last executing test programs: 1m57.641950247s ago: executing program 1 (id=163): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") 1m57.306819289s ago: executing program 1 (id=168): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000007bf2668408cedb34375484bb351443cb000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000400100000000000040080300008d416cfa6fc2313e"], 0x48}}, 0x0) 1m57.15136451s ago: executing program 1 (id=169): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8800000000020}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1m57.10060834s ago: executing program 1 (id=171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x1) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r2 = fcntl$dupfd(r1, 0x406, r1) write$sndseq(r2, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @result={0x10, 0x3b53}}, {0x0, 0x0, 0xfd, 0x4, @tick=0xf1f, {0x6, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", ""]}, 0x20}}, 0x4000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f00000000c0)=0x2, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xfffffffc, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40d0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x4000000}, 0x0) 1m56.219311386s ago: executing program 1 (id=180): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1m41.144881592s ago: executing program 32 (id=180): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1m4.074981491s ago: executing program 4 (id=1159): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1m4.039256581s ago: executing program 4 (id=1162): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/158, 0x5b}, {0x0}], 0x3}, 0xff}], 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2c8ec2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m3.190680296s ago: executing program 4 (id=1178): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_usbip_server_init(0x4) (fail_nth: 3) 1m2.434602951s ago: executing program 4 (id=1194): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) 1m2.410569351s ago: executing program 4 (id=1197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) read$char_usb(0xffffffffffffffff, &(0x7f00000013c0)=""/4113, 0x1011) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9664e3e8e0235d3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1m2.286536812s ago: executing program 4 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x636d0a4, 0x10, 0x0, 'queue0\x00', 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r5}]}]}, 0x28}}, 0x0) mount$9p_unix(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file1\x00', &(0x7f0000000380), 0xe0000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=unix,cache=loose,audit,uid=', @ANYRESDEC=r5, @ANYBLOB="2c6d6561737572652c66736d616769633d308730303030303030303028d030303030342c6f626a5f747970653d2c61756469d969db"]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r7}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', r7, 0x7800, 0x10, 0xcaf, 0x7, {{0x9, 0x4, 0x2, 0x3, 0x24, 0x3, 0x0, 0xa, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @timestamp={0x44, 0xc, 0xb, 0x0, 0xd, [0x9, 0x6]}]}}}}}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) 47.150524629s ago: executing program 33 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x636d0a4, 0x10, 0x0, 'queue0\x00', 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r5}]}]}, 0x28}}, 0x0) mount$9p_unix(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file1\x00', &(0x7f0000000380), 0xe0000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=unix,cache=loose,audit,uid=', @ANYRESDEC=r5, @ANYBLOB="2c6d6561737572652c66736d616769633d308730303030303030303028d030303030342c6f626a5f747970653d2c61756469d969db"]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r7}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', r7, 0x7800, 0x10, 0xcaf, 0x7, {{0x9, 0x4, 0x2, 0x3, 0x24, 0x3, 0x0, 0xa, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @timestamp={0x44, 0xc, 0xb, 0x0, 0xd, [0x9, 0x6]}]}}}}}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) 31.938445066s ago: executing program 0 (id=1822): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r3 = creat(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=r4, @ANYBLOB="628e5432ee", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c95}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0xff40) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x253, &(0x7f00000006c0)={{0x12, 0x1, 0x210, 0x52, 0x7d, 0xab, 0x40, 0x93a, 0x2603, 0x8440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x241, 0x1, 0xe, 0x5, 0xa0, 0xc, [{{0x9, 0x4, 0x91, 0x1a, 0xd, 0x68, 0xd9, 0xf9, 0xff, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '$'}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x0, 0xff, 0x9}, [@country_functional={0xc, 0x24, 0x7, 0xa2, 0x9, [0x1, 0x400, 0x9]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xe, 0x100}]}], [{{0x9, 0x5, 0x4, 0x2, 0x5bf, 0x7, 0xd, 0x10, [@generic={0x1e, 0x8, "eb233d4d92160656d4fdd8f66668a83fcf6d5649761cf9d22a99bbcc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xb, 0x4f, 0x0, [@generic={0x22, 0x22, "1b7140692f5bd717630950eca52e9a0a9931de3d6c898a34f2835daebc47b6a2"}, @generic={0x7, 0x9, "c99a845364"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xa, 0xaa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x207}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x20, 0xf, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x82, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x0, 0x43, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9d}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x7f, 0xc, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x1f5cb390bd622936, 0x400, 0x2, 0x7, 0x7, [@generic={0x6f, 0x7, "e83fffb2f66f89240987dda9cf1d9e2d76fffd15ebf165c2cc0f9ff4c68bdc1195060692877652e589ed2de26b468e38b776a7bb95d35c43794ac228614c4394abe4154617d95ce70d15710aa52eba1fa172cfcef15f2971951830d841169aabf4fb17c0e845e942814d29a0c2"}, @generic={0x6, 0x10, "76a3289e"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x7, 0xe}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0x7, 0xd}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xa, 0x3a, 0x68, [@generic={0x98, 0x1, "e4887dca70831e83920c7b619fdc685403efa458556c9045486b39ad2c4cab71d5193eb206fa1baa8aab8129bf20ae8e117fa8cc5f1108234cea5731de0fe4f86b6c02a8045e7b0d65e8e6882fe3724473b8763bc03ed61195ba860ca02b436a7fdcedb66d9fdcf98a9d7cebe43deca0cd8b67b1de53bd2a5818cb1357c31aa29e5f805b737207b778b522871b29203f039419033ebc"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x8}, @generic={0x2, 0x6}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000600)={0xa0000013}) close_range(r8, r9, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050) close(r3) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x80000000, 0x3, 0xfffffffd}) fallocate(r0, 0x20, 0x0, 0x8000) 31.162494491s ago: executing program 0 (id=1831): socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x8}]}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 31.093029872s ago: executing program 0 (id=1836): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 31.073338572s ago: executing program 0 (id=1837): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) socket$kcm(0x29, 0x7, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c"], 0x65) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @dev}, &(0x7f0000000240)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x73, '\x00', r7, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r8], 0x0, 0x141, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 31.002749223s ago: executing program 0 (id=1840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = eventfd(0x0) read$eventfd(r2, &(0x7f0000000240), 0x8) writev(r2, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) 30.639692115s ago: executing program 0 (id=1842): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x78, 0x91, 0xff, r5}, [@IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x48004}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) cachestat(r1, &(0x7f0000000040)={0xfffffffffffffffc, 0x4}, &(0x7f00000001c0), 0x0) 30.639399195s ago: executing program 34 (id=1842): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x78, 0x91, 0xff, r5}, [@IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x48004}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) cachestat(r1, &(0x7f0000000040)={0xfffffffffffffffc, 0x4}, &(0x7f00000001c0), 0x0) 2.557689803s ago: executing program 2 (id=2452): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) cachestat(r0, &(0x7f0000000040)={0xfffffffffffffffc, 0x4}, &(0x7f00000001c0), 0x0) 2.502262903s ago: executing program 2 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001d40)=ANY=[]) 2.482948344s ago: executing program 2 (id=2454): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) fcntl$notify(r0, 0x402, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='kmem_cache_free\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2400c087, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xff}, 0x1c) 2.276581715s ago: executing program 7 (id=2457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c31477", 0x2d}], 0x1}, 0x20000044) 2.260304345s ago: executing program 7 (id=2458): openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x64, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x7, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000001240)={0x0, 0x8, 0x0, 'queue0\x00', 0x8}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x261f]}}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x88, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x2005}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x20000, 0x5, 0x474b}, {}, {0x0, 0x0, 0x8, 0xfffffffd}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x8}, {0x0, 0x0, 0xe604, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x5}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.880203508s ago: executing program 5 (id=2470): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 1.817451678s ago: executing program 5 (id=2471): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000a00)=ANY=[@ANYBLOB="fffffffffffffffffffffbff86dd6000000000383a00fe800000000000000007000000000008ff00000000000000000102009078000007d0608cee2b00002f00fc000000000000080000000000000001fe80000000000000000000000000aa000004000000000019e50c6c18af710900a819877785d9c1f72b477f79a414190000000000003ba2e914c75f694335baa2f9e8f103000000000000007f3adf619c3e8db22fa2a47fc4d74dd21e35b1b7e5662a8a019fd59c333b723fe4133d91778d12f8dfbaea0020a8ce5703048ca3862b81cc08d2bc22507aceffd160a0a8354fefdf3570ddad23959a3117358f4402b467e17b7c88cdc4374105007df1b8130df8af170b2309094e13c0d5c2787532ac3349d0408818d9c30a9cd7df83014926cba291b2cd91b83fc6f8a36b07691b3f7e38703dd2b1655b5e9cffcbc64ca0436a4af30367a900f5fd4cea8bb952f4a14385342ee9e34865146f446541d0308a27c32b"], 0x0) 1.790566268s ago: executing program 5 (id=2473): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r3 = creat(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=r4, @ANYBLOB="628e5432ee", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c95}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0xff40) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x253, &(0x7f00000006c0)={{0x12, 0x1, 0x210, 0x52, 0x7d, 0xab, 0x40, 0x93a, 0x2603, 0x8440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x241, 0x1, 0xe, 0x5, 0xa0, 0xc, [{{0x9, 0x4, 0x91, 0x1a, 0xd, 0x68, 0xd9, 0xf9, 0xff, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '$'}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x0, 0xff, 0x9}, [@country_functional={0xc, 0x24, 0x7, 0xa2, 0x9, [0x1, 0x400, 0x9]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xe, 0x100}]}], [{{0x9, 0x5, 0x4, 0x2, 0x5bf, 0x7, 0xd, 0x10, [@generic={0x1e, 0x8, "eb233d4d92160656d4fdd8f66668a83fcf6d5649761cf9d22a99bbcc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xb, 0x4f, 0x0, [@generic={0x22, 0x22, "1b7140692f5bd717630950eca52e9a0a9931de3d6c898a34f2835daebc47b6a2"}, @generic={0x7, 0x9, "c99a845364"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xa, 0xaa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x207}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x20, 0xf, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x82, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x0, 0x43, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9d}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x7f, 0xc, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x1f5cb390bd622936, 0x400, 0x2, 0x7, 0x7, [@generic={0x6f, 0x7, "e83fffb2f66f89240987dda9cf1d9e2d76fffd15ebf165c2cc0f9ff4c68bdc1195060692877652e589ed2de26b468e38b776a7bb95d35c43794ac228614c4394abe4154617d95ce70d15710aa52eba1fa172cfcef15f2971951830d841169aabf4fb17c0e845e942814d29a0c2"}, @generic={0x6, 0x10, "76a3289e"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x7, 0xe}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0x7, 0xd}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xa, 0x3a, 0x68, [@generic={0x98, 0x1, "e4887dca70831e83920c7b619fdc685403efa458556c9045486b39ad2c4cab71d5193eb206fa1baa8aab8129bf20ae8e117fa8cc5f1108234cea5731de0fe4f86b6c02a8045e7b0d65e8e6882fe3724473b8763bc03ed61195ba860ca02b436a7fdcedb66d9fdcf98a9d7cebe43deca0cd8b67b1de53bd2a5818cb1357c31aa29e5f805b737207b778b522871b29203f039419033ebc"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x8}, @generic={0x2, 0x6}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000600)={0xa0000013}) close_range(r8, r9, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050) close(r3) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x80000000, 0x3, 0xfffffffd}) fallocate(r0, 0x20, 0x0, 0x8000) 1.622448219s ago: executing program 2 (id=2480): unshare(0x22020000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa1000000177152224f93ca9fffffffbfa400000000000003040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x40}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x12) 1.315962051s ago: executing program 6 (id=2484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000100)=""/13, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c580"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r4, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r6, @ANYRESHEX=r6, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32=r4, @ANYRES8=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES64=r7], 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup=r8, r0, 0x38, 0x2020, r3, @void, @void, @value=r9, @void, r7}, 0x20) 1.036074823s ago: executing program 6 (id=2485): socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x8}]}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r4}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1.005720783s ago: executing program 5 (id=2486): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x2400c087, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xff}, 0x1c) 1.003179053s ago: executing program 6 (id=2487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x20000000f}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @empty}}}, 0x32) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) 943.986404ms ago: executing program 6 (id=2488): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setreuid(0xee01, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000580)=""/4096, 0x1000, 0x0, &(0x7f0000000380)=""/149, 0x95}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x0, 0xb, &(0x7f0000001640)=ANY=[@ANYRES64=r3, @ANYBLOB="eb0424323610e6c3c0660b343eecacbcc797a4335e3d58dc3d1abf39d99dde2e5e07a67671c07c5bf5fee80087c4dcdd11d6f902d58025c01e33d848198cd4c562acc5f74c2b917799b6cccc5174ad2043217cacc4144c284e7c415d221866c4ac35cdaf53a75962d79984d924ab27f079c5a16c34e37e390046b8e6c37ec2af45f4e391ee07d9ec9b84f66e2490fb4267f8fb1473952c0f29cd252e743a2a3db03eb0f3075e4bdf741b", @ANYRES32=r3, @ANYBLOB="36ee0bbc656ad93efa2a030190e2c4c3fa04b3c7798a63b4cc94af036d2aca99252f7a6826100863f76ee2524853326ae80a243752442b900b9c", @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', r3, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ptrace$peek(0x1, r0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x7ffffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@newsa={0x1d4, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7ed1, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0x40000000}, 0x70bd25, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0xaf, 0x3, {{'deflate\x00'}, 0x338, "2cb9b367a58f2e9fa62e113e6810419238bbb4451d21d27e73ca84df29a097975d903064205133d7e5fe5990821a3def633ac386d70a70c75cef5ac936b887d129389eda59e0656725bb8df2aa0472fdbed16cfa70096347cccbc337f0dcfbedf4b001e2862ee7"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffefd}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @extra_flags={0x8, 0x18, 0x6ff7e359}, @etimer_thresh={0x8, 0xc, 0x7}]}, 0x1d4}}, 0x844) 943.539873ms ago: executing program 5 (id=2489): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mlock(&(0x7f000009c000/0x4000)=nil, 0x4000) syz_open_dev$usbfs(&(0x7f0000000240), 0xfffffffffffffffe, 0x101301) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/193, 0xc1}, {&(0x7f0000000100)=""/118, 0x76}], 0x2, 0x4b2, 0x1) 897.866174ms ago: executing program 7 (id=2490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001d40)=ANY=[]) 855.832064ms ago: executing program 7 (id=2491): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) fcntl$notify(r0, 0x402, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='kmem_cache_free\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2400c087, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xff}, 0x1c) 809.756284ms ago: executing program 7 (id=2492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 783.588385ms ago: executing program 7 (id=2493): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000bbdffc)) process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/71, 0x47}, {&(0x7f0000000180)}, {&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f00000001c0)=""/19, 0x13}], 0x4, &(0x7f0000000400)=[{&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f00000004c0)=""/136, 0x88}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x4, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r2, 0x0, 0x1034}, 0x18) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008004) lseek(r1, 0x1, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 735.395525ms ago: executing program 2 (id=2494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c31477", 0x2d}], 0x1}, 0x20000044) 689.989005ms ago: executing program 2 (id=2495): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x0) 689.603965ms ago: executing program 6 (id=2496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) 679.230215ms ago: executing program 5 (id=2497): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r3 = creat(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=r4, @ANYBLOB="628e5432ee", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c95}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0xff40) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x253, &(0x7f00000006c0)={{0x12, 0x1, 0x210, 0x52, 0x7d, 0xab, 0x40, 0x93a, 0x2603, 0x8440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x241, 0x1, 0xe, 0x5, 0xa0, 0xc, [{{0x9, 0x4, 0x91, 0x1a, 0xd, 0x68, 0xd9, 0xf9, 0xff, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '$'}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x0, 0xff, 0x9}, [@country_functional={0xc, 0x24, 0x7, 0xa2, 0x9, [0x1, 0x400, 0x9]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xe, 0x100}]}], [{{0x9, 0x5, 0x4, 0x2, 0x5bf, 0x7, 0xd, 0x10, [@generic={0x1e, 0x8, "eb233d4d92160656d4fdd8f66668a83fcf6d5649761cf9d22a99bbcc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xb, 0x4f, 0x0, [@generic={0x22, 0x22, "1b7140692f5bd717630950eca52e9a0a9931de3d6c898a34f2835daebc47b6a2"}, @generic={0x7, 0x9, "c99a845364"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xa, 0xaa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x207}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x20, 0xf, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x82, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x0, 0x43, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9d}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x7f, 0xc, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x1f5cb390bd622936, 0x400, 0x2, 0x7, 0x7, [@generic={0x6f, 0x7, "e83fffb2f66f89240987dda9cf1d9e2d76fffd15ebf165c2cc0f9ff4c68bdc1195060692877652e589ed2de26b468e38b776a7bb95d35c43794ac228614c4394abe4154617d95ce70d15710aa52eba1fa172cfcef15f2971951830d841169aabf4fb17c0e845e942814d29a0c2"}, @generic={0x6, 0x10, "76a3289e"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x7, 0xe}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0x7, 0xd}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xa, 0x3a, 0x68, [@generic={0x98, 0x1, "e4887dca70831e83920c7b619fdc685403efa458556c9045486b39ad2c4cab71d5193eb206fa1baa8aab8129bf20ae8e117fa8cc5f1108234cea5731de0fe4f86b6c02a8045e7b0d65e8e6882fe3724473b8763bc03ed61195ba860ca02b436a7fdcedb66d9fdcf98a9d7cebe43deca0cd8b67b1de53bd2a5818cb1357c31aa29e5f805b737207b778b522871b29203f039419033ebc"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x8}, @generic={0x2, 0x6}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000600)={0xa0000013}) close_range(r8, r9, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050) close(r3) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x80000000, 0x3, 0xfffffffd}) fallocate(r0, 0x20, 0x0, 0x8000) 655.545355ms ago: executing program 6 (id=2498): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000bbdffc)) process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/71, 0x47}, {&(0x7f0000000180)}, {&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f00000001c0)=""/19, 0x13}], 0x4, &(0x7f0000000400)=[{&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f00000004c0)=""/136, 0x88}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x4, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r2, 0x0, 0x1034}, 0x18) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008004) lseek(r1, 0x1, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 159.900668ms ago: executing program 3 (id=2500): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) cachestat(r0, &(0x7f0000000040)={0xfffffffffffffffc, 0x4}, &(0x7f00000001c0), 0x0) 105.544739ms ago: executing program 3 (id=2501): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002000)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRES32=r1], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) chmod(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x30) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='writeback_bdi_register\x00', r7}, 0x18) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRES16=r7], 0x0, 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff4}, 0x18) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), &(0x7f0000000980)='system_u:object_r:getty_etc_t:s0\x00', 0x21, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x19, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r10, 0x0, 0x9}, 0xa) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) 87.537799ms ago: executing program 3 (id=2502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001d40)=ANY=[]) 76.063089ms ago: executing program 3 (id=2503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 53.841529ms ago: executing program 3 (id=2504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 0s ago: executing program 3 (id=2505): unshare(0x22020000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa1000000177152224f93ca9fffffffbfa400000000000003040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x40}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x12) kernel console output (not intermixed with test programs): 0 [ 123.098168][ T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.109408][ T41] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.152882][ T8318] FAULT_INJECTION: forcing a failure. [ 123.152882][ T8318] name failslab, interval 1, probability 0, space 0, times 0 [ 123.165815][ T8318] CPU: 0 UID: 0 PID: 8318 Comm: syz.5.1724 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.165881][ T8318] Tainted: [W]=WARN [ 123.165888][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.165968][ T8318] Call Trace: [ 123.165974][ T8318] [ 123.165981][ T8318] __dump_stack+0x1d/0x30 [ 123.166003][ T8318] dump_stack_lvl+0xe8/0x140 [ 123.166023][ T8318] dump_stack+0x15/0x1b [ 123.166042][ T8318] should_fail_ex+0x265/0x280 [ 123.166061][ T8318] ? dev_ethtool+0x96/0x1670 [ 123.166156][ T8318] should_failslab+0x8c/0xb0 [ 123.166186][ T8318] __kmalloc_cache_noprof+0x4c/0x4a0 [ 123.166221][ T8318] dev_ethtool+0x96/0x1670 [ 123.166273][ T8318] ? full_name_hash+0x92/0xe0 [ 123.166327][ T8318] ? strcmp+0x22/0x50 [ 123.166351][ T8318] dev_ioctl+0x2e0/0x960 [ 123.166373][ T8318] sock_do_ioctl+0x197/0x220 [ 123.166399][ T8318] sock_ioctl+0x41b/0x610 [ 123.166422][ T8318] ? __pfx_sock_ioctl+0x10/0x10 [ 123.166519][ T8318] __se_sys_ioctl+0xce/0x140 [ 123.166540][ T8318] __x64_sys_ioctl+0x43/0x50 [ 123.166561][ T8318] x64_sys_call+0x1816/0x3000 [ 123.166603][ T8318] do_syscall_64+0xd2/0x200 [ 123.166624][ T8318] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.166725][ T8318] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 123.166759][ T8318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.166859][ T8318] RIP: 0033:0x7fae63f5f6c9 [ 123.166873][ T8318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.166892][ T8318] RSP: 002b:00007fae629c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.166912][ T8318] RAX: ffffffffffffffda RBX: 00007fae641b5fa0 RCX: 00007fae63f5f6c9 [ 123.166928][ T8318] RDX: 0000200000000740 RSI: 0000000000008946 RDI: 0000000000000006 [ 123.166941][ T8318] RBP: 00007fae629c7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.167011][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.167023][ T8318] R13: 00007fae641b6038 R14: 00007fae641b5fa0 R15: 00007fff51951f78 [ 123.167041][ T8318] [ 123.593266][ T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.604064][ T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.614769][ T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.625807][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.756948][ T29] kauditd_printk_skb: 913 callbacks suppressed [ 123.756962][ T29] audit: type=1326 audit(1762665588.362:14724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea14f6c9 code=0x7ffc0000 [ 123.786785][ T29] audit: type=1326 audit(1762665588.362:14725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea14f6c9 code=0x7ffc0000 [ 123.810535][ T29] audit: type=1326 audit(1762665588.372:14726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea14f6c9 code=0x7ffc0000 [ 123.834043][ T29] audit: type=1326 audit(1762665588.372:14727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ea14f6c9 code=0x7ffc0000 [ 123.857526][ T29] audit: type=1326 audit(1762665588.372:14728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f54ea14f6c9 code=0x7ffc0000 [ 123.881627][ T29] audit: type=1326 audit(1762665588.452:14729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f54ea181f85 code=0x7ffc0000 [ 123.905206][ T29] audit: type=1326 audit(1762665588.452:14730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f54ea181f85 code=0x7ffc0000 [ 123.928698][ T29] audit: type=1326 audit(1762665588.452:14731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f54ea181f85 code=0x7ffc0000 [ 123.952200][ T29] audit: type=1326 audit(1762665588.452:14732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f54ea181f85 code=0x7ffc0000 [ 123.975943][ T29] audit: type=1326 audit(1762665588.452:14733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8338 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f54ea181f85 code=0x7ffc0000 [ 124.035925][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1736'. [ 124.151165][ T8349] lo speed is unknown, defaulting to 1000 [ 124.320961][ T8357] netlink: 'syz.6.1741': attribute type 10 has an invalid length. [ 124.333641][ T8357] bond0: (slave dummy0): Releasing backup interface [ 124.359783][ T8357] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 124.368740][ T8357] team0: Failed to send options change via netlink (err -105) [ 124.376241][ T8357] team0: Port device dummy0 added [ 124.385850][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1740'. [ 124.419169][ T8368] vhci_hcd: invalid port number 23 [ 124.424285][ T8368] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 124.560268][ T31] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.568501][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 124.576747][ T31] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.593673][ T31] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.601971][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 124.610368][ T31] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.626319][ T31] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.634607][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 124.642884][ T31] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.660382][ T8389] lo speed is unknown, defaulting to 1000 [ 124.675562][ T31] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.683822][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 124.692149][ T31] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 124.734852][ T8402] FAULT_INJECTION: forcing a failure. [ 124.734852][ T8402] name failslab, interval 1, probability 0, space 0, times 0 [ 124.736504][ T8396] loop2: detected capacity change from 0 to 512 [ 124.747504][ T8402] CPU: 0 UID: 0 PID: 8402 Comm: syz.3.1759 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.747535][ T8402] Tainted: [W]=WARN [ 124.747542][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.747557][ T8402] Call Trace: [ 124.747564][ T8402] [ 124.747577][ T8402] __dump_stack+0x1d/0x30 [ 124.747602][ T8402] dump_stack_lvl+0xe8/0x140 [ 124.747625][ T8402] dump_stack+0x15/0x1b [ 124.747645][ T8402] should_fail_ex+0x265/0x280 [ 124.747672][ T8402] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 124.747759][ T8402] should_failslab+0x8c/0xb0 [ 124.747858][ T8402] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 124.747892][ T8402] ? shmem_alloc_inode+0x34/0x50 [ 124.747917][ T8402] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 124.747965][ T8402] shmem_alloc_inode+0x34/0x50 [ 124.747990][ T8402] alloc_inode+0x40/0x170 [ 124.748079][ T8402] new_inode+0x1d/0xe0 [ 124.748109][ T8402] shmem_get_inode+0x244/0x750 [ 124.748136][ T8402] __shmem_file_setup+0x113/0x210 [ 124.748157][ T8402] shmem_file_setup+0x3b/0x50 [ 124.748213][ T8402] __se_sys_memfd_create+0x2c3/0x590 [ 124.748241][ T8402] __x64_sys_memfd_create+0x31/0x40 [ 124.748268][ T8402] x64_sys_call+0x2ac2/0x3000 [ 124.748335][ T8402] do_syscall_64+0xd2/0x200 [ 124.748358][ T8402] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.748390][ T8402] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 124.748443][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.748467][ T8402] RIP: 0033:0x7fb8b7e3f6c9 [ 124.748483][ T8402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.748503][ T8402] RSP: 002b:00007fb8b68a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 124.748524][ T8402] RAX: ffffffffffffffda RBX: 000000000000044a RCX: 00007fb8b7e3f6c9 [ 124.748537][ T8402] RDX: 00007fb8b68a6ef0 RSI: 0000000000000000 RDI: 00007fb8b7ec2960 [ 124.748680][ T8402] RBP: 0000200000000400 R08: 00007fb8b68a6bb7 R09: 00007fb8b68a6e40 [ 124.748694][ T8402] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 124.748708][ T8402] R13: 00007fb8b68a6ef0 R14: 00007fb8b68a6eb0 R15: 0000200000000000 [ 124.748760][ T8402] [ 124.981968][ T8396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.994888][ T8396] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.014142][ T8396] FAULT_INJECTION: forcing a failure. [ 125.014142][ T8396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.027426][ T8396] CPU: 1 UID: 0 PID: 8396 Comm: syz.2.1757 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.027517][ T8396] Tainted: [W]=WARN [ 125.027524][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.027538][ T8396] Call Trace: [ 125.027545][ T8396] [ 125.027553][ T8396] __dump_stack+0x1d/0x30 [ 125.027578][ T8396] dump_stack_lvl+0xe8/0x140 [ 125.027681][ T8396] dump_stack+0x15/0x1b [ 125.027701][ T8396] should_fail_ex+0x265/0x280 [ 125.027723][ T8396] should_fail_alloc_page+0xf2/0x100 [ 125.027828][ T8396] alloc_pages_bulk_noprof+0xef/0x540 [ 125.027872][ T8396] copy_splice_read+0xf3/0x660 [ 125.027977][ T8396] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 125.028084][ T8396] splice_direct_to_actor+0x290/0x680 [ 125.028108][ T8396] ? __pfx_direct_splice_actor+0x10/0x10 [ 125.028135][ T8396] do_splice_direct+0xda/0x150 [ 125.028180][ T8396] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 125.028213][ T8396] do_sendfile+0x380/0x650 [ 125.028254][ T8396] __x64_sys_sendfile64+0x105/0x150 [ 125.028289][ T8396] x64_sys_call+0x2bb4/0x3000 [ 125.028343][ T8396] do_syscall_64+0xd2/0x200 [ 125.028366][ T8396] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.028397][ T8396] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.028485][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.028509][ T8396] RIP: 0033:0x7fd27601f6c9 [ 125.028525][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.028544][ T8396] RSP: 002b:00007fd274a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 125.028605][ T8396] RAX: ffffffffffffffda RBX: 00007fd276275fa0 RCX: 00007fd27601f6c9 [ 125.028619][ T8396] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 125.028632][ T8396] RBP: 00007fd274a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.028646][ T8396] R10: 0001000000201001 R11: 0000000000000246 R12: 0000000000000001 [ 125.028757][ T8396] R13: 00007fd276276038 R14: 00007fd276275fa0 R15: 00007ffc6826af68 [ 125.028833][ T8396] [ 125.038611][ T8422] loop6: detected capacity change from 0 to 1024 [ 125.240519][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.300545][ T8430] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.315294][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.324470][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.334663][ T8438] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.344440][ T8438] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.354424][ T8438] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 125.374161][ T8442] lo speed is unknown, defaulting to 1000 [ 125.387855][ T8430] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.420214][ T8438] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.430077][ T8438] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.440009][ T8438] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 125.460011][ T8448] loop5: detected capacity change from 0 to 1024 [ 125.479439][ T8430] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.502579][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 125.512992][ T8438] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.522865][ T8438] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.532839][ T8438] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 125.534310][ T8448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.551349][ T8448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.562075][ T8430] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.585044][ T8457] random: crng reseeded on system resumption [ 125.609545][ T8438] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.619377][ T8438] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.629277][ T8438] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 126.102331][ T8463] loop6: detected capacity change from 0 to 512 [ 126.130027][ T8463] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.257013][ T8469] loop5: detected capacity change from 0 to 4096 [ 126.263772][ T8469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.279583][ T8474] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1780'. [ 126.309232][ T8478] tipc: Started in network mode [ 126.314127][ T8478] tipc: Node identity 9663eadf8e1d, cluster identity 4711 [ 126.321283][ T8478] tipc: Enabled bearer , priority 0 [ 126.330701][ T8478] tipc: Resetting bearer [ 126.338835][ T8478] ip6tnl1: entered promiscuous mode [ 126.344035][ T8478] ip6tnl1: entered allmulticast mode [ 126.392262][ T8476] tipc: Disabling bearer [ 126.443089][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 126.477089][ T8490] netlink: 'syz.6.1785': attribute type 5 has an invalid length. [ 126.488856][ T8490] batman_adv: batadv0: Adding interface: vxlan0 [ 126.495116][ T8490] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.521060][ T8488] loop0: detected capacity change from 0 to 1024 [ 126.531295][ T8490] batman_adv: batadv0: Interface activated: vxlan0 [ 126.538005][ T3499] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.546528][ T3499] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.560565][ T3499] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.570228][ T3499] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.612097][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.621144][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.621770][ T8500] vhci_hcd: invalid port number 23 [ 126.634150][ T8500] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 126.648370][ T8503] vhci_hcd: invalid port number 23 [ 126.653502][ T8503] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 126.676121][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 126.685248][ T8505] loop6: detected capacity change from 0 to 4096 [ 126.692014][ T8505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.711843][ T8510] random: crng reseeded on system resumption [ 126.891992][ T3499] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.904846][ T8524] FAULT_INJECTION: forcing a failure. [ 126.904846][ T8524] name failslab, interval 1, probability 0, space 0, times 0 [ 126.916150][ T3499] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.917561][ T8524] CPU: 1 UID: 0 PID: 8524 Comm: syz.6.1800 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 126.917595][ T8524] Tainted: [W]=WARN [ 126.917603][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.917657][ T8524] Call Trace: [ 126.917663][ T8524] [ 126.917670][ T8524] __dump_stack+0x1d/0x30 [ 126.917695][ T8524] dump_stack_lvl+0xe8/0x140 [ 126.917718][ T8524] dump_stack+0x15/0x1b [ 126.917784][ T8524] should_fail_ex+0x265/0x280 [ 126.917805][ T8524] should_failslab+0x8c/0xb0 [ 126.917889][ T8524] kmem_cache_alloc_noprof+0x50/0x480 [ 126.917978][ T8524] ? audit_log_start+0x342/0x720 [ 126.918073][ T8524] audit_log_start+0x342/0x720 [ 126.918097][ T8524] ? kstrtouint+0x76/0xc0 [ 126.918194][ T8524] audit_seccomp+0x48/0x100 [ 126.918231][ T8524] ? __seccomp_filter+0x82d/0x1250 [ 126.918301][ T8524] __seccomp_filter+0x83e/0x1250 [ 126.918333][ T8524] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.918370][ T8524] ? vfs_write+0x7e8/0x960 [ 126.918415][ T8524] __secure_computing+0x82/0x150 [ 126.918446][ T8524] syscall_trace_enter+0xcf/0x1e0 [ 126.918555][ T8524] do_syscall_64+0xac/0x200 [ 126.918641][ T8524] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 126.918673][ T8524] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 126.918748][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.918772][ T8524] RIP: 0033:0x7f0db138f6c9 [ 126.918788][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.918808][ T8524] RSP: 002b:00007f0dafdef038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 126.918829][ T8524] RAX: ffffffffffffffda RBX: 00007f0db15e5fa0 RCX: 00007f0db138f6c9 [ 126.918885][ T8524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 126.918898][ T8524] RBP: 00007f0dafdef090 R08: 0000000000000000 R09: 0000000000000000 [ 126.918913][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.918928][ T8524] R13: 00007f0db15e6038 R14: 00007f0db15e5fa0 R15: 00007ffccf9c8268 [ 126.918947][ T8524] [ 127.131739][ T3499] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.139996][ T3499] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.189397][ T8531] vhci_hcd: invalid port number 23 [ 127.194537][ T8531] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 127.221599][ T8535] netlink: 'syz.6.1805': attribute type 10 has an invalid length. [ 127.232681][ T8535] netlink: 'syz.6.1805': attribute type 10 has an invalid length. [ 127.241413][ T8535] team0: Port device dummy0 removed [ 127.257380][ T3313] EXT4-fs unmount: 11 callbacks suppressed [ 127.257395][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.258974][ T8535] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.300090][ T8541] loop0: detected capacity change from 0 to 1024 [ 127.306948][ T8541] EXT4-fs: Ignoring removed bh option [ 127.322832][ T8541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.352012][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.415982][ T8552] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.459499][ T8552] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.509736][ T8552] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.520985][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1812'. [ 127.559635][ T8552] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.618177][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1815'. [ 127.804024][ T8574] loop6: detected capacity change from 0 to 1024 [ 127.814128][ T8576] netlink: 'syz.0.1821': attribute type 5 has an invalid length. [ 127.823339][ T8574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.886298][ T8580] loop0: detected capacity change from 0 to 1024 [ 127.892354][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.901048][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.909422][ T8580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.979531][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.987945][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.032532][ T3499] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.040753][ T3499] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 128.049021][ T3499] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.060771][ T3499] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.069047][ T3499] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 128.077295][ T3499] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.089703][ T31] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.097878][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 128.106165][ T31] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.116915][ T31] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.125138][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 128.133492][ T31] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.282987][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 128.305996][ T8590] random: crng reseeded on system resumption [ 128.452088][ T8593] tipc: Enabled bearer , priority 0 [ 128.460605][ T8593] tipc: Resetting bearer [ 128.468874][ T8593] ip6tnl1: entered promiscuous mode [ 128.474099][ T8593] ip6tnl1: entered allmulticast mode [ 128.510210][ T8592] tipc: Disabling bearer [ 128.523889][ T7740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.554915][ T8596] loop6: detected capacity change from 0 to 4096 [ 128.561744][ T8596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.570293][ T8596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.595238][ T7740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.656210][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.735486][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 128.819698][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1839'. [ 128.826568][ T8619] loop6: detected capacity change from 0 to 164 [ 128.828692][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1839'. [ 128.850692][ T8619] Unable to read rock-ridge attributes [ 128.860325][ T29] kauditd_printk_skb: 727 callbacks suppressed [ 128.860341][ T29] audit: type=1400 audit(1762665593.462:15459): avc: denied { mount } for pid=8610 comm="syz.6.1834" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 128.864470][ T8624] bond0: entered promiscuous mode [ 128.864485][ T8624] bond0: entered allmulticast mode [ 128.864629][ T8624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.923833][ T8627] loop5: detected capacity change from 0 to 1024 [ 128.945114][ T8627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.006031][ T29] audit: type=1400 audit(1762665593.612:15460): avc: denied { bind } for pid=8610 comm="syz.6.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 129.028561][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.028628][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.060502][ T29] audit: type=1400 audit(1762665593.672:15461): avc: denied { listen } for pid=8610 comm="syz.6.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 129.095092][ T8630] infiniband syz0: set active [ 129.099826][ T8630] infiniband syz0: added bond_slave_0 [ 129.126026][ T8630] RDS/IB: syz0: added [ 129.130060][ T8630] smc: adding ib device syz0 with port count 1 [ 129.136277][ T8630] smc: ib device syz0 port 1 has no pnetid [ 129.159448][ T31] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.219754][ T31] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.289651][ T31] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.325491][ T8637] lo speed is unknown, defaulting to 1000 [ 129.339561][ T31] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.485495][ T31] team0: Port device bridge0 removed [ 129.495843][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'. [ 129.510754][ T31] team0: Port device bridge1 removed [ 129.522180][ T29] audit: type=1326 audit(1762665594.132:15462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27601f6c9 code=0x7ffc0000 [ 129.522442][ T29] audit: type=1326 audit(1762665594.132:15463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd27601f6c9 code=0x7ffc0000 [ 129.522537][ T29] audit: type=1326 audit(1762665594.132:15464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27601f6c9 code=0x7ffc0000 [ 129.522729][ T29] audit: type=1326 audit(1762665594.132:15465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fd27601f6c9 code=0x7ffc0000 [ 129.616715][ T29] audit: type=1326 audit(1762665594.162:15466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27601f6c9 code=0x7ffc0000 [ 129.616767][ T29] audit: type=1326 audit(1762665594.162:15467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27601f6c9 code=0x7ffc0000 [ 129.616793][ T29] audit: type=1326 audit(1762665594.182:15468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd27601f6c9 code=0x7ffc0000 [ 129.665743][ T31] team0: Port device bridge2 removed [ 129.729059][ T4628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.739970][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.755480][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.766824][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 129.776279][ T31] bond0 (unregistering): Released all slaves [ 129.783171][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1851'. [ 129.785355][ T31] bond1 (unregistering): Released all slaves [ 129.792066][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1851'. [ 129.816531][ T8659] loop2: detected capacity change from 0 to 4096 [ 129.823317][ T8659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.831880][ T8659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.852540][ T8661] bond1: entered promiscuous mode [ 129.857581][ T8661] bond1: entered allmulticast mode [ 129.863036][ T8661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.870582][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.897059][ T31] tipc: Left network mode [ 129.951250][ T31] hsr_slave_0: left promiscuous mode [ 129.956996][ T31] hsr_slave_1: left promiscuous mode [ 129.964980][ T31] veth1_macvtap: left promiscuous mode [ 129.970557][ T31] veth0_macvtap: left promiscuous mode [ 129.976133][ T31] veth1_vlan: left promiscuous mode [ 129.984455][ T31] veth0_vlan: left promiscuous mode [ 129.995071][ T8670] loop6: detected capacity change from 0 to 1024 [ 130.000572][ T8668] netlink: 'syz.5.1854': attribute type 16 has an invalid length. [ 130.009305][ T8668] netlink: 'syz.5.1854': attribute type 17 has an invalid length. [ 130.030092][ T8670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.062542][ T31] team0 (unregistering): Port device team_slave_1 removed [ 130.071711][ T31] team0 (unregistering): Port device team_slave_0 removed [ 130.079016][ T8674] loop5: detected capacity change from 0 to 128 [ 130.087995][ T8674] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.101655][ T8674] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.152459][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.155061][ T8668] 8021q: adding VLAN 0 to HW filter on device .` [ 130.161068][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.180052][ T8668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.195529][ T1052] lo speed is unknown, defaulting to 1000 [ 130.201422][ T1052] infiniband syz2: ib_query_port failed (-19) [ 130.209031][ T8667] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.218805][ T8667] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 130.228682][ T8667] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.252070][ T8637] chnl_net:caif_netlink_parms(): no params data found [ 130.273666][ T8667] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.283552][ T8667] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 130.293475][ T8667] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.317156][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.324333][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.331862][ T8637] bridge_slave_0: entered allmulticast mode [ 130.338212][ T8637] bridge_slave_0: entered promiscuous mode [ 130.345800][ T8667] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.355603][ T8667] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 130.365441][ T8667] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.376241][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.383414][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.390647][ T8637] bridge_slave_1: entered allmulticast mode [ 130.396964][ T8637] bridge_slave_1: entered promiscuous mode [ 130.413282][ T8637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.423321][ T8637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.442363][ T8667] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.452347][ T8667] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 130.462313][ T8667] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.473813][ T8637] team0: Port device team_slave_0 added [ 130.480373][ T8637] team0: Port device team_slave_1 added [ 130.495079][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.502090][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.528007][ T8637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.539539][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.541919][ T31] ------------[ cut here ]------------ [ 130.546476][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.551940][ T31] WARNING: CPU: 1 PID: 31 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 130.577863][ T8637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.587305][ T31] Modules linked in: [ 130.601712][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.613077][ T31] Tainted: [W]=WARN [ 130.616928][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.627006][ T31] Workqueue: netns cleanup_net [ 130.631879][ T31] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 130.637415][ T31] Code: 48 8d bb 70 0e 00 00 e8 65 41 b7 fc 48 8b bb 70 0e 00 00 e8 c9 ee c3 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f8 e7 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 ea e7 9b fc 90 0f 0b 90 4c 89 f7 e8 2e [ 130.657031][ T31] RSP: 0018:ffffc90000113c60 EFLAGS: 00010293 [ 130.663087][ T31] RAX: ffffffff84bb62c8 RBX: ffff88810a288000 RCX: ffff8881010d8000 [ 130.671052][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a288e40 [ 130.679019][ T31] RBP: ffffffff86c91080 R08: 0001ffff8684810f R09: 0000000000000000 [ 130.686977][ T31] R10: ffffc90000113be8 R11: 0001c90000113be8 R12: ffffffff86c910a0 [ 130.694952][ T31] R13: ffff88810a288028 R14: ffff88810a288e40 R15: ffff88810a288000 [ 130.702990][ T31] FS: 0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 130.711933][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.718509][ T31] CR2: 0000001b30d0aff8 CR3: 0000000109192000 CR4: 00000000003506f0 [ 130.726463][ T31] Call Trace: [ 130.729736][ T31] [ 130.732653][ T31] xfrm_net_exit+0x2d/0x60 [ 130.737106][ T31] ops_undo_list+0x27b/0x410 [ 130.741776][ T31] cleanup_net+0x2f4/0x4f0 [ 130.746250][ T31] process_scheduled_works+0x4ce/0x9d0 [ 130.751815][ T31] worker_thread+0x582/0x770 [ 130.756452][ T31] kthread+0x489/0x510 [ 130.760548][ T31] ? finish_task_switch+0xad/0x2b0 [ 130.765713][ T31] ? __pfx_worker_thread+0x10/0x10 [ 130.770873][ T31] ? __pfx_kthread+0x10/0x10 [ 130.775470][ T31] ret_from_fork+0x122/0x1b0 [ 130.780086][ T31] ? __pfx_kthread+0x10/0x10 [ 130.784757][ T31] ret_from_fork_asm+0x1a/0x30 [ 130.789557][ T31] [ 130.792585][ T31] ---[ end trace 0000000000000000 ]--- [ 130.799169][ T31] ------------[ cut here ]------------ [ 130.804765][ T31] WARNING: CPU: 1 PID: 31 at net/xfrm/xfrm_state.c:3313 xfrm_state_fini+0x1b9/0x1f0 [ 130.814221][ T31] Modules linked in: [ 130.818290][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.829725][ T31] Tainted: [W]=WARN [ 130.833794][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.843863][ T31] Workqueue: netns cleanup_net [ 130.848819][ T31] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0 [ 130.854423][ T31] Code: 41 b7 fc 4d 8b 3e e9 06 ff ff ff e8 d1 e7 9b fc 90 0f 0b 90 4c 89 f7 e8 15 41 b7 fc 4d 8b 3e e9 24 ff ff ff e8 b8 e7 9b fc 90 <0f> 0b 90 4c 89 f7 e8 fc 40 b7 fc 4d 8b 3e e9 42 ff ff ff e8 9f e7 [ 130.874032][ T31] RSP: 0018:ffffc90000113c60 EFLAGS: 00010293 [ 130.880159][ T31] RAX: ffffffff84bb6308 RBX: ffff88810a288000 RCX: ffff8881010d8000 [ 130.888134][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888101515c00 [ 130.896092][ T31] RBP: 0000000000000040 R08: 000188810a288e5f R09: 0000000000000000 [ 130.904121][ T31] R10: 0000000000000002 R11: 000188810364b3ff R12: ffffffff86c910a0 [ 130.912083][ T31] R13: ffff88810a288028 R14: ffff88810a288e58 R15: ffff888101515c00 [ 130.920118][ T31] FS: 0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 130.929065][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.935705][ T31] CR2: 0000001b30d0aff8 CR3: 0000000109192000 CR4: 00000000003506f0 [ 130.943667][ T31] Call Trace: [ 130.946921][ T31] [ 130.949844][ T31] xfrm_net_exit+0x2d/0x60 [ 130.954366][ T31] ops_undo_list+0x27b/0x410 [ 130.959010][ T31] cleanup_net+0x2f4/0x4f0 [ 130.963412][ T31] process_scheduled_works+0x4ce/0x9d0 [ 130.968870][ T31] worker_thread+0x582/0x770 [ 130.973438][ T31] kthread+0x489/0x510 [ 130.977484][ T31] ? finish_task_switch+0xad/0x2b0 [ 130.982594][ T31] ? __pfx_worker_thread+0x10/0x10 [ 130.987728][ T31] ? __pfx_kthread+0x10/0x10 [ 130.992388][ T31] ret_from_fork+0x122/0x1b0 [ 130.996955][ T31] ? __pfx_kthread+0x10/0x10 [ 131.001609][ T31] ret_from_fork_asm+0x1a/0x30 [ 131.006396][ T31] [ 131.009426][ T31] ---[ end trace 0000000000000000 ]--- [ 131.015430][ T31] ------------[ cut here ]------------ [ 131.020869][ T31] WARNING: CPU: 1 PID: 31 at net/xfrm/xfrm_state.c:3315 xfrm_state_fini+0x1d2/0x1f0 [ 131.030254][ T31] Modules linked in: [ 131.034121][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 131.045393][ T31] Tainted: [W]=WARN [ 131.049210][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.059268][ T31] Workqueue: netns cleanup_net [ 131.064013][ T31] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0 [ 131.069625][ T31] Code: 41 b7 fc 4d 8b 3e e9 24 ff ff ff e8 b8 e7 9b fc 90 0f 0b 90 4c 89 f7 e8 fc 40 b7 fc 4d 8b 3e e9 42 ff ff ff e8 9f e7 9b fc 90 <0f> 0b 90 4c 89 f7 e8 e3 40 b7 fc 4d 8b 3e e9 60 ff ff ff 66 66 2e [ 131.089287][ T31] RSP: 0018:ffffc90000113c60 EFLAGS: 00010293 [ 131.095370][ T31] RAX: ffffffff84bb6321 RBX: ffff88810a288000 RCX: ffff8881010d8000 [ 131.103327][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103702cc0 [ 131.111287][ T31] RBP: 0000000000000040 R08: 000188810a288e57 R09: 0000000000000000 [ 131.119323][ T31] R10: 0000000000000003 R11: 0001888101515c3f R12: ffffffff86c910a0 [ 131.127271][ T31] R13: ffff88810a288028 R14: ffff88810a288e50 R15: ffff888103702cc0 [ 131.135233][ T31] FS: 0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 131.144151][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.150729][ T31] CR2: 0000001b30d0aff8 CR3: 0000000109192000 CR4: 00000000003506f0 [ 131.158723][ T31] Call Trace: [ 131.161978][ T31] [ 131.164885][ T31] xfrm_net_exit+0x2d/0x60 [ 131.169295][ T31] ops_undo_list+0x27b/0x410 [ 131.173916][ T31] cleanup_net+0x2f4/0x4f0 [ 131.178334][ T31] process_scheduled_works+0x4ce/0x9d0 [ 131.183929][ T31] worker_thread+0x582/0x770 [ 131.188659][ T31] kthread+0x489/0x510 [ 131.192758][ T31] ? finish_task_switch+0xad/0x2b0 [ 131.197844][ T31] ? __pfx_worker_thread+0x10/0x10 [ 131.202944][ T31] ? __pfx_kthread+0x10/0x10 [ 131.207519][ T31] ret_from_fork+0x122/0x1b0 [ 131.212166][ T31] ? __pfx_kthread+0x10/0x10 [ 131.216737][ T31] ret_from_fork_asm+0x1a/0x30 [ 131.221577][ T31] [ 131.224575][ T31] ---[ end trace 0000000000000000 ]--- [ 131.231808][ T4628] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.243750][ T7740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.258008][ T8637] hsr_slave_0: entered promiscuous mode [ 131.267034][ T8637] hsr_slave_1: entered promiscuous mode [ 131.270624][ T8684] netlink: 'syz.6.1857': attribute type 5 has an invalid length. [ 131.288325][ T3499] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.299823][ T3499] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.329458][ T3499] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.371357][ T3499] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.390321][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.425821][ T8637] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 131.434781][ T8637] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 131.443648][ T8637] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 131.453752][ T8637] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 131.488937][ T8707] netlink: 'syz.6.1863': attribute type 10 has an invalid length. [ 131.499107][ T8707] bond0: (slave dummy0): Releasing backup interface [ 131.508665][ T8707] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 131.517431][ T8707] team0: Failed to send options change via netlink (err -105) [ 131.525001][ T8707] team0: Port device dummy0 added [ 131.539713][ T8637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.550696][ T8637] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.559396][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.566511][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.576744][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.583833][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.599095][ T8637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.609512][ T8637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.657347][ T8637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.741158][ T8637] veth0_vlan: entered promiscuous mode [ 131.748329][ T8637] veth1_vlan: entered promiscuous mode [ 131.762521][ T8637] veth0_macvtap: entered promiscuous mode [ 131.769438][ T8637] veth1_macvtap: entered promiscuous mode [ 131.779862][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.790466][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.800878][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.810346][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.819533][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.829556][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.951921][ T8732] loop7: detected capacity change from 0 to 4096 [ 131.960324][ T8732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.969277][ T8732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.991818][ T8637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.118198][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1869'. [ 132.145219][ T52] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.153556][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 132.161840][ T52] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 132.180132][ T52] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.188342][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 132.196584][ T52] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 132.223099][ T52] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.231380][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 132.239650][ T52] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 132.248202][ T4795] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.256417][ T4795] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 132.264694][ T4795] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 132.305156][ T8752] syzkaller0: entered allmulticast mode [ 132.311426][ T8751] syzkaller0: left allmulticast mode [ 132.372347][ T8764] netlink: 'syz.2.1878': attribute type 10 has an invalid length. [ 132.389304][ T8764] bond0: (slave dummy0): Releasing backup interface [ 132.389544][ T8766] netlink: 'syz.5.1879': attribute type 5 has an invalid length. [ 132.563639][ T8770] loop5: detected capacity change from 0 to 1024 [ 132.918261][ T8781] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.928108][ T8781] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 132.937982][ T8781] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 132.961924][ T8783] loop5: detected capacity change from 0 to 1024 [ 132.970097][ T8781] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.979915][ T8781] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 132.989748][ T8781] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 133.000129][ T8783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.021748][ T8789] __nla_validate_parse: 1 callbacks suppressed [ 133.021764][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 133.039531][ T8781] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.049341][ T8781] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 133.059287][ T8781] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 133.073511][ T8783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.082357][ T8783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.119429][ T8781] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.129317][ T8781] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 133.139180][ T8781] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 133.246169][ T8799] netlink: 'syz.6.1891': attribute type 5 has an invalid length. [ 133.352455][ T8807] netlink: 'syz.6.1895': attribute type 10 has an invalid length. [ 133.398149][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 133.399757][ T3568] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.737474][ T4628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.780236][ T8818] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 133.786839][ T8818] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 133.795046][ T8818] vhci_hcd vhci_hcd.0: Device attached [ 133.901107][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 133.901123][ T29] audit: type=1326 audit(1762665598.512:15886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.7.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43964af6c9 code=0x7ffc0000 [ 133.930854][ T29] audit: type=1326 audit(1762665598.512:15887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8813 comm="syz.7.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43964af6c9 code=0x7ffc0000 [ 133.976801][ T8826] loop6: detected capacity change from 0 to 4096 [ 133.983916][ T8826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.992610][ T8826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.020427][ T7740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.047817][ T8830] netlink: 'syz.6.1904': attribute type 5 has an invalid length. [ 134.068536][ T23] usb 12-1: SetAddress Request (7) to port 0 [ 134.076824][ T23] usb 12-1: new SuperSpeed USB device number 7 using vhci_hcd [ 134.090413][ T29] audit: type=1400 audit(1762665598.702:15888): avc: denied { create } for pid=8831 comm="syz.6.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.109981][ T29] audit: type=1400 audit(1762665598.702:15889): avc: denied { ioctl } for pid=8831 comm="syz.6.1905" path="socket:[28823]" dev="sockfs" ino=28823 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.134793][ T29] audit: type=1400 audit(1762665598.702:15890): avc: denied { read write } for pid=8831 comm="syz.6.1905" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 134.159045][ T29] audit: type=1400 audit(1762665598.702:15891): avc: denied { open } for pid=8831 comm="syz.6.1905" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 134.220854][ T8839] netlink: 'syz.6.1908': attribute type 10 has an invalid length. [ 134.251164][ T8839] team0: Port device dummy0 removed [ 134.258455][ T8839] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 134.458120][ T29] audit: type=1326 audit(1762665599.062:15892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.3.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 134.481702][ T29] audit: type=1326 audit(1762665599.062:15893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.3.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 134.505231][ T29] audit: type=1326 audit(1762665599.062:15894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.3.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 134.528741][ T29] audit: type=1326 audit(1762665599.062:15895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.3.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 134.625714][ T8819] vhci_hcd: connection reset by peer [ 134.631837][ T3499] vhci_hcd: stop threads [ 134.636094][ T3499] vhci_hcd: release socket [ 134.640618][ T3499] vhci_hcd: disconnect device [ 134.791808][ T8861] loop3: detected capacity change from 0 to 1024 [ 134.809615][ T8861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.855714][ T8865] FAULT_INJECTION: forcing a failure. [ 134.855714][ T8865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.868806][ T8865] CPU: 1 UID: 0 PID: 8865 Comm: ÿ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.868893][ T8865] Tainted: [W]=WARN [ 134.868900][ T8865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.868918][ T8865] Call Trace: [ 134.868924][ T8865] [ 134.868931][ T8865] __dump_stack+0x1d/0x30 [ 134.868954][ T8865] dump_stack_lvl+0xe8/0x140 [ 134.868976][ T8865] dump_stack+0x15/0x1b [ 134.869055][ T8865] should_fail_ex+0x265/0x280 [ 134.869067][ T8865] should_fail+0xb/0x20 [ 134.869077][ T8865] should_fail_usercopy+0x1a/0x20 [ 134.869091][ T8865] strncpy_from_user+0x25/0x230 [ 134.869212][ T8865] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 134.869232][ T8865] __se_sys_memfd_create+0x1ff/0x590 [ 134.869249][ T8865] __x64_sys_memfd_create+0x31/0x40 [ 134.869263][ T8865] x64_sys_call+0x2ac2/0x3000 [ 134.869323][ T8865] do_syscall_64+0xd2/0x200 [ 134.869335][ T8865] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.869372][ T8865] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 134.869433][ T8865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.869510][ T8865] RIP: 0033:0x7f0db138f6c9 [ 134.869520][ T8865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.869540][ T8865] RSP: 002b:00007f0dafdeee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 134.869561][ T8865] RAX: ffffffffffffffda RBX: 00000000000003f7 RCX: 00007f0db138f6c9 [ 134.869572][ T8865] RDX: 00007f0dafdeeef0 RSI: 0000000000000000 RDI: 00007f0db1412960 [ 134.869580][ T8865] RBP: 0000200000003080 R08: 00007f0dafdeebb7 R09: 00007f0dafdeee40 [ 134.869587][ T8865] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 134.869600][ T8865] R13: 00007f0dafdeeef0 R14: 00007f0dafdeeeb0 R15: 00002000000004c0 [ 134.869611][ T8865] [ 135.060431][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.069154][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.131609][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1920'. [ 135.147260][ T8870] bond1: entered promiscuous mode [ 135.152317][ T8870] bond1: entered allmulticast mode [ 135.157557][ T8870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.318092][ T8880] 9pnet_fd: Insufficient options for proto=fd [ 135.378798][ T8884] loop5: detected capacity change from 0 to 4096 [ 135.385485][ T8884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.393604][ T8884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.417802][ T4628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.440628][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1926'. [ 135.454790][ T8891] random: crng reseeded on system resumption [ 135.593020][ T8899] loop5: detected capacity change from 0 to 1024 [ 135.621773][ T8899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.702729][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.711215][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.738026][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.757415][ T8904] loop3: detected capacity change from 0 to 1024 [ 135.769605][ T8904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.839586][ T8904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.848273][ T8904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.899025][ T8909] validate_nla: 1 callbacks suppressed [ 135.899036][ T8909] netlink: 'syz.6.1933': attribute type 10 has an invalid length. [ 135.914750][ T8909] bond0: (slave dummy0): Releasing backup interface [ 135.923433][ T8909] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 135.932202][ T8909] team0: Failed to send options change via netlink (err -105) [ 135.939737][ T8909] team0: Port device dummy0 added [ 136.012986][ T299] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.021209][ T299] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 136.029589][ T299] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.040116][ T299] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.048334][ T299] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 136.056585][ T299] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.067360][ T299] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.075550][ T299] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 136.083787][ T299] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.094425][ T299] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.102606][ T299] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 136.110866][ T299] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 136.304818][ T8919] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 136.311355][ T8919] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 136.318966][ T8919] vhci_hcd vhci_hcd.0: Device attached [ 136.338735][ T8921] vhci_hcd: connection closed [ 136.338840][ T3499] vhci_hcd: stop threads [ 136.347750][ T3499] vhci_hcd: release socket [ 136.352195][ T3499] vhci_hcd: disconnect device [ 136.364436][ T4628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.463502][ T8932] netlink: 'syz.5.1942': attribute type 5 has an invalid length. [ 136.478018][ T8934] 9pnet_fd: Insufficient options for proto=fd [ 136.503697][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.558792][ T8940] tipc: Enabled bearer , priority 0 [ 136.569422][ T8940] tipc: Resetting bearer [ 136.587445][ T8940] ip6tnl1: entered promiscuous mode [ 136.592704][ T8940] ip6tnl1: entered allmulticast mode [ 136.662637][ T8939] tipc: Disabling bearer [ 136.793898][ T8955] syz0: rxe_newlink: already configured on bond_slave_0 [ 136.818230][ T8957] loop6: detected capacity change from 0 to 1024 [ 136.840037][ T8957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.863183][ T8961] 9pnet_fd: Insufficient options for proto=fd [ 136.890871][ T8964] loop3: detected capacity change from 0 to 1024 [ 136.920247][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.928829][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.949852][ T8964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.965113][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1959'. [ 136.982138][ T8967] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.992004][ T8967] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 136.995144][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1960'. [ 137.002313][ T8967] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 137.030694][ T8964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.039416][ T8964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.078944][ T8988] FAULT_INJECTION: forcing a failure. [ 137.078944][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 137.079431][ T8967] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.091646][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.5.1962 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 137.091682][ T8988] Tainted: [W]=WARN [ 137.091689][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.091702][ T8988] Call Trace: [ 137.091708][ T8988] [ 137.091715][ T8988] __dump_stack+0x1d/0x30 [ 137.091808][ T8988] dump_stack_lvl+0xe8/0x140 [ 137.091834][ T8988] dump_stack+0x15/0x1b [ 137.091854][ T8988] should_fail_ex+0x265/0x280 [ 137.091876][ T8988] should_failslab+0x8c/0xb0 [ 137.091957][ T8988] kmem_cache_alloc_noprof+0x50/0x480 [ 137.091998][ T8988] ? audit_log_start+0x342/0x720 [ 137.092023][ T8988] audit_log_start+0x342/0x720 [ 137.092047][ T8988] ? kstrtouint+0x76/0xc0 [ 137.092083][ T8988] audit_seccomp+0x48/0x100 [ 137.092181][ T8988] ? __seccomp_filter+0x82d/0x1250 [ 137.092273][ T8988] __seccomp_filter+0x83e/0x1250 [ 137.092305][ T8988] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.092342][ T8988] ? vfs_write+0x7e8/0x960 [ 137.092380][ T8988] ? __rcu_read_unlock+0x4f/0x70 [ 137.092409][ T8988] ? __fget_files+0x184/0x1c0 [ 137.092443][ T8988] __secure_computing+0x82/0x150 [ 137.092474][ T8988] syscall_trace_enter+0xcf/0x1e0 [ 137.092515][ T8988] do_syscall_64+0xac/0x200 [ 137.092537][ T8988] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.092579][ T8988] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.092618][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.092676][ T8988] RIP: 0033:0x7fae63f5f6c9 [ 137.092692][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.092713][ T8988] RSP: 002b:00007fae629c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 137.092876][ T8988] RAX: ffffffffffffffda RBX: 00007fae641b5fa0 RCX: 00007fae63f5f6c9 [ 137.092890][ T8988] RDX: 0000000000000000 RSI: 0000000000000006 RDI: ffffffffffffffff [ 137.092980][ T8988] RBP: 00007fae629c7090 R08: 0000000000000000 R09: 0000000000000000 [ 137.092999][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.093013][ T8988] R13: 00007fae641b6038 R14: 00007fae641b5fa0 R15: 00007fff51951f78 [ 137.093034][ T8988] [ 137.316474][ T8967] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 137.326418][ T8967] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 137.345299][ T8995] loop7: detected capacity change from 0 to 128 [ 137.355341][ T8995] bio_check_eod: 32 callbacks suppressed [ 137.355351][ T8995] syz.7.1965: attempt to access beyond end of device [ 137.355351][ T8995] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 137.375868][ T8995] syz.7.1965: attempt to access beyond end of device [ 137.375868][ T8995] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 137.376833][ T8967] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.389280][ T8995] buffer_io_error: 18 callbacks suppressed [ 137.389292][ T8995] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 137.399179][ T8995] syz.7.1965: attempt to access beyond end of device [ 137.399179][ T8995] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 137.404837][ T8967] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 137.413268][ T8995] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 137.413815][ T8995] syz.7.1965: attempt to access beyond end of device [ 137.413815][ T8995] loop7: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 137.426673][ T8967] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 137.468394][ T8995] syz.7.1965: attempt to access beyond end of device [ 137.468394][ T8995] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 137.482571][ T8995] syz.7.1965: attempt to access beyond end of device [ 137.482571][ T8995] loop7: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 137.495986][ T8995] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 137.504653][ T8995] syz.7.1965: attempt to access beyond end of device [ 137.504653][ T8995] loop7: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 137.518116][ T8995] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 137.526916][ T8995] syz.7.1965: attempt to access beyond end of device [ 137.526916][ T8995] loop7: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 137.541105][ T8995] syz.7.1965: attempt to access beyond end of device [ 137.541105][ T8995] loop7: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 137.554562][ T8995] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 137.564423][ T8967] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.574236][ T8967] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 137.574269][ T8995] syz.7.1965: attempt to access beyond end of device [ 137.574269][ T8995] loop7: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 137.584109][ T8967] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 137.597494][ T8995] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 137.616207][ T8995] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 137.624738][ T8995] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 137.634095][ T8995] Buffer I/O error on dev loop7, logical block 115, lost async page write [ 137.634349][ T7740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.642693][ T8995] Buffer I/O error on dev loop7, logical block 116, lost async page write [ 137.670954][ T9002] 9pnet_fd: Insufficient options for proto=fd [ 137.949553][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1973'. [ 138.033450][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.136433][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1975'. [ 138.148218][ T9022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.155593][ T9022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.178809][ T9022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.186201][ T9022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.328279][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1981'. [ 138.759141][ T9058] syz0: rxe_newlink: already configured on bond_slave_0 [ 138.905422][ T9070] loop7: detected capacity change from 0 to 164 [ 138.935562][ T9068] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.946768][ T9070] Unable to read rock-ridge attributes [ 138.956800][ T9073] netlink: 'syz.6.1995': attribute type 5 has an invalid length. [ 138.959084][ T9074] random: crng reseeded on system resumption [ 138.979831][ T9068] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.022658][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1997'. [ 139.036574][ T9077] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 139.078381][ T9068] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.154074][ T9068] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.165111][ T23] usb 12-1: device descriptor read/8, error -110 [ 139.288071][ T23] usb 12-1: new SuperSpeed USB device number 7 using vhci_hcd [ 139.299878][ T3499] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.300139][ T3499] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.300188][ T3499] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.300236][ T3499] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.318138][ T23] usb 12-1: enqueue for inactive port 0 [ 139.348213][ T23] usb 12-1: enqueue for inactive port 0 [ 139.353821][ T23] usb 12-1: enqueue for inactive port 0 [ 139.391542][ T9087] syz0: rxe_newlink: already configured on bond_slave_0 [ 139.526273][ T9095] smc: net device sit0 applied user defined pnetid SYZ2 [ 139.526581][ T9095] smc: net device sit0 erased user defined pnetid SYZ2 [ 139.543509][ T29] kauditd_printk_skb: 537 callbacks suppressed [ 139.543530][ T29] audit: type=1326 audit(1762665604.162:16431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 139.543674][ T29] audit: type=1326 audit(1762665604.162:16432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 139.597337][ T29] audit: type=1326 audit(1762665604.162:16433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 139.597435][ T29] audit: type=1326 audit(1762665604.162:16434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 139.597468][ T29] audit: type=1326 audit(1762665604.162:16435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 139.597525][ T29] audit: type=1326 audit(1762665604.162:16436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 139.597558][ T29] audit: type=1326 audit(1762665604.162:16437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 139.597598][ T29] audit: type=1326 audit(1762665604.162:16438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 139.597682][ T29] audit: type=1326 audit(1762665604.162:16439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 139.597713][ T29] audit: type=1326 audit(1762665604.162:16440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 139.712039][ T9100] netlink: 'syz.5.2005': attribute type 10 has an invalid length. [ 139.736602][ T52] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.736639][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 139.736708][ T52] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 139.760973][ T9100] netlink: 'syz.5.2005': attribute type 10 has an invalid length. [ 139.765062][ T9100] team0: Port device dummy0 removed [ 139.847514][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 139.855476][ T9100] .`: (slave dummy0): Enslaving as an active interface with an up link [ 139.878201][ T3499] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.886395][ T3499] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 139.893507][ T9107] loop3: detected capacity change from 0 to 1024 [ 139.894747][ T3499] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 139.915830][ T3499] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.921926][ T9109] loop7: detected capacity change from 0 to 1024 [ 139.924060][ T3499] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 139.932842][ T9107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.938709][ T3499] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 139.959542][ T9109] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.976582][ T3499] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.984901][ T3499] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 139.993305][ T3499] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 140.026426][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.035061][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.052064][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2010'. [ 140.060870][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.069487][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.263887][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2015'. [ 140.351650][ T9142] random: crng reseeded on system resumption [ 140.478379][ T23] usb usb12-port1: attempt power cycle [ 140.650898][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2021'. [ 140.662527][ T9155] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.672303][ T9155] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.686347][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.715442][ T8637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.750935][ T9155] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.760736][ T9155] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.796002][ T9164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2025'. [ 140.843193][ T9155] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.853020][ T9155] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.944162][ T9177] loop3: detected capacity change from 0 to 1024 [ 140.961665][ T9155] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.971482][ T9155] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.983878][ T9177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.991259][ T9179] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2031'. [ 141.012824][ T9179] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.025843][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2033'. [ 141.046808][ T31] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.055104][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.056143][ T9185] 9pnet_fd: Insufficient options for proto=fd [ 141.074245][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.082925][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.093352][ T9179] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.114833][ T31] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.123117][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.138648][ T299] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.146853][ T299] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.168942][ T9179] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.188555][ T299] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.196840][ T299] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.221562][ T9179] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.315558][ T299] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.348280][ T31] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.380966][ T31] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.389458][ T31] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.537505][ T9227] netlink: 'syz.5.2051': attribute type 10 has an invalid length. [ 141.557203][ T9227] .`: (slave dummy0): Releasing backup interface [ 141.568463][ T9227] team0: Port device dummy0 added [ 141.599641][ T9227] netlink: 'syz.5.2051': attribute type 10 has an invalid length. [ 141.618739][ T9227] team0: Port device dummy0 removed [ 141.627963][ T9227] .`: (slave dummy0): Enslaving as an active interface with an up link [ 141.765830][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.138647][ T9286] loop7: detected capacity change from 0 to 1024 [ 142.160466][ T9286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.270615][ T9286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.270684][ T9286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.297089][ T9302] bridge1: entered promiscuous mode [ 142.297109][ T9302] bridge1: entered allmulticast mode [ 142.298794][ T9302] team0: Port device bridge1 added [ 142.308360][ T23] usb usb12-port1: unable to enumerate USB device [ 142.319686][ T9306] netlink: 'syz.2.2084': attribute type 5 has an invalid length. [ 142.394149][ T9295] loop6: detected capacity change from 0 to 164 [ 142.403046][ T9312] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 142.403073][ T9312] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 142.403142][ T9312] vhci_hcd vhci_hcd.0: Device attached [ 142.414511][ T9295] Unable to read rock-ridge attributes [ 142.425832][ T9312] vhci_hcd vhci_hcd.0: port 0 already used [ 142.467683][ T9313] vhci_hcd: connection closed [ 142.467882][ T52] vhci_hcd: stop threads [ 142.476813][ T52] vhci_hcd: release socket [ 142.476821][ T52] vhci_hcd: disconnect device [ 142.613766][ T9295] syz0: rxe_newlink: already configured on bond_slave_0 [ 142.703321][ T9323] netlink: 'syz.3.2089': attribute type 10 has an invalid length. [ 142.711279][ T9323] netlink: 'syz.3.2089': attribute type 10 has an invalid length. [ 142.718021][ T9323] team0: Port device dummy0 removed [ 142.726909][ T9323] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.870229][ T8637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.926476][ T9329] loop7: detected capacity change from 0 to 1024 [ 142.930193][ T9329] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.004985][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.013757][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.079164][ T9338] loop2: detected capacity change from 0 to 512 [ 143.090401][ T9338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.093896][ T9346] netlink: 'syz.6.2097': attribute type 5 has an invalid length. [ 143.111326][ T9338] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.145670][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.188016][ T9355] loop2: detected capacity change from 0 to 1024 [ 143.208955][ T9355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.291494][ T9365] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 143.298112][ T9365] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 143.306215][ T9365] vhci_hcd vhci_hcd.0: Device attached [ 143.313161][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.322340][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.367314][ T9365] vhci_hcd vhci_hcd.0: port 0 already used [ 143.421214][ T9368] vhci_hcd: connection closed [ 143.421598][ T31] vhci_hcd: stop threads [ 143.430556][ T31] vhci_hcd: release socket [ 143.434972][ T31] vhci_hcd: disconnect device [ 143.606687][ T9380] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 143.631052][ T9383] netlink: 'syz.5.2110': attribute type 5 has an invalid length. [ 143.649057][ T8637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.797088][ T9396] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 143.847768][ T9399] loop5: detected capacity change from 0 to 164 [ 143.853949][ T9398] __nla_validate_parse: 13 callbacks suppressed [ 143.853963][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2116'. [ 143.875306][ T9399] Unable to read rock-ridge attributes [ 143.942047][ T9399] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 144.029189][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.055846][ T9410] loop2: detected capacity change from 0 to 1024 [ 144.059873][ T9410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.116269][ T9410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.116356][ T9410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.133554][ T9420] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.133667][ T9420] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.171136][ T9420] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.171206][ T9420] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.230106][ T9420] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.230140][ T9420] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.242298][ T9429] random: crng reseeded on system resumption [ 144.344764][ T9420] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.344870][ T9420] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.555337][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2131'. [ 144.605864][ T29] kauditd_printk_skb: 749 callbacks suppressed [ 144.605881][ T29] audit: type=1326 audit(1762665609.212:17190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 144.635967][ T29] audit: type=1326 audit(1762665609.212:17191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 144.659984][ T29] audit: type=1326 audit(1762665609.252:17192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 144.683538][ T29] audit: type=1326 audit(1762665609.252:17193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 144.707045][ T29] audit: type=1326 audit(1762665609.252:17194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 144.730845][ T29] audit: type=1326 audit(1762665609.252:17195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 144.754439][ T29] audit: type=1326 audit(1762665609.252:17196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 144.778006][ T29] audit: type=1326 audit(1762665609.252:17197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 144.801501][ T29] audit: type=1326 audit(1762665609.252:17198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 144.825061][ T29] audit: type=1326 audit(1762665609.252:17199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 144.867353][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.923779][ T31] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.932030][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.945602][ T31] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.953851][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.993057][ T31] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.001355][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.003960][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2138'. [ 145.030860][ T31] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.039141][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.115133][ T9470] 9pnet: Could not find request transport: fd0x000000000000000a [ 145.143377][ T9476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2140'. [ 145.162530][ T9465] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.172367][ T9465] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.201832][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2145'. [ 145.227668][ T9465] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.237481][ T9465] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.271265][ T9486] netlink: 'syz.7.2149': attribute type 5 has an invalid length. [ 145.300610][ T9465] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.305516][ T9488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2147'. [ 145.310441][ T9465] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.372369][ T9498] random: crng reseeded on system resumption [ 145.391996][ T9465] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.397191][ T9504] netlink: 'syz.7.2157': attribute type 10 has an invalid length. [ 145.401814][ T9465] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.437416][ T9504] team0: Port device dummy0 added [ 145.583541][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2163'. [ 145.610098][ T9525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2165'. [ 145.771159][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 145.779439][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2172'. [ 145.827550][ T9552] loop5: detected capacity change from 0 to 1024 [ 145.839744][ T9552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.907382][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.915885][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.220123][ T9572] tipc: Enabled bearer , priority 0 [ 146.228491][ T9572] tipc: Resetting bearer [ 146.236651][ T9572] ip6tnl1: entered promiscuous mode [ 146.241877][ T9572] ip6tnl1: entered allmulticast mode [ 146.283670][ T9578] veth0: entered promiscuous mode [ 146.290925][ T9571] tipc: Disabling bearer [ 146.485139][ T9590] 9pnet_fd: Insufficient options for proto=fd [ 146.536806][ T4628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.578820][ T9601] loop5: detected capacity change from 0 to 1024 [ 146.597222][ T9601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.675950][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.684876][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.730736][ T9619] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 146.737343][ T9619] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 146.745466][ T9619] vhci_hcd vhci_hcd.0: Device attached [ 146.758199][ T9619] vhci_hcd vhci_hcd.0: port 0 already used [ 147.028378][ T9] usb 8-1: SetAddress Request (6) to port 0 [ 147.034382][ T9] usb 8-1: new SuperSpeed USB device number 6 using vhci_hcd [ 147.121031][ T9644] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.169501][ T9644] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.229322][ T9644] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.269938][ T9644] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.306208][ T4628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.336315][ T299] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.347869][ T4795] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.358773][ T4795] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.370258][ T4795] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.419213][ T9653] lo speed is unknown, defaulting to 1000 [ 147.425107][ T9653] lo speed is unknown, defaulting to 1000 [ 147.431135][ T9653] lo speed is unknown, defaulting to 1000 [ 147.438101][ T9653] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.449863][ T9653] lo speed is unknown, defaulting to 1000 [ 147.455971][ T9653] lo speed is unknown, defaulting to 1000 [ 147.471541][ T9653] lo speed is unknown, defaulting to 1000 [ 147.478025][ T9653] lo speed is unknown, defaulting to 1000 [ 147.484625][ T9653] lo speed is unknown, defaulting to 1000 [ 147.491431][ T9653] lo speed is unknown, defaulting to 1000 [ 147.501006][ T9620] vhci_hcd: connection reset by peer [ 147.506938][ T299] vhci_hcd: stop threads [ 147.511208][ T299] vhci_hcd: release socket [ 147.515642][ T299] vhci_hcd: disconnect device [ 147.670833][ T9651] lo speed is unknown, defaulting to 1000 [ 147.855258][ T9678] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.865063][ T9678] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 147.875034][ T9678] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 147.949582][ T9678] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.959393][ T9678] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 147.969309][ T9678] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 147.981651][ T9691] 9pnet_fd: Insufficient options for proto=fd [ 148.013048][ T9697] netlink: 'syz.7.2231': attribute type 10 has an invalid length. [ 148.034062][ T9678] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.043974][ T9678] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 148.053886][ T9678] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 148.069697][ T9697] team0: Port device dummy0 removed [ 148.076901][ T9697] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.140087][ T9678] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.149907][ T9678] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 148.159824][ T9678] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 148.219205][ T3499] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.227473][ T3499] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 148.235758][ T3499] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.278156][ T299] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.286449][ T299] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 148.286958][ T9713] loop3: detected capacity change from 0 to 1024 [ 148.294734][ T299] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.314517][ T299] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.322825][ T299] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 148.331124][ T299] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.341451][ T9713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.341762][ T9709] siw: device registration error -23 [ 148.354997][ T299] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.367010][ T299] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 148.375319][ T299] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.438796][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.447444][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.506956][ T9735] tipc: Enabled bearer , priority 0 [ 148.518258][ T9735] tipc: Resetting bearer [ 148.525867][ T9735] ip6tnl2: entered promiscuous mode [ 148.531316][ T9735] ip6tnl2: entered allmulticast mode [ 148.565128][ T31] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.573345][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.598212][ T299] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.606419][ T299] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.625051][ T299] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.633319][ T299] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.642603][ T299] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.650798][ T299] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.708550][ T9745] siw: device registration error -23 [ 148.841767][ T9768] netlink: 'syz.2.2260': attribute type 10 has an invalid length. [ 148.870917][ T9768] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.888387][ T9770] tipc: Enabled bearer , priority 0 [ 148.897428][ T9770] tipc: Resetting bearer [ 148.906306][ T9770] ip6tnl1: entered promiscuous mode [ 148.911571][ T9770] ip6tnl1: entered allmulticast mode [ 148.960589][ T9769] tipc: Disabling bearer [ 148.967804][ T9772] __nla_validate_parse: 18 callbacks suppressed [ 148.967820][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2261'. [ 148.984318][ T9774] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.995899][ T9772] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.005710][ T9772] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.039982][ T9774] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.057163][ T9778] loop5: detected capacity change from 0 to 1024 [ 149.069406][ T9778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.089873][ T9772] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.099633][ T9772] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.116920][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.130350][ T9774] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.144225][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.152691][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.153307][ T9783] siw: device registration error -23 [ 149.170174][ T9772] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.180022][ T9772] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.193518][ T9774] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.220459][ T9772] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.230354][ T9772] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.277049][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 149.414536][ T9803] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2273'. [ 149.465648][ T9805] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.494477][ T9808] loop2: detected capacity change from 0 to 1024 [ 149.508092][ T3408] tipc: Node number set to 425701788 [ 149.509520][ T9808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.526949][ T9805] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.569603][ T9805] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.592464][ T9808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.601081][ T9808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.619612][ T9805] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.675164][ T3499] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.686373][ T3499] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.697920][ T3499] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.708909][ T3499] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.740584][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 149.740598][ T29] audit: type=1326 audit(1762665614.352:17718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.3.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 149.781035][ T29] audit: type=1326 audit(1762665614.382:17719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.3.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 149.804605][ T29] audit: type=1326 audit(1762665614.382:17720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.3.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 149.828079][ T29] audit: type=1326 audit(1762665614.382:17721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.3.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 149.851620][ T29] audit: type=1326 audit(1762665614.382:17722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.3.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 149.875138][ T29] audit: type=1326 audit(1762665614.382:17723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.3.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 149.898701][ T29] audit: type=1326 audit(1762665614.382:17724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.3.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 149.922243][ T29] audit: type=1326 audit(1762665614.382:17725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.3.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 149.945770][ T29] audit: type=1326 audit(1762665614.382:17726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.3.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 149.969086][ T29] audit: type=1326 audit(1762665614.382:17727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.3.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 149.993739][ T4628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.056049][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2278'. [ 150.065667][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2278'. [ 150.094610][ T9820] loop5: detected capacity change from 0 to 128 [ 150.128965][ T9824] netlink: 'syz.5.2281': attribute type 5 has an invalid length. [ 150.231243][ T9828] netlink: 'syz.5.2283': attribute type 10 has an invalid length. [ 150.239939][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.334332][ T9834] 9pnet: Could not find request transport: fd0x000000000000000a [ 150.620706][ T9851] netlink: 'syz.3.2293': attribute type 10 has an invalid length. [ 150.637461][ T9851] bond0: (slave dummy0): Releasing backup interface [ 150.646554][ T9851] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 150.655523][ T9851] team0: Failed to send options change via netlink (err -105) [ 150.663074][ T9851] team0: Port device dummy0 added [ 150.788418][ T9857] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2295'. [ 150.847744][ T3499] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.866447][ T3499] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.874918][ T3499] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.886574][ T3499] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.017866][ T9878] netlink: 'syz.2.2305': attribute type 10 has an invalid length. [ 151.133112][ T9886] random: crng reseeded on system resumption [ 151.441098][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2316'. [ 151.561084][ T9914] netlink: 'syz.2.2319': attribute type 10 has an invalid length. [ 151.569760][ T9914] bond0: (slave dummy0): Releasing backup interface [ 151.579058][ T9912] siw: device registration error -23 [ 151.841975][ T9929] netlink: 'syz.3.2325': attribute type 5 has an invalid length. [ 152.030330][ T9941] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.079837][ T9941] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.124048][ T9] usb 8-1: device descriptor read/8, error -110 [ 152.132164][ T9941] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.170866][ T9941] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.203391][ T4795] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.211699][ T4795] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.224610][ T4795] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.224648][ T4795] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.227299][ T4795] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.227332][ T4795] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.230856][ T4795] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.230925][ T4795] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.243219][ T9] usb 8-1: new SuperSpeed USB device number 6 using vhci_hcd [ 152.265827][ T9] usb 8-1: enqueue for inactive port 0 [ 152.265858][ T9] usb 8-1: enqueue for inactive port 0 [ 152.265886][ T9] usb 8-1: enqueue for inactive port 0 [ 152.372292][ T9961] loop7: detected capacity change from 0 to 164 [ 152.389251][ T9961] Unable to read rock-ridge attributes [ 152.409853][ T9969] random: crng reseeded on system resumption [ 152.473745][ T9964] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 152.534135][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2343'. [ 152.683896][ T9984] loop2: detected capacity change from 0 to 1024 [ 152.714771][ T9984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.744781][ T9993] netlink: 'syz.5.2349': attribute type 10 has an invalid length. [ 152.783878][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.783981][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.278837][ T9] usb usb8-port1: attempt power cycle [ 153.427492][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.457059][T10021] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 153.460797][T10029] netlink: 'syz.2.2364': attribute type 5 has an invalid length. [ 153.463739][T10021] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 153.463869][T10021] vhci_hcd vhci_hcd.0: Device attached [ 153.495006][T10031] random: crng reseeded on system resumption [ 153.504829][T10021] vhci_hcd vhci_hcd.0: port 0 already used [ 153.581212][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.607830][T10035] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.617648][T10035] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 153.627513][T10035] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 153.649300][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.668370][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.676745][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.694355][T10035] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.704216][T10035] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 153.714220][T10035] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 153.778103][ T3415] usb 14-1: SetAddress Request (2) to port 0 [ 153.784257][ T3415] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 153.797903][T10035] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.807671][T10035] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 153.817526][T10035] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 153.862627][T10051] loop3: detected capacity change from 0 to 128 [ 153.874166][T10051] bio_check_eod: 30 callbacks suppressed [ 153.874210][T10051] syz.3.2373: attempt to access beyond end of device [ 153.874210][T10051] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 153.893984][T10051] syz.3.2373: attempt to access beyond end of device [ 153.893984][T10051] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 153.894302][T10035] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.907428][T10051] buffer_io_error: 16 callbacks suppressed [ 153.907442][T10051] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 153.917144][T10035] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 153.923081][T10051] syz.3.2373: attempt to access beyond end of device [ 153.923081][T10051] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 153.931461][T10035] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 153.941185][T10051] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 153.941421][T10051] syz.3.2373: attempt to access beyond end of device [ 153.941421][T10051] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 153.986568][T10051] syz.3.2373: attempt to access beyond end of device [ 153.986568][T10051] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 154.000362][T10051] syz.3.2373: attempt to access beyond end of device [ 154.000362][T10051] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 154.013856][T10051] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 154.022481][T10051] syz.3.2373: attempt to access beyond end of device [ 154.022481][T10051] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 154.035918][T10051] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 154.044976][T10051] syz.3.2373: attempt to access beyond end of device [ 154.044976][T10051] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 154.058748][T10051] syz.3.2373: attempt to access beyond end of device [ 154.058748][T10051] loop3: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 154.072267][T10051] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 154.081091][T10051] syz.3.2373: attempt to access beyond end of device [ 154.081091][T10051] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 154.094480][T10051] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 154.103768][T10051] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 154.112416][T10051] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 154.124759][T10051] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 154.133475][ T4795] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.141698][ T4795] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.149969][ T4795] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.160640][T10051] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 154.173558][ T4795] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.181827][ T4795] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.190091][ T4795] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.199490][ T4795] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.207668][ T4795] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.215950][ T4795] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.224230][ T4795] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.232419][ T4795] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 154.236973][T10026] vhci_hcd: connection reset by peer [ 154.240698][ T4795] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.254811][ T4795] vhci_hcd: stop threads [ 154.259156][ T4795] vhci_hcd: release socket [ 154.263588][ T4795] vhci_hcd: disconnect device [ 154.274130][T10056] loop2: detected capacity change from 0 to 1024 [ 154.289791][T10056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.359759][T10056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.377779][T10056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.385893][T10062] loop5: detected capacity change from 0 to 128 [ 154.413285][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2379'. [ 154.491431][T10072] bridge3: entered promiscuous mode [ 154.496696][T10072] bridge3: entered allmulticast mode [ 154.503538][T10072] team0: Port device bridge3 added [ 154.685964][T10084] netlink: 'syz.5.2386': attribute type 10 has an invalid length. [ 155.051027][T10090] lo speed is unknown, defaulting to 1000 [ 155.058868][T10096] loop7: detected capacity change from 0 to 164 [ 155.069739][T10096] Unable to read rock-ridge attributes [ 155.127113][T10098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2392'. [ 155.148860][ T9] usb usb8-port1: unable to enumerate USB device [ 155.208570][T10093] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 155.348386][ T29] kauditd_printk_skb: 1471 callbacks suppressed [ 155.348402][ T29] audit: type=1326 audit(1762665619.962:19199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 155.378386][ T29] audit: type=1326 audit(1762665619.962:19200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 155.415170][ T29] audit: type=1326 audit(1762665619.962:19201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 155.439001][ T29] audit: type=1326 audit(1762665619.962:19202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 155.439231][ T29] audit: type=1326 audit(1762665619.962:19203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.5.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae63f5f6c9 code=0x7ffc0000 [ 155.439265][ T29] audit: type=1326 audit(1762665619.962:19204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 155.439295][ T29] audit: type=1326 audit(1762665619.962:19206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 155.439386][ T29] audit: type=1326 audit(1762665619.962:19207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 155.439419][ T29] audit: type=1326 audit(1762665619.962:19208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 155.439449][ T29] audit: type=1326 audit(1762665619.962:19205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b7e3f6c9 code=0x7ffc0000 [ 155.864055][T10136] bridge2: entered promiscuous mode [ 155.869331][T10136] bridge2: entered allmulticast mode [ 155.877338][T10136] team0: Port device bridge2 added [ 155.915757][T10142] loop6: detected capacity change from 0 to 1024 [ 155.976350][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2412'. [ 155.986741][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.995563][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.026689][T10151] tipc: Started in network mode [ 156.031779][T10151] tipc: Node identity 4e5437a3f23d, cluster identity 4711 [ 156.039052][T10151] tipc: Enabled bearer , priority 0 [ 156.048668][T10151] tipc: Resetting bearer [ 156.066407][T10151] ip6tnl1: entered promiscuous mode [ 156.071728][T10151] ip6tnl1: entered allmulticast mode [ 156.143593][T10150] tipc: Disabling bearer [ 156.240668][T10167] 9pnet_fd: Insufficient options for proto=fd [ 156.293002][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2423'. [ 156.407241][T10180] loop3: detected capacity change from 0 to 164 [ 156.416406][T10180] Unable to read rock-ridge attributes [ 156.459442][T10188] siw: device registration error -23 [ 156.531325][T10197] loop7: detected capacity change from 0 to 128 [ 157.009174][T10227] siw: device registration error -23 [ 157.069478][T10231] loop6: detected capacity change from 0 to 1024 [ 157.147159][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.176160][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.250732][T10243] loop5: detected capacity change from 0 to 128 [ 157.363602][T10220] lo speed is unknown, defaulting to 1000 [ 157.602714][T10260] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 157.609470][T10260] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.617589][T10260] vhci_hcd vhci_hcd.0: Device attached [ 157.625002][T10260] vhci_hcd vhci_hcd.0: port 0 already used [ 157.641886][T10268] siw: device registration error -23 [ 157.717491][T10279] netlink: 'syz.5.2465': attribute type 5 has an invalid length. [ 157.797857][T10281] loop5: detected capacity change from 0 to 128 [ 157.839922][ T7740] EXT4-fs unmount: 4 callbacks suppressed [ 157.839933][ T7740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.888493][ T36] usb 16-1: SetAddress Request (2) to port 0 [ 157.894522][ T36] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 158.011725][T10295] siw: device registration error -23 [ 158.035587][T10297] loop5: detected capacity change from 0 to 1024 [ 158.049824][T10297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.128362][T10307] tipc: Enabled bearer , priority 0 [ 158.137911][T10307] tipc: Resetting bearer [ 158.146654][T10307] ip6tnl1: entered promiscuous mode [ 158.151941][T10307] ip6tnl1: entered allmulticast mode [ 158.153578][T10297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.167633][T10297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.175753][T10312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2479'. [ 158.212200][T10305] tipc: Disabling bearer [ 158.394844][T10261] vhci_hcd: connection reset by peer [ 158.395115][ T3499] vhci_hcd: stop threads [ 158.395125][ T3499] vhci_hcd: release socket [ 158.395138][ T3499] vhci_hcd: disconnect device [ 158.561079][T10326] siw: device registration error -23 [ 158.795001][T10328] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2485'. [ 158.813893][ T4628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.838311][ T3415] usb 14-1: device descriptor read/8, error -110 [ 158.948207][ T3415] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 158.968200][ T3415] usb 14-1: enqueue for inactive port 0 [ 158.973811][ T3415] usb 14-1: enqueue for inactive port 0 [ 158.994419][ T3415] usb 14-1: enqueue for inactive port 0 [ 159.022124][T10345] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2492'. [ 159.109466][T10350] netlink: 'syz.7.2493': attribute type 16 has an invalid length. [ 159.117345][T10350] netlink: 'syz.7.2493': attribute type 17 has an invalid length. [ 159.150748][T10356] loop5: detected capacity change from 0 to 1024 [ 159.157476][T10350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.173109][ T1052] lo speed is unknown, defaulting to 1000 [ 159.183212][T10356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.235788][T10364] loop3: detected capacity change from 0 to 128 [ 159.238296][T10365] netlink: 'syz.6.2498': attribute type 16 has an invalid length. [ 159.249904][T10365] netlink: 'syz.6.2498': attribute type 17 has an invalid length. [ 159.252837][T10356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.266370][T10356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.281381][T10365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.285241][T10364] bio_check_eod: 190 callbacks suppressed [ 159.285260][T10364] syz.3.2499: attempt to access beyond end of device [ 159.285260][T10364] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 159.316416][T10364] syz.3.2499: attempt to access beyond end of device [ 159.316416][T10364] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 159.329823][T10364] buffer_io_error: 120 callbacks suppressed [ 159.329838][T10364] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 159.344515][T10364] syz.3.2499: attempt to access beyond end of device [ 159.344515][T10364] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 159.357970][T10364] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 159.366568][T10364] syz.3.2499: attempt to access beyond end of device [ 159.366568][T10364] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 159.380542][T10364] syz.3.2499: attempt to access beyond end of device [ 159.380542][T10364] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 159.394469][T10364] syz.3.2499: attempt to access beyond end of device [ 159.394469][T10364] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 159.407927][T10364] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 159.416632][T10364] syz.3.2499: attempt to access beyond end of device [ 159.416632][T10364] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 159.430081][T10364] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 159.438881][T10364] syz.3.2499: attempt to access beyond end of device [ 159.438881][T10364] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 159.453099][T10364] syz.3.2499: attempt to access beyond end of device [ 159.453099][T10364] loop3: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 159.466495][T10364] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 159.475003][T10364] syz.3.2499: attempt to access beyond end of device [ 159.475003][T10364] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 159.488366][T10364] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 159.497468][T10364] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 159.506132][T10364] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 159.515134][T10364] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 159.523671][T10364] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 159.745729][T10375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2503'. [ 159.876505][T10379] ================================================================== [ 159.884600][T10379] BUG: KCSAN: data-race in n_tty_receive_buf_standard / n_tty_write [ 159.892571][T10379] [ 159.894874][T10379] write to 0xffffc90006b35028 of 8 bytes by task 10380 on cpu 1: [ 159.902564][T10379] n_tty_receive_buf_standard+0x2bea/0x2f10 [ 159.908442][T10379] n_tty_receive_buf_common+0x805/0xbe0 [ 159.913975][T10379] n_tty_receive_buf+0x30/0x40 [ 159.918720][T10379] tiocsti+0x170/0x1d0 [ 159.922765][T10379] tty_ioctl+0x4a4/0xb80 [ 159.926986][T10379] __se_sys_ioctl+0xce/0x140 [ 159.931552][T10379] __x64_sys_ioctl+0x43/0x50 [ 159.936120][T10379] x64_sys_call+0x1816/0x3000 [ 159.940776][T10379] do_syscall_64+0xd2/0x200 [ 159.945258][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.951145][T10379] [ 159.953446][T10379] read to 0xffffc90006b35028 of 8 bytes by task 10379 on cpu 0: [ 159.961059][T10379] n_tty_write+0x14f/0xb40 [ 159.965459][T10379] file_tty_write+0x378/0x690 [ 159.970117][T10379] tty_write+0x25/0x30 [ 159.974177][T10379] vfs_write+0x52a/0x960 [ 159.978414][T10379] ksys_write+0xda/0x1a0 [ 159.982653][T10379] __x64_sys_write+0x40/0x50 [ 159.987237][T10379] x64_sys_call+0x2802/0x3000 [ 159.991908][T10379] do_syscall_64+0xd2/0x200 [ 159.996408][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.002291][T10379] [ 160.004598][T10379] value changed: 0x0000000000000000 -> 0x0000000000000003 [ 160.011686][T10379] [ 160.013992][T10379] Reported by Kernel Concurrency Sanitizer on: [ 160.020126][T10379] CPU: 0 UID: 0 PID: 10379 Comm: syz.3.2505 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.031491][T10379] Tainted: [W]=WARN [ 160.035273][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.045311][T10379] ================================================================== [ 160.054045][ T3415] usb usb14-port1: attempt power cycle [ 160.075389][ T4628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.908371][ T3415] usb usb14-port1: unable to enumerate USB device [ 163.008108][ T36] usb 16-1: device descriptor read/8, error -110 [ 163.118095][ T36] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 163.138166][ T36] usb 16-1: enqueue for inactive port 0 [ 163.143768][ T36] usb 16-1: enqueue for inactive port 0 [ 163.149328][ T36] usb 16-1: enqueue for inactive port 0 [ 164.168393][ T36] usb usb16-port1: attempt power cycle [ 165.998415][ T36] usb usb16-port1: unable to enumerate USB device