last executing test programs: 1.986531751s ago: executing program 4 (id=2199): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, 0x0, 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.952500061s ago: executing program 4 (id=2200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) fstat(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='xprtrdma_cb_setup\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303020007006000000002000020d3"]) close_range(r1, r1, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000300)=""/192) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x204002, &(0x7f00000000c0), 0xb8, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) 1.802380522s ago: executing program 4 (id=2206): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1}) 1.761348992s ago: executing program 3 (id=2209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 1.735462783s ago: executing program 4 (id=2212): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='setgroups\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x8, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7c, 0x0, 0x1f}, @union={0x2, 0x1, 0x0, 0x5, 0x0, 0x7fff, [{0x2, 0x2, 0x1}]}, @union={0x4, 0x6, 0x0, 0x5, 0x1, 0x80000001, [{0x10, 0x5, 0xa7a}, {0x7, 0x3, 0x9}, {0xd, 0x2, 0x1}, {0x1, 0x4, 0x800}, {0x10, 0x0, 0x7f}, {0x10, 0x5, 0x6}]}, @float={0x4, 0x0, 0x0, 0x10, 0x2}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30, 0x61, 0x2e]}}, &(0x7f00000007c0)=""/246, 0xc0, 0xf6, 0x0, 0x6, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x500, 0xffffff6a) timer_gettime(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x1a00001a}]) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.702519413s ago: executing program 3 (id=2214): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000180), &(0x7f0000000380), 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_emit_ethernet(0x6e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0x10) 914.257961ms ago: executing program 1 (id=2231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) sendto$inet6(r3, &(0x7f0000003240)="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", 0x4d6, 0x6d91fb6106d8d10c, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) 812.734722ms ago: executing program 3 (id=2233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 798.645112ms ago: executing program 1 (id=2234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100b8, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f00000001c0), 0x8, 0xea, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 756.171363ms ago: executing program 1 (id=2235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 755.751263ms ago: executing program 3 (id=2236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 735.881443ms ago: executing program 1 (id=2237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x34, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x34}}, 0x10) 690.040533ms ago: executing program 4 (id=2238): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0xc17a) io_setup(0x200, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000008000d3db700000b70885992b9af5afb28d0000000000007b8af8ffc2000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008517b68bf919ff619fe3250d4b6014cbb276f7dd9aa7548b8ad1db4482db6a27ad689db866299b3b8341d03149a8b50f2507bab0d07af49f395be050ea60428ac18433eea11af591205b2c64d92e93cedc0a6439e1c6fff290429f223e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100080a, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x66b, &(0x7f0000000900)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 683.960253ms ago: executing program 3 (id=2239): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) io_setup(0x200, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000008000d3db700000b70885992b9af5afb28d0000000000007b8af8ffc2000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008517b68bf919ff619fe3250d4b6014cbb276f7dd9aa7548b8ad1db4482db6a27ad689db866299b3b8341d03149a8b50f2507bab0d07af49f395be050ea60428ac18433eea11af591205b2c64d92e93cedc0a6439e1c6fff290429f223e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100080a, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x66b, &(0x7f0000000900)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 627.073534ms ago: executing program 1 (id=2240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x78) close(r1) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 601.452294ms ago: executing program 0 (id=2241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000240)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 581.203164ms ago: executing program 3 (id=2242): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004c000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140020000000900010073797a30000000000a000700726f7574a6"], 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc8d1}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000f080000000700"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r5}, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="9a53d0f8d7095de647bc1a180c88138d49e108bb2c4f874644e28d2b9cb8a65a75c6b30eee6924d72ae248ed2477898910a828b0c73fedcc3dba6ca98e23816a940839ef4823ed365b218992bbdd4b9e00ff3aca04818ca241eac916", @ANYRES32=r2, @ANYRESHEX], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x8000005, r7}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sctp_probe\x00', r6, 0x0, 0xe5c}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe2c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 580.741514ms ago: executing program 1 (id=2243): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) unshare(0x68040200) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) tee(r0, r1, 0xfffffffffffffc01, 0x0) tee(r0, r1, 0x60000000000, 0x1000000000000000) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES8=r1], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020f80071600000029bd7000fcdbdf2505001a00e00000020000000000000000000000000f00240002000a001000000002000000000000000b001800090a4c00aac8920d99f719278130de82602737952aec93a6ce7d2067f665764dfc0218657f5518f0e89a07b9a6282420f622070bb6da9c80db82eaa32877f1f44d7ccee4dcc9d192529a48453a042d2e0000000002000a000c000000ffffffffffffff7f"], 0xb0}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x14) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1}) 521.760065ms ago: executing program 4 (id=2244): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000180), &(0x7f0000000380), 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0x6e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) 463.162136ms ago: executing program 0 (id=2245): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) sendto$inet6(r3, &(0x7f0000003240)="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", 0x4d6, 0x6d91fb6106d8d10c, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) 429.056706ms ago: executing program 0 (id=2246): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100b8, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f00000001c0), 0x8, 0xea, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 408.774076ms ago: executing program 2 (id=2247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 367.438026ms ago: executing program 0 (id=2248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 366.787656ms ago: executing program 0 (id=2249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 337.203656ms ago: executing program 2 (id=2250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x34, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x34}}, 0x10) 317.528097ms ago: executing program 0 (id=2251): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) unshare(0x68040200) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) tee(r0, r2, 0x60000000000, 0x1000000000000000) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES8=r2], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020f80071600000029bd7000fcdbdf2505001a00e00000020000000000000000000000000f00240002000a001000000002000000000000000b001800090a4c00aac8920d99f719278130de82602737952aec93a6ce7d2067f665764dfc0218657f5518f0e89a07b9a6282420f622070bb6da9c80db82eaa32877f1f44d7ccee4dcc9d192529a48453a042d2e0000000002000a000c000000ffffffffffffff7f"], 0xb0}}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[], 0x38}}, 0x4000000) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1}) 237.097637ms ago: executing program 2 (id=2252): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) io_setup(0x200, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000008000d3db700000b70885992b9af5afb28d0000000000007b8af8ffc2000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008517b68bf919ff619fe3250d4b6014cbb276f7dd9aa7548b8ad1db4482db6a27ad689db866299b3b8341d03149a8b50f2507bab0d07af49f395be050ea60428ac18433eea11af591205b2c64d92e93cedc0a6439e1c6fff290429f223e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100080a, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x66b, &(0x7f0000000900)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 126.984019ms ago: executing program 2 (id=2253): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1}) 94.475499ms ago: executing program 2 (id=2254): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0xc17a) io_setup(0x200, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000008000d3db700000b70885992b9af5afb28d0000000000007b8af8ffc2000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008517b68bf919ff619fe3250d4b6014cbb276f7dd9aa7548b8ad1db4482db6a27ad689db866299b3b8341d03149a8b50f2507bab0d07af49f395be050ea60428ac18433eea11af591205b2c64d92e93cedc0a6439e1c6fff290429f223e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100080a, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x66b, &(0x7f0000000900)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 0s ago: executing program 2 (id=2255): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x10, &(0x7f0000000180)={0x0, 0x3660, 0x2, 0x1, 0x34b}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f00000003c0)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4684fb, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r1, &(0x7f0000000500)={0x2}) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) kernel console output (not intermixed with test programs): 96.190204][ T29] audit: type=1326 audit(1736948555.014:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 96.278660][ T29] audit: type=1326 audit(1736948555.084:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 96.550873][ T6286] loop2: detected capacity change from 0 to 8192 [ 96.590513][ T6289] netlink: 'syz.3.948': attribute type 4 has an invalid length. [ 96.599954][ T6296] FAULT_INJECTION: forcing a failure. [ 96.599954][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 96.612772][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.4.951 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 96.624454][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.635293][ T6296] Call Trace: [ 96.638845][ T6296] [ 96.641814][ T6296] dump_stack_lvl+0xf2/0x150 [ 96.647044][ T6296] dump_stack+0x15/0x1a [ 96.651988][ T6296] should_fail_ex+0x223/0x230 [ 96.657180][ T6296] should_failslab+0x8f/0xb0 [ 96.661832][ T6296] kmem_cache_alloc_node_noprof+0x59/0x320 [ 96.668465][ T6296] ? __alloc_skb+0x10b/0x310 [ 96.673784][ T6296] __alloc_skb+0x10b/0x310 [ 96.678319][ T6296] ? audit_log_start+0x34c/0x6b0 [ 96.683748][ T6296] audit_log_start+0x368/0x6b0 [ 96.689002][ T6296] audit_seccomp+0x4b/0x130 [ 96.694126][ T6296] __seccomp_filter+0x6fa/0x1180 [ 96.700032][ T6296] ? handle_mm_fault+0x1723/0x2ac0 [ 96.705641][ T6296] __secure_computing+0x9f/0x1c0 [ 96.711395][ T6296] syscall_trace_enter+0xd1/0x1f0 [ 96.716651][ T6296] ? __rcu_read_unlock+0x4e/0x70 [ 96.722056][ T6296] do_syscall_64+0xaa/0x1c0 [ 96.726858][ T6296] ? clear_bhb_loop+0x55/0xb0 [ 96.731733][ T6296] ? clear_bhb_loop+0x55/0xb0 [ 96.736950][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.743085][ T6296] RIP: 0033:0x7fac42597c47 [ 96.747803][ T6296] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.768751][ T6296] RSP: 002b:00007fac40bfffa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 96.777996][ T6296] RAX: ffffffffffffffda RBX: 00007fac42785fa0 RCX: 00007fac42597c47 [ 96.786416][ T6296] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 96.794665][ T6296] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 96.802695][ T6296] R10: 00000000200041c0 R11: 0000000000000286 R12: 0000000000000001 [ 96.811107][ T6296] R13: 0000000000000000 R14: 00007fac42785fa0 R15: 00007ffff234f798 [ 96.819125][ T6296] [ 96.929725][ T6286] loop2: p1 p2 p3 p4 [ 96.934745][ T6286] loop2: p1 start 51379968 is beyond EOD, truncated [ 96.948948][ T6286] loop2: p3 size 100663552 extends beyond EOD, truncated [ 96.962777][ T6286] loop2: p4 size 81920 extends beyond EOD, truncated [ 97.194296][ T6319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.959'. [ 97.229737][ T6321] loop4: detected capacity change from 0 to 512 [ 97.248400][ T6321] EXT4-fs: Ignoring removed i_version option [ 97.254854][ T6321] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.276663][ T6321] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.342447][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.351642][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.448419][ T6321] EXT4-fs (loop4): 1 truncate cleaned up [ 97.741800][ T6330] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.766411][ T6330] loop3: detected capacity change from 0 to 1024 [ 98.091948][ T6345] loop2: detected capacity change from 0 to 8192 [ 98.111802][ T6347] FAULT_INJECTION: forcing a failure. [ 98.111802][ T6347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.125220][ T6347] CPU: 1 UID: 0 PID: 6347 Comm: syz.4.961 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 98.136004][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.146967][ T6347] Call Trace: [ 98.150611][ T6347] [ 98.153699][ T6347] dump_stack_lvl+0xf2/0x150 [ 98.158536][ T6347] dump_stack+0x15/0x1a [ 98.162886][ T6347] should_fail_ex+0x223/0x230 [ 98.167693][ T6347] should_fail+0xb/0x10 [ 98.172099][ T6347] should_fail_usercopy+0x1a/0x20 [ 98.177376][ T6347] _copy_from_user+0x1e/0xb0 [ 98.182453][ T6347] copy_msghdr_from_user+0x54/0x2a0 [ 98.188033][ T6347] ? __fget_files+0x17c/0x1c0 [ 98.194111][ T6347] __sys_sendmsg+0x13e/0x230 [ 98.199158][ T6347] __x64_sys_sendmsg+0x46/0x50 [ 98.204104][ T6347] x64_sys_call+0x2734/0x2dc0 [ 98.208927][ T6347] do_syscall_64+0xc9/0x1c0 [ 98.213658][ T6347] ? clear_bhb_loop+0x55/0xb0 [ 98.218501][ T6347] ? clear_bhb_loop+0x55/0xb0 [ 98.223653][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.229822][ T6347] RIP: 0033:0x7fac42595d29 [ 98.234347][ T6347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.254641][ T6347] RSP: 002b:00007fac40c01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.263542][ T6347] RAX: ffffffffffffffda RBX: 00007fac42785fa0 RCX: 00007fac42595d29 [ 98.271898][ T6347] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 98.281337][ T6347] RBP: 00007fac40c01090 R08: 0000000000000000 R09: 0000000000000000 [ 98.289784][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.297917][ T6347] R13: 0000000000000000 R14: 00007fac42785fa0 R15: 00007ffff234f798 [ 98.305930][ T6347] [ 98.332010][ T6345] loop2: p1 p2 p3 p4 [ 98.336756][ T6345] loop2: p1 start 51379968 is beyond EOD, truncated [ 98.455556][ T6350] Falling back ldisc for ttyS3. [ 98.464567][ T6345] loop2: p3 size 100663552 extends beyond EOD, truncated [ 98.491075][ T6345] loop2: p4 size 81920 extends beyond EOD, truncated [ 98.594481][ T6373] bpf_get_probe_write_proto: 8 callbacks suppressed [ 98.594498][ T6373] syz.0.974[6373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.603630][ T6373] syz.0.974[6373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.637517][ T6375] loop2: detected capacity change from 0 to 512 [ 98.665225][ T6373] syz.0.974[6373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.668816][ T6375] EXT4-fs: Ignoring removed i_version option [ 98.686432][ T6375] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.694574][ T6375] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.712456][ T6375] EXT4-fs (loop2): 1 truncate cleaned up [ 98.720838][ T6375] EXT4-fs mount: 66 callbacks suppressed [ 98.720860][ T6375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.741918][ T6382] loop3: detected capacity change from 0 to 512 [ 98.762484][ T6382] EXT4-fs (loop3): too many log groups per flexible block group [ 98.775027][ T6382] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 98.788311][ T6373] infiniband syz2: set active [ 98.793807][ T6373] infiniband syz2: added veth0_to_bond [ 98.802180][ T6382] EXT4-fs (loop3): mount failed [ 98.844895][ T6396] loop4: detected capacity change from 0 to 512 [ 98.856420][ T6373] RDS/IB: syz2: added [ 98.856925][ T6396] EXT4-fs: Ignoring removed i_version option [ 98.868135][ T6396] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.875992][ T6373] smc: adding ib device syz2 with port count 1 [ 98.882690][ T6373] smc: ib device syz2 port 1 has pnetid [ 98.883661][ T6402] syz.3.981[6402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.901968][ T6396] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.905152][ T6402] syz.3.981[6402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.955356][ T6396] EXT4-fs (loop4): 1 truncate cleaned up [ 98.960961][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.962551][ T6396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.992634][ T6402] syz.3.981[6402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.030773][ T6404] loop1: detected capacity change from 0 to 8192 [ 99.062025][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.090645][ T6404] loop1: p1 p2 p3 p4 [ 99.095289][ T6404] loop1: p1 start 51379968 is beyond EOD, truncated [ 99.103806][ T6404] loop1: p3 size 100663552 extends beyond EOD, truncated [ 99.127558][ T6404] loop1: p4 size 81920 extends beyond EOD, truncated [ 99.274255][ T6429] loop3: detected capacity change from 0 to 164 [ 99.295175][ T6433] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.393343][ T6433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.407991][ T6437] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 99.432254][ T6439] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 99.454757][ T6433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.511089][ T6462] loop3: detected capacity change from 0 to 512 [ 99.521308][ T6433] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.545387][ T6462] EXT4-fs (loop3): too many log groups per flexible block group [ 99.553799][ T6462] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 99.564141][ T6462] EXT4-fs (loop3): mount failed [ 99.589688][ T6433] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.603868][ T6433] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.627429][ T6433] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.644293][ T6433] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.710161][ T6477] loop1: detected capacity change from 0 to 164 [ 99.750928][ T6479] FAULT_INJECTION: forcing a failure. [ 99.750928][ T6479] name failslab, interval 1, probability 0, space 0, times 0 [ 99.764746][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.0.1005 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 99.776619][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.787043][ T6479] Call Trace: [ 99.790704][ T6479] [ 99.794696][ T6479] dump_stack_lvl+0xf2/0x150 [ 99.801159][ T6479] dump_stack+0x15/0x1a [ 99.806082][ T6479] should_fail_ex+0x223/0x230 [ 99.811088][ T6479] should_failslab+0x8f/0xb0 [ 99.815999][ T6479] kmem_cache_alloc_node_noprof+0x59/0x320 [ 99.822101][ T6479] ? __alloc_skb+0x10b/0x310 [ 99.826713][ T6479] __alloc_skb+0x10b/0x310 [ 99.831156][ T6479] netlink_alloc_large_skb+0xad/0xe0 [ 99.836566][ T6479] netlink_sendmsg+0x3b4/0x6e0 [ 99.841405][ T6479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.846732][ T6479] __sock_sendmsg+0x140/0x180 [ 99.851605][ T6479] ____sys_sendmsg+0x312/0x410 [ 99.856664][ T6479] __sys_sendmsg+0x19d/0x230 [ 99.861307][ T6479] __x64_sys_sendmsg+0x46/0x50 [ 99.866349][ T6479] x64_sys_call+0x2734/0x2dc0 [ 99.871199][ T6479] do_syscall_64+0xc9/0x1c0 [ 99.876206][ T6479] ? clear_bhb_loop+0x55/0xb0 [ 99.881591][ T6479] ? clear_bhb_loop+0x55/0xb0 [ 99.886353][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.892600][ T6479] RIP: 0033:0x7f2daf655d29 [ 99.897623][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.917992][ T6479] RSP: 002b:00007f2dadcc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.927040][ T6479] RAX: ffffffffffffffda RBX: 00007f2daf845fa0 RCX: 00007f2daf655d29 [ 99.936403][ T6479] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000007 [ 99.944879][ T6479] RBP: 00007f2dadcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.953257][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.961963][ T6479] R13: 0000000000000000 R14: 00007f2daf845fa0 R15: 00007ffc85a7e358 [ 99.971534][ T6479] [ 100.170204][ T6501] loop3: detected capacity change from 0 to 164 [ 100.238658][ T6512] loop4: detected capacity change from 0 to 256 [ 100.251022][ T6516] loop2: detected capacity change from 0 to 512 [ 100.258789][ T6516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.271165][ T6516] EXT4-fs (loop2): 1 truncate cleaned up [ 100.277491][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.292214][ T6516] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 100.304226][ T6517] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 100.360943][ T6524] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.514226][ T6534] loop3: detected capacity change from 0 to 164 [ 100.580367][ T6539] loop1: detected capacity change from 0 to 164 [ 100.793512][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.822710][ T6559] loop2: detected capacity change from 0 to 1024 [ 100.831117][ T6559] EXT4-fs: Ignoring removed orlov option [ 100.849926][ T6559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.873789][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.896068][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.906138][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.928646][ T6570] loop3: detected capacity change from 0 to 164 [ 100.958569][ T6574] loop2: detected capacity change from 0 to 1024 [ 100.966842][ T6574] EXT4-fs: Ignoring removed orlov option [ 100.976366][ T6574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.991992][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 100.992010][ T29] audit: type=1400 audit(1736948559.824:4329): avc: denied { write } for pid=6573 comm="+}[@" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.030644][ T29] audit: type=1400 audit(1736948559.824:4330): avc: denied { add_name } for pid=6573 comm="+}[@" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.054027][ T29] audit: type=1400 audit(1736948559.824:4331): avc: denied { create } for pid=6573 comm="+}[@" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.075199][ T29] audit: type=1400 audit(1736948559.824:4332): avc: denied { read open } for pid=6573 comm="+}[@" path="/175/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.099295][ T29] audit: type=1400 audit(1736948559.824:4333): avc: denied { write } for pid=6573 comm="+}[@" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.141632][ T29] audit: type=1400 audit(1736948559.974:4334): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 101.196805][ T29] audit: type=1400 audit(1736948560.024:4335): avc: denied { create } for pid=6579 comm="syz.3.1043" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.219756][ T29] audit: type=1400 audit(1736948560.024:4336): avc: denied { map } for pid=6579 comm="syz.3.1043" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.245923][ T29] audit: type=1400 audit(1736948560.024:4337): avc: denied { read write } for pid=6579 comm="syz.3.1043" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.323718][ T6591] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1047'. [ 101.338388][ T29] audit: type=1326 audit(1736948560.094:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6583 comm="syz.4.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 101.358851][ T6591] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1047'. [ 101.497614][ T6598] loop3: detected capacity change from 0 to 1024 [ 101.515582][ T6598] EXT4-fs: Ignoring removed orlov option [ 101.552869][ T6598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.629709][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.634699][ T6601] loop4: detected capacity change from 0 to 8192 [ 101.689671][ T6601] loop4: p1 p2 p3 p4 [ 101.693891][ T6601] loop4: p1 start 51379968 is beyond EOD, truncated [ 101.705502][ T6601] loop4: p3 size 100663552 extends beyond EOD, truncated [ 101.726046][ T6601] loop4: p4 size 81920 extends beyond EOD, truncated [ 101.729329][ T6605] loop3: detected capacity change from 0 to 512 [ 101.737251][ T6606] loop1: detected capacity change from 0 to 512 [ 101.754736][ T6605] EXT4-fs: Ignoring removed i_version option [ 101.762454][ T6605] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.771431][ T6605] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.786675][ T6605] EXT4-fs (loop3): 1 truncate cleaned up [ 101.799222][ T6605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.830459][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.857145][ T6606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.870986][ T6606] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.880280][ T6612] loop2: detected capacity change from 0 to 164 [ 101.892461][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.989528][ T6626] FAULT_INJECTION: forcing a failure. [ 101.989528][ T6626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.004159][ T6626] CPU: 0 UID: 0 PID: 6626 Comm: syz.0.1060 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 102.016566][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.016652][ T6626] Call Trace: [ 102.016678][ T6626] [ 102.016700][ T6626] dump_stack_lvl+0xf2/0x150 [ 102.016741][ T6626] dump_stack+0x15/0x1a [ 102.016791][ T6626] should_fail_ex+0x223/0x230 [ 102.016819][ T6626] should_fail+0xb/0x10 [ 102.016900][ T6626] should_fail_usercopy+0x1a/0x20 [ 102.016932][ T6626] _copy_from_iter+0xd5/0xd00 [ 102.016965][ T6626] ? kmalloc_reserve+0x16e/0x190 [ 102.017062][ T6626] ? __virt_addr_valid+0x1ed/0x250 [ 102.017095][ T6626] ? __check_object_size+0x364/0x520 [ 102.017148][ T6626] pfkey_sendmsg+0x16c/0x970 [ 102.017252][ T6626] ? selinux_socket_sendmsg+0x185/0x1c0 [ 102.017293][ T6626] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 102.017318][ T6626] __sock_sendmsg+0x140/0x180 [ 102.017358][ T6626] ____sys_sendmsg+0x312/0x410 [ 102.017443][ T6626] __sys_sendmsg+0x19d/0x230 [ 102.017494][ T6626] __x64_sys_sendmsg+0x46/0x50 [ 102.017543][ T6626] x64_sys_call+0x2734/0x2dc0 [ 102.017570][ T6626] do_syscall_64+0xc9/0x1c0 [ 102.017596][ T6626] ? clear_bhb_loop+0x55/0xb0 [ 102.017625][ T6626] ? clear_bhb_loop+0x55/0xb0 [ 102.017653][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.017759][ T6626] RIP: 0033:0x7f2daf655d29 [ 102.017775][ T6626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.017872][ T6626] RSP: 002b:00007f2dadcc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.017977][ T6626] RAX: ffffffffffffffda RBX: 00007f2daf845fa0 RCX: 00007f2daf655d29 [ 102.017991][ T6626] RDX: 0000000020040850 RSI: 0000000020000480 RDI: 0000000000000003 [ 102.018003][ T6626] RBP: 00007f2dadcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.018056][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.221241][ T6626] R13: 0000000000000000 R14: 00007f2daf845fa0 R15: 00007ffc85a7e358 [ 102.221323][ T6626] [ 102.264489][ T6631] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.281595][ T6637] sd 0:0:1:0: device reset [ 102.343293][ T6636] loop3: detected capacity change from 0 to 8192 [ 102.357134][ T6631] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.380652][ T6636] loop3: p1 p2 p3 p4 [ 102.385527][ T6636] loop3: p1 start 51379968 is beyond EOD, truncated [ 102.402624][ T6636] loop3: p3 size 100663552 extends beyond EOD, truncated [ 102.416593][ T6631] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.426223][ T6636] loop3: p4 size 81920 extends beyond EOD, truncated [ 102.449598][ T6654] FAULT_INJECTION: forcing a failure. [ 102.449598][ T6654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.464826][ T6654] CPU: 1 UID: 0 PID: 6654 Comm: syz.0.1069 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 102.476343][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.487560][ T6654] Call Trace: [ 102.490874][ T6654] [ 102.493887][ T6654] dump_stack_lvl+0xf2/0x150 [ 102.499048][ T6654] dump_stack+0x15/0x1a [ 102.500611][ T6657] loop3: detected capacity change from 0 to 1024 [ 102.503494][ T6654] should_fail_ex+0x223/0x230 [ 102.511095][ T6657] EXT4-fs: Ignoring removed orlov option [ 102.516385][ T6654] should_fail+0xb/0x10 [ 102.527169][ T6654] should_fail_usercopy+0x1a/0x20 [ 102.532946][ T6654] _copy_to_user+0x20/0xa0 [ 102.536585][ T6659] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.537855][ T6654] simple_read_from_buffer+0xa0/0x110 [ 102.551374][ T6654] proc_fail_nth_read+0xf9/0x140 [ 102.556944][ T6654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.562698][ T6654] vfs_read+0x1a2/0x700 [ 102.567218][ T6654] ? __rcu_read_unlock+0x4e/0x70 [ 102.572468][ T6654] ? __fget_files+0x17c/0x1c0 [ 102.577268][ T6654] ksys_read+0xe8/0x1b0 [ 102.581636][ T6654] __x64_sys_read+0x42/0x50 [ 102.586213][ T6654] x64_sys_call+0x2874/0x2dc0 [ 102.591373][ T6654] do_syscall_64+0xc9/0x1c0 [ 102.596262][ T6654] ? clear_bhb_loop+0x55/0xb0 [ 102.601200][ T6654] ? clear_bhb_loop+0x55/0xb0 [ 102.606348][ T6654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.612513][ T6654] RIP: 0033:0x7f2daf65473c [ 102.617209][ T6654] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.637626][ T6654] RSP: 002b:00007f2dadcc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.646881][ T6654] RAX: ffffffffffffffda RBX: 00007f2daf845fa0 RCX: 00007f2daf65473c [ 102.655871][ T6654] RDX: 000000000000000f RSI: 00007f2dadcc70a0 RDI: 0000000000000004 [ 102.664299][ T6654] RBP: 00007f2dadcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.672931][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.681292][ T6654] R13: 0000000000000000 R14: 00007f2daf845fa0 R15: 00007ffc85a7e358 [ 102.689977][ T6654] [ 102.703316][ T6660] loop4: detected capacity change from 0 to 1024 [ 102.714710][ T6631] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.728129][ T6657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.728772][ T6660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.764005][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.777522][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.809838][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.832282][ T6669] ipip1: entered promiscuous mode [ 102.862369][ T6631] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.875904][ T6673] FAULT_INJECTION: forcing a failure. [ 102.875904][ T6673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.890213][ T6673] CPU: 1 UID: 0 PID: 6673 Comm: syz.4.1076 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 102.890680][ T6668] loop3: detected capacity change from 0 to 2048 [ 102.902305][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.902327][ T6673] Call Trace: [ 102.902335][ T6673] [ 102.902401][ T6673] dump_stack_lvl+0xf2/0x150 [ 102.902449][ T6673] dump_stack+0x15/0x1a [ 102.910570][ T6631] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.919552][ T6673] should_fail_ex+0x223/0x230 [ 102.926288][ T6631] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.931241][ T6673] should_fail+0xb/0x10 [ 102.931279][ T6673] should_fail_usercopy+0x1a/0x20 [ 102.939921][ T6631] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.943917][ T6673] _copy_to_user+0x20/0xa0 [ 102.943982][ T6673] simple_read_from_buffer+0xa0/0x110 [ 102.944020][ T6673] proc_fail_nth_read+0xf9/0x140 [ 102.992092][ T6673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.997871][ T6673] vfs_read+0x1a2/0x700 [ 103.002231][ T6673] ? __rcu_read_unlock+0x4e/0x70 [ 103.007725][ T6673] ? __fget_files+0x17c/0x1c0 [ 103.012706][ T6673] ksys_read+0xe8/0x1b0 [ 103.016888][ T6673] __x64_sys_read+0x42/0x50 [ 103.021746][ T6673] x64_sys_call+0x2874/0x2dc0 [ 103.026865][ T6673] do_syscall_64+0xc9/0x1c0 [ 103.032073][ T6673] ? clear_bhb_loop+0x55/0xb0 [ 103.037510][ T6673] ? clear_bhb_loop+0x55/0xb0 [ 103.042580][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.049089][ T6673] RIP: 0033:0x7fac4259473c [ 103.053556][ T6673] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.073881][ T6673] RSP: 002b:00007fac40c01030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.082519][ T6673] RAX: ffffffffffffffda RBX: 00007fac42785fa0 RCX: 00007fac4259473c [ 103.090558][ T6673] RDX: 000000000000000f RSI: 00007fac40c010a0 RDI: 0000000000000003 [ 103.098709][ T6673] RBP: 00007fac40c01090 R08: 0000000000000000 R09: 0000000000000000 [ 103.107099][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.115269][ T6673] R13: 0000000000000000 R14: 00007fac42785fa0 R15: 00007ffff234f798 [ 103.123572][ T6673] [ 103.164257][ T6682] syz.2.1079[6682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.164313][ T6682] syz.2.1079[6682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.176782][ T6682] syz.2.1079[6682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.190945][ T6685] netlink: 'syz.3.1075': attribute type 5 has an invalid length. [ 103.219983][ T6668] loop3: p1 p2 p3 [ 103.272083][ T6690] loop4: detected capacity change from 0 to 164 [ 103.423031][ T6709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.443915][ T6709] binfmt_misc: register: failed to install interpreter file ./file0 [ 103.450197][ T6717] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.556222][ T6726] loop4: detected capacity change from 0 to 164 [ 103.569271][ T6729] syz.2.1101[6729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.612659][ T6734] FAULT_INJECTION: forcing a failure. [ 103.612659][ T6734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.637909][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz.2.1103 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 103.649154][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.659680][ T6734] Call Trace: [ 103.663151][ T6734] [ 103.666122][ T6734] dump_stack_lvl+0xf2/0x150 [ 103.670761][ T6734] dump_stack+0x15/0x1a [ 103.674984][ T6734] should_fail_ex+0x223/0x230 [ 103.679748][ T6734] should_fail+0xb/0x10 [ 103.684089][ T6734] should_fail_usercopy+0x1a/0x20 [ 103.689500][ T6734] _copy_from_user+0x1e/0xb0 [ 103.694285][ T6734] copy_msghdr_from_user+0x54/0x2a0 [ 103.699536][ T6734] ? __fget_files+0x17c/0x1c0 [ 103.704363][ T6734] __sys_sendmmsg+0x1e8/0x4b0 [ 103.709275][ T6734] __x64_sys_sendmmsg+0x57/0x70 [ 103.714302][ T6734] x64_sys_call+0x29aa/0x2dc0 [ 103.719250][ T6734] do_syscall_64+0xc9/0x1c0 [ 103.723780][ T6734] ? clear_bhb_loop+0x55/0xb0 [ 103.728660][ T6734] ? clear_bhb_loop+0x55/0xb0 [ 103.733494][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.739718][ T6734] RIP: 0033:0x7fd339e85d29 [ 103.744243][ T6734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.765033][ T6734] RSP: 002b:00007fd3384f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.774091][ T6734] RAX: ffffffffffffffda RBX: 00007fd33a075fa0 RCX: 00007fd339e85d29 [ 103.782283][ T6734] RDX: 0000000000000003 RSI: 0000000020000b00 RDI: 0000000000000005 [ 103.790579][ T6734] RBP: 00007fd3384f7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.798690][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.806954][ T6734] R13: 0000000000000000 R14: 00007fd33a075fa0 R15: 00007fff6829ec48 [ 103.815210][ T6734] [ 103.849784][ T6736] xt_TPROXY: Can be used only with -p tcp or -p udp [ 103.860173][ T6741] loop4: detected capacity change from 0 to 512 [ 103.877905][ T6743] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.888128][ T6741] EXT4-fs: Ignoring removed i_version option [ 103.894470][ T6741] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.905497][ T6747] loop1: detected capacity change from 0 to 512 [ 103.907782][ T6743] loop3: detected capacity change from 0 to 1024 [ 103.920162][ T6741] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.950295][ T6743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.950909][ T6741] EXT4-fs (loop4): 1 truncate cleaned up [ 103.964955][ T6747] EXT4-fs (loop1): too many log groups per flexible block group [ 103.975241][ T6741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.977776][ T6747] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 103.999842][ T6747] EXT4-fs (loop1): mount failed [ 104.048597][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.080477][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.119540][ T6770] loop4: detected capacity change from 0 to 164 [ 104.230372][ T6785] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.243538][ T6785] loop2: detected capacity change from 0 to 1024 [ 104.263289][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.267309][ T6788] loop4: detected capacity change from 0 to 512 [ 104.276291][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.291329][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.319627][ T6788] EXT4-fs (loop4): too many log groups per flexible block group [ 104.323125][ T6796] bpf_get_probe_write_proto: 2 callbacks suppressed [ 104.323147][ T6796] syz.3.1127[6796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.327767][ T6788] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 104.335029][ T6796] syz.3.1127[6796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.355093][ T6796] syz.3.1127[6796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.371047][ T6788] EXT4-fs (loop4): mount failed [ 104.373104][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.596534][ T6824] loop4: detected capacity change from 0 to 1024 [ 104.606103][ T6824] EXT4-fs: Ignoring removed orlov option [ 104.634003][ T6824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.801335][ T6845] syz.3.1148[6845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.801538][ T6845] syz.3.1148[6845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.813610][ T6845] syz.3.1148[6845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.828487][ T6845] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 105.031205][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.076944][ T6873] syz.4.1159[6873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.077108][ T6873] syz.4.1159[6873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.085272][ T6871] loop2: detected capacity change from 0 to 8192 [ 105.089823][ T6873] syz.4.1159[6873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.200977][ T6895] loop3: detected capacity change from 0 to 128 [ 105.214845][ T6893] loop4: detected capacity change from 0 to 512 [ 105.227439][ T6895] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.360152][ T6901] loop1: detected capacity change from 0 to 512 [ 105.415084][ T6893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.432858][ T6893] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.447000][ T6901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.461667][ T6901] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.508920][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.555297][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.555311][ T6914] loop1: detected capacity change from 0 to 1024 [ 105.555573][ T6914] EXT4-fs: Ignoring removed orlov option [ 105.589536][ T6914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.616843][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1172'. [ 105.629271][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 105.640549][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.649619][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.199119][ T6948] loop4: detected capacity change from 0 to 164 [ 106.265232][ T29] kauditd_printk_skb: 555 callbacks suppressed [ 106.265253][ T29] audit: type=1326 audit(1736948565.094:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 106.310513][ T29] audit: type=1326 audit(1736948565.134:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.3.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 106.373984][ T6952] usb usb1: usbfs: process 6952 (syz.2.1185) did not claim interface 0 before use [ 106.402251][ T29] audit: type=1326 audit(1736948565.234:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6953 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 106.434884][ T6957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1187'. [ 106.450475][ T6960] sd 0:0:1:0: device reset [ 106.453728][ T29] audit: type=1326 audit(1736948565.264:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6953 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 106.460647][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1187'. [ 106.478890][ T29] audit: type=1326 audit(1736948565.264:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6953 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 106.514477][ T29] audit: type=1326 audit(1736948565.264:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6953 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 106.534620][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.540116][ T29] audit: type=1326 audit(1736948565.284:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 106.574554][ T29] audit: type=1326 audit(1736948565.284:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 106.599741][ T29] audit: type=1326 audit(1736948565.284:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 106.625040][ T29] audit: type=1326 audit(1736948565.284:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 106.645399][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.709338][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.933266][ T6993] usb usb1: usbfs: process 6993 (syz.0.1201) did not claim interface 0 before use [ 107.002334][ T6995] loop3: detected capacity change from 0 to 512 [ 107.024388][ T6995] EXT4-fs: Ignoring removed i_version option [ 107.030623][ T6995] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.048753][ T6995] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.092839][ T6995] EXT4-fs (loop3): 1 truncate cleaned up [ 107.104974][ T6995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.136295][ T7002] syz.0.1205[7002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.162067][ T7002] syz2: rxe_newlink: already configured on veth0_to_bond [ 107.218055][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.233350][ T7005] loop1: detected capacity change from 0 to 164 [ 107.489563][ T7036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1218'. [ 107.500633][ T7040] netlink: 44 bytes leftover after parsing attributes in process `\'. [ 107.510291][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 107.524518][ T7036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.539582][ T7036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.599007][ T7045] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 107.763246][ T7040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.772777][ T7040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.792018][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 107.891714][ T7085] usb usb1: usbfs: process 7085 (syz.2.1235) did not claim interface 0 before use [ 107.917719][ T7084] xt_TPROXY: Can be used only with -p tcp or -p udp [ 107.998285][ T7087] loop2: detected capacity change from 0 to 8192 [ 108.145207][ T7108] sd 0:0:1:0: device reset [ 108.311462][ T7130] usb usb1: usbfs: process 7130 (syz.1.1250) did not claim interface 0 before use [ 108.351394][ T7138] sd 0:0:1:0: device reset [ 108.366632][ T7140] loop1: detected capacity change from 0 to 164 [ 108.414800][ T7147] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.442045][ T7149] loop3: detected capacity change from 0 to 1024 [ 108.449326][ T7149] EXT4-fs: Ignoring removed orlov option [ 108.521554][ T7149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.539172][ T7160] netlink: 44 bytes leftover after parsing attributes in process `\'. [ 108.559579][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 108.645600][ T7167] sd 0:0:1:0: device reset [ 108.837450][ T7182] usb usb1: usbfs: process 7182 (syz.4.1271) did not claim interface 0 before use [ 108.848539][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.862691][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.889031][ T7184] usb usb1: usbfs: process 7184 (syz.0.1272) did not claim interface 0 before use [ 108.911553][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 108.943010][ T7188] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.987772][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'. [ 109.028881][ T7195] sd 0:0:1:0: device reset [ 109.085715][ T7202] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 109.135062][ T7206] loop4: detected capacity change from 0 to 164 [ 109.266537][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.286987][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.470612][ T7217] usb usb1: usbfs: process 7217 (syz.2.1286) did not claim interface 0 before use [ 109.485676][ T7221] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.512911][ T7221] loop1: detected capacity change from 0 to 1024 [ 109.527121][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.553303][ T7221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.594271][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.679876][ T7231] sd 0:0:1:0: device reset [ 109.823173][ T7248] bpf_get_probe_write_proto: 8 callbacks suppressed [ 109.823191][ T7248] syz.3.1298[7248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.830734][ T7248] syz.3.1298[7248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.842615][ T7248] syz.3.1298[7248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.899803][ T7248] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 109.945263][ T7254] loop1: detected capacity change from 0 to 1024 [ 109.953836][ T7254] EXT4-fs: Ignoring removed orlov option [ 109.961359][ T7254] EXT4-fs: Ignoring removed orlov option [ 109.984738][ T7254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.025721][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.060495][ T7262] sd 0:0:1:0: device reset [ 110.203245][ T7278] loop4: detected capacity change from 0 to 164 [ 110.215583][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.235124][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.272629][ T7284] syz.3.1313[7284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.272684][ T7284] syz.3.1313[7284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.292488][ T7284] syz.3.1313[7284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.330769][ T7284] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 110.421999][ T7293] sd 0:0:1:0: device reset [ 110.561875][ T7316] FAULT_INJECTION: forcing a failure. [ 110.561875][ T7316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.575805][ T7316] CPU: 1 UID: 0 PID: 7316 Comm: syz.3.1325 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 110.588319][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.599626][ T7316] Call Trace: [ 110.603115][ T7316] [ 110.606745][ T7316] dump_stack_lvl+0xf2/0x150 [ 110.611912][ T7316] dump_stack+0x15/0x1a [ 110.616621][ T7316] should_fail_ex+0x223/0x230 [ 110.622825][ T7316] should_fail+0xb/0x10 [ 110.627790][ T7316] should_fail_usercopy+0x1a/0x20 [ 110.633723][ T7316] _copy_to_user+0x20/0xa0 [ 110.638968][ T7316] simple_read_from_buffer+0xa0/0x110 [ 110.645031][ T7316] proc_fail_nth_read+0xf9/0x140 [ 110.650574][ T7316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.657717][ T7316] vfs_read+0x1a2/0x700 [ 110.662525][ T7316] ? __rcu_read_unlock+0x4e/0x70 [ 110.668125][ T7316] ? __fget_files+0x17c/0x1c0 [ 110.673494][ T7316] ksys_read+0xe8/0x1b0 [ 110.678238][ T7316] __x64_sys_read+0x42/0x50 [ 110.683197][ T7316] x64_sys_call+0x2874/0x2dc0 [ 110.689418][ T7316] do_syscall_64+0xc9/0x1c0 [ 110.694121][ T7316] ? clear_bhb_loop+0x55/0xb0 [ 110.699317][ T7316] ? clear_bhb_loop+0x55/0xb0 [ 110.704219][ T7316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.710377][ T7316] RIP: 0033:0x7f991e92473c [ 110.715250][ T7316] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.738613][ T7316] RSP: 002b:00007f991cf97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.747673][ T7316] RAX: ffffffffffffffda RBX: 00007f991eb15fa0 RCX: 00007f991e92473c [ 110.758662][ T7316] RDX: 000000000000000f RSI: 00007f991cf970a0 RDI: 0000000000000003 [ 110.770924][ T7316] RBP: 00007f991cf97090 R08: 0000000000000000 R09: 0000000000000000 [ 110.780699][ T7316] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 110.790894][ T7316] R13: 0000000000000000 R14: 00007f991eb15fa0 R15: 00007ffcb3e12b88 [ 110.801143][ T7316] [ 110.813037][ T7321] syz.0.1327[7321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.813102][ T7321] syz.0.1327[7321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.826686][ T7322] usb usb1: usbfs: process 7322 (syz.4.1322) did not claim interface 0 before use [ 110.853238][ T7324] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.856538][ T7321] syz.0.1327[7321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.869191][ T7324] loop2: detected capacity change from 0 to 1024 [ 110.884454][ T7321] syz2: rxe_newlink: already configured on veth0_to_bond [ 110.903339][ T7324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.940705][ T7331] sd 0:0:1:0: device reset [ 110.966168][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.016825][ T7340] loop1: detected capacity change from 0 to 512 [ 111.024741][ T7340] EXT4-fs: Ignoring removed i_version option [ 111.031788][ T7340] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.041932][ T7340] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.056031][ T7340] EXT4-fs (loop1): 1 truncate cleaned up [ 111.064548][ T7340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.145169][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.160085][ T7352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.165631][ T7354] loop3: detected capacity change from 0 to 164 [ 111.178247][ T7352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.211373][ T7361] syz.2.1343[7361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.214285][ T7361] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 111.224435][ T7363] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.251765][ T7363] loop1: detected capacity change from 0 to 1024 [ 111.272932][ T7363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.307541][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.324739][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 111.324758][ T29] audit: type=1326 audit(1736948570.154:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.2.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd339e85d29 code=0x7ffc0000 [ 111.357186][ T29] audit: type=1326 audit(1736948570.164:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.2.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd339e85d29 code=0x7ffc0000 [ 111.382008][ T29] audit: type=1326 audit(1736948570.164:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.2.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd339e85d29 code=0x7ffc0000 [ 111.407335][ T29] audit: type=1326 audit(1736948570.164:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.2.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd339e85d29 code=0x7ffc0000 [ 111.433862][ T29] audit: type=1326 audit(1736948570.164:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.2.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd339e85d29 code=0x7ffc0000 [ 111.472863][ T29] audit: type=1326 audit(1736948570.304:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd57895d29 code=0x7ffc0000 [ 111.507465][ T29] audit: type=1326 audit(1736948570.324:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7efd57895d29 code=0x7ffc0000 [ 111.531261][ T29] audit: type=1326 audit(1736948570.324:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd57895d29 code=0x7ffc0000 [ 111.555105][ T29] audit: type=1326 audit(1736948570.324:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7382 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd57895d29 code=0x7ffc0000 [ 111.580381][ T29] audit: type=1326 audit(1736948570.334:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.3.1350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x0 [ 111.613226][ T7391] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16) [ 111.619974][ T7391] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.627574][ T7391] vhci_hcd vhci_hcd.0: Device attached [ 111.685104][ T7401] loop4: detected capacity change from 0 to 512 [ 111.732717][ T7405] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.743616][ T7401] EXT4-fs (loop4): too many log groups per flexible block group [ 111.752287][ T7401] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 111.762228][ T7401] EXT4-fs (loop4): mount failed [ 111.869092][ T7409] loop1: detected capacity change from 0 to 8192 [ 111.871150][ T1038] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 111.897418][ T7417] loop4: detected capacity change from 0 to 1024 [ 111.905554][ T7417] EXT4-fs: Ignoring removed orlov option [ 111.914571][ T7417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.930915][ T7415] batadv0: entered promiscuous mode [ 111.936604][ T7415] macvlan2: entered promiscuous mode [ 111.944149][ T7415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.953347][ T7415] batadv0: left promiscuous mode [ 112.077779][ T7426] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.147255][ T7426] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.174290][ T7429] __nla_validate_parse: 10 callbacks suppressed [ 112.174311][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1364'. [ 112.210110][ T7426] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.263020][ T7426] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.313170][ T7439] loop2: detected capacity change from 0 to 512 [ 112.340586][ T7392] vhci_hcd: connection reset by peer [ 112.348320][ T4166] vhci_hcd: stop threads [ 112.353257][ T4166] vhci_hcd: release socket [ 112.357976][ T4166] vhci_hcd: disconnect device [ 112.363250][ T7439] EXT4-fs (loop2): too many log groups per flexible block group [ 112.371809][ T7439] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 112.379124][ T7439] EXT4-fs (loop2): mount failed [ 112.391763][ T7426] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.405610][ T7426] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.418874][ T7426] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.432182][ T7426] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.581883][ T7445] batadv0: entered promiscuous mode [ 112.587496][ T7445] macvlan2: entered promiscuous mode [ 112.593879][ T7445] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.603171][ T7445] batadv0: left promiscuous mode [ 112.791890][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.952666][ T7472] batadv0: entered promiscuous mode [ 112.968130][ T7472] macvlan2: entered promiscuous mode [ 112.982075][ T7472] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.995137][ T7472] batadv0: left promiscuous mode [ 113.014437][ T7480] loop3: detected capacity change from 0 to 1024 [ 113.024254][ T7480] EXT4-fs: Ignoring removed orlov option [ 113.036630][ T7485] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 113.069898][ T7480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.236810][ T7498] loop1: detected capacity change from 0 to 256 [ 113.315109][ T7516] syz2: rxe_newlink: already configured on veth0_to_bond [ 113.329279][ T7498] FAT-fs (loop1): Directory bread(block 64) failed [ 113.343092][ T7498] FAT-fs (loop1): Directory bread(block 65) failed [ 113.356282][ T7498] FAT-fs (loop1): Directory bread(block 66) failed [ 113.391605][ T7498] FAT-fs (loop1): Directory bread(block 67) failed [ 113.402666][ T7498] FAT-fs (loop1): Directory bread(block 68) failed [ 113.420259][ T7498] FAT-fs (loop1): Directory bread(block 69) failed [ 113.438260][ T7527] FAULT_INJECTION: forcing a failure. [ 113.438260][ T7527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.439870][ T7498] FAT-fs (loop1): Directory bread(block 70) failed [ 113.451678][ T7527] CPU: 0 UID: 0 PID: 7527 Comm: syz.2.1402 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 113.451716][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.451732][ T7527] Call Trace: [ 113.451739][ T7527] [ 113.451748][ T7527] dump_stack_lvl+0xf2/0x150 [ 113.451906][ T7527] dump_stack+0x15/0x1a [ 113.451946][ T7527] should_fail_ex+0x223/0x230 [ 113.451979][ T7527] should_fail+0xb/0x10 [ 113.452007][ T7527] should_fail_usercopy+0x1a/0x20 [ 113.452091][ T7527] _copy_to_user+0x20/0xa0 [ 113.452201][ T7527] simple_read_from_buffer+0xa0/0x110 [ 113.452299][ T7527] proc_fail_nth_read+0xf9/0x140 [ 113.452339][ T7527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.452376][ T7527] vfs_read+0x1a2/0x700 [ 113.452429][ T7527] ? __rcu_read_unlock+0x4e/0x70 [ 113.452465][ T7527] ? __fget_files+0x17c/0x1c0 [ 113.452511][ T7527] ksys_read+0xe8/0x1b0 [ 113.452616][ T7527] __x64_sys_read+0x42/0x50 [ 113.452648][ T7527] x64_sys_call+0x2874/0x2dc0 [ 113.452706][ T7527] do_syscall_64+0xc9/0x1c0 [ 113.452735][ T7527] ? clear_bhb_loop+0x55/0xb0 [ 113.452763][ T7527] ? clear_bhb_loop+0x55/0xb0 [ 113.452827][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.452885][ T7527] RIP: 0033:0x7fd339e8473c [ 113.452904][ T7527] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.452927][ T7527] RSP: 002b:00007fd3384f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.453001][ T7527] RAX: ffffffffffffffda RBX: 00007fd33a075fa0 RCX: 00007fd339e8473c [ 113.453018][ T7527] RDX: 000000000000000f RSI: 00007fd3384f70a0 RDI: 0000000000000004 [ 113.453034][ T7527] RBP: 00007fd3384f7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.453128][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.453144][ T7527] R13: 0000000000000000 R14: 00007fd33a075fa0 R15: 00007fff6829ec48 [ 113.453166][ T7527] [ 113.685974][ T7498] FAT-fs (loop1): Directory bread(block 71) failed [ 113.694034][ T7498] FAT-fs (loop1): Directory bread(block 72) failed [ 113.702652][ T7498] FAT-fs (loop1): Directory bread(block 73) failed [ 113.840000][ T7552] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1412'. [ 113.898807][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.022682][ T7578] netlink: 44 bytes leftover after parsing attributes in process `\'. [ 114.065057][ T7584] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1424'. [ 114.099144][ T7591] loop1: detected capacity change from 0 to 512 [ 114.104648][ T7590] loop3: detected capacity change from 0 to 1024 [ 114.107277][ T7591] EXT4-fs: Ignoring removed i_version option [ 114.117084][ T7590] EXT4-fs: Ignoring removed orlov option [ 114.122485][ T7591] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.138218][ T7591] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.157794][ T7590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.167893][ T7591] EXT4-fs (loop1): 1 truncate cleaned up [ 114.178875][ T7591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.240997][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.332832][ T7607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1429'. [ 114.343986][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'. [ 114.350952][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.364899][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.375212][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.383731][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.863195][ T7614] loop2: detected capacity change from 0 to 512 [ 114.882050][ T7614] EXT4-fs (loop2): too many log groups per flexible block group [ 114.890129][ T7614] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 114.915742][ T7614] EXT4-fs (loop2): mount failed [ 114.954899][ T7618] loop1: detected capacity change from 0 to 512 [ 114.982836][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.999231][ T7624] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1437'. [ 115.009842][ T7618] EXT4-fs (loop1): too many log groups per flexible block group [ 115.020871][ T7618] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 115.036598][ T7618] EXT4-fs (loop1): mount failed [ 115.056820][ T7630] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 115.063834][ T7630] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 115.071986][ T7630] vhci_hcd vhci_hcd.0: Device attached [ 115.149693][ T7648] netlink: 44 bytes leftover after parsing attributes in process `\'. [ 115.204425][ T7642] loop2: detected capacity change from 0 to 8192 [ 115.220692][ T7649] loop3: detected capacity change from 0 to 1024 [ 115.228658][ T7649] EXT4-fs: Ignoring removed orlov option [ 115.238105][ T7649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.261553][ T7642] loop2: p1 p2 p3 p4 [ 115.272235][ T7642] loop2: p1 start 51379968 is beyond EOD, truncated [ 115.296953][ T7642] loop2: p3 size 100663552 extends beyond EOD, truncated [ 115.315158][ T7642] loop2: p4 size 81920 extends beyond EOD, truncated [ 115.350368][ T8] usb 2-1: SetAddress Request (2) to port 0 [ 115.357301][ T8] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 115.384549][ T7660] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1449'. [ 115.416746][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.425823][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.553677][ T7674] loop2: detected capacity change from 0 to 128 [ 115.573207][ T7674] EXT4-fs: Ignoring removed nobh option [ 115.581834][ T7674] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.594724][ T7674] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.867318][ T7633] vhci_hcd: connection reset by peer [ 115.874770][ T318] vhci_hcd: stop threads [ 115.879629][ T318] vhci_hcd: release socket [ 115.884994][ T318] vhci_hcd: disconnect device [ 115.987382][ T7681] loop5: detected capacity change from 0 to 7 [ 116.007254][ T7681] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.017439][ T7681] Buffer I/O error on dev loop5, logical block 0, async page read [ 116.025523][ T7681] loop5: unable to read partition table [ 116.031779][ T7681] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 116.031779][ T7681] ) failed (rc=-5) [ 116.059023][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.102415][ T7686] bpf_get_probe_write_proto: 11 callbacks suppressed [ 116.102488][ T7686] syz.3.1458[7686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.109733][ T7686] syz.3.1458[7686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.123555][ T7686] syz.3.1458[7686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.140057][ T7686] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 116.220146][ T7691] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1461'. [ 116.288981][ T7693] netlink: 'syz.3.1462': attribute type 153 has an invalid length. [ 116.354423][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 116.354438][ T29] audit: type=1400 audit(1736948575.184:5701): avc: denied { listen } for pid=7694 comm="syz.1.1463" laddr=::ffff:172.20.20.187 lport=47123 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.357172][ T7693] loop3: detected capacity change from 0 to 2048 [ 116.362312][ T29] audit: type=1400 audit(1736948575.194:5702): avc: denied { accept } for pid=7694 comm="syz.1.1463" laddr=::ffff:172.20.20.187 lport=47123 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.474889][ T7693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.479502][ T7703] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.496657][ T29] audit: type=1400 audit(1736948575.264:5703): avc: denied { read } for pid=7694 comm="syz.1.1463" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.523590][ T29] audit: type=1400 audit(1736948575.264:5704): avc: denied { open } for pid=7694 comm="syz.1.1463" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.587689][ T29] audit: type=1400 audit(1736948575.414:5705): avc: denied { setopt } for pid=7692 comm="syz.3.1462" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.632106][ T7709] loop4: detected capacity change from 0 to 164 [ 116.644153][ T29] audit: type=1326 audit(1736948575.464:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 116.669780][ T29] audit: type=1326 audit(1736948575.464:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 116.696296][ T29] audit: type=1326 audit(1736948575.464:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 116.721018][ T29] audit: type=1326 audit(1736948575.464:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 116.746560][ T29] audit: type=1326 audit(1736948575.464:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 116.844703][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.900533][ T1038] usb 7-1: enqueue for inactive port 0 [ 116.917752][ T1038] usb 7-1: enqueue for inactive port 0 [ 116.927669][ T7711] hub 1-0:1.0: USB hub found [ 116.935790][ T7711] hub 1-0:1.0: 8 ports detected [ 116.983848][ T7723] loop3: detected capacity change from 0 to 512 [ 116.991492][ T7723] EXT4-fs: Ignoring removed i_version option [ 116.998167][ T7723] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.000486][ T1038] vhci_hcd: vhci_device speed not set [ 117.007251][ T7723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.026758][ T7723] EXT4-fs (loop3): 1 truncate cleaned up [ 117.038376][ T7723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.105039][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.415044][ T7734] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.428601][ T7734] loop4: detected capacity change from 0 to 1024 [ 117.466356][ T7734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.579330][ T7747] loop4: detected capacity change from 0 to 164 [ 117.643443][ T7749] loop1: detected capacity change from 0 to 128 [ 117.645962][ T7752] loop3: detected capacity change from 0 to 128 [ 117.650456][ T7749] EXT4-fs: Ignoring removed nobh option [ 117.715861][ T7752] EXT4-fs: Ignoring removed nobh option [ 117.733329][ T7749] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.816426][ T7752] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.958939][ T7765] loop4: detected capacity change from 0 to 512 [ 118.026591][ T7765] EXT4-fs (loop4): too many log groups per flexible block group [ 118.034866][ T7765] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 118.090437][ T7765] EXT4-fs (loop4): mount failed [ 118.143047][ T7773] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.157095][ T7773] loop4: detected capacity change from 0 to 1024 [ 118.221505][ T7778] syz.0.1492[7778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.221561][ T7778] syz.0.1492[7778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.254660][ T7778] syz.0.1492[7778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.343976][ T7775] syz2: rxe_newlink: already configured on veth0_to_bond [ 118.406450][ T7782] __nla_validate_parse: 1 callbacks suppressed [ 118.406470][ T7782] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1495'. [ 118.452041][ T7782] batadv1: entered promiscuous mode [ 118.457453][ T7782] batadv1: entered allmulticast mode [ 118.570554][ T7785] netlink: 'syz.4.1495': attribute type 1 has an invalid length. [ 118.859684][ T7801] loop3: detected capacity change from 0 to 512 [ 118.878308][ T7801] EXT4-fs: Ignoring removed i_version option [ 118.885292][ T7801] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.927546][ T7801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.963954][ T7801] EXT4-fs (loop3): 1 truncate cleaned up [ 118.976057][ T7807] loop1: detected capacity change from 0 to 164 [ 119.045512][ T7813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.074513][ T7815] syz.0.1507[7815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.074574][ T7815] syz.0.1507[7815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.089687][ T7815] syz.0.1507[7815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.120165][ T7815] syz2: rxe_newlink: already configured on veth0_to_bond [ 119.183971][ T7813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.222078][ T7820] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.243695][ T7826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.283982][ T7813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.295749][ T7839] loop4: detected capacity change from 0 to 128 [ 119.327977][ T7839] EXT4-fs: Ignoring removed nobh option [ 119.339375][ T7826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.349850][ T7839] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.396433][ T7813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.435955][ T7826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.487687][ T7813] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.525914][ T7813] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.552818][ T7826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.574154][ T7813] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.588974][ T7813] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.632928][ T7826] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.660885][ T7858] loop2: detected capacity change from 0 to 8192 [ 119.682688][ T7826] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.712172][ T7826] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.718311][ T7860] Illegal XDP return value 4279129040 on prog (id 1307) dev N/A, expect packet loss! [ 119.739227][ T7826] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.989061][ T7872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1526'. [ 120.014674][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 120.035194][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.081412][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.420399][ T8] usb 2-1: device descriptor read/8, error -110 [ 120.540370][ T8] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 120.570589][ T8] usb 2-1: enqueue for inactive port 0 [ 120.579475][ T8] usb 2-1: enqueue for inactive port 0 [ 120.595320][ T8] usb 2-1: enqueue for inactive port 0 [ 120.636815][ T7886] loop1: detected capacity change from 0 to 512 [ 120.665703][ T7888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1530'. [ 120.701274][ T7886] EXT4-fs (loop1): too many log groups per flexible block group [ 120.711105][ T7886] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 120.740945][ T7895] loop3: detected capacity change from 0 to 164 [ 120.758756][ T7886] EXT4-fs (loop1): mount failed [ 120.969076][ T7913] loop2: detected capacity change from 0 to 1024 [ 120.991858][ T7913] EXT4-fs: Ignoring removed orlov option [ 121.093663][ T7933] loop1: detected capacity change from 0 to 512 [ 121.136876][ T7941] loop4: detected capacity change from 0 to 512 [ 121.145825][ T7941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.173554][ T7933] EXT4-fs (loop1): too many log groups per flexible block group [ 121.176331][ T7941] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.181621][ T7933] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 121.198891][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 121.209542][ T7933] EXT4-fs (loop1): mount failed [ 121.211972][ T7952] syz.0.1553[7952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.215365][ T7952] syz.0.1553[7952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.228308][ T7952] syz.0.1553[7952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.245919][ T7952] syz2: rxe_newlink: already configured on veth0_to_bond [ 121.426994][ T7967] loop4: detected capacity change from 0 to 8192 [ 121.640881][ T8] usb usb2-port1: attempt power cycle [ 121.693523][ T7981] loop1: detected capacity change from 0 to 8192 [ 121.967630][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 121.967664][ T29] audit: type=1326 audit(1736948580.794:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 121.999188][ T29] audit: type=1326 audit(1736948580.794:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 122.037141][ T7987] netlink: 44 bytes leftover after parsing attributes in process `\'. [ 122.048332][ T7989] sd 0:0:1:0: device reset [ 122.048705][ T29] audit: type=1326 audit(1736948580.874:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 122.077959][ T29] audit: type=1326 audit(1736948580.874:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 122.103093][ T29] audit: type=1326 audit(1736948580.874:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 122.127084][ T29] audit: type=1326 audit(1736948580.874:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 122.151734][ T29] audit: type=1326 audit(1736948580.874:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 122.176046][ T29] audit: type=1326 audit(1736948580.874:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f991e924690 code=0x7ffc0000 [ 122.201697][ T29] audit: type=1326 audit(1736948580.874:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 122.227574][ T29] audit: type=1326 audit(1736948580.874:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 122.417956][ T7998] loop3: detected capacity change from 0 to 512 [ 122.441728][ T7998] EXT4-fs: Ignoring removed i_version option [ 122.448390][ T7998] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.470911][ T7998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.490768][ T7987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.499323][ T7987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.517562][ T7998] EXT4-fs (loop3): 1 truncate cleaned up [ 122.558520][ T8001] loop4: detected capacity change from 0 to 1024 [ 122.625946][ T8007] syz.4.1571[8007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.626102][ T8007] syz.4.1571[8007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.658452][ T8007] syz.4.1571[8007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.682808][ T8007] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 122.757818][ T8012] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.806007][ T8019] sd 0:0:1:0: device reset [ 122.814242][ T8012] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.891910][ T8012] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.931518][ T8029] loop1: detected capacity change from 0 to 512 [ 122.939255][ T8029] EXT4-fs: Ignoring removed i_version option [ 122.945698][ T8029] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.954680][ T8029] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.955295][ T8012] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.975583][ T8029] EXT4-fs (loop1): 1 truncate cleaned up [ 122.982059][ T8031] loop4: detected capacity change from 0 to 1024 [ 123.064125][ T8012] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.082691][ T8012] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.096216][ T8012] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.122434][ T8012] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.154448][ T8047] syz.4.1587[8047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.154514][ T8047] syz.4.1587[8047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.182805][ T8047] syz.4.1587[8047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.223900][ T8051] sd 0:0:1:0: device reset [ 123.238772][ T8047] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 123.319148][ T8058] loop1: detected capacity change from 0 to 512 [ 123.337288][ T8062] loop4: detected capacity change from 0 to 1024 [ 123.347262][ T8058] EXT4-fs: Ignoring removed i_version option [ 123.351752][ T8062] EXT4-fs: Ignoring removed orlov option [ 123.353605][ T8058] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.369830][ T8058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.374367][ T8066] loop3: detected capacity change from 0 to 164 [ 123.393896][ T8058] EXT4-fs (loop1): 1 truncate cleaned up [ 123.403211][ T8064] loop2: detected capacity change from 0 to 1024 [ 123.628548][ T8094] sd 0:0:1:0: device reset [ 123.728412][ T8079] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1600' sets config #1 [ 123.740654][ T8] usb usb2-port1: unable to enumerate USB device [ 123.750923][ T8102] loop1: detected capacity change from 0 to 512 [ 123.757778][ T8102] EXT4-fs: Ignoring removed i_version option [ 123.764171][ T8102] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.784404][ T8102] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.798739][ T8102] EXT4-fs (loop1): 1 truncate cleaned up [ 124.008446][ T8127] loop1: detected capacity change from 0 to 1024 [ 124.035161][ T8127] EXT4-fs: Ignoring removed orlov option [ 124.055088][ T8129] sd 0:0:1:0: device reset [ 124.492512][ T8138] loop3: detected capacity change from 0 to 8192 [ 124.570768][ T8138] loop3: p1 p2 p3 p4 [ 124.575910][ T8138] loop3: p1 start 51379968 is beyond EOD, truncated [ 124.603253][ T8138] loop3: p3 size 100663552 extends beyond EOD, truncated [ 124.626576][ T8138] loop3: p4 size 81920 extends beyond EOD, truncated [ 124.695043][ T8142] loop2: detected capacity change from 0 to 8192 [ 124.882692][ T8159] sd 0:0:1:0: device reset [ 124.993993][ T8167] loop4: detected capacity change from 0 to 1024 [ 125.061687][ T8171] loop3: detected capacity change from 0 to 8192 [ 125.239891][ T8178] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1630' sets config #1 [ 125.749808][ T8188] loop2: detected capacity change from 0 to 8192 [ 125.816785][ T8188] loop2: p1 p2 p3 p4 [ 125.824432][ T8188] loop2: p1 start 51379968 is beyond EOD, truncated [ 125.868276][ T8188] loop2: p3 size 100663552 extends beyond EOD, truncated [ 125.877373][ T8188] loop2: p4 size 81920 extends beyond EOD, truncated [ 126.017311][ T8205] sd 0:0:1:0: device reset [ 126.055172][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1642'. [ 126.066799][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 126.088459][ T8212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.099244][ T8212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.116107][ T8214] loop1: detected capacity change from 0 to 512 [ 126.166987][ T8216] syz.3.1643[8216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.170374][ T8216] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 126.191719][ T8214] EXT4-fs (loop1): too many log groups per flexible block group [ 126.199920][ T8214] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 126.207977][ T8214] EXT4-fs (loop1): mount failed [ 126.332861][ T8240] sd 0:0:1:0: device reset [ 126.381763][ T8238] loop1: detected capacity change from 0 to 8192 [ 126.391054][ T8247] loop3: detected capacity change from 0 to 164 [ 126.518179][ T8260] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1651' sets config #1 [ 126.534395][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1661'. [ 126.650620][ T8274] sd 0:0:1:0: device reset [ 126.776415][ T8290] loop4: detected capacity change from 0 to 164 [ 126.971353][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 126.971372][ T29] audit: type=1326 audit(1736948585.804:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 127.005779][ T29] audit: type=1326 audit(1736948585.804:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 127.033181][ T29] audit: type=1326 audit(1736948585.864:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 127.058240][ T29] audit: type=1326 audit(1736948585.864:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 127.086345][ T29] audit: type=1326 audit(1736948585.914:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 127.111044][ T29] audit: type=1326 audit(1736948585.914:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f991e924690 code=0x7ffc0000 [ 127.126591][ T8306] sd 0:0:1:0: device reset [ 127.136061][ T29] audit: type=1326 audit(1736948585.914:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 127.165995][ T29] audit: type=1326 audit(1736948585.954:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 127.190228][ T29] audit: type=1326 audit(1736948585.954:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 127.217220][ T29] audit: type=1326 audit(1736948585.954:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 127.295311][ T8313] bpf_get_probe_write_proto: 2 callbacks suppressed [ 127.295332][ T8313] syz.2.1682[8313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.310994][ T8313] syz.2.1682[8313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.334859][ T8313] syz.2.1682[8313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.355138][ T8313] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 127.477782][ T8330] loop3: detected capacity change from 0 to 512 [ 127.495284][ T8338] sd 0:0:1:0: device reset [ 127.528374][ T8330] EXT4-fs (loop3): too many log groups per flexible block group [ 127.536487][ T8330] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 127.552192][ T8330] EXT4-fs (loop3): mount failed [ 127.760351][ T8341] usb usb1: usbfs: process 8341 (syz.0.1694) did not claim interface 0 before use [ 127.805400][ T8376] sd 0:0:1:0: device reset [ 127.808678][ T8365] loop2: detected capacity change from 0 to 8192 [ 127.870943][ T8374] loop4: detected capacity change from 0 to 8192 [ 127.901242][ T8374] loop4: p1 p2 p3 p4 [ 127.908890][ T8374] loop4: p1 start 51379968 is beyond EOD, truncated [ 127.921307][ T8374] loop4: p3 size 100663552 extends beyond EOD, truncated [ 127.930401][ T8374] loop4: p4 size 81920 extends beyond EOD, truncated [ 127.957458][ T8384] loop3: detected capacity change from 0 to 8192 [ 128.236605][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1717'. [ 128.246228][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 128.256227][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.264909][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.428191][ T8415] loop1: detected capacity change from 0 to 8192 [ 128.471910][ T8415] loop1: p1 p2 p3 p4 [ 128.486543][ T8415] loop1: p1 start 51379968 is beyond EOD, truncated [ 128.511084][ T8415] loop1: p3 size 100663552 extends beyond EOD, truncated [ 128.535894][ T8415] loop1: p4 size 81920 extends beyond EOD, truncated [ 128.623300][ T8425] syz.0.1725[8425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.623384][ T8425] syz.0.1725[8425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.637578][ T8425] syz.0.1725[8425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.659919][ T8425] syz2: rxe_newlink: already configured on veth0_to_bond [ 128.856973][ T8440] loop4: detected capacity change from 0 to 1024 [ 128.894911][ T8440] EXT4-fs mount: 36 callbacks suppressed [ 128.894968][ T8440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.947507][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.009166][ T8455] loop2: detected capacity change from 0 to 512 [ 129.037768][ T8455] EXT4-fs (loop2): too many log groups per flexible block group [ 129.045785][ T8455] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 129.055865][ T8455] EXT4-fs (loop2): mount failed [ 129.131149][ T8469] loop3: detected capacity change from 0 to 8192 [ 129.139342][ T8474] loop1: detected capacity change from 0 to 164 [ 129.313652][ T8499] loop1: detected capacity change from 0 to 512 [ 129.336809][ T8499] EXT4-fs (loop1): too many log groups per flexible block group [ 129.345255][ T8499] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 129.347097][ T8494] loop2: detected capacity change from 0 to 1024 [ 129.366488][ T8499] EXT4-fs (loop1): mount failed [ 129.378945][ T8494] EXT4-fs: Ignoring removed orlov option [ 129.439295][ T8494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.463000][ T8514] loop1: detected capacity change from 0 to 1024 [ 129.493044][ T8522] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.497672][ T8514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.544049][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.559260][ T8522] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.581234][ T8525] netlink: 8 bytes leftover after parsing attributes in process `\'. [ 129.601364][ T8527] loop1: detected capacity change from 0 to 164 [ 129.602063][ T8522] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.666208][ T8522] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.730609][ T8522] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.743227][ T8522] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.757812][ T8522] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.769968][ T8522] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.848035][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.859484][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.914538][ T8546] sd 0:0:1:0: device reset [ 129.975356][ T8550] loop1: detected capacity change from 0 to 1024 [ 129.992289][ T8550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.044765][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.135282][ T8563] loop3: detected capacity change from 0 to 128 [ 130.142953][ T8563] EXT4-fs: Ignoring removed nobh option [ 130.153199][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 130.201222][ T8563] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.244241][ T8563] ext4 filesystem being mounted at /350/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.422462][ T8579] sd 0:0:1:0: device reset [ 130.441830][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.531843][ T8585] loop4: detected capacity change from 0 to 1024 [ 130.571630][ T8585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.598243][ T8584] loop1: detected capacity change from 0 to 8192 [ 130.647833][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.687998][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'. [ 130.718895][ T8601] loop2: detected capacity change from 0 to 512 [ 130.766890][ T8601] EXT4-fs (loop2): too many log groups per flexible block group [ 130.775311][ T8601] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 130.790677][ T8601] EXT4-fs (loop2): mount failed [ 131.012733][ T8614] netlink: 8 bytes leftover after parsing attributes in process `\'. [ 131.083437][ T8616] loop2: detected capacity change from 0 to 8192 [ 131.141310][ T8616] loop2: p1 p2 p3 p4 [ 131.145664][ T8616] loop2: p1 start 51379968 is beyond EOD, truncated [ 131.154419][ T8616] loop2: p3 size 100663552 extends beyond EOD, truncated [ 131.164096][ T8616] loop2: p4 size 81920 extends beyond EOD, truncated [ 131.263326][ T8622] sd 0:0:1:0: device reset [ 131.292209][ T8613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.304397][ T8613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.408817][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1801'. [ 131.507246][ T8639] loop2: detected capacity change from 0 to 512 [ 131.561800][ T8639] EXT4-fs (loop2): too many log groups per flexible block group [ 131.569636][ T8639] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 131.590389][ T8639] EXT4-fs (loop2): mount failed [ 131.702783][ T8649] sd 0:0:1:0: device reset [ 131.738348][ T8646] loop2: detected capacity change from 0 to 8192 [ 131.846530][ T8661] loop5: detected capacity change from 0 to 7 [ 131.859140][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 131.898421][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 131.906723][ T8661] loop5: unable to read partition table [ 131.920942][ T8661] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 131.920942][ T8661] ) failed (rc=-5) [ 131.924470][ T8666] loop1: detected capacity change from 0 to 164 [ 131.976459][ T8664] loop4: detected capacity change from 0 to 8192 [ 132.020679][ T8664] loop4: p1 p2 p3 p4 [ 132.025212][ T8664] loop4: p1 start 51379968 is beyond EOD, truncated [ 132.035259][ T8664] loop4: p3 size 100663552 extends beyond EOD, truncated [ 132.051163][ T8664] loop4: p4 size 81920 extends beyond EOD, truncated [ 132.233691][ T8671] hub 1-0:1.0: USB hub found [ 132.245855][ T8671] hub 1-0:1.0: 8 ports detected [ 132.328182][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 132.328198][ T29] audit: type=1326 audit(1736948591.154:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 132.365166][ T29] audit: type=1326 audit(1736948591.204:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 132.392256][ T29] audit: type=1326 audit(1736948591.204:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 132.419639][ T29] audit: type=1326 audit(1736948591.204:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 132.449542][ T29] audit: type=1326 audit(1736948591.204:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 132.555583][ T29] audit: type=1326 audit(1736948591.374:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 132.580329][ T29] audit: type=1326 audit(1736948591.374:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 132.611721][ T29] audit: type=1326 audit(1736948591.414:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 132.637002][ T29] audit: type=1326 audit(1736948591.414:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 132.664304][ T29] audit: type=1326 audit(1736948591.414:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.4.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac42595d29 code=0x7ffc0000 [ 132.816485][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.844001][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1822'. [ 133.195332][ T8719] usb usb1: usbfs: process 8719 (syz.1.1838) did not claim interface 0 before use [ 133.201703][ T8725] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1834'. [ 133.259338][ T8723] loop3: detected capacity change from 0 to 8192 [ 133.269615][ T8733] loop4: detected capacity change from 0 to 512 [ 133.312853][ T8733] EXT4-fs (loop4): too many log groups per flexible block group [ 133.321221][ T8733] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 133.338658][ T8733] EXT4-fs (loop4): mount failed [ 133.524981][ T8755] loop4: detected capacity change from 0 to 164 [ 133.539103][ T8741] hub 1-0:1.0: USB hub found [ 133.544045][ T8741] hub 1-0:1.0: 8 ports detected [ 133.697759][ T8765] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1848'. [ 133.815712][ T8771] loop4: detected capacity change from 0 to 128 [ 133.827475][ T8772] loop2: detected capacity change from 0 to 512 [ 133.862434][ T8772] EXT4-fs (loop2): too many log groups per flexible block group [ 133.871199][ T8772] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 133.880569][ T8771] EXT4-fs: Ignoring removed nobh option [ 133.914305][ T8772] EXT4-fs (loop2): mount failed [ 133.942466][ T8782] loop1: detected capacity change from 0 to 164 [ 133.961027][ T8771] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.976203][ T8771] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.034178][ T8789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1857'. [ 134.044147][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 134.057540][ T8789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.077827][ T8789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.160034][ T8794] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1859'. [ 134.324430][ T8802] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.485024][ T8814] loop3: detected capacity change from 0 to 164 [ 134.550768][ T8815] hub 1-0:1.0: USB hub found [ 134.561190][ T8815] hub 1-0:1.0: 8 ports detected [ 134.680380][ T8823] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1870'. [ 135.310705][ T8857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1885'. [ 135.528527][ T8875] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.571053][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.694982][ T8893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1898'. [ 135.738048][ T8889] loop4: detected capacity change from 0 to 8192 [ 135.792830][ T8898] sd 0:0:1:0: device reset [ 135.995316][ T8926] loop2: detected capacity change from 0 to 1024 [ 136.026954][ T8926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.085766][ T8935] loop1: detected capacity change from 0 to 512 [ 136.182053][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.283360][ T8935] EXT4-fs (loop1): too many log groups per flexible block group [ 136.291544][ T8935] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 136.326083][ T8935] EXT4-fs (loop1): mount failed [ 136.461014][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.469879][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.973486][ T8972] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.989539][ T8975] loop4: detected capacity change from 0 to 128 [ 137.000608][ T8967] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.008569][ T8973] loop3: detected capacity change from 0 to 1024 [ 137.012488][ T8975] EXT4-fs: Ignoring removed nobh option [ 137.020692][ T8973] EXT4-fs: Ignoring removed orlov option [ 137.043704][ T8972] loop2: detected capacity change from 0 to 1024 [ 137.055978][ T8973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.070263][ T8975] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.092210][ T8967] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.104031][ T8972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.182185][ T8967] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.205327][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.215879][ T8975] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.282445][ T8967] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.356845][ T8967] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.383633][ T8967] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.411796][ T8967] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.425560][ T9003] sd 0:0:1:0: device reset [ 137.434859][ T9000] loop2: detected capacity change from 0 to 512 [ 137.461880][ T8967] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.492521][ T9000] EXT4-fs (loop2): too many log groups per flexible block group [ 137.500389][ T9000] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 137.510396][ T9000] EXT4-fs (loop2): mount failed [ 137.561771][ T9008] loop1: detected capacity change from 0 to 128 [ 137.580612][ T9008] EXT4-fs: Ignoring removed nobh option [ 137.664320][ T9008] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.743605][ T9008] ext4 filesystem being mounted at /418/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.863257][ T9018] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.883839][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.958244][ T9027] loop2: detected capacity change from 0 to 512 [ 137.980911][ T9027] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.995009][ T9032] loop3: detected capacity change from 0 to 164 [ 138.032826][ T9027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.047360][ T9027] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.051087][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 138.051106][ T29] audit: type=1326 audit(1736948596.884:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9037 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 138.102999][ T9027] __nla_validate_parse: 3 callbacks suppressed [ 138.103016][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'. [ 138.120347][ T9038] sd 0:0:1:0: device reset [ 138.155531][ T29] audit: type=1326 audit(1736948596.924:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9037 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 138.179668][ T29] audit: type=1326 audit(1736948596.934:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9037 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 138.205197][ T29] audit: type=1326 audit(1736948596.934:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9037 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 138.229753][ T29] audit: type=1326 audit(1736948596.934:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9037 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 138.253859][ T29] audit: type=1326 audit(1736948596.934:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9037 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2daf654690 code=0x7ffc0000 [ 138.278178][ T29] audit: type=1326 audit(1736948596.934:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9037 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 138.304111][ T29] audit: type=1326 audit(1736948596.934:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9037 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 138.329632][ T29] audit: type=1326 audit(1736948596.934:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9037 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 138.355736][ T29] audit: type=1326 audit(1736948596.934:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9037 comm="syz.0.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2daf655d29 code=0x7ffc0000 [ 138.391121][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.443631][ T9050] loop3: detected capacity change from 0 to 1024 [ 138.451321][ T9050] EXT4-fs: Ignoring removed orlov option [ 138.464203][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.493436][ T9050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.545758][ T9060] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.590648][ T9060] loop2: detected capacity change from 0 to 1024 [ 138.620474][ T9060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.736365][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.918915][ T9070] hub 1-0:1.0: USB hub found [ 138.924348][ T9070] hub 1-0:1.0: 8 ports detected [ 139.195594][ T9099] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.225601][ T9101] loop4: detected capacity change from 0 to 1024 [ 139.240585][ T9101] EXT4-fs: Ignoring removed orlov option [ 139.240930][ T9099] loop2: detected capacity change from 0 to 1024 [ 139.283029][ T9099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.326227][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.337979][ T9101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.356450][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.742876][ T9129] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.795053][ T9133] loop3: detected capacity change from 0 to 128 [ 139.816754][ T9129] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.863494][ T9133] EXT4-fs: Ignoring removed nobh option [ 139.903196][ T9129] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.922197][ T9133] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.943128][ T9133] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.981798][ T9129] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.196082][ T9146] loop2: detected capacity change from 0 to 512 [ 140.242888][ T9146] EXT4-fs (loop2): too many log groups per flexible block group [ 140.250642][ T9146] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 140.264144][ T9146] EXT4-fs (loop2): mount failed [ 140.314957][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.591334][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.758838][ T9164] hub 1-0:1.0: USB hub found [ 140.777517][ T9164] hub 1-0:1.0: 8 ports detected [ 141.029951][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.095448][ T9204] loop4: detected capacity change from 0 to 512 [ 141.122300][ T9204] EXT4-fs (loop4): too many log groups per flexible block group [ 141.130465][ T9204] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 141.138484][ T9204] EXT4-fs (loop4): mount failed [ 141.155722][ T9129] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.169536][ T9129] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.182293][ T9210] loop1: detected capacity change from 0 to 164 [ 141.186543][ T9129] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.210034][ T9129] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.327654][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2018'. [ 141.466608][ T9244] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.491783][ T9244] loop4: detected capacity change from 0 to 1024 [ 141.518873][ T9244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.568093][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.607799][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2034'. [ 141.834456][ T9282] hub 1-0:1.0: USB hub found [ 141.844805][ T9282] hub 1-0:1.0: 8 ports detected [ 141.853445][ T9285] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.867400][ T9285] loop2: detected capacity change from 0 to 1024 [ 141.893609][ T9285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.919265][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.931064][ T9291] loop4: detected capacity change from 0 to 164 [ 141.979496][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 142.072017][ T9305] loop2: detected capacity change from 0 to 164 [ 142.128566][ T9310] loop4: detected capacity change from 0 to 8192 [ 142.170724][ T9313] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.279307][ T9321] loop2: detected capacity change from 0 to 8192 [ 142.291167][ T9328] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2060' sets config #0 [ 142.336736][ T9331] loop3: detected capacity change from 0 to 164 [ 142.364456][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2063'. [ 142.573180][ T9351] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.585396][ T9351] loop3: detected capacity change from 0 to 1024 [ 142.621046][ T9351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.670166][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.704955][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2074'. [ 142.965743][ T9385] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.978531][ T9385] loop3: detected capacity change from 0 to 1024 [ 143.008701][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'. [ 143.021677][ T9385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.105497][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.164698][ T9403] loop3: detected capacity change from 0 to 512 [ 143.194694][ T9403] EXT4-fs (loop3): too many log groups per flexible block group [ 143.202894][ T9403] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 143.218013][ T9403] EXT4-fs (loop3): mount failed [ 143.401537][ T9421] loop1: detected capacity change from 0 to 164 [ 143.501461][ T9431] loop4: detected capacity change from 0 to 8192 [ 143.509324][ T9427] loop3: detected capacity change from 0 to 8192 [ 143.618792][ T9445] loop2: detected capacity change from 0 to 512 [ 143.652453][ T9445] EXT4-fs (loop2): too many log groups per flexible block group [ 143.660612][ T9445] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 143.670602][ T9445] EXT4-fs (loop2): mount failed [ 144.199509][ T9488] loop2: detected capacity change from 0 to 512 [ 144.236725][ T9488] EXT4-fs (loop2): too many log groups per flexible block group [ 144.244893][ T9488] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 144.254716][ T9488] EXT4-fs (loop2): mount failed [ 144.351717][ T9498] hub 1-0:1.0: USB hub found [ 144.357120][ T9498] hub 1-0:1.0: 8 ports detected [ 144.376772][ T9505] loop2: detected capacity change from 0 to 1024 [ 144.383870][ T9505] EXT4-fs: Ignoring removed orlov option [ 144.394729][ T9505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.507370][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 144.507385][ T29] audit: type=1326 audit(1736948603.334:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 144.539142][ T29] audit: type=1326 audit(1736948603.354:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 144.563528][ T29] audit: type=1326 audit(1736948603.374:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 144.588318][ T29] audit: type=1326 audit(1736948603.374:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 144.612812][ T29] audit: type=1326 audit(1736948603.374:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 144.636532][ T29] audit: type=1326 audit(1736948603.374:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 144.675228][ T29] audit: type=1326 audit(1736948603.504:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 144.714855][ T29] audit: type=1326 audit(1736948603.504:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 144.739263][ T29] audit: type=1326 audit(1736948603.504:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 144.763194][ T29] audit: type=1326 audit(1736948603.504:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.3.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 145.387050][ T9558] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2143'. [ 145.402120][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'. [ 145.415404][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.418711][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.451512][ T9550] hub 1-0:1.0: USB hub found [ 145.456419][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.467579][ T9550] hub 1-0:1.0: 8 ports detected [ 146.137268][ T9597] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 146.162492][ T9597] loop1: detected capacity change from 0 to 1024 [ 146.228755][ T9597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.313016][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.360992][ T9611] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2165'. [ 146.395965][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 146.408203][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.418225][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.455978][ T9614] loop4: detected capacity change from 0 to 512 [ 146.517498][ T9614] EXT4-fs (loop4): too many log groups per flexible block group [ 146.525301][ T9614] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 146.533365][ T9614] EXT4-fs (loop4): mount failed [ 146.850232][ T9639] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 146.885336][ T9639] loop2: detected capacity change from 0 to 1024 [ 146.921637][ T9628] hub 1-0:1.0: USB hub found [ 146.938976][ T9628] hub 1-0:1.0: 8 ports detected [ 147.013171][ T9639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.037501][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.079035][ T9652] loop3: detected capacity change from 0 to 512 [ 147.111597][ T9652] EXT4-fs (loop3): too many log groups per flexible block group [ 147.119345][ T9652] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 147.165154][ T9652] EXT4-fs (loop3): mount failed [ 147.201131][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2185'. [ 147.249220][ T9664] loop1: detected capacity change from 0 to 1024 [ 147.260126][ T9664] EXT4-fs: Ignoring removed orlov option [ 147.301396][ T9664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.356075][ T9677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2188'. [ 147.366100][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2188'. [ 147.377482][ T9677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.388131][ T9677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.742902][ T9697] hub 1-0:1.0: USB hub found [ 147.747663][ T9697] hub 1-0:1.0: 8 ports detected [ 147.976643][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2197'. [ 148.058874][ T9712] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.073630][ T9712] loop4: detected capacity change from 0 to 1024 [ 148.094591][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.111516][ T9712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.143240][ T9723] loop2: detected capacity change from 0 to 512 [ 148.161306][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.171188][ T9723] EXT4-fs (loop2): too many log groups per flexible block group [ 148.179257][ T9723] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 148.186589][ T9723] EXT4-fs (loop2): mount failed [ 148.207470][ T9729] hub 1-0:1.0: USB hub found [ 148.214865][ T9729] hub 1-0:1.0: 8 ports detected [ 148.285591][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2211'. [ 148.338245][ T9748] loop3: detected capacity change from 0 to 1024 [ 148.348204][ T9748] EXT4-fs: Ignoring removed orlov option [ 148.363523][ T9748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.370794][ T9743] loop4: detected capacity change from 0 to 8192 [ 148.708155][ T9780] hub 1-0:1.0: USB hub found [ 148.713339][ T9780] hub 1-0:1.0: 8 ports detected [ 148.734684][ T9762] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2228' sets config #1 [ 148.823439][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 149.190212][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.329606][ T9814] loop3: detected capacity change from 0 to 164 [ 149.348545][ T9816] loop4: detected capacity change from 0 to 164 [ 149.514256][ T9834] loop4: detected capacity change from 0 to 1024 [ 149.532204][ T9834] EXT4-fs: Ignoring removed orlov option [ 149.545143][ T9834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.726795][ T9832] hub 1-0:1.0: USB hub found [ 149.741139][ T9832] hub 1-0:1.0: 8 ports detected [ 149.779875][ T9859] loop2: detected capacity change from 0 to 164 [ 149.874752][ T9860] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2251' sets config #1 [ 149.886741][ T9862] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2253' sets config #1 [ 149.919803][ T9864] loop2: detected capacity change from 0 to 164 [ 150.031145][ T9866] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.085244][ T9866] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.143771][ T9866] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.203533][ T9866] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.251438][ T9850] ================================================================== [ 150.259664][ T9850] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 150.269182][ T9850] [ 150.271611][ T9850] read-write to 0xffff888115462138 of 4 bytes by task 9834 on cpu 1: [ 150.279701][ T9850] __writeback_single_inode+0x1f4/0x850 [ 150.285286][ T9850] writeback_single_inode+0x16c/0x3f0 [ 150.290686][ T9850] sync_inode_metadata+0x5c/0x90 [ 150.295645][ T9850] generic_buffers_fsync_noflush+0xd8/0x120 [ 150.301600][ T9850] ext4_sync_file+0x1ff/0x6c0 [ 150.306309][ T9850] vfs_fsync_range+0x116/0x130 [ 150.311159][ T9850] ext4_buffered_write_iter+0x326/0x370 [ 150.316743][ T9850] ext4_file_write_iter+0x383/0xf20 [ 150.321991][ T9850] iter_file_splice_write+0x5f1/0x980 [ 150.327393][ T9850] direct_splice_actor+0x160/0x2c0 [ 150.332541][ T9850] splice_direct_to_actor+0x302/0x670 [ 150.337953][ T9850] do_splice_direct+0xd7/0x150 [ 150.342770][ T9850] do_sendfile+0x398/0x660 [ 150.347217][ T9850] __x64_sys_sendfile64+0x110/0x150 [ 150.352433][ T9850] x64_sys_call+0xfbd/0x2dc0 [ 150.357460][ T9850] do_syscall_64+0xc9/0x1c0 [ 150.362344][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.368347][ T9850] [ 150.370678][ T9850] read to 0xffff888115462138 of 4 bytes by task 9850 on cpu 0: [ 150.378215][ T9850] generic_buffers_fsync_noflush+0x83/0x120 [ 150.384156][ T9850] ext4_sync_file+0x1ff/0x6c0 [ 150.388847][ T9850] vfs_fsync_range+0x116/0x130 [ 150.393749][ T9850] ext4_buffered_write_iter+0x326/0x370 [ 150.399405][ T9850] ext4_file_write_iter+0x383/0xf20 [ 150.404792][ T9850] iter_file_splice_write+0x5f1/0x980 [ 150.411044][ T9850] direct_splice_actor+0x160/0x2c0 [ 150.416727][ T9850] splice_direct_to_actor+0x302/0x670 [ 150.422395][ T9850] do_splice_direct+0xd7/0x150 [ 150.427207][ T9850] do_sendfile+0x398/0x660 [ 150.431631][ T9850] __x64_sys_sendfile64+0x110/0x150 [ 150.436965][ T9850] x64_sys_call+0xfbd/0x2dc0 [ 150.441578][ T9850] do_syscall_64+0xc9/0x1c0 [ 150.446126][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.452047][ T9850] [ 150.454457][ T9850] value changed: 0x00000022 -> 0x00000000 [ 150.460336][ T9850] [ 150.462785][ T9850] Reported by Kernel Concurrency Sanitizer on: [ 150.468943][ T9850] CPU: 0 UID: 0 PID: 9850 Comm: syz.4.2244 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 150.479638][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 150.490051][ T9850] ================================================================== [ 150.499984][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 150.499997][ T29] audit: type=1326 audit(1736948609.324:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 150.530996][ T29] audit: type=1326 audit(1736948609.324:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9828 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991e925d29 code=0x7ffc0000 [ 150.556926][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.578459][ T9866] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.589626][ T9866] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.601361][ T9866] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.613304][ T9866] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0