_hcd: release socket [ 271.634180][ T12] vhci_hcd: disconnect device [ 271.731953][ T9897] sch_fq: defrate 4294967295 ignored. [ 271.738567][ T9890] netlink: 'syz.1.2053': attribute type 13 has an invalid length. [ 271.747475][ T9890] gretap0: refused to change device tx_queue_len [ 271.754303][ T9890] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 271.792147][ T9903] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 271.822174][ T9905] loop4: detected capacity change from 0 to 164 [ 271.992402][ T9911] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 271.998938][ T9911] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 272.007048][ T9911] vhci_hcd vhci_hcd.0: Device attached [ 272.012198][ T9914] netlink: 'syz.4.2055': attribute type 13 has an invalid length. [ 272.021360][ T9914] gretap0: refused to change device tx_queue_len [ 272.028331][ T9914] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.060029][ T9911] vhci_hcd vhci_hcd.0: port 0 already used [ 272.152734][ T9919] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 272.159319][ T9919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 272.167442][ T9919] vhci_hcd vhci_hcd.0: Device attached [ 272.178943][ T9919] vhci_hcd vhci_hcd.0: port 0 already used [ 272.204284][ T9920] vhci_hcd: connection closed [ 272.204696][ T52] vhci_hcd: stop threads [ 272.213762][ T52] vhci_hcd: release socket [ 272.218165][ T52] vhci_hcd: disconnect device [ 272.233276][ T9925] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 272.239872][ T9925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 272.248008][ T9925] vhci_hcd vhci_hcd.0: Device attached [ 272.256007][ T9925] vhci_hcd vhci_hcd.0: port 0 already used [ 272.273136][ T9926] vhci_hcd: connection closed [ 272.273401][ T12] vhci_hcd: stop threads [ 272.282387][ T12] vhci_hcd: release socket [ 272.286793][ T12] vhci_hcd: disconnect device [ 272.297755][ T9912] vhci_hcd: connection closed [ 272.297930][ T12] vhci_hcd: stop threads [ 272.306947][ T12] vhci_hcd: release socket [ 272.310035][ T3402] usb 4-1: SetAddress Request (4) to port 0 [ 272.317247][ T12] vhci_hcd: disconnect device [ 272.317268][ T3402] usb 4-1: new SuperSpeed USB device number 4 using vhci_hcd [ 272.339532][ T3402] usb 4-1: enqueue for inactive port 0 [ 272.345130][ T3402] usb 4-1: enqueue for inactive port 0 [ 272.351132][ T3402] usb 4-1: enqueue for inactive port 0 [ 272.469559][ T3402] usb 4-1: new SuperSpeed USB device number 4 using vhci_hcd [ 272.499665][ T3402] usb 4-1: enqueue for inactive port 0 [ 272.505157][ T3402] usb 4-1: enqueue for inactive port 0 [ 272.521714][ T3402] usb 4-1: enqueue for inactive port 0 [ 272.570699][ T9932] loop3: detected capacity change from 0 to 2048 [ 272.593353][ T9932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.608280][ T9932] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.656613][ T9937] xt_ecn: cannot match TCP bits for non-tcp packets [ 272.672295][ T9938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.690204][ T9938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.744601][ T9938] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2061: bg 0: block 345: padding at end of block bitmap is not set [ 272.789675][ T9938] EXT4-fs (loop3): Remounting filesystem read-only [ 273.039652][ T9944] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 273.046200][ T9944] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 273.054310][ T9944] vhci_hcd vhci_hcd.0: Device attached [ 273.070541][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 273.144153][ T9946] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 273.150717][ T9946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 273.158927][ T9946] vhci_hcd vhci_hcd.0: Device attached [ 273.167000][ T9953] vhci_hcd vhci_hcd.0: port 0 already used [ 273.201001][ T9948] vhci_hcd: connection closed [ 273.201194][ T52] vhci_hcd: stop threads [ 273.210223][ T52] vhci_hcd: release socket [ 273.214654][ T52] vhci_hcd: disconnect device [ 273.341742][ T9952] vhci_hcd vhci_hcd.0: port 0 already used [ 273.399603][ T3402] usb 4-1: SetAddress Request (5) to port 0 [ 273.405629][ T3402] usb 4-1: new SuperSpeed USB device number 5 using vhci_hcd [ 273.413073][ T9950] vhci_hcd: connection closed [ 273.449847][ T12] vhci_hcd: stop threads [ 273.458770][ T12] vhci_hcd: release socket [ 273.463190][ T12] vhci_hcd: disconnect device [ 273.688527][ T9961] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 273.730106][ T9963] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 273.736645][ T9963] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 273.744794][ T9963] vhci_hcd vhci_hcd.0: Device attached [ 273.779034][ T9963] vhci_hcd vhci_hcd.0: port 0 already used [ 273.787914][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.798716][ T9964] vhci_hcd: connection closed [ 273.798844][ T12] vhci_hcd: stop threads [ 273.807881][ T12] vhci_hcd: release socket [ 273.812338][ T12] vhci_hcd: disconnect device [ 273.839069][ T9971] loop4: detected capacity change from 0 to 164 [ 274.029555][ T3395] usb 10-1: device descriptor read/8, error -110 [ 274.036039][ T9975] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 274.042565][ T9975] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.050790][ T9975] vhci_hcd vhci_hcd.0: Device attached [ 274.073278][ T9979] vhci_hcd vhci_hcd.0: port 0 already used [ 274.093807][ T9977] vhci_hcd: connection reset by peer [ 274.099307][ T266] vhci_hcd: stop threads [ 274.103588][ T266] vhci_hcd: release socket [ 274.107994][ T266] vhci_hcd: disconnect device [ 274.149549][ T3395] usb 10-1: new SuperSpeed USB device number 5 using vhci_hcd [ 274.168846][ T9971] netlink: 'syz.4.2070': attribute type 13 has an invalid length. [ 274.176766][ T3395] usb 10-1: enqueue for inactive port 0 [ 274.182635][ T3395] usb 10-1: enqueue for inactive port 0 [ 274.188203][ T3395] usb 10-1: enqueue for inactive port 0 [ 274.193947][ T9971] gretap0: refused to change device tx_queue_len [ 274.200590][ T9971] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 274.393960][ T9990] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 274.400515][ T9990] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.408673][ T9990] vhci_hcd vhci_hcd.0: Device attached [ 274.416572][ T9990] vhci_hcd vhci_hcd.0: port 0 already used [ 274.427481][ T9991] vhci_hcd: connection closed [ 274.427623][ T52] vhci_hcd: stop threads [ 274.436596][ T52] vhci_hcd: release socket [ 274.441045][ T52] vhci_hcd: disconnect device [ 274.474010][ T9996] loop2: detected capacity change from 0 to 2048 [ 274.491146][ T9996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.503263][ T9996] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.570162][ T9999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.578689][ T9999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.610532][ T9999] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2076: bg 0: block 345: padding at end of block bitmap is not set [ 274.654241][ T9999] EXT4-fs (loop2): Remounting filesystem read-only [ 274.712099][T10006] loop1: detected capacity change from 0 to 164 [ 274.889551][T10008] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 274.896081][T10008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.904280][T10008] vhci_hcd vhci_hcd.0: Device attached [ 274.925025][T10012] vhci_hcd vhci_hcd.0: port 0 already used [ 274.943700][T10010] vhci_hcd: connection closed [ 274.943927][ T266] vhci_hcd: stop threads [ 274.952915][ T266] vhci_hcd: release socket [ 274.957312][ T266] vhci_hcd: disconnect device [ 275.017754][T10016] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 275.024411][T10016] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 275.032549][T10016] vhci_hcd vhci_hcd.0: Device attached [ 275.034358][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'. [ 275.060414][T10016] vhci_hcd vhci_hcd.0: port 0 already used [ 275.081878][T10017] vhci_hcd: connection closed [ 275.082131][ T12] vhci_hcd: stop threads [ 275.091117][ T12] vhci_hcd: release socket [ 275.095529][ T12] vhci_hcd: disconnect device [ 275.099083][T10006] netlink: 'syz.1.2079': attribute type 13 has an invalid length. [ 275.108912][T10006] gretap0: refused to change device tx_queue_len [ 275.115671][T10006] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 275.256444][T10024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 275.263041][T10024] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 275.271183][T10024] vhci_hcd vhci_hcd.0: Device attached [ 275.276899][ T3395] usb usb10-port1: attempt power cycle [ 275.284626][T10024] vhci_hcd vhci_hcd.0: port 0 already used [ 275.378766][T10031] loop4: detected capacity change from 0 to 1024 [ 275.385535][T10031] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 275.506102][T10035] xt_ecn: cannot match TCP bits for non-tcp packets [ 275.579719][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.634660][T10040] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 275.641193][T10040] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 275.649368][T10040] vhci_hcd vhci_hcd.0: Device attached [ 275.659324][T10040] vhci_hcd vhci_hcd.0: port 0 already used [ 275.672616][T10043] vhci_hcd: connection closed [ 275.672876][ T52] vhci_hcd: stop threads [ 275.681825][ T52] vhci_hcd: release socket [ 275.686278][ T52] vhci_hcd: disconnect device [ 275.724497][T10051] loop2: detected capacity change from 0 to 164 [ 275.776948][T10025] vhci_hcd: connection closed [ 275.842169][ T266] vhci_hcd: stop threads [ 275.851169][ T266] vhci_hcd: release socket [ 275.855640][ T266] vhci_hcd: disconnect device [ 275.937683][T10051] netlink: 'syz.2.2090': attribute type 13 has an invalid length. [ 275.946264][T10051] gretap0: refused to change device tx_queue_len [ 275.952976][T10051] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 276.241294][T10054] sch_fq: defrate 4294967295 ignored. [ 276.284490][T10057] loop0: detected capacity change from 0 to 1024 [ 276.291502][T10057] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 276.308362][T10061] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 276.314902][T10061] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 276.323067][T10061] vhci_hcd vhci_hcd.0: Device attached [ 276.355628][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 276.355642][ T29] audit: type=1326 audit(1763158710.371:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa3d36de32a code=0x7ffc0000 [ 276.372819][T10066] loop2: detected capacity change from 0 to 2048 [ 276.388248][ T29] audit: type=1326 audit(1763158710.401:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 276.415050][ T29] audit: type=1326 audit(1763158710.401:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 276.443318][T10065] vhci_hcd vhci_hcd.0: port 0 already used [ 276.444383][ T29] audit: type=1326 audit(1763158710.461:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 276.472708][ T29] audit: type=1326 audit(1763158710.461:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 276.496216][ T29] audit: type=1326 audit(1763158710.461:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 276.504829][T10062] vhci_hcd: connection closed [ 276.519678][ T29] audit: type=1326 audit(1763158710.461:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 276.535194][ T52] vhci_hcd: stop threads [ 276.547833][ T29] audit: type=1326 audit(1763158710.461:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 276.552063][ T52] vhci_hcd: release socket [ 276.575482][ T29] audit: type=1326 audit(1763158710.461:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 276.579909][ T52] vhci_hcd: disconnect device [ 276.603312][ T29] audit: type=1326 audit(1763158710.461:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 276.679840][T10066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.693104][T10066] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.778118][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.806909][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.865884][T10072] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2095: bg 0: block 345: padding at end of block bitmap is not set [ 276.909994][T10072] EXT4-fs (loop2): Remounting filesystem read-only [ 277.160514][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 277.190073][T10079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 277.220862][T10077] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 277.227396][T10077] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 277.235600][T10077] vhci_hcd vhci_hcd.0: Device attached [ 277.249857][ T3395] usb usb10-port1: unable to enumerate USB device [ 277.279708][T10077] vhci_hcd vhci_hcd.0: port 0 already used [ 277.293204][T10080] vhci_hcd: connection closed [ 277.293556][ T52] vhci_hcd: stop threads [ 277.302497][ T52] vhci_hcd: release socket [ 277.306896][ T52] vhci_hcd: disconnect device [ 277.324590][T10086] loop1: detected capacity change from 0 to 2048 [ 277.383681][T10086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.406046][T10086] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.500398][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.510437][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.558678][T10090] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2099: bg 0: block 345: padding at end of block bitmap is not set [ 277.588197][T10090] EXT4-fs (loop1): Remounting filesystem read-only [ 277.641337][T10092] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 277.648043][T10092] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 277.656163][T10092] vhci_hcd vhci_hcd.0: Device attached [ 277.679798][T10092] vhci_hcd vhci_hcd.0: port 0 already used [ 277.701251][T10093] vhci_hcd: connection closed [ 277.701361][ T12] vhci_hcd: stop threads [ 277.710457][ T12] vhci_hcd: release socket [ 277.714857][ T12] vhci_hcd: disconnect device [ 277.762175][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.808590][T10100] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 277.815124][T10100] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 277.823257][T10100] vhci_hcd vhci_hcd.0: Device attached [ 277.845525][T10100] vhci_hcd vhci_hcd.0: port 0 already used [ 277.852894][T10106] loop2: detected capacity change from 0 to 164 [ 277.855791][T10108] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 277.865671][T10108] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 277.873803][T10108] vhci_hcd vhci_hcd.0: Device attached [ 277.880908][T10103] vhci_hcd: connection closed [ 277.881241][ T31] vhci_hcd: stop threads [ 277.890178][ T31] vhci_hcd: release socket [ 277.890189][ T31] vhci_hcd: disconnect device [ 277.896470][T10108] vhci_hcd vhci_hcd.0: port 0 already used [ 277.899259][T10106] RRIP_1991A [ 277.913468][T10111] vhci_hcd: connection closed [ 277.913680][ T12] vhci_hcd: stop threads [ 277.922697][ T12] vhci_hcd: release socket [ 277.927104][ T12] vhci_hcd: disconnect device [ 278.064716][T10106] netlink: 'syz.2.2104': attribute type 13 has an invalid length. [ 278.073115][T10106] gretap0: refused to change device tx_queue_len [ 278.079688][T10106] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 278.195969][T10117] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 278.202514][T10117] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.210648][T10117] vhci_hcd vhci_hcd.0: Device attached [ 278.219828][T10117] vhci_hcd vhci_hcd.0: port 0 already used [ 278.231097][T10118] vhci_hcd: connection closed [ 278.232533][ T52] vhci_hcd: stop threads [ 278.241470][ T52] vhci_hcd: release socket [ 278.245874][ T52] vhci_hcd: disconnect device [ 278.246688][T10123] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 278.257021][T10123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.265275][T10123] vhci_hcd vhci_hcd.0: Device attached [ 278.274767][T10123] vhci_hcd vhci_hcd.0: port 0 already used [ 278.285367][T10124] vhci_hcd: connection closed [ 278.285613][ T52] vhci_hcd: stop threads [ 278.294539][ T52] vhci_hcd: release socket [ 278.298937][ T52] vhci_hcd: disconnect device [ 278.387551][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.417352][T10130] loop1: detected capacity change from 0 to 164 [ 278.453497][T10131] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 278.460057][T10131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.463786][T10135] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 278.468213][T10131] vhci_hcd vhci_hcd.0: Device attached [ 278.474610][T10135] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.488218][T10135] vhci_hcd vhci_hcd.0: Device attached [ 278.515970][ T3402] usb 4-1: device descriptor read/8, error -110 [ 278.516478][T10135] vhci_hcd vhci_hcd.0: port 0 already used [ 278.532632][T10131] vhci_hcd vhci_hcd.0: port 0 already used [ 278.543252][T10132] vhci_hcd: connection closed [ 278.543371][ T12] vhci_hcd: stop threads [ 278.552332][ T12] vhci_hcd: release socket [ 278.556738][ T12] vhci_hcd: disconnect device [ 278.568924][T10136] vhci_hcd: connection closed [ 278.569231][ T12] vhci_hcd: stop threads [ 278.578204][ T12] vhci_hcd: release socket [ 278.582638][ T12] vhci_hcd: disconnect device [ 278.629557][ T3402] usb 4-1: new SuperSpeed USB device number 5 using vhci_hcd [ 278.643510][T10130] netlink: 'syz.1.2108': attribute type 13 has an invalid length. [ 278.651415][ T3402] usb 4-1: enqueue for inactive port 0 [ 278.656889][ T3402] usb 4-1: enqueue for inactive port 0 [ 278.656964][T10130] gretap0: refused to change device tx_queue_len [ 278.662681][ T3402] usb 4-1: enqueue for inactive port 0 [ 278.669049][T10130] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 278.766615][T10144] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 278.773355][T10144] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.781464][T10144] vhci_hcd vhci_hcd.0: Device attached [ 278.787075][ T3402] usb usb4-port1: attempt power cycle [ 278.830649][T10150] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 278.883594][T10145] vhci_hcd: connection closed [ 278.883813][ T52] vhci_hcd: stop threads [ 278.892770][ T52] vhci_hcd: release socket [ 278.897193][ T52] vhci_hcd: disconnect device [ 278.923195][T10155] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 278.929736][T10155] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.937856][T10155] vhci_hcd vhci_hcd.0: Device attached [ 278.945560][T10155] vhci_hcd vhci_hcd.0: port 0 already used [ 279.553214][ T3955] usb 10-1: SetAddress Request (9) to port 0 [ 279.559246][ T3955] usb 10-1: new SuperSpeed USB device number 9 using vhci_hcd [ 279.726706][T10175] sch_fq: defrate 4294967295 ignored. [ 279.766075][T10156] vhci_hcd: connection reset by peer [ 279.771669][ T31] vhci_hcd: stop threads [ 279.775943][ T31] vhci_hcd: release socket [ 279.780441][ T31] vhci_hcd: disconnect device [ 279.794269][T10180] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 279.800784][T10180] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 279.809001][T10180] vhci_hcd vhci_hcd.0: Device attached [ 279.846928][T10180] vhci_hcd vhci_hcd.0: port 0 already used [ 279.910905][T10190] loop2: detected capacity change from 0 to 1024 [ 279.943076][T10181] vhci_hcd: connection closed [ 279.946296][T10190] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 279.961341][ T12] vhci_hcd: stop threads [ 279.965584][ T12] vhci_hcd: release socket [ 279.970152][ T12] vhci_hcd: disconnect device [ 280.319894][T10200] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 280.326444][T10200] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 280.334624][T10200] vhci_hcd vhci_hcd.0: Device attached [ 280.345318][T10202] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 280.351914][T10202] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 280.360096][T10202] vhci_hcd vhci_hcd.0: Device attached [ 280.376496][T10200] vhci_hcd vhci_hcd.0: port 0 already used [ 280.386965][T10203] vhci_hcd: connection closed [ 280.387200][ T31] vhci_hcd: stop threads [ 280.396161][ T31] vhci_hcd: release socket [ 280.400586][ T31] vhci_hcd: disconnect device [ 280.438924][T10205] vhci_hcd: connection closed [ 280.439090][ T31] vhci_hcd: stop threads [ 280.448054][ T31] vhci_hcd: release socket [ 280.452485][ T31] vhci_hcd: disconnect device [ 280.473634][T10211] loop0: detected capacity change from 0 to 164 [ 280.667210][T10211] netlink: 'syz.0.2130': attribute type 13 has an invalid length. [ 280.675855][T10211] gretap0: refused to change device tx_queue_len [ 280.682542][T10211] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.111588][T10224] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 281.118139][T10224] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 281.126277][T10224] vhci_hcd vhci_hcd.0: Device attached [ 281.130409][T10218] sch_fq: defrate 4294967295 ignored. [ 281.386038][ T29] kauditd_printk_skb: 721 callbacks suppressed [ 281.386096][ T29] audit: type=1326 audit(1763158715.401:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 281.482729][ T29] audit: type=1326 audit(1763158715.431:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 281.506267][ T29] audit: type=1326 audit(1763158715.441:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 281.529686][ T29] audit: type=1326 audit(1763158715.441:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 281.553165][ T29] audit: type=1326 audit(1763158715.441:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 281.576637][ T29] audit: type=1326 audit(1763158715.441:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 281.600120][ T29] audit: type=1326 audit(1763158715.441:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 281.623586][ T29] audit: type=1326 audit(1763158715.441:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 281.628905][T10228] vhci_hcd: connection closed [ 281.647071][ T29] audit: type=1326 audit(1763158715.441:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 281.647099][ T29] audit: type=1326 audit(1763158715.441:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 281.679192][ T52] vhci_hcd: stop threads [ 281.702893][ T52] vhci_hcd: release socket [ 281.707296][ T52] vhci_hcd: disconnect device [ 281.712608][T10235] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 281.719120][T10235] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 281.722905][T10238] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 281.726876][T10235] vhci_hcd vhci_hcd.0: Device attached [ 281.733222][T10238] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 281.733275][T10238] vhci_hcd vhci_hcd.0: Device attached [ 281.747180][T10244] vhci_hcd vhci_hcd.0: port 0 already used [ 281.785040][T10240] vhci_hcd: connection closed [ 281.785264][ T266] vhci_hcd: stop threads [ 281.794220][ T266] vhci_hcd: release socket [ 281.798617][ T266] vhci_hcd: disconnect device [ 281.862817][T10245] vhci_hcd: connection closed [ 281.863156][ T31] vhci_hcd: stop threads [ 281.872395][ T31] vhci_hcd: release socket [ 281.876796][ T31] vhci_hcd: disconnect device [ 281.878958][T10253] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 282.072949][T10258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.082207][T10258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.342814][T10264] loop0: detected capacity change from 0 to 164 [ 282.602118][T10264] netlink: 'syz.0.2145': attribute type 13 has an invalid length. [ 282.611122][T10264] gretap0: refused to change device tx_queue_len [ 282.617848][T10264] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 282.633528][T10267] sch_fq: defrate 4294967295 ignored. [ 282.656428][T10274] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 282.696361][T10276] loop2: detected capacity change from 0 to 1024 [ 282.703464][T10276] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 282.810015][T10286] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 282.816551][T10286] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.824683][T10286] vhci_hcd vhci_hcd.0: Device attached [ 282.846589][T10284] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 282.853121][T10284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.861251][T10284] vhci_hcd vhci_hcd.0: Device attached [ 282.871648][T10288] vhci_hcd: connection closed [ 282.873759][ T266] vhci_hcd: stop threads [ 282.882773][ T266] vhci_hcd: release socket [ 282.887242][ T266] vhci_hcd: disconnect device [ 282.893160][T10287] vhci_hcd: connection closed [ 282.893438][ T266] vhci_hcd: stop threads [ 282.902447][ T266] vhci_hcd: release socket [ 282.906835][ T266] vhci_hcd: disconnect device [ 283.406888][T10295] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 283.413424][T10295] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 283.421610][T10295] vhci_hcd vhci_hcd.0: Device attached [ 283.429945][T10295] vhci_hcd vhci_hcd.0: port 0 already used [ 283.437871][T10301] loop3: detected capacity change from 0 to 164 [ 283.448557][T10296] vhci_hcd: connection closed [ 283.448875][ T266] vhci_hcd: stop threads [ 283.457927][ T266] vhci_hcd: release socket [ 283.458007][ T266] vhci_hcd: disconnect device [ 283.462364][T10301] _1991A [ 283.560535][T10303] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.658881][T10301] netlink: 'syz.3.2156': attribute type 13 has an invalid length. [ 283.667447][T10301] gretap0: refused to change device tx_queue_len [ 283.675861][T10305] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 283.679811][T10301] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 283.682371][T10305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 283.706063][T10305] vhci_hcd vhci_hcd.0: Device attached [ 283.716386][T10308] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 283.722921][T10308] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 283.730830][T10308] vhci_hcd vhci_hcd.0: Device attached [ 283.734154][T10305] vhci_hcd vhci_hcd.0: port 0 already used [ 283.750336][T10309] vhci_hcd: connection closed [ 283.750455][ T52] vhci_hcd: stop threads [ 283.759441][ T52] vhci_hcd: release socket [ 283.763935][ T52] vhci_hcd: disconnect device [ 283.770800][T10311] vhci_hcd: connection closed [ 283.770995][ T266] vhci_hcd: stop threads [ 283.779930][ T266] vhci_hcd: release socket [ 283.784371][ T266] vhci_hcd: disconnect device [ 284.049864][T10320] loop1: detected capacity change from 0 to 164 [ 284.265369][T10320] netlink: 'syz.1.2162': attribute type 13 has an invalid length. [ 284.285135][T10320] gretap0: refused to change device tx_queue_len [ 284.293028][T10320] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 284.332475][T10324] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 284.339013][T10324] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.347119][T10324] vhci_hcd vhci_hcd.0: Device attached [ 284.354851][T10324] vhci_hcd vhci_hcd.0: port 0 already used [ 284.369266][T10327] vhci_hcd: connection closed [ 284.369559][ T31] vhci_hcd: stop threads [ 284.378485][ T31] vhci_hcd: release socket [ 284.382926][ T31] vhci_hcd: disconnect device [ 284.470336][T10337] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 284.493985][T10332] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2165'. [ 284.551742][T10340] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 284.558368][T10340] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.566478][T10340] vhci_hcd vhci_hcd.0: Device attached [ 284.582146][T10340] vhci_hcd vhci_hcd.0: port 0 already used [ 284.593892][T10342] vhci_hcd: connection closed [ 284.594189][ T52] vhci_hcd: stop threads [ 284.603205][ T52] vhci_hcd: release socket [ 284.607602][ T52] vhci_hcd: disconnect device [ 284.612825][ T3955] usb 10-1: device descriptor read/8, error -110 [ 284.719712][ T3955] usb 10-1: new SuperSpeed USB device number 9 using vhci_hcd [ 284.739858][ T3955] usb 10-1: enqueue for inactive port 0 [ 284.745523][ T3955] usb 10-1: enqueue for inactive port 0 [ 284.751305][ T3955] usb 10-1: enqueue for inactive port 0 [ 284.903322][T10350] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 284.909908][T10350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.918033][T10350] vhci_hcd vhci_hcd.0: Device attached [ 284.941386][T10350] vhci_hcd vhci_hcd.0: port 0 already used [ 284.986810][T10356] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 284.993341][T10356] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 285.001493][T10356] vhci_hcd vhci_hcd.0: Device attached [ 285.002804][T10351] vhci_hcd: connection closed [ 285.012746][T10356] vhci_hcd vhci_hcd.0: port 0 already used [ 285.013628][ T266] vhci_hcd: stop threads [ 285.027605][ T266] vhci_hcd: release socket [ 285.032060][ T266] vhci_hcd: disconnect device [ 285.037926][T10357] vhci_hcd: connection closed [ 285.038155][ T266] vhci_hcd: stop threads [ 285.047099][ T266] vhci_hcd: release socket [ 285.051616][ T266] vhci_hcd: disconnect device [ 285.141715][T10362] loop1: detected capacity change from 0 to 2048 [ 285.160619][T10362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.172783][T10362] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.237956][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.249759][T10369] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 285.256391][T10369] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 285.260261][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.264666][T10369] vhci_hcd vhci_hcd.0: Device attached [ 285.318602][T10370] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2172: bg 0: block 345: padding at end of block bitmap is not set [ 285.333179][T10370] EXT4-fs (loop1): Remounting filesystem read-only [ 285.366810][T10371] vhci_hcd: connection closed [ 285.367003][ T52] vhci_hcd: stop threads [ 285.375976][ T52] vhci_hcd: release socket [ 285.380419][ T52] vhci_hcd: disconnect device [ 285.468032][T10375] loop3: detected capacity change from 0 to 2048 [ 285.490304][T10375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.502656][T10375] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.549291][T10379] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 285.555823][T10379] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 285.563996][T10379] vhci_hcd vhci_hcd.0: Device attached [ 285.577128][T10382] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2175: bg 0: block 345: padding at end of block bitmap is not set [ 285.592767][T10382] EXT4-fs (loop3): Remounting filesystem read-only [ 285.663998][T10380] vhci_hcd: connection closed [ 285.664575][ T52] vhci_hcd: stop threads [ 285.673174][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2175'. [ 285.673534][ T52] vhci_hcd: release socket [ 285.686755][ T52] vhci_hcd: disconnect device [ 285.703378][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.866511][T10393] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 285.873049][T10393] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 285.880730][T10393] vhci_hcd vhci_hcd.0: Device attached [ 285.958502][T10394] vhci_hcd: connection closed [ 285.960320][ T31] vhci_hcd: stop threads [ 285.969243][ T31] vhci_hcd: release socket [ 285.973693][ T31] vhci_hcd: disconnect device [ 286.040534][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.051388][T10402] loop0: detected capacity change from 0 to 164 [ 286.194843][T10404] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2184'. [ 286.345932][T10402] netlink: 'syz.0.2183': attribute type 13 has an invalid length. [ 286.354562][T10402] gretap0: refused to change device tx_queue_len [ 286.361288][T10402] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 286.485810][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'. [ 286.506785][T10416] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 286.537263][T10418] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 286.618960][T10425] xt_ecn: cannot match TCP bits for non-tcp packets [ 286.715911][T10427] loop3: detected capacity change from 0 to 1024 [ 286.740065][T10427] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 286.835510][T10431] loop0: detected capacity change from 0 to 164 [ 286.977905][ T29] kauditd_printk_skb: 636 callbacks suppressed [ 286.977929][ T29] audit: type=1326 audit(1763158720.991:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.1.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 287.007642][ T29] audit: type=1326 audit(1763158720.991:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.1.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 287.072017][T10436] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 287.078547][T10436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 287.086741][T10436] vhci_hcd vhci_hcd.0: Device attached [ 287.134248][T10431] netlink: 'syz.0.2193': attribute type 13 has an invalid length. [ 287.158364][T10431] gretap0: refused to change device tx_queue_len [ 287.175204][T10431] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 287.197758][T10442] loop2: detected capacity change from 0 to 164 [ 287.220636][T10438] vhci_hcd: connection closed [ 287.221173][ T52] vhci_hcd: stop threads [ 287.230285][ T52] vhci_hcd: release socket [ 287.234688][ T52] vhci_hcd: disconnect device [ 287.509523][ T29] audit: type=1326 audit(1763158721.051:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.1.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 287.532961][ T29] audit: type=1326 audit(1763158721.051:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.1.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 287.556447][ T29] audit: type=1326 audit(1763158721.051:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.1.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 287.579927][ T29] audit: type=1326 audit(1763158721.051:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.1.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 287.582860][T10442] netlink: 'syz.2.2196': attribute type 13 has an invalid length. [ 287.603419][ T29] audit: type=1326 audit(1763158721.051:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.1.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 287.634683][ T29] audit: type=1326 audit(1763158721.051:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.1.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 287.658213][ T29] audit: type=1326 audit(1763158721.051:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.1.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 287.681582][ T29] audit: type=1326 audit(1763158721.051:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10435 comm="syz.1.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d36df6c9 code=0x7ffc0000 [ 287.706055][T10442] gretap0: refused to change device tx_queue_len [ 287.713420][T10445] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 287.720014][T10445] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 287.727757][T10445] vhci_hcd vhci_hcd.0: Device attached [ 287.733620][T10442] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 287.760476][T10448] vhci_hcd: connection closed [ 287.760709][ T12] vhci_hcd: stop threads [ 287.769644][ T12] vhci_hcd: release socket [ 287.774043][ T12] vhci_hcd: disconnect device [ 287.801268][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'. [ 287.831753][T10453] loop3: detected capacity change from 0 to 164 [ 287.881205][T10455] loop1: detected capacity change from 0 to 164 [ 288.004768][T10457] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 288.011307][T10457] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 288.019136][T10457] vhci_hcd vhci_hcd.0: Device attached [ 288.129499][T10459] vhci_hcd: connection closed [ 288.129623][ T31] vhci_hcd: stop threads [ 288.138625][ T31] vhci_hcd: release socket [ 288.143051][ T31] vhci_hcd: disconnect device [ 288.156304][T10455] netlink: 'syz.1.2200': attribute type 13 has an invalid length. [ 288.174271][T10455] gretap0: refused to change device tx_queue_len [ 288.184471][T10455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 288.249144][T10453] netlink: 'syz.3.2199': attribute type 13 has an invalid length. [ 288.258464][T10453] gretap0: refused to change device tx_queue_len [ 288.284011][T10453] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 288.840385][T10475] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 288.846921][T10475] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 288.854598][T10475] vhci_hcd vhci_hcd.0: Device attached [ 288.894245][T10481] loop1: detected capacity change from 0 to 2048 [ 288.924869][T10481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.937137][T10481] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.949049][T10477] vhci_hcd: connection closed [ 288.949400][ T52] vhci_hcd: stop threads [ 288.958468][ T52] vhci_hcd: release socket [ 288.962888][ T52] vhci_hcd: disconnect device [ 289.029680][T10485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.066732][T10485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.169639][T10485] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2208: bg 0: block 345: padding at end of block bitmap is not set [ 289.199671][T10485] EXT4-fs (loop1): Remounting filesystem read-only [ 289.512821][T10491] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 289.519425][T10491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 289.527538][T10491] vhci_hcd vhci_hcd.0: Device attached [ 289.537269][T10491] vhci_hcd vhci_hcd.0: port 0 already used [ 289.583803][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2210'. [ 289.636371][T10492] vhci_hcd: connection closed [ 289.636580][ T52] vhci_hcd: stop threads [ 289.645571][ T52] vhci_hcd: release socket [ 289.650063][ T52] vhci_hcd: disconnect device [ 289.657373][T10500] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 289.663908][T10500] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 289.670338][T10503] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 289.671609][T10500] vhci_hcd vhci_hcd.0: Device attached [ 289.678012][T10503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 289.691569][T10503] vhci_hcd vhci_hcd.0: Device attached [ 289.712450][T10503] vhci_hcd vhci_hcd.0: port 0 already used [ 289.713129][T10506] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 289.724831][T10506] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 289.733075][T10506] vhci_hcd vhci_hcd.0: Device attached [ 289.740187][T10507] vhci_hcd: connection closed [ 289.741013][ T12] vhci_hcd: stop threads [ 289.747102][T10502] vhci_hcd: connection closed [ 289.750048][ T12] vhci_hcd: release socket [ 289.751064][T10506] vhci_hcd vhci_hcd.0: port 0 already used [ 289.754715][ T12] vhci_hcd: disconnect device [ 289.770182][ T12] vhci_hcd: stop threads [ 289.774491][ T12] vhci_hcd: release socket [ 289.778891][ T12] vhci_hcd: disconnect device [ 289.825941][T10509] vhci_hcd: connection closed [ 289.826111][ T12] vhci_hcd: stop threads [ 289.835066][ T12] vhci_hcd: release socket [ 289.839503][ T12] vhci_hcd: disconnect device [ 290.005642][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.030245][T10517] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 290.036824][T10517] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 290.045047][T10517] vhci_hcd vhci_hcd.0: Device attached [ 290.052211][T10517] vhci_hcd vhci_hcd.0: port 0 already used [ 290.080687][T10518] vhci_hcd: connection closed [ 290.080845][ T52] vhci_hcd: stop threads [ 290.089790][ T52] vhci_hcd: release socket [ 290.094194][ T52] vhci_hcd: disconnect device [ 290.268437][T10525] xt_ecn: cannot match TCP bits for non-tcp packets [ 290.390657][T10529] loop3: detected capacity change from 0 to 164 [ 290.919546][T10536] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 290.926077][T10536] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 290.933754][T10536] vhci_hcd vhci_hcd.0: Device attached [ 291.097809][T10529] netlink: 'syz.3.2218': attribute type 13 has an invalid length. [ 291.110639][T10537] vhci_hcd: connection closed [ 291.110899][ T31] vhci_hcd: stop threads [ 291.119823][ T31] vhci_hcd: release socket [ 291.124234][ T31] vhci_hcd: disconnect device [ 291.128994][T10541] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 291.135489][T10541] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 291.143667][T10541] vhci_hcd vhci_hcd.0: Device attached [ 291.164666][T10529] gretap0: refused to change device tx_queue_len [ 291.174273][T10529] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.190679][T10544] vhci_hcd vhci_hcd.0: port 0 already used [ 291.198133][T10542] vhci_hcd: connection closed [ 291.198480][ T31] vhci_hcd: stop threads [ 291.207419][ T31] vhci_hcd: release socket [ 291.211833][ T31] vhci_hcd: disconnect device [ 291.702747][T10557] loop1: detected capacity change from 0 to 1024 [ 291.739679][T10557] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 291.838035][T10561] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 291.844574][T10561] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 291.852277][T10561] vhci_hcd vhci_hcd.0: Device attached [ 291.963372][T10562] vhci_hcd: connection closed [ 291.963513][ T31] vhci_hcd: stop threads [ 291.972469][ T31] vhci_hcd: release socket [ 291.976923][ T31] vhci_hcd: disconnect device [ 292.106060][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 292.106072][ T29] audit: type=1326 audit(1763158726.121:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 292.139871][ T29] audit: type=1326 audit(1763158726.151:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 292.150896][T10568] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 292.163524][ T29] audit: type=1326 audit(1763158726.151:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 292.169880][T10568] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 292.193397][ T29] audit: type=1326 audit(1763158726.151:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 292.201414][T10568] vhci_hcd vhci_hcd.0: Device attached [ 292.224790][ T29] audit: type=1326 audit(1763158726.151:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 292.253723][ T29] audit: type=1326 audit(1763158726.151:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 292.277326][ T29] audit: type=1326 audit(1763158726.151:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 292.300639][ T29] audit: type=1326 audit(1763158726.151:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 292.324144][ T29] audit: type=1326 audit(1763158726.151:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 292.347761][ T29] audit: type=1326 audit(1763158726.151:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10569 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 292.371392][T10570] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 292.372207][T10568] vhci_hcd vhci_hcd.0: port 0 already used [ 292.377896][T10570] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 292.377972][T10570] vhci_hcd vhci_hcd.0: Device attached [ 292.398236][T10578] loop2: detected capacity change from 0 to 1024 [ 292.404893][T10575] vhci_hcd vhci_hcd.0: port 0 already used [ 292.407541][T10573] vhci_hcd: connection closed [ 292.411428][ T12] vhci_hcd: stop threads [ 292.416321][T10578] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 292.420374][ T12] vhci_hcd: release socket [ 292.420387][ T12] vhci_hcd: disconnect device [ 292.420517][T10571] vhci_hcd: connection closed [ 292.439591][ T12] vhci_hcd: stop threads [ 292.448507][ T12] vhci_hcd: release socket [ 292.452979][ T12] vhci_hcd: disconnect device [ 292.523473][T10584] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 292.529999][T10584] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 292.538108][T10584] vhci_hcd vhci_hcd.0: Device attached [ 292.545670][T10584] vhci_hcd vhci_hcd.0: port 0 already used [ 292.565896][T10590] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 292.585447][T10585] vhci_hcd: connection closed [ 292.585615][ T12] vhci_hcd: stop threads [ 292.594658][ T12] vhci_hcd: release socket [ 292.599079][ T12] vhci_hcd: disconnect device [ 292.612431][T10592] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 292.618942][T10592] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 292.627118][T10592] vhci_hcd vhci_hcd.0: Device attached [ 292.634184][T10592] vhci_hcd vhci_hcd.0: port 0 already used [ 292.703259][T10593] vhci_hcd: connection closed [ 292.703421][ T12] vhci_hcd: stop threads [ 292.712383][ T12] vhci_hcd: release socket [ 292.716785][ T12] vhci_hcd: disconnect device [ 292.998214][T10599] loop4: detected capacity change from 0 to 164 [ 293.019534][T10601] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 293.026081][T10601] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 293.033792][T10601] vhci_hcd vhci_hcd.0: Device attached [ 293.128695][T10602] vhci_hcd: connection closed [ 293.128936][T10606] loop1: detected capacity change from 0 to 164 [ 293.130738][ T12] vhci_hcd: stop threads [ 293.144193][ T12] vhci_hcd: release socket [ 293.148590][ T12] vhci_hcd: disconnect device [ 293.189325][T10607] netlink: 'syz.4.2232': attribute type 13 has an invalid length. [ 293.205002][T10607] gretap0: refused to change device tx_queue_len [ 293.215372][T10609] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 293.219944][T10607] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 293.267519][T10613] xt_ecn: cannot match TCP bits for non-tcp packets [ 293.276873][T10614] loop0: detected capacity change from 0 to 164 [ 293.566614][T10606] netlink: 'syz.1.2234': attribute type 13 has an invalid length. [ 293.575411][T10606] gretap0: refused to change device tx_queue_len [ 293.582208][T10606] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 293.587319][T10614] netlink: 'syz.0.2236': attribute type 13 has an invalid length. [ 293.606303][T10614] gretap0: refused to change device tx_queue_len [ 293.612858][T10614] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 293.650460][T10623] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 293.656998][T10623] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.665168][T10623] vhci_hcd vhci_hcd.0: Device attached [ 293.673025][T10623] vhci_hcd vhci_hcd.0: port 0 already used [ 293.710004][T10624] vhci_hcd: connection closed [ 293.710165][ T58] vhci_hcd: stop threads [ 293.711987][T10629] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 293.714895][ T58] vhci_hcd: release socket [ 293.719093][T10629] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.725624][ T58] vhci_hcd: disconnect device [ 293.730089][T10629] vhci_hcd vhci_hcd.0: Device attached [ 293.774285][T10629] vhci_hcd vhci_hcd.0: port 0 already used [ 293.852258][T10630] vhci_hcd: connection closed [ 293.852680][ T58] vhci_hcd: stop threads [ 293.861679][ T58] vhci_hcd: release socket [ 293.866160][ T58] vhci_hcd: disconnect device [ 294.169277][T10638] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 294.175818][T10638] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 294.183974][T10638] vhci_hcd vhci_hcd.0: Device attached [ 294.192260][T10638] vhci_hcd vhci_hcd.0: port 0 already used [ 294.238602][T10645] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 294.245144][T10645] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 294.253328][T10645] vhci_hcd vhci_hcd.0: Device attached [ 294.318117][T10645] vhci_hcd vhci_hcd.0: port 0 already used [ 294.326276][T10646] vhci_hcd: connection closed [ 294.326534][ T58] vhci_hcd: stop threads [ 294.335575][ T58] vhci_hcd: release socket [ 294.340015][ T58] vhci_hcd: disconnect device [ 294.356623][T10639] vhci_hcd: connection closed [ 294.356974][ T58] vhci_hcd: stop threads [ 294.365969][ T58] vhci_hcd: release socket [ 294.370435][ T58] vhci_hcd: disconnect device [ 294.383409][T10653] loop4: detected capacity change from 0 to 1024 [ 294.393595][T10653] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 294.425649][T10656] loop1: detected capacity change from 0 to 164 [ 294.598140][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.607102][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.619272][T10663] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 294.625862][T10663] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 294.634079][T10663] vhci_hcd vhci_hcd.0: Device attached [ 294.641269][T10663] vhci_hcd vhci_hcd.0: port 0 already used [ 294.671522][T10664] vhci_hcd: connection closed [ 294.671850][ T58] vhci_hcd: stop threads [ 294.680890][ T58] vhci_hcd: release socket [ 294.685406][ T58] vhci_hcd: disconnect device [ 294.888734][T10670] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 294.894586][T10671] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 294.895258][T10670] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 294.901746][T10671] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 294.909438][T10670] vhci_hcd vhci_hcd.0: Device attached [ 294.917468][T10671] vhci_hcd vhci_hcd.0: Device attached [ 294.945708][T10671] vhci_hcd vhci_hcd.0: port 0 already used [ 294.957569][T10674] vhci_hcd: connection closed [ 294.957810][ T58] vhci_hcd: stop threads [ 294.966774][ T58] vhci_hcd: release socket [ 294.971225][ T58] vhci_hcd: disconnect device [ 294.977228][T10672] vhci_hcd: connection closed [ 294.977394][ T58] vhci_hcd: stop threads [ 294.986408][ T58] vhci_hcd: release socket [ 294.990873][ T58] vhci_hcd: disconnect device [ 295.192215][T10679] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 295.219748][T10681] xt_ecn: cannot match TCP bits for non-tcp packets [ 296.634700][T10701] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 296.641279][T10701] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 296.649419][T10701] vhci_hcd vhci_hcd.0: Device attached [ 296.675315][T10701] vhci_hcd vhci_hcd.0: port 0 already used [ 296.772077][T10702] vhci_hcd: connection closed [ 296.772293][ T58] vhci_hcd: stop threads [ 296.781386][ T58] vhci_hcd: release socket [ 296.785789][ T58] vhci_hcd: disconnect device [ 296.796365][T10707] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 296.802894][T10707] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 296.811050][T10707] vhci_hcd vhci_hcd.0: Device attached [ 296.847333][T10711] vhci_hcd vhci_hcd.0: port 0 already used [ 296.943811][T10709] vhci_hcd: connection closed [ 296.943995][ T12] vhci_hcd: stop threads [ 296.952953][ T12] vhci_hcd: release socket [ 296.957356][ T12] vhci_hcd: disconnect device [ 297.273980][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 297.273994][ T29] audit: type=1326 audit(1763158731.291:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 297.305866][ T29] audit: type=1326 audit(1763158731.321:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 297.329436][ T29] audit: type=1326 audit(1763158731.321:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 297.352879][ T29] audit: type=1326 audit(1763158731.321:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 297.376460][ T29] audit: type=1326 audit(1763158731.321:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 297.399959][ T29] audit: type=1326 audit(1763158731.321:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 297.423496][ T29] audit: type=1326 audit(1763158731.321:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 297.447088][ T29] audit: type=1326 audit(1763158731.321:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 297.470660][ T29] audit: type=1326 audit(1763158731.321:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 297.489087][T10722] loop1: detected capacity change from 0 to 2048 [ 297.494094][ T29] audit: type=1326 audit(1763158731.321:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10715 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b45eaf6c9 code=0x7ffc0000 [ 297.541309][T10723] loop2: detected capacity change from 0 to 164 [ 297.542678][T10726] loop3: detected capacity change from 0 to 1024 [ 297.548190][T10716] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 297.560418][T10716] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 297.568584][T10716] vhci_hcd vhci_hcd.0: Device attached [ 297.575958][T10726] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 297.596001][T10718] vhci_hcd vhci_hcd.0: port 0 already used [ 297.624995][T10717] vhci_hcd: connection closed [ 297.625541][ T31] vhci_hcd: stop threads [ 297.634509][ T31] vhci_hcd: release socket [ 297.638912][ T31] vhci_hcd: disconnect device [ 297.650869][T10731] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 297.657480][T10731] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 297.665687][T10731] vhci_hcd vhci_hcd.0: Device attached [ 297.675656][T10722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.688653][T10722] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.699774][T10731] vhci_hcd vhci_hcd.0: port 0 already used [ 297.761876][T10739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.785623][T10732] vhci_hcd: connection closed [ 297.785785][ T266] vhci_hcd: stop threads [ 297.794741][ T266] vhci_hcd: release socket [ 297.795535][T10739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.799170][ T266] vhci_hcd: disconnect device [ 297.869380][T10739] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2262: bg 0: block 345: padding at end of block bitmap is not set [ 297.883936][T10739] EXT4-fs (loop1): Remounting filesystem read-only [ 297.913985][T10723] netlink: 'syz.2.2261': attribute type 13 has an invalid length. [ 297.923064][T10723] gretap0: refused to change device tx_queue_len [ 297.932253][T10723] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 298.142963][T10748] loop2: detected capacity change from 0 to 164 [ 298.164664][T10749] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 298.171214][T10749] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 298.179395][T10749] vhci_hcd vhci_hcd.0: Device attached [ 298.187041][T10749] vhci_hcd vhci_hcd.0: port 0 already used [ 298.259795][T10750] vhci_hcd: connection closed [ 298.259959][ T31] vhci_hcd: stop threads [ 298.268930][ T31] vhci_hcd: release socket [ 298.273361][ T31] vhci_hcd: disconnect device [ 298.318847][T10748] netlink: 'syz.2.2267': attribute type 13 has an invalid length. [ 298.332791][T10748] gretap0: refused to change device tx_queue_len [ 298.339334][T10757] loop0: detected capacity change from 0 to 1024 [ 298.339594][T10748] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 298.361746][T10757] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 298.393903][T10759] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 298.400443][T10759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 298.408554][T10759] vhci_hcd vhci_hcd.0: Device attached [ 298.415764][T10759] vhci_hcd vhci_hcd.0: port 0 already used [ 298.444825][T10760] vhci_hcd: connection closed [ 298.445019][ T31] vhci_hcd: stop threads [ 298.454021][ T31] vhci_hcd: release socket [ 298.458439][ T31] vhci_hcd: disconnect device [ 298.499185][T10765] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 298.529068][T10767] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 298.556625][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.578106][T10770] loop1: detected capacity change from 0 to 164 [ 298.633205][T10772] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 298.639754][T10772] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 298.647906][T10772] vhci_hcd vhci_hcd.0: Device attached [ 298.659259][T10772] vhci_hcd vhci_hcd.0: port 0 already used [ 298.751568][T10770] netlink: 'syz.1.2273': attribute type 13 has an invalid length. [ 298.760181][T10770] gretap0: refused to change device tx_queue_len [ 298.766680][T10770] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 298.803009][T10779] loop4: detected capacity change from 0 to 2048 [ 298.821113][T10779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.833531][T10779] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.902231][T10783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.919551][ T3395] usb 6-1: SetAddress Request (7) to port 0 [ 298.925513][ T3395] usb 6-1: new SuperSpeed USB device number 7 using vhci_hcd [ 298.927163][T10785] loop1: detected capacity change from 0 to 164 [ 298.939814][T10783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.966523][T10783] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2275: bg 0: block 345: padding at end of block bitmap is not set [ 298.983190][T10783] EXT4-fs (loop4): Remounting filesystem read-only [ 299.018090][T10787] loop3: detected capacity change from 0 to 1024 [ 299.042161][T10787] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 299.205150][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 299.236049][T10791] loop0: detected capacity change from 0 to 1024 [ 299.259214][T10791] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 299.283814][T10785] netlink: 'syz.1.2276': attribute type 13 has an invalid length. [ 299.292511][T10785] gretap0: refused to change device tx_queue_len [ 299.299067][T10785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 299.410280][T10773] vhci_hcd: connection reset by peer [ 299.417836][ T31] vhci_hcd: stop threads [ 299.422124][ T31] vhci_hcd: release socket [ 299.422385][T10794] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 299.426557][ T31] vhci_hcd: disconnect device [ 299.433015][T10794] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 299.433154][T10794] vhci_hcd vhci_hcd.0: Device attached [ 299.459257][T10794] vhci_hcd vhci_hcd.0: port 0 already used [ 299.529059][T10795] vhci_hcd: connection closed [ 299.529229][ T31] vhci_hcd: stop threads [ 299.538191][ T31] vhci_hcd: release socket [ 299.542762][ T31] vhci_hcd: disconnect device [ 299.780847][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.803919][T10801] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 299.810493][T10801] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 299.818768][T10801] vhci_hcd vhci_hcd.0: Device attached [ 299.825876][T10801] vhci_hcd vhci_hcd.0: port 0 already used [ 299.863800][T10802] vhci_hcd: connection closed [ 299.863955][ T31] vhci_hcd: stop threads [ 299.873020][ T31] vhci_hcd: release socket [ 299.873368][T10807] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 299.877421][ T31] vhci_hcd: disconnect device [ 299.883904][T10807] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 299.896718][T10807] vhci_hcd vhci_hcd.0: Device attached [ 299.909967][T10807] vhci_hcd vhci_hcd.0: port 0 already used [ 299.938325][T10813] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 299.976805][T10815] loop2: detected capacity change from 0 to 1024 [ 299.983359][T10808] vhci_hcd: connection closed [ 299.983528][ T31] vhci_hcd: stop threads [ 299.986038][T10815] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 299.988216][ T31] vhci_hcd: release socket [ 300.005525][ T31] vhci_hcd: disconnect device [ 300.065388][T10820] loop0: detected capacity change from 0 to 1024 [ 300.072954][T10820] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 300.223056][T10823] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 300.229575][T10823] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 300.237788][T10823] vhci_hcd vhci_hcd.0: Device attached [ 300.244989][T10823] vhci_hcd vhci_hcd.0: port 0 already used [ 300.315665][T10824] vhci_hcd: connection closed [ 300.315930][ T58] vhci_hcd: stop threads [ 300.324883][ T58] vhci_hcd: release socket [ 300.329402][ T58] vhci_hcd: disconnect device [ 300.392388][T10830] loop4: detected capacity change from 0 to 1024 [ 300.399307][T10830] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 300.498170][T10832] loop3: detected capacity change from 0 to 164 [ 300.532645][T10834] loop3: detected capacity change from 0 to 1024 [ 300.540941][T10834] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 300.819798][T10836] loop2: detected capacity change from 0 to 1024 [ 300.830005][T10836] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 300.845889][T10838] loop1: detected capacity change from 0 to 164 [ 300.910878][T10840] loop0: detected capacity change from 0 to 164 [ 301.061034][T10838] netlink: 'syz.1.2292': attribute type 13 has an invalid length. [ 301.070707][T10838] gretap0: refused to change device tx_queue_len [ 301.077296][T10838] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 301.138276][T10840] netlink: 'syz.0.2293': attribute type 13 has an invalid length. [ 301.146921][T10840] gretap0: refused to change device tx_queue_len [ 301.153522][T10840] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 301.195633][T10844] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 301.236886][T10848] loop4: detected capacity change from 0 to 164 [ 301.274764][T10846] loop1: detected capacity change from 0 to 1024 [ 301.294074][T10846] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 301.379567][T10850] loop3: detected capacity change from 0 to 164 [ 301.400608][T10852] loop0: detected capacity change from 0 to 164 [ 301.549561][T10848] netlink: 'syz.4.2296': attribute type 13 has an invalid length. [ 301.569652][T10848] gretap0: refused to change device tx_queue_len [ 301.576188][T10848] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 301.637462][T10850] netlink: 'syz.3.2297': attribute type 13 has an invalid length. [ 301.658529][T10850] gretap0: refused to change device tx_queue_len [ 301.669250][T10850] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 301.681820][T10852] netlink: 'syz.0.2307': attribute type 13 has an invalid length. [ 301.694845][T10852] gretap0: refused to change device tx_queue_len [ 301.701883][T10852] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 301.754405][T10859] loop4: detected capacity change from 0 to 1024 [ 301.761422][T10859] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 301.806492][T10861] loop3: detected capacity change from 0 to 164 [ 301.874261][T10864] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 301.886426][T10866] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 301.892948][T10866] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 301.901239][T10866] vhci_hcd vhci_hcd.0: Device attached [ 301.930346][T10866] vhci_hcd vhci_hcd.0: port 0 already used [ 301.938612][T10872] loop3: detected capacity change from 0 to 164 [ 302.013130][T10867] vhci_hcd: connection closed [ 302.013374][ T31] vhci_hcd: stop threads [ 302.022493][ T31] vhci_hcd: release socket [ 302.026918][ T31] vhci_hcd: disconnect device [ 302.032037][T10874] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 302.038598][T10874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 302.046758][T10874] vhci_hcd vhci_hcd.0: Device attached [ 302.054506][T10874] vhci_hcd vhci_hcd.0: port 0 already used [ 302.146980][T10876] vhci_hcd: connection closed [ 302.147037][ T266] vhci_hcd: stop threads [ 302.156147][ T266] vhci_hcd: release socket [ 302.160641][ T266] vhci_hcd: disconnect device [ 302.166256][T10872] netlink: 'syz.3.2303': attribute type 13 has an invalid length. [ 302.174630][T10872] gretap0: refused to change device tx_queue_len [ 302.181150][T10872] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 302.286839][T10884] xt_ecn: cannot match TCP bits for non-tcp packets [ 302.295704][T10885] loop3: detected capacity change from 0 to 164 [ 302.479772][T10885] netlink: 'syz.3.2305': attribute type 13 has an invalid length. [ 302.488433][T10885] gretap0: refused to change device tx_queue_len [ 302.495292][T10885] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 302.560699][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 302.560735][ T29] audit: type=1326 audit(1763158736.581:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1b77f6c9 code=0x7ffc0000 [ 302.592380][ T29] audit: type=1326 audit(1763158736.581:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1b77f6c9 code=0x7ffc0000 [ 302.614155][T10890] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 302.615916][ T29] audit: type=1326 audit(1763158736.611:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f1b77f6c9 code=0x7ffc0000 [ 302.622312][T10890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 302.622406][T10890] vhci_hcd vhci_hcd.0: Device attached [ 302.645756][ T29] audit: type=1326 audit(1763158736.611:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1b77f6c9 code=0x7ffc0000 [ 302.645781][ T29] audit: type=1326 audit(1763158736.611:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1b77f6c9 code=0x7ffc0000 [ 302.645804][ T29] audit: type=1326 audit(1763158736.611:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f8f1b77f6c9 code=0x7ffc0000 [ 302.679133][T10890] vhci_hcd vhci_hcd.0: port 0 already used [ 302.682783][ T29] audit: type=1326 audit(1763158736.611:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1b77f6c9 code=0x7ffc0000 [ 302.759159][ T29] audit: type=1326 audit(1763158736.611:6948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1b77f6c9 code=0x7ffc0000 [ 302.782721][ T29] audit: type=1326 audit(1763158736.611:6949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f1b77f6c9 code=0x7ffc0000 [ 302.806249][ T29] audit: type=1326 audit(1763158736.611:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.0.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1b77f6c9 code=0x7ffc0000 [ 302.845285][T10897] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 302.860056][T10891] vhci_hcd: connection closed [ 302.860312][ T266] vhci_hcd: stop threads [ 302.869255][ T266] vhci_hcd: release socket [ 302.873899][ T266] vhci_hcd: disconnect device [ 302.898503][T10901] loop2: detected capacity change from 0 to 1024 [ 302.921366][T10901] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 303.015917][T10910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.024470][T10910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.042997][T10909] loop3: detected capacity change from 0 to 2048 [ 303.060581][T10909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.072893][T10909] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.142055][T10913] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2314: bg 0: block 345: padding at end of block bitmap is not set [ 303.156801][T10913] EXT4-fs (loop3): Remounting filesystem read-only [ 303.211715][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'. [ 303.231600][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.591071][T10921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.599597][T10921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.817359][T10923] loop2: detected capacity change from 0 to 1024 [ 303.827987][T10923] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 303.940379][T10925] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 303.946902][T10925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 303.955034][T10925] vhci_hcd vhci_hcd.0: Device attached [ 303.962249][T10925] vhci_hcd vhci_hcd.0: port 0 already used [ 304.029556][ T3395] usb 6-1: device descriptor read/8, error -110 [ 304.037088][T10926] vhci_hcd: connection closed [ 304.037202][ T12] vhci_hcd: stop threads [ 304.046148][ T12] vhci_hcd: release socket [ 304.050603][ T12] vhci_hcd: disconnect device [ 304.139542][ T3395] usb 6-1: new SuperSpeed USB device number 7 using vhci_hcd [ 304.169524][ T3395] usb 6-1: enqueue for inactive port 0 [ 304.175172][ T3395] usb 6-1: enqueue for inactive port 0 [ 304.180772][ T3395] usb 6-1: enqueue for inactive port 0 [ 304.217354][T10932] loop3: detected capacity change from 0 to 164 [ 304.336490][T10932] netlink: 'syz.3.2321': attribute type 13 has an invalid length. [ 304.344925][T10932] gretap0: refused to change device tx_queue_len [ 304.351458][T10932] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 304.457481][T10935] loop3: detected capacity change from 0 to 164 [ 304.583822][T10939] loop1: detected capacity change from 0 to 164 [ 304.678516][T10946] loop3: detected capacity change from 0 to 164 [ 304.820153][T10951] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 304.871164][T10939] netlink: 'syz.1.2324': attribute type 13 has an invalid length. [ 304.880011][T10939] gretap0: refused to change device tx_queue_len [ 304.896427][T10939] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 305.007694][T10946] netlink: 'syz.3.2327': attribute type 13 has an invalid length. [ 305.016185][T10946] gretap0: refused to change device tx_queue_len [ 305.022917][T10946] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 305.199685][ T3395] usb usb6-port1: attempt power cycle [ 305.247498][T10962] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 305.254035][T10962] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 305.262171][T10962] vhci_hcd vhci_hcd.0: Device attached [ 305.270086][T10962] vhci_hcd vhci_hcd.0: port 0 already used [ 305.366597][T10963] vhci_hcd: connection closed [ 305.366832][ T12] vhci_hcd: stop threads [ 305.375823][ T12] vhci_hcd: release socket [ 305.380233][ T12] vhci_hcd: disconnect device [ 305.899661][T10969] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 305.906207][T10969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 305.914314][T10969] vhci_hcd vhci_hcd.0: Device attached [ 305.922111][T10969] vhci_hcd vhci_hcd.0: port 0 already used [ 306.017009][T10970] vhci_hcd: connection closed [ 306.017220][ T12] vhci_hcd: stop threads [ 306.026258][ T12] vhci_hcd: release socket [ 306.030734][ T12] vhci_hcd: disconnect device [ 306.326674][T10989] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 306.333209][T10989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 306.341345][T10989] vhci_hcd vhci_hcd.0: Device attached [ 306.354540][T10989] vhci_hcd vhci_hcd.0: port 0 already used [ 306.467402][T10990] vhci_hcd: connection closed [ 306.467631][ T31] vhci_hcd: stop threads [ 306.476580][ T31] vhci_hcd: release socket [ 306.481033][ T31] vhci_hcd: disconnect device [ 306.601766][T10998] loop0: detected capacity change from 0 to 512 [ 306.642979][T10998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.679236][T10998] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.731748][T11009] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 306.738285][T11009] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 306.746460][T11009] vhci_hcd vhci_hcd.0: Device attached [ 306.755359][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.755507][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.773120][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.790409][T11009] vhci_hcd vhci_hcd.0: port 0 already used [ 306.887685][ T3395] usb 6-1: SetAddress Request (10) to port 0 [ 306.894416][ T3395] usb 6-1: new SuperSpeed USB device number 10 using vhci_hcd [ 306.901961][T11010] vhci_hcd: connection closed [ 306.905483][ T12] vhci_hcd: stop threads [ 306.914448][ T12] vhci_hcd: release socket [ 306.918864][ T12] vhci_hcd: disconnect device [ 306.931836][ T3395] usb 6-1: enqueue for inactive port 0 [ 306.937530][ T3395] usb 6-1: enqueue for inactive port 0 [ 306.943323][ T3395] usb 6-1: enqueue for inactive port 0 [ 307.049510][ T3395] usb 6-1: new SuperSpeed USB device number 10 using vhci_hcd [ 307.075821][ T3395] usb 6-1: enqueue for inactive port 0 [ 307.091820][ T3395] usb 6-1: enqueue for inactive port 0 [ 307.098243][ T3395] usb 6-1: enqueue for inactive port 0 [ 307.201434][T11026] sch_fq: defrate 4294967295 ignored. [ 307.276617][T11030] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 307.283147][T11030] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 307.291320][T11030] vhci_hcd vhci_hcd.0: Device attached [ 307.299198][T11030] vhci_hcd vhci_hcd.0: port 0 already used [ 307.373916][T11031] vhci_hcd: connection closed [ 307.374068][ T12] vhci_hcd: stop threads [ 307.383113][ T12] vhci_hcd: release socket [ 307.387522][ T12] vhci_hcd: disconnect device [ 307.387680][T11039] loop4: detected capacity change from 0 to 164 [ 307.491166][T11043] mmap: syz.4.2356 (11043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 307.521791][T11046] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 307.575742][T11048] loop4: detected capacity change from 0 to 2048 [ 307.592075][T11048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.611373][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 307.611385][ T29] audit: type=1400 audit(1763158741.631:7307): avc: denied { mount } for pid=11047 comm="syz.4.2358" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 307.611365][T11048] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.639855][ T29] audit: type=1400 audit(1763158741.631:7308): avc: denied { prog_run } for pid=11040 comm="syz.2.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 307.732033][T11053] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2358: bg 0: block 345: padding at end of block bitmap is not set [ 307.765622][ T29] audit: type=1400 audit(1763158741.691:7309): avc: denied { add_name } for pid=11047 comm="syz.4.2358" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 307.786508][ T29] audit: type=1400 audit(1763158741.691:7310): avc: denied { create } for pid=11047 comm="syz.4.2358" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 307.795235][T11053] EXT4-fs (loop4): Remounting filesystem read-only [ 307.806873][ T29] audit: type=1400 audit(1763158741.691:7311): avc: denied { read write } for pid=11047 comm="syz.4.2358" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 307.806902][ T29] audit: type=1400 audit(1763158741.691:7312): avc: denied { open } for pid=11047 comm="syz.4.2358" path="/449/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 307.894453][T11058] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 307.958302][ T29] audit: type=1400 audit(1763158741.971:7313): avc: denied { create } for pid=11059 comm="syz.1.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 308.044380][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 308.064592][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.262941][T11063] sch_fq: defrate 4294967295 ignored. [ 308.284372][T11074] loop4: detected capacity change from 0 to 1024 [ 308.295289][ T29] audit: type=1400 audit(1763158741.991:7314): avc: denied { write } for pid=11059 comm="syz.1.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 308.315955][ T29] audit: type=1400 audit(1763158742.061:7315): avc: denied { read append } for pid=11047 comm="syz.4.2358" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.339910][ T29] audit: type=1400 audit(1763158742.061:7316): avc: denied { open } for pid=11047 comm="syz.4.2358" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.352810][T11074] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 308.468757][T11077] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 308.505139][T11079] loop1: detected capacity change from 0 to 164 [ 308.752050][T11079] netlink: 'syz.1.2368': attribute type 13 has an invalid length. [ 308.760729][T11079] gretap0: refused to change device tx_queue_len [ 308.767350][T11079] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 308.874850][T11085] loop1: detected capacity change from 0 to 164 [ 309.147566][T11091] loop4: detected capacity change from 0 to 164 [ 309.564669][T11091] netlink: 'syz.4.2373': attribute type 13 has an invalid length. [ 309.587159][T11095] loop0: detected capacity change from 0 to 2048 [ 309.599672][T11091] gretap0: refused to change device tx_queue_len [ 309.614930][T11091] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 309.662230][T11095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.681668][T11095] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.773391][T11101] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 309.779937][T11101] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 309.788124][T11101] vhci_hcd vhci_hcd.0: Device attached [ 309.842341][T11108] vhci_hcd vhci_hcd.0: port 0 already used [ 309.868617][T11103] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2374: bg 0: block 345: padding at end of block bitmap is not set [ 309.901506][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 309.933263][T11102] vhci_hcd: connection closed [ 309.933499][ T12] vhci_hcd: stop threads [ 309.942462][ T12] vhci_hcd: release socket [ 309.946875][ T12] vhci_hcd: disconnect device [ 309.959839][T11103] EXT4-fs (loop0): Remounting filesystem read-only [ 310.022787][T11112] sch_fq: defrate 4294967295 ignored. [ 310.088276][T11119] loop2: detected capacity change from 0 to 164 [ 310.095490][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.121601][T11121] loop0: detected capacity change from 0 to 164 [ 310.199534][T11123] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 310.206062][T11123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 310.214290][T11123] vhci_hcd vhci_hcd.0: Device attached [ 310.231264][T11123] vhci_hcd vhci_hcd.0: port 0 already used [ 310.276908][T11131] loop4: detected capacity change from 0 to 164 [ 310.343586][T11134] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 310.350132][T11134] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 310.356068][T11125] vhci_hcd: connection closed [ 310.358275][T11134] vhci_hcd vhci_hcd.0: Device attached [ 310.358527][ T58] vhci_hcd: stop threads [ 310.372737][ T58] vhci_hcd: release socket [ 310.377137][ T58] vhci_hcd: disconnect device [ 310.384722][T11134] vhci_hcd vhci_hcd.0: port 0 already used [ 310.451438][T11119] netlink: 'syz.2.2379': attribute type 13 has an invalid length. [ 310.470173][T11119] gretap0: refused to change device tx_queue_len [ 310.474852][T11135] vhci_hcd: connection closed [ 310.476854][ T266] vhci_hcd: stop threads [ 310.481913][T11119] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 310.485851][ T266] vhci_hcd: release socket [ 310.504867][T11121] netlink: 'syz.0.2378': attribute type 13 has an invalid length. [ 310.505806][ T266] vhci_hcd: disconnect device [ 310.523388][T11121] gretap0: refused to change device tx_queue_len [ 310.530221][T11121] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 310.664861][T11146] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 310.671482][T11146] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 310.679658][T11146] vhci_hcd vhci_hcd.0: Device attached [ 310.696438][T11146] vhci_hcd vhci_hcd.0: port 0 already used [ 310.748543][T11153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.756990][T11153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.778550][T11147] vhci_hcd: connection closed [ 310.778676][ T58] vhci_hcd: stop threads [ 310.787646][ T58] vhci_hcd: release socket [ 310.792068][ T58] vhci_hcd: disconnect device [ 311.375820][T11168] loop4: detected capacity change from 0 to 164 [ 311.442853][T11166] loop2: detected capacity change from 0 to 2048 [ 311.470807][T11166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.497936][T11166] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.584546][T11176] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2389: bg 0: block 345: padding at end of block bitmap is not set [ 311.625208][T11176] EXT4-fs (loop2): Remounting filesystem read-only [ 311.705649][T11168] netlink: 'syz.4.2390': attribute type 13 has an invalid length. [ 311.714713][T11168] gretap0: refused to change device tx_queue_len [ 311.724646][T11168] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 311.743903][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 311.799871][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.837009][T11179] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 311.896331][T11181] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 311.902881][T11181] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 311.911067][T11181] vhci_hcd vhci_hcd.0: Device attached [ 311.929799][T11181] vhci_hcd vhci_hcd.0: port 0 already used [ 311.985491][T11193] loop4: detected capacity change from 0 to 512 [ 312.014226][T11193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.048509][T11186] vhci_hcd: connection closed [ 312.048744][ T31] vhci_hcd: stop threads [ 312.057767][ T31] vhci_hcd: release socket [ 312.062238][ T31] vhci_hcd: disconnect device [ 312.073290][T11193] ext4 filesystem being mounted at /460/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.106476][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.144219][T11199] loop4: detected capacity change from 0 to 1024 [ 312.153533][T11197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.162190][T11197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.176570][T11199] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 312.575693][T11201] loop2: detected capacity change from 0 to 164 [ 312.790216][T11201] netlink: 'syz.2.2399': attribute type 13 has an invalid length. [ 312.799246][T11201] gretap0: refused to change device tx_queue_len [ 312.808207][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 312.808220][ T29] audit: type=1400 audit(1763158746.821:7401): avc: denied { execmem } for pid=11203 comm="syz.1.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 312.812177][T11201] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 312.943837][ T29] audit: type=1400 audit(1763158746.961:7402): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 312.968995][ T29] audit: type=1400 audit(1763158746.981:7403): avc: denied { mount } for pid=11206 comm="syz.2.2401" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 312.994880][ T29] audit: type=1326 audit(1763158747.011:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 313.018500][ T29] audit: type=1326 audit(1763158747.011:7405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 313.042038][ T29] audit: type=1326 audit(1763158747.011:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 313.045229][T11207] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 313.065563][ T29] audit: type=1326 audit(1763158747.011:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 313.071983][T11207] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 313.072150][T11207] vhci_hcd vhci_hcd.0: Device attached [ 313.095478][ T29] audit: type=1326 audit(1763158747.011:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 313.132444][ T29] audit: type=1326 audit(1763158747.011:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 313.155842][ T29] audit: type=1326 audit(1763158747.011:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c273f6c9 code=0x7ffc0000 [ 313.194404][T11210] vhci_hcd vhci_hcd.0: port 0 already used [ 313.202966][T11214] loop1: detected capacity change from 0 to 2048 [ 313.215871][T11216] loop4: detected capacity change from 0 to 164 [ 313.241860][T11214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.255948][T11214] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.269910][T11208] vhci_hcd: connection closed [ 313.270112][ T266] vhci_hcd: stop threads [ 313.279126][ T266] vhci_hcd: release socket [ 313.283556][ T266] vhci_hcd: disconnect device [ 313.334014][T11221] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2402: bg 0: block 345: padding at end of block bitmap is not set [ 313.359500][T11221] EXT4-fs (loop1): Remounting filesystem read-only [ 313.442939][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'. [ 313.463204][T11216] netlink: 'syz.4.2403': attribute type 13 has an invalid length. [ 313.471804][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.480814][T11216] gretap0: refused to change device tx_queue_len [ 313.487349][T11216] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 313.509777][T11224] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 313.600088][T11232] xt_ecn: cannot match TCP bits for non-tcp packets [ 313.635067][T11234] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 313.641669][T11234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 313.649888][T11234] vhci_hcd vhci_hcd.0: Device attached [ 313.657552][T11234] vhci_hcd vhci_hcd.0: port 0 already used [ 313.711127][T11241] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 313.734527][T11235] vhci_hcd: connection closed [ 313.734729][ T12] vhci_hcd: stop threads [ 313.743770][ T12] vhci_hcd: release socket [ 313.748177][ T12] vhci_hcd: disconnect device [ 314.151977][T11252] loop0: detected capacity change from 0 to 2048 [ 314.181617][T11252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.206184][T11252] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.296835][T11255] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2414: bg 0: block 345: padding at end of block bitmap is not set [ 314.409931][T11255] EXT4-fs (loop0): Remounting filesystem read-only [ 314.501159][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 314.521386][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.610873][T11264] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 314.617386][T11264] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.625640][T11264] vhci_hcd vhci_hcd.0: Device attached [ 314.682416][T11267] vhci_hcd vhci_hcd.0: port 0 already used [ 314.825278][T11271] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 314.831850][T11271] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.840242][T11271] vhci_hcd vhci_hcd.0: Device attached [ 314.850393][T11273] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 314.856968][T11273] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.865201][T11273] vhci_hcd vhci_hcd.0: Device attached [ 314.873640][T11273] vhci_hcd vhci_hcd.0: port 0 already used [ 314.879896][T11278] vhci_hcd vhci_hcd.0: port 0 already used [ 314.889650][T11276] vhci_hcd: connection closed [ 314.889801][ T31] vhci_hcd: stop threads [ 314.898776][ T31] vhci_hcd: release socket [ 314.903326][ T31] vhci_hcd: disconnect device [ 314.912189][T11274] vhci_hcd: connection closed [ 314.912456][ T31] vhci_hcd: stop threads [ 314.921413][ T31] vhci_hcd: release socket [ 314.925810][ T31] vhci_hcd: disconnect device [ 315.031257][T11286] loop3: detected capacity change from 0 to 512 [ 315.042391][T11286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.058173][T11286] ext4 filesystem being mounted at /461/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.087635][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.192571][T11293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.201101][T11293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.385828][T11265] vhci_hcd: connection closed [ 315.386100][ T266] vhci_hcd: stop threads [ 315.395136][ T266] vhci_hcd: release socket [ 315.399572][ T266] vhci_hcd: disconnect device [ 315.426945][T11295] loop4: detected capacity change from 0 to 164 [ 315.462864][T11299] loop2: detected capacity change from 0 to 164 [ 315.508676][T11301] loop1: detected capacity change from 0 to 512 [ 315.536727][T11301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.558414][T11301] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.626509][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.699621][T11307] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 315.706162][T11307] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 315.714306][T11307] vhci_hcd vhci_hcd.0: Device attached [ 315.735138][T11307] vhci_hcd vhci_hcd.0: port 0 already used [ 315.772403][T11299] netlink: 'syz.2.2424': attribute type 13 has an invalid length. [ 315.780771][T11299] gretap0: refused to change device tx_queue_len [ 315.787343][T11299] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 315.818203][T11308] vhci_hcd: connection closed [ 315.818351][ T31] vhci_hcd: stop threads [ 315.827419][ T31] vhci_hcd: release socket [ 315.831904][ T31] vhci_hcd: disconnect device [ 315.975846][T11317] loop0: detected capacity change from 0 to 512 [ 316.011864][T11317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.024734][T11317] ext4 filesystem being mounted at /473/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.061669][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.129937][T11323] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 316.136484][T11323] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 316.144696][T11323] vhci_hcd vhci_hcd.0: Device attached [ 316.159957][T11323] vhci_hcd vhci_hcd.0: port 0 already used [ 316.221373][T11326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.234189][T11326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.253783][T11324] vhci_hcd: connection closed [ 316.254440][ T58] vhci_hcd: stop threads [ 316.263414][ T58] vhci_hcd: release socket [ 316.267826][ T58] vhci_hcd: disconnect device [ 316.372756][T11331] loop1: detected capacity change from 0 to 164 [ 316.603685][T11334] loop1: detected capacity change from 0 to 512 [ 316.626681][T11334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.642854][T11334] ext4 filesystem being mounted at /514/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.672848][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.682503][T11338] xt_ecn: cannot match TCP bits for non-tcp packets [ 316.712941][T11340] loop1: detected capacity change from 0 to 1024 [ 316.725658][T11340] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 316.809313][T11345] loop0: detected capacity change from 0 to 164 [ 317.097221][T11345] netlink: 'syz.0.2437': attribute type 13 has an invalid length. [ 317.106213][T11345] gretap0: refused to change device tx_queue_len [ 317.113106][T11345] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 317.238726][T11349] loop0: detected capacity change from 0 to 164 [ 317.499712][T11352] loop0: detected capacity change from 0 to 1024 [ 317.516060][T11352] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 317.567613][T11354] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 317.615008][T11356] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 317.621550][T11356] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 317.629665][T11356] vhci_hcd vhci_hcd.0: Device attached [ 317.639703][T11356] vhci_hcd vhci_hcd.0: port 0 already used [ 317.729497][T11357] vhci_hcd: connection closed [ 317.729723][ T31] vhci_hcd: stop threads [ 317.738632][ T31] vhci_hcd: release socket [ 317.743097][ T31] vhci_hcd: disconnect device [ 318.171489][T11363] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 318.178034][T11363] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 318.186274][T11363] vhci_hcd vhci_hcd.0: Device attached [ 318.192314][T11367] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 318.193177][T11363] vhci_hcd vhci_hcd.0: port 0 already used [ 318.268284][T11373] loop1: detected capacity change from 0 to 164 [ 318.287596][T11364] vhci_hcd: connection closed [ 318.287941][ T266] vhci_hcd: stop threads [ 318.296935][ T266] vhci_hcd: release socket [ 318.301416][ T266] vhci_hcd: disconnect device [ 318.505960][T11378] loop1: detected capacity change from 0 to 164 [ 318.710823][T11382] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 318.749015][T11384] loop0: detected capacity change from 0 to 164 [ 318.823599][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 318.823614][ T29] audit: type=1326 audit(1763158752.841:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11385 comm="syz.3.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 318.853419][ T29] audit: type=1326 audit(1763158752.841:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11385 comm="syz.3.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 318.914939][T11388] netlink: 'syz.1.2447': attribute type 13 has an invalid length. [ 318.933935][T11388] gretap0: refused to change device tx_queue_len [ 318.940520][T11388] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 318.982761][T11386] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 318.988721][ T29] audit: type=1326 audit(1763158752.911:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11385 comm="syz.3.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 318.989313][T11386] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 319.012684][ T29] audit: type=1326 audit(1763158752.911:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11385 comm="syz.3.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 319.020823][T11386] vhci_hcd vhci_hcd.0: Device attached [ 319.044156][ T29] audit: type=1326 audit(1763158752.911:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11385 comm="syz.3.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 319.073019][ T29] audit: type=1326 audit(1763158752.921:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11385 comm="syz.3.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 319.096486][ T29] audit: type=1326 audit(1763158752.921:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11385 comm="syz.3.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 319.119972][ T29] audit: type=1326 audit(1763158752.921:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11385 comm="syz.3.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 319.143607][ T29] audit: type=1326 audit(1763158752.921:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11385 comm="syz.3.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 319.167000][ T29] audit: type=1326 audit(1763158752.921:7795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11385 comm="syz.3.2450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876e6bf6c9 code=0x7ffc0000 [ 319.221802][T11391] vhci_hcd vhci_hcd.0: port 0 already used [ 319.229318][T11389] vhci_hcd: connection closed [ 319.229858][ T58] vhci_hcd: stop threads [ 319.238862][ T58] vhci_hcd: release socket [ 319.243333][ T58] vhci_hcd: disconnect device [ 319.252075][T11396] loop0: detected capacity change from 0 to 164 [ 319.316279][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.324790][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.479548][T11404] xt_ecn: cannot match TCP bits for non-tcp packets [ 319.511807][T11406] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 319.518339][T11406] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 319.526534][T11406] vhci_hcd vhci_hcd.0: Device attached [ 319.532933][T11396] netlink: 'syz.0.2451': attribute type 13 has an invalid length. [ 319.541936][T11396] gretap0: refused to change device tx_queue_len [ 319.548453][T11396] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 319.566321][T11406] vhci_hcd vhci_hcd.0: port 0 already used [ 319.634321][T11407] vhci_hcd: connection closed [ 319.634542][ T12] vhci_hcd: stop threads [ 319.643597][ T12] vhci_hcd: release socket [ 319.648039][ T12] vhci_hcd: disconnect device [ 319.707317][T11414] loop0: detected capacity change from 0 to 512 [ 319.742151][T11414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.859807][T11414] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.885173][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.909573][T11422] loop0: detected capacity change from 0 to 164 [ 320.223907][T11427] loop4: detected capacity change from 0 to 1024 [ 320.238498][T11427] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 320.458653][T11433] loop0: detected capacity change from 0 to 164 [ 320.683199][T11437] loop3: detected capacity change from 0 to 164 [ 320.719528][T11435] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 320.726070][T11435] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 320.734203][T11435] vhci_hcd vhci_hcd.0: Device attached [ 320.759772][T11441] vhci_hcd vhci_hcd.0: port 0 already used [ 320.864620][T11438] vhci_hcd: connection closed [ 320.864831][ T58] vhci_hcd: stop threads [ 320.873797][ T58] vhci_hcd: release socket [ 320.878214][ T58] vhci_hcd: disconnect device [ 320.917882][T11437] netlink: 'syz.3.2463': attribute type 13 has an invalid length. [ 320.926810][T11437] gretap0: refused to change device tx_queue_len [ 320.933534][T11437] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 321.072412][T11447] loop4: detected capacity change from 0 to 2048 [ 321.091853][T11447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.112025][T11447] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.228694][T11454] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2465: bg 0: block 345: padding at end of block bitmap is not set [ 321.271714][T11459] loop1: detected capacity change from 0 to 164 [ 321.278340][T11454] EXT4-fs (loop4): Remounting filesystem read-only [ 321.359335][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2465'. [ 321.480875][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.524133][T11476] loop4: detected capacity change from 0 to 164 [ 321.595155][T11479] loop3: detected capacity change from 0 to 164 [ 321.722227][T11483] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 321.770520][T11459] netlink: 'syz.1.2468': attribute type 13 has an invalid length. [ 321.791787][T11459] gretap0: refused to change device tx_queue_len [ 321.807843][T11459] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 321.906128][T11489] loop0: detected capacity change from 0 to 164 [ 322.023079][T11495] loop1: detected capacity change from 0 to 164 [ 322.047029][T11497] xt_ecn: cannot match TCP bits for non-tcp packets [ 322.168913][T11489] netlink: 'syz.0.2474': attribute type 13 has an invalid length. [ 322.178506][T11489] gretap0: refused to change device tx_queue_len [ 322.185238][T11489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 322.318663][T11502] loop2: detected capacity change from 0 to 2048 [ 322.353602][T11495] netlink: 'syz.1.2477': attribute type 13 has an invalid length. [ 322.392982][T11495] gretap0: refused to change device tx_queue_len [ 322.405869][T11495] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 322.423597][T11507] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2480'. [ 322.436948][T11502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.451314][T11502] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.528550][T11511] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2479: bg 0: block 345: padding at end of block bitmap is not set [ 322.581063][T11511] EXT4-fs (loop2): Remounting filesystem read-only [ 322.694441][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'. [ 322.899558][T11517] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 322.906094][T11517] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 322.914276][T11517] vhci_hcd vhci_hcd.0: Device attached [ 322.951518][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.953164][T11523] loop0: detected capacity change from 0 to 164 [ 323.004036][T11514] vhci_hcd vhci_hcd.0: port 0 already used [ 323.040276][T11518] vhci_hcd: connection closed [ 323.040850][ T31] vhci_hcd: stop threads [ 323.049853][ T31] vhci_hcd: release socket [ 323.054259][ T31] vhci_hcd: disconnect device [ 323.209519][T11531] ================================================================== [ 323.217597][T11531] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 323.224620][T11531] [ 323.226928][T11531] read-write to 0xffff888237d1b294 of 4 bytes by interrupt on cpu 1: [ 323.234975][T11531] hrtimer_interrupt+0x70/0x460 [ 323.239819][T11531] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 323.245710][T11531] sysvec_apic_timer_interrupt+0x6f/0x80 [ 323.251338][T11531] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.257306][T11531] __tsan_memset+0xb2/0x1f0 [ 323.261826][T11531] ___sys_recvmsg+0x52/0x370 [ 323.266402][T11531] do_recvmmsg+0x1ef/0x540 [ 323.270799][T11531] __x64_sys_recvmmsg+0xe5/0x170 [ 323.275722][T11531] x64_sys_call+0x27aa/0x3000 [ 323.280385][T11531] do_syscall_64+0xd2/0x200 [ 323.284870][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.290748][T11531] [ 323.293054][T11531] read to 0xffff888237d1b294 of 4 bytes by task 11531 on cpu 0: [ 323.300663][T11531] print_cpu+0x338/0x660 [ 323.304900][T11531] timer_list_show+0x107/0x170 [ 323.309649][T11531] seq_read_iter+0x31e/0x950 [ 323.314223][T11531] proc_reg_read_iter+0x110/0x180 [ 323.319231][T11531] copy_splice_read+0x442/0x660 [ 323.324067][T11531] splice_direct_to_actor+0x26f/0x680 [ 323.329422][T11531] do_splice_direct+0xda/0x150 [ 323.334173][T11531] do_sendfile+0x380/0x650 [ 323.338580][T11531] __x64_sys_sendfile64+0x105/0x150 [ 323.343770][T11531] x64_sys_call+0x2bb4/0x3000 [ 323.348434][T11531] do_syscall_64+0xd2/0x200 [ 323.352925][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.358803][T11531] [ 323.361108][T11531] value changed: 0x002c06ef -> 0x002c06f0 [ 323.366811][T11531] [ 323.369112][T11531] Reported by Kernel Concurrency Sanitizer on: [ 323.375258][T11531] CPU: 0 UID: 0 PID: 11531 Comm: syz.4.2485 Not tainted syzkaller #0 PREEMPT(voluntary) [ 323.385048][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.395085][T11531] ==================================================================