last executing test programs: 4m13.352817315s ago: executing program 0 (id=129): r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x138) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000013000100"/18, @ANYRES32=0x0, @ANYBLOB="00010000000000001400030064756d6d793000000000000000000000050021"], 0x3c}}, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x6) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4084) openat$cgroup_int(r5, &(0x7f0000000100)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x9) r6 = dup3(r3, r4, 0x80000) recvmsg$can_bcm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/127, 0x7f}, {&(0x7f0000000740)=""/140, 0x8c}, {&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000001980)=""/95, 0x5f}, {&(0x7f0000001a00)=""/166, 0xa6}, {&(0x7f0000001ac0)=""/189, 0xbd}, {&(0x7f0000001b80)=""/253, 0xfd}], 0x8, &(0x7f0000001d00)=""/230, 0xe6}, 0x10021) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000001e00)={r2, 0x5, 0x5, 0x2418000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000880)='fsi_master_gpio_out\x00', r8, 0x0, 0x7f}, 0x18) pwritev(r7, 0x0, 0x0, 0x0, 0x0) 4m13.233373823s ago: executing program 0 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff7b) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES16=r0, @ANYRES16=r1, @ANYRES64=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x400000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000180)={0x40, 0x81, 0xfffffff9}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000100)=0x1f99, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) rename(0x0, 0x0) 4m13.201011886s ago: executing program 0 (id=131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 4m13.082410325s ago: executing program 0 (id=134): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021241300001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000f8120380300000802c000180250001"], 0x13a8}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x2}) 4m12.370333228s ago: executing program 0 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r3}, 0x18) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000700)=[{0x200000000006, 0x0, 0xd, 0x7ffc0001}]}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2000000, &(0x7f00000006c0)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@hash}, {@dont_measure}]}, 0x1, 0x78a, &(0x7f0000000a00)="$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") 4m11.766463432s ago: executing program 0 (id=159): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) mkdir(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) eventfd2(0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 4m11.714181446s ago: executing program 32 (id=159): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) mkdir(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) eventfd2(0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 977.792638ms ago: executing program 5 (id=4270): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x65, "381ede", "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"}}, 0x110) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) shutdown(r1, 0x1) 883.611825ms ago: executing program 5 (id=4275): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00') ioctl$TUNGETVNETHDRSZ(r0, 0xb701, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000784d00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x1, 0x0, 0x6, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_cswp={0x58, 0x114, 0x9, {{0xa69b, 0x2001}, &(0x7f0000000180)=0x2a, 0x0, 0x2, 0x100, 0x6, 0x1, 0x3a, 0x5}}], 0x58}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='xprtrdma_createmrs\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendto(r3, &(0x7f0000000200)="11aee21dad5d3c588485df6bf43f7e7acc12e69f29d1ebd4aa88e0bc5ad318ec8c40430d6f425b95848e4965ec672b54395d5741ba87e6e2dd7cf23b560d3e72701db56eddc359785aeca5bf6536b83620de7c1896b861d3a8f8a1035696a228f4e8fe75d35295ee6d9e2e5892984f117168", 0x72, 0x1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x2, @local}}}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000fff700"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pidfd_getfd(0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, 0x1}, 0x38) 879.030815ms ago: executing program 3 (id=4276): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 839.276418ms ago: executing program 5 (id=4277): getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8, @ANYRES64], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1000002, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000840)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x8f, @mcast2, 0x5}}}, 0xa0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000001a40)={0x13, 0x10, 0xfa00, {&(0x7f0000001840), r3, 0x2}}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a00000200"], 0x10}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xd, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 816.89103ms ago: executing program 3 (id=4278): r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/48], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x6}, 0x1206c, 0x80, 0xb, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000003d00fa00deff13090000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000402010000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000020100180000000000000000000000000000009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000001040)=""/96, &(0x7f00000010c0)=0x60) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 537.74514ms ago: executing program 4 (id=4284): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='cachefiles_unlink\x00', r0, 0x0, 0x10000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0002"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008564e45fdf4000008510000004000000040800000000000018000000000000000000000001000000950000000000000095000000000000007d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 523.976422ms ago: executing program 1 (id=4285): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x65, "381ede", "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"}}, 0x110) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) shutdown(r1, 0x1) 458.629916ms ago: executing program 1 (id=4286): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0x300, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x9, 0x0, 0xa, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0xff, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 458.351326ms ago: executing program 5 (id=4287): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote={0xfb}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x11}}}}}}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001380)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x270, 0x2e8, 0x2e8, 0x270, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x178, 0x1a8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@rateest={{0x68}, {'bridge0\x00', 'rose0\x00', 0x10, 0x1, 0x6, 0x7, 0x9, 0xe5f1, {0x6980000000000000}, {0x4}}}, @common=@unspec=@physdev={{0x68}, {'macvlan1\x00', {}, 'wlan1\x00', {0xff}, 0x8, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0x4}, {0x2, 0x3, 0x2}, 0x9, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) eventfd2(0x4008, 0x80000) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/net\x00') 458.157086ms ago: executing program 1 (id=4288): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1b4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x114, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0xf8, 0x6, [@m_nat={0xc8, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x9e, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92dc41f8de6392fb42903838dda4a8bcd9ea2a7ef200b02fb961cc3dddbb717e88bb314bbce94391f87d06a838a9957ccce7feaaf32e9d14398b60f4b34967f32f57c2d3d6939ab4bb4f2ac96daa3247403e773d7b7b15514a5fdc891227676c981222abfb6fffff71541e4446e5"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 453.755287ms ago: executing program 2 (id=4289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x228, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x188, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0x16c, 0x6, [@m_nat={0xf8, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xd0, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92dc41f8de6392fb42903838dda4a8bcd9ea2a7ef200b02fb961cc3dddbb717e88bb314bbce94391f87d06a838a9957ccce7feaaf32e9d14398b60f4b34967f32f57c2d3d6939ab4bb4f2ac96daa3247403e773d7b7b15514a5fdc891227676c981222abfb6fffff71541e4446e5f84c25e6f1726ead4d745a9f2873238be9c01f079bd0570908230594952760f061e6a9b1d33407bf97206ff710133b30ea75"}, {0xc}, {0xc}}}, @m_connmark={0x3c, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x9, 0x6, 'f9ns,'}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x34, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x9, 0x6, "ca8fd735f4"}, {0xc}, {0xc}}}]}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 452.652257ms ago: executing program 4 (id=4290): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 397.301441ms ago: executing program 4 (id=4291): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1b4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x114, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0xf8, 0x6, [@m_nat={0xc8, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x9e, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92dc41f8de6392fb42903838dda4a8bcd9ea2a7ef200b02fb961cc3dddbb717e88bb314bbce94391f87d06a838a9957ccce7feaaf32e9d14398b60f4b34967f32f57c2d3d6939ab4bb4f2ac96daa3247403e773d7b7b15514a5fdc891227676c981222abfb6fffff71541e4446e5"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 377.344722ms ago: executing program 2 (id=4292): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0) 366.993323ms ago: executing program 1 (id=4293): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x1ffffd, 0x200000, 0x1, 0x0, 0x6, 0x200}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000003c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readahead(r1, 0x5, 0x4) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r2, &(0x7f0000000180)="8b3a15397af108ac022dc3b9dcbd5c2048f7af4123a632c7c82a162e542f0e85ac3d5cb21c7dbdb8eb23ce9e343bfc9f298fcdd755cf1b453dfe06ab7072eb514e5f658d9f455f9584074c074e1c44b7e9f43bab3c852c4aa57f9e999c3bf24a24ddb78dc052c4497fa98bf3f1800119ee1d1ce227fc8604c00ea80a6ab1fb994b2d674a446cddd8bb3cd4bc716b304bb847be3470616acd8b3038066a061dcc006ea620629e12d958c5c6e9a991dab34c55729d046b7b1cb5844410535a2912ca7bf6f5909ed4ba", 0xc8) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={0x1, 0xd}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000400)={0x1be, 0x19, &(0x7f0000000980)}) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 354.944594ms ago: executing program 2 (id=4294): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000040)={'system_u:object_r:modem_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x4}, 0x67) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0', [{0x20, 'wpan0\x00'}, {0x20, '\x00'}, {0x20, 'sched_switch\x00'}, {0x20, ':'}, {0x20, '802.15.4 MAC\x00'}, {0x20, '-%!-'}, {0x20, 'kfree\x00'}, {0x20, 'virtio_transport_alloc_pkt\x00'}, {0x20, '(]'}, {0x20, '802.15.4 MAC\x00'}]}, 0x6b) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, 0x0, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 336.316745ms ago: executing program 3 (id=4295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0, 0x66}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000980)={'syz', 0x0}, &(0x7f0000000740)='lon\x00', 0xfffffffffffffffc) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000ec0)={@ipv4, 0x0}, &(0x7f0000000f80)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000fc0)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x7fffffff, 0xffff, {{0x14, 0x4, 0x0, 0x8, 0x50, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x18, 0x3, [{0x5, 0x7, "8ea0df68b5"}, {0x2, 0xb, "dca24d653cb08f17f4"}]}, @noop, @ssrr={0x89, 0xb, 0x84, [@rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x11, "ce952f2e7f1cb96725faf7b7d62127"}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000001740)=ANY=[@ANYBLOB="30050000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf25030000000800010082e2e5984d1746a1fb3ea84074b824143dbc66aa0e2d5b05096014ece8af4d0e536ed61e76bbf4de001e63e85c636b2ff5c38ab9027af2d58878078d5fac2f398ffa4569f297130b56ff3d3d63d15ce6f66d2036f95f2dcb4fe1409cf3e673d80bc733988ec622d9a0c15b7cb6fb27a5", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="d801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400adb0000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000d00000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="2181dcc49091cbf508000100", @ANYRES32=0x0, @ANYBLOB="6801028040000100240001006c625f706f72745f73746174730000000000000000000000000000000000000000000000000000593c3ec950e5fd40e474cb16bd81ea5b4734338534023dec1742b067119c8e47eed375c1a4a5c85612b57e37a04025dfc7f8b6c94ed24ea1420b28a75e4bedc64c350819335a1b474f13d411b7892ce0ad9ab27c51c27f341ee49a4a45af3fc2031f4adf83f191585943c4aaf91e5e466b83a02d1f93cc1cb46c91170cd55c3800"/192, @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040016000bf90500000008000100", @ANYRES32, @ANYBLOB="bc00028040000100240600000072696f726974790000000000000000000000d0f50bdcbc5b798300b2a37a8212afaeb700000000050003000e00000008000400", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=r5, @ANYBLOB], 0x530}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) 312.707637ms ago: executing program 2 (id=4296): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x9, 0x0, 0xa, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0xff, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 312.496397ms ago: executing program 4 (id=4297): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x9, 0x0, 0xa, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0xff, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (fail_nth: 1) 309.807507ms ago: executing program 3 (id=4298): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x1, 0x0, 0x6, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 301.147548ms ago: executing program 5 (id=4299): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f0000000240)={0x4000, 0x0, 0x0, @thr={0x0, 0x0}}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x0, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x118, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'team_slave_0\x00', 'syzkaller0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REJECT={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'xfrm0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "80db"}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x5, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) time(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_notify(r0, &(0x7f0000000040)={0x0, 0x3}) 287.106589ms ago: executing program 2 (id=4300): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x1bd15000) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) (async) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="97", 0x1}], 0x1}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f00001b4000/0x4000)=nil) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) umount2(&(0x7f0000000000)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 83.192984ms ago: executing program 3 (id=4301): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 71.637875ms ago: executing program 5 (id=4302): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) fstat(r0, &(0x7f0000003ac0)) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000400)={r9, 0x8, 0x80000800, 0x5}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r9, @in6={{0xa, 0x4e20, 0x6, @local, 0x101}}, 0x100, 0x8, 0x7, 0x8, 0x7a, 0xc22c, 0x6e}, 0x9c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) uname(&(0x7f0000000000)=""/123) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x9, 0x0, 0xa, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0xff, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$rds(r4, &(0x7f0000001080)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/30, 0x1e}, {&(0x7f00000007c0)=""/240, 0xf0}], 0x4, &(0x7f0000000f80)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000980)=""/172, 0xac}, &(0x7f0000000700), 0x186d32056c40e63a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5}, @zcopy_cookie={0x18, 0x114, 0xc, 0xd}, @mask_cswp={0x58, 0x114, 0x9, {{0xfff, 0x1400000}, &(0x7f0000000740)=0x5, &(0x7f0000000a40)=0x7fffffff, 0x1ff, 0x8, 0x2, 0x6, 0x71, 0xc}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0x9}, {&(0x7f0000000a80)=""/250, 0xfa}, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/158, 0x9e}, {&(0x7f0000000c40)=""/137, 0x89}, {&(0x7f0000000d80)=""/238, 0xee}, {&(0x7f0000000e80)=""/160, 0xa0}], 0x4, 0x40, 0x1}}], 0x100, 0xc021}, 0x80) 71.358605ms ago: executing program 4 (id=4303): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x224, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x184, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x170, 0x6, [@m_nat={0xfc, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xd1, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92dc41f8de6392fb42903838dda4a8bcd9ea2a7ef200b02fb961cc3dddbb717e88bb314bbce94391f87d06a838a9957ccce7feaaf32e9d14398b60f4b34967f32f57c2d3d6939ab4bb4f2ac96daa3247403e773d7b7b15514a5fdc891227676c981222abfb6fffff71541e4446e5f84c25e6f1726ead4d745a9f2873238be9c01f079bd0570908230594952760f061e6a9b1d33407bf97206ff710133b30ea75d7"}, {0xc}, {0xc}}}, @m_connmark={0x3c, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x9, 0x6, 'f9ns,'}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x34, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x9, 0x6, "ca8fd735f4"}, {0xc}, {0xc}}}]}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 47.523847ms ago: executing program 1 (id=4304): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0) 18.841569ms ago: executing program 2 (id=4305): r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/48], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x6}, 0x1206c, 0x80, 0xb, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000003d00fa00deff13090000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000402010000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000020100180000000000000000000000000000009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000001040)=""/96, &(0x7f00000010c0)=0x60) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 18.482439ms ago: executing program 4 (id=4306): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) sync() 6.25572ms ago: executing program 1 (id=4307): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000040)={'system_u:object_r:modem_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x4}, 0x67) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0', [{0x20, 'wpan0\x00'}, {0x20, '\x00'}, {0x20, 'sched_switch\x00'}, {0x20, ':'}, {0x20, '802.15.4 MAC\x00'}, {0x20, '-%!-'}, {0x20, 'kfree\x00'}, {0x20, 'virtio_transport_alloc_pkt\x00'}, {0x20, '(]'}, {0x20, '802.15.4 MAC\x00'}]}, 0x6b) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, 0x0, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 0s ago: executing program 3 (id=4308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0, 0x66}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000980)={'syz', 0x0}, &(0x7f0000000740)='lon\x00', 0xfffffffffffffffc) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000ec0)={@ipv4, 0x0}, &(0x7f0000000f80)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000fc0)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x7fffffff, 0xffff, {{0x14, 0x4, 0x0, 0x8, 0x50, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x18, 0x3, [{0x5, 0x7, "8ea0df68b5"}, {0x2, 0xb, "dca24d653cb08f17f4"}]}, @noop, @ssrr={0x89, 0xb, 0x84, [@rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x11, "ce952f2e7f1cb96725faf7b7d62127"}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000001740)=ANY=[@ANYBLOB="30050000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf25030000000800010082e2e5984d1746a1fb3ea84074b824143dbc66aa0e2d5b05096014ece8af4d0e536ed61e76bbf4de001e63e85c636b2ff5c38ab9027af2d58878078d5fac2f398ffa4569f297130b56ff3d3d63d15ce6f66d2036f95f2dcb4fe1409cf3e673d80bc733988ec622d9a0c15b7cb6fb27a5", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="d801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400adb0000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000d00000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="2181dcc49091cbf508000100", @ANYRES32=0x0, @ANYBLOB="6801028040000100240001006c625f706f72745f73746174730000000000000000000000000000000000000000000000000000593c3ec950e5fd40e474cb16bd81ea5b4734338534023dec1742b067119c8e47eed375c1a4a5c85612b57e37a04025dfc7f8b6c94ed24ea1420b28a75e4bedc64c350819335a1b474f13d411b7892ce0ad9ab27c51c27f341ee49a4a45af3fc2031f4adf83f191585943c4aaf91e5e466b83a02d1f93cc1cb46c91170cd55c3800"/192, @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040016000bf90500000008000100", @ANYRES32, @ANYBLOB="bc00028040000100240600000072696f726974790000000000000000000000d0f50bdcbc5b798300b2a37a8212afaeb700000000050003000e00000008000400", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=r5, @ANYBLOB], 0x530}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) kernel console output (not intermixed with test programs): on device bond0 [ 248.598012][T12056] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.617356][T12056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.627783][T12056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.640954][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.648061][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.657023][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.664178][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.727430][T12056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.805125][T12056] veth0_vlan: entered promiscuous mode [ 248.820924][T12253] xt_CT: No such helper "pptp" [ 248.822833][T12056] veth1_vlan: entered promiscuous mode [ 248.843596][T12056] veth0_macvtap: entered promiscuous mode [ 248.852098][T12056] veth1_macvtap: entered promiscuous mode [ 248.862990][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.873501][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.884787][T12056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.918612][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.929175][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.940312][T12056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.960368][T12056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.969127][T12056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.977957][T12056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.986739][T12056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.008940][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x4 [ 249.016760][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x2 [ 249.039662][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.047365][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.055096][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.062836][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.070528][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.078279][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.085979][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.093723][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.101469][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.109128][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.116807][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.124502][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.132352][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.140111][ T3374] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0 [ 249.149836][ T3374] hid-generic 0000:3000000:0000.0034: hidraw0: HID v0.00 Device [sy] on syz0 [ 250.036212][T12270] chnl_net:caif_netlink_parms(): no params data found [ 250.115492][T12270] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.122755][T12270] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.132036][T12270] bridge_slave_0: entered allmulticast mode [ 250.138537][T12270] bridge_slave_0: entered promiscuous mode [ 250.145718][T12270] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.152826][T12270] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.160429][T12270] bridge_slave_1: entered allmulticast mode [ 250.167013][T12270] bridge_slave_1: entered promiscuous mode [ 250.182320][T12308] 9pnet_fd: Insufficient options for proto=fd [ 250.220867][T12270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.238806][T12270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.258527][T12309] xt_CT: No such helper "pptp" [ 250.276862][T12270] team0: Port device team_slave_0 added [ 250.289474][T12270] team0: Port device team_slave_1 added [ 250.315954][T12270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.323055][T12270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.349339][T12270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.362924][T12270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.367144][T12320] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 250.369929][T12270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.404262][T12270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.420290][T12320] gretap0: entered promiscuous mode [ 250.428005][T12320] gretap0: left promiscuous mode [ 250.455288][T12322] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3225'. [ 250.467346][T12270] hsr_slave_0: entered promiscuous mode [ 250.474353][T12270] hsr_slave_1: entered promiscuous mode [ 250.481297][T12270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.489266][T12270] Cannot create hsr debugfs directory [ 250.785706][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.793377][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.800803][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.808237][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.815663][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.823132][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.830541][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.837969][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.845505][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.853050][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.860556][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.868040][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.875451][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.882972][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.890471][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.897862][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.905287][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.912693][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.920131][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.927526][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.935007][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.942439][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.949846][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.957221][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.964628][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.972053][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.979461][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.986875][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 250.994283][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 251.001693][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 251.009082][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 251.016485][ T3374] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 251.050791][ T3374] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [sy] on syz0 [ 251.161460][T12270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.255506][T12270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.269831][T12351] xt_CT: No such helper "pptp" [ 251.330373][T12270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.382111][T12354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3237'. [ 251.405731][T12270] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.515384][T12270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.534886][T12270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.554454][T12270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.575304][T12358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3238'. [ 251.608960][T12270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.673167][T12270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.685562][T12270] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.695497][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.702597][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.715299][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.722469][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.739125][T12270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.749583][T12270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.914597][T12270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.932829][T12385] netlink: 'syz.5.3249': attribute type 4 has an invalid length. [ 252.321850][T12403] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 252.446241][T12270] veth0_vlan: entered promiscuous mode [ 252.463542][T12270] veth1_vlan: entered promiscuous mode [ 252.502518][T12270] veth0_macvtap: entered promiscuous mode [ 252.517971][T12270] veth1_macvtap: entered promiscuous mode [ 252.534323][T12428] netlink: 'syz.5.3260': attribute type 4 has an invalid length. [ 252.547280][T12270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.558080][T12270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.567948][T12270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.578415][T12270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.589224][T12270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.600992][T12270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.611542][T12270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.621409][T12270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.631877][T12270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.693655][T12270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.716076][T12270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.725017][T12270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.733974][T12270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.742821][T12270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.848961][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 252.848975][ T29] audit: type=1326 audit(1739612262.838:20140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 252.878860][ T29] audit: type=1326 audit(1739612262.838:20141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 252.902747][ T29] audit: type=1326 audit(1739612262.838:20142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 252.926500][ T29] audit: type=1326 audit(1739612262.838:20143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 252.950281][ T29] audit: type=1326 audit(1739612262.838:20144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 252.973910][ T29] audit: type=1326 audit(1739612262.838:20145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 252.997568][ T29] audit: type=1326 audit(1739612262.838:20146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 253.021373][ T29] audit: type=1326 audit(1739612262.838:20147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 253.044977][ T29] audit: type=1326 audit(1739612262.838:20148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 253.068794][ T29] audit: type=1326 audit(1739612262.838:20149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 253.372886][T12461] netlink: 'syz.3.3273': attribute type 4 has an invalid length. [ 253.818083][T12470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3276'. [ 254.614514][T12491] chnl_net:caif_netlink_parms(): no params data found [ 254.760465][T12519] xt_CT: No such helper "pptp" [ 254.818806][T12491] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.825933][T12491] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.862254][T12491] bridge_slave_0: entered allmulticast mode [ 254.868621][T12491] bridge_slave_0: entered promiscuous mode [ 254.898939][T12491] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.906052][T12491] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.924041][T12491] bridge_slave_1: entered allmulticast mode [ 254.932452][T12491] bridge_slave_1: entered promiscuous mode [ 254.987211][T12537] atomic_op ffff888117f4f528 conn xmit_atomic 0000000000000000 [ 254.988980][T12491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.008654][T12491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.091304][ T153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.113426][T12491] team0: Port device team_slave_0 added [ 255.120618][T12491] team0: Port device team_slave_1 added [ 255.167352][T12549] xt_CT: No such helper "pptp" [ 255.187096][ T153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.208197][T12491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.215257][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.237145][T12554] netlink: 'syz.4.3302': attribute type 4 has an invalid length. [ 255.241187][T12491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.260287][T12546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3302'. [ 255.278049][T12491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.285283][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.311605][T12491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.344596][ T153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.386363][T12559] atomic_op ffff888115013128 conn xmit_atomic 0000000000000000 [ 255.401322][ T153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.469130][T12491] hsr_slave_0: entered promiscuous mode [ 255.484162][T12491] hsr_slave_1: entered promiscuous mode [ 255.519763][T12491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.528678][T12491] Cannot create hsr debugfs directory [ 255.568290][ T153] bridge_slave_1: left allmulticast mode [ 255.574073][ T153] bridge_slave_1: left promiscuous mode [ 255.579764][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.612658][ T153] bridge_slave_0: left allmulticast mode [ 255.618355][ T153] bridge_slave_0: left promiscuous mode [ 255.624136][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.761964][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3320'. [ 255.805560][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.819227][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.840555][ T153] bond0 (unregistering): Released all slaves [ 255.916749][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x4 [ 255.924560][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x2 [ 255.951478][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 255.953227][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 255.958893][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 255.966550][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 255.966578][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 255.974052][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 255.981633][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 255.981664][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 255.989384][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 255.996718][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 256.004449][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.011950][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 256.019273][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.026971][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 256.034246][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.041896][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 256.049221][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.049243][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.049263][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.049325][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.056922][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 256.064285][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.071912][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 256.079258][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.086627][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 256.093998][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.094021][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.101398][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 256.108995][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.116380][ T3374] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 256.124003][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.136029][ T3374] hid-generic 0000:3000000:0000.0036: hidraw0: HID v0.00 Device [sy] on syz0 [ 256.138985][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.201754][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.209376][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.216899][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.224432][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.231918][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.239522][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.247034][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.254502][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.262001][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.269431][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.276898][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.284388][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.291933][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.299355][ T1108] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 256.308737][ T1108] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [sy] on syz0 [ 256.318382][ T153] hsr_slave_0: left promiscuous mode [ 256.324160][ T153] hsr_slave_1: left promiscuous mode [ 256.332002][ T153] veth1_macvtap: left promiscuous mode [ 256.337539][ T153] veth0_macvtap: left promiscuous mode [ 256.343316][ T153] veth1_vlan: left promiscuous mode [ 256.348596][ T153] veth0_vlan: left promiscuous mode [ 256.387871][ T153] team0 (unregistering): Port device batadv0 removed [ 256.396116][ T153] team0 (unregistering): Port device batadv1 removed [ 256.437020][ T153] team0 (unregistering): Port device team_slave_1 removed [ 256.447647][ T153] team0 (unregistering): Port device team_slave_0 removed [ 256.455608][ T4286] smc: removing ib device syz! [ 256.495432][T12615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.502884][T12615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.510432][T12615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.517835][T12615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.577623][T12643] capability: warning: `syz.5.3341' uses 32-bit capabilities (legacy support in use) [ 256.601865][T12645] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3340'. [ 256.676579][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x4 [ 256.684357][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x2 [ 256.696110][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.703865][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.711566][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.719388][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.727252][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.735006][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.742748][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.750456][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.758119][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.765871][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.773606][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.781417][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.789118][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.796901][ T8] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0 [ 256.812898][ T8] hid-generic 0000:3000000:0000.0038: hidraw0: HID v0.00 Device [sy] on syz0 [ 256.905032][T12671] atomic_op ffff88811500b128 conn xmit_atomic 0000000000000000 [ 256.942948][T12491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.952261][T12491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.976778][T12491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.017119][T12491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.045277][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'. [ 257.098020][T12491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.115749][T12491] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.131362][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.138477][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.152185][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.159297][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.228028][T12702] atomic_op ffff888115008928 conn xmit_atomic 0000000000000000 [ 257.311422][T12491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.395326][T12712] netlink: 'syz.1.3369': attribute type 4 has an invalid length. [ 257.413819][T12491] veth0_vlan: entered promiscuous mode [ 257.425163][T12491] veth1_vlan: entered promiscuous mode [ 257.436347][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'. [ 257.446178][T12491] veth0_macvtap: entered promiscuous mode [ 257.453934][T12491] veth1_macvtap: entered promiscuous mode [ 257.465823][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.476400][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.486306][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.496818][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.511380][T12724] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3368'. [ 257.512950][T12491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.533808][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.544379][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.554282][T12491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.564774][T12491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.575626][T12491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.586241][T12491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.595144][T12491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.604103][T12491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.613143][T12491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.772876][T12744] xt_CT: No such helper "pptp" [ 257.859046][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 257.859062][ T29] audit: type=1326 audit(1739612267.848:20613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff21f333da7 code=0x7ffc0000 [ 257.899893][ T29] audit: type=1326 audit(1739612267.848:20614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff21f2d8fb9 code=0x7ffc0000 [ 257.923650][ T29] audit: type=1326 audit(1739612267.848:20615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 257.947326][ T29] audit: type=1326 audit(1739612267.858:20616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff21f333da7 code=0x7ffc0000 [ 257.970958][ T29] audit: type=1326 audit(1739612267.858:20617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff21f2d8fb9 code=0x7ffc0000 [ 257.994678][ T29] audit: type=1326 audit(1739612267.858:20618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 258.018346][ T29] audit: type=1326 audit(1739612267.858:20619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff21f333da7 code=0x7ffc0000 [ 258.041934][ T29] audit: type=1326 audit(1739612267.858:20620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff21f2d8fb9 code=0x7ffc0000 [ 258.065607][ T29] audit: type=1326 audit(1739612267.858:20621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 258.089176][ T29] audit: type=1326 audit(1739612267.888:20622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12707 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff21f333da7 code=0x7ffc0000 [ 258.156069][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 258.278133][T12779] FAULT_INJECTION: forcing a failure. [ 258.278133][T12779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.291332][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.3.3391 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 258.291364][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 258.291379][T12779] Call Trace: [ 258.291386][T12779] [ 258.291395][T12779] dump_stack_lvl+0xf2/0x150 [ 258.291430][T12779] dump_stack+0x15/0x1a [ 258.291493][T12779] should_fail_ex+0x24a/0x260 [ 258.291528][T12779] should_fail+0xb/0x10 [ 258.291606][T12779] should_fail_usercopy+0x1a/0x20 [ 258.291643][T12779] _copy_from_user+0x1c/0xa0 [ 258.291679][T12779] ucma_join_multicast+0x52/0xe0 [ 258.291770][T12779] ucma_write+0x1a4/0x240 [ 258.291794][T12779] ? __pfx_ucma_write+0x10/0x10 [ 258.291850][T12779] vfs_write+0x27d/0x920 [ 258.291881][T12779] ? __fget_files+0x17c/0x1c0 [ 258.291925][T12779] ksys_write+0xe8/0x1b0 [ 258.291959][T12779] __x64_sys_write+0x42/0x50 [ 258.292049][T12779] x64_sys_call+0x287e/0x2dc0 [ 258.292078][T12779] do_syscall_64+0xc9/0x1c0 [ 258.292116][T12779] ? clear_bhb_loop+0x55/0xb0 [ 258.292148][T12779] ? clear_bhb_loop+0x55/0xb0 [ 258.292175][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.292201][T12779] RIP: 0033:0x7fb761c8cde9 [ 258.292224][T12779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.292284][T12779] RSP: 002b:00007fb7602f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.292303][T12779] RAX: ffffffffffffffda RBX: 00007fb761ea5fa0 RCX: 00007fb761c8cde9 [ 258.292315][T12779] RDX: 00000000000000a0 RSI: 0000400000000840 RDI: 0000000000000003 [ 258.292326][T12779] RBP: 00007fb7602f7090 R08: 0000000000000000 R09: 0000000000000000 [ 258.292340][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.292355][T12779] R13: 0000000000000000 R14: 00007fb761ea5fa0 R15: 00007ffe8ec851c8 [ 258.292377][T12779] [ 258.517907][T12781] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.552162][T12778] xt_CT: No such helper "pptp" [ 258.561958][T12782] xt_CT: No such helper "pptp" [ 258.666339][T12788] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3394'. [ 258.676631][T12788] netlink: 'syz.4.3394': attribute type 4 has an invalid length. [ 258.732827][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'. [ 259.262659][T12822] program syz.2.3406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.308295][T12822] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 259.456498][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 259.479853][T12824] xt_CT: No such helper "pptp" [ 259.486918][T12830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3410'. [ 259.510340][T12830] netlink: 'syz.3.3410': attribute type 4 has an invalid length. [ 259.893188][T12847] atomic_op ffff888117f2bd28 conn xmit_atomic 0000000000000000 [ 260.083857][T12857] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3422'. [ 260.123496][T12857] netlink: 'syz.2.3422': attribute type 4 has an invalid length. [ 260.235617][T12879] FAULT_INJECTION: forcing a failure. [ 260.235617][T12879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.248815][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.1.3429 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 260.248885][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 260.248900][T12879] Call Trace: [ 260.248949][T12879] [ 260.248958][T12879] dump_stack_lvl+0xf2/0x150 [ 260.248986][T12879] dump_stack+0x15/0x1a [ 260.249006][T12879] should_fail_ex+0x24a/0x260 [ 260.249045][T12879] should_fail+0xb/0x10 [ 260.249070][T12879] should_fail_usercopy+0x1a/0x20 [ 260.249164][T12879] _copy_from_user+0x1c/0xa0 [ 260.249202][T12879] copy_msghdr_from_user+0x54/0x2a0 [ 260.249233][T12879] ? __fget_files+0x17c/0x1c0 [ 260.249268][T12879] do_recvmmsg+0x256/0x6d0 [ 260.249354][T12879] __x64_sys_recvmmsg+0xf9/0x170 [ 260.249411][T12879] x64_sys_call+0x2a9a/0x2dc0 [ 260.249444][T12879] do_syscall_64+0xc9/0x1c0 [ 260.249474][T12879] ? clear_bhb_loop+0x55/0xb0 [ 260.249508][T12879] ? clear_bhb_loop+0x55/0xb0 [ 260.249617][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.249648][T12879] RIP: 0033:0x7f87efedcde9 [ 260.249665][T12879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.249691][T12879] RSP: 002b:00007f87ee547038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 260.249717][T12879] RAX: ffffffffffffffda RBX: 00007f87f00f5fa0 RCX: 00007f87efedcde9 [ 260.249730][T12879] RDX: 04000000000003b4 RSI: 00004000000037c0 RDI: 0000000000000004 [ 260.249743][T12879] RBP: 00007f87ee547090 R08: 0000400000003700 R09: 0000000000000000 [ 260.249757][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.249770][T12879] R13: 0000000000000000 R14: 00007f87f00f5fa0 R15: 00007fffd8812df8 [ 260.249849][T12879] [ 260.439421][T12876] xt_CT: No such helper "pptp" [ 260.509099][T12883] netlink: 'syz.1.3430': attribute type 4 has an invalid length. [ 260.553563][T12885] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 260.566716][T12888] atomic_op ffff88813fb5c528 conn xmit_atomic 0000000000000000 [ 260.583521][T12885] gretap0: entered promiscuous mode [ 260.592241][T12885] gretap0: left promiscuous mode [ 260.633240][T12894] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 260.642887][T12894] gretap0: entered promiscuous mode [ 260.648874][T12894] gretap0: left promiscuous mode [ 261.233029][T12905] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 261.251091][T12908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3439'. [ 261.274979][T12905] gretap0: entered promiscuous mode [ 261.292924][T12905] gretap0: left promiscuous mode [ 261.375244][T12911] 9pnet_fd: Insufficient options for proto=fd [ 262.156094][T12921] xt_CT: No such helper "pptp" [ 262.211650][T12923] xt_CT: No such helper "pptp" [ 262.379801][T12928] atomic_op ffff888117f1f528 conn xmit_atomic 0000000000000000 [ 262.472691][T12936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3450'. [ 262.484354][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3448'. [ 262.521842][T12938] 9pnet_fd: Insufficient options for proto=fd [ 262.683726][T12954] atomic_op ffff888115008528 conn xmit_atomic 0000000000000000 [ 262.746909][T12959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3461'. [ 262.799950][T12961] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3462'. [ 262.828236][T12967] 9pnet_fd: Insufficient options for proto=fd [ 262.835036][T12961] bridge0: entered promiscuous mode [ 262.840636][T12961] macvlan2: entered promiscuous mode [ 262.851309][T12961] bridge0: port 3(macvlan2) entered blocking state [ 262.854037][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 262.857896][T12961] bridge0: port 3(macvlan2) entered disabled state [ 262.871694][T12961] macvlan2: entered allmulticast mode [ 262.878783][T12961] bridge0: entered allmulticast mode [ 262.886107][T12961] macvlan2: left allmulticast mode [ 262.891327][T12961] bridge0: left allmulticast mode [ 262.897026][T12961] bridge0: left promiscuous mode [ 262.939127][T12975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12975 comm=syz.2.3462 [ 263.016306][T12984] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3471'. [ 263.028254][T12986] atomic_op ffff88812920e528 conn xmit_atomic 0000000000000000 [ 263.072032][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 263.072049][ T29] audit: type=1326 audit(1739612273.068:20970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 263.102003][ T29] audit: type=1326 audit(1739612273.068:20971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 263.126760][ T29] audit: type=1326 audit(1739612273.068:20972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 263.150551][ T29] audit: type=1326 audit(1739612273.068:20973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 263.174320][ T29] audit: type=1326 audit(1739612273.068:20974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 263.198117][ T29] audit: type=1326 audit(1739612273.068:20975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 263.221777][ T29] audit: type=1326 audit(1739612273.068:20976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 263.245595][ T29] audit: type=1326 audit(1739612273.068:20977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 263.266031][T12996] 9pnet_fd: Insufficient options for proto=fd [ 263.269260][ T29] audit: type=1326 audit(1739612273.068:20978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 263.299317][ T29] audit: type=1326 audit(1739612273.068:20979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 263.506832][T13028] 9pnet_fd: Insufficient options for proto=fd [ 263.548916][T13032] hsr0: entered allmulticast mode [ 263.554122][T13032] hsr_slave_0: entered allmulticast mode [ 263.559810][T13032] hsr_slave_1: entered allmulticast mode [ 263.740654][T13044] xt_CT: No such helper "pptp" [ 263.870628][T13054] serio: Serial port ptm0 [ 264.247191][T13067] 9pnet_fd: Insufficient options for proto=fd [ 264.528327][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x4 [ 264.536139][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x2 [ 264.544297][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.552028][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.559755][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.567471][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.575152][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.582904][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.590590][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.598373][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.598444][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.598471][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.598495][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.598515][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.598539][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.598565][ T3374] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0 [ 264.607893][ T3374] hid-generic 0000:3000000:0000.0039: hidraw0: HID v0.00 Device [sy] on syz0 [ 264.680122][T13086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.687616][T13086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.697151][T13088] xt_CT: No such helper "pptp" [ 264.706754][T13086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.714359][T13086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.740766][T13094] 9pnet_fd: Insufficient options for proto=fd [ 264.779134][T13096] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 264.814599][T13100] hsr0: entered allmulticast mode [ 264.819763][T13100] hsr_slave_0: entered allmulticast mode [ 264.825519][T13100] hsr_slave_1: entered allmulticast mode [ 264.938088][T13118] 9pnet_fd: Insufficient options for proto=fd [ 264.947933][T13120] bond_slave_1: entered promiscuous mode [ 264.953648][T13120] bond_slave_1: entered allmulticast mode [ 265.024370][T13129] __nla_validate_parse: 6 callbacks suppressed [ 265.024390][T13129] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3528'. [ 265.185653][T13141] hsr0: entered allmulticast mode [ 265.190860][T13141] hsr_slave_0: entered allmulticast mode [ 265.196513][T13141] hsr_slave_1: entered allmulticast mode [ 265.336459][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x4 [ 265.344311][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x2 [ 265.362905][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.370691][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.378360][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.386085][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.393856][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.401540][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.409308][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.416987][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.425208][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.432890][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.440582][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.448311][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.456044][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.461933][T13156] 9pnet_fd: Insufficient options for proto=fd [ 265.463714][ T3374] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0 [ 265.554028][T13155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.561500][T13155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.622918][T13155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.630416][T13155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.640051][ T3374] hid-generic 0000:3000000:0000.003A: hidraw0: HID v0.00 Device [sy] on syz0 [ 265.703935][T13170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3543'. [ 265.779354][T13172] Y4`Ҙ: renamed from lo [ 266.004782][T13190] 9pnet_fd: Insufficient options for proto=fd [ 266.148160][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3556'. [ 266.164362][T13199] xt_CT: No such helper "pptp" [ 266.276410][T13206] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3557'. [ 266.455111][T13221] atomic_op ffff888101456128 conn xmit_atomic 0000000000000000 [ 266.583885][T13223] xt_CT: No such helper "pptp" [ 266.787110][T13245] netlink: 'syz.5.3571': attribute type 10 has an invalid length. [ 266.812610][T13245] team0: Port device dummy0 added [ 266.891232][T13252] atomic_op ffff888101456928 conn xmit_atomic 0000000000000000 [ 267.251830][T13278] bridge0: port 3(gretap0) entered blocking state [ 267.258416][T13278] bridge0: port 3(gretap0) entered disabled state [ 267.272790][T13278] gretap0: entered allmulticast mode [ 267.286627][T13278] gretap0: entered promiscuous mode [ 267.296364][T13278] bridge0: port 3(gretap0) entered blocking state [ 267.302938][T13278] bridge0: port 3(gretap0) entered forwarding state [ 267.313087][T13281] gretap0: left allmulticast mode [ 267.318153][T13281] gretap0: left promiscuous mode [ 267.323241][T13281] bridge0: port 3(gretap0) entered disabled state [ 267.377537][T13283] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 267.408653][T13283] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 267.423501][T13283] macvlan1: entered promiscuous mode [ 267.429918][T13283] macvlan1: entered allmulticast mode [ 267.490546][T13283] veth1_vlan: entered allmulticast mode [ 267.514905][T13283] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 267.547063][T13289] atomic_op ffff88813fb5c528 conn xmit_atomic 0000000000000000 [ 267.596216][T13294] rdma_op ffff888101456180 conn xmit_rdma 0000000000000000 [ 267.607684][T13294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=13294 comm=syz.3.3591 [ 267.697754][T13301] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3593'. [ 267.780636][T13315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3600'. [ 267.789781][T13315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3600'. [ 267.805752][T13315] ip6gretap1: entered allmulticast mode [ 267.888491][T13318] atomic_op ffff88813fb5d128 conn xmit_atomic 0000000000000000 [ 268.079468][ T29] kauditd_printk_skb: 1223 callbacks suppressed [ 268.079486][ T29] audit: type=1326 audit(1739612278.068:22203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.1.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 268.109984][ T29] audit: type=1326 audit(1739612278.108:22204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.1.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87efed3da7 code=0x7ffc0000 [ 268.133576][ T29] audit: type=1326 audit(1739612278.108:22205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.1.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87efe78fb9 code=0x7ffc0000 [ 268.157153][ T29] audit: type=1326 audit(1739612278.108:22206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.1.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 268.180698][ T29] audit: type=1326 audit(1739612278.108:22207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.2.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2492613da7 code=0x7ffc0000 [ 268.204272][ T29] audit: type=1326 audit(1739612278.108:22208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.2.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24925b8fb9 code=0x7ffc0000 [ 268.227998][ T29] audit: type=1326 audit(1739612278.108:22209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.2.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 268.251953][ T29] audit: type=1326 audit(1739612278.108:22210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.1.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87efed3da7 code=0x7ffc0000 [ 268.275563][ T29] audit: type=1326 audit(1739612278.108:22211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.1.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87efe78fb9 code=0x7ffc0000 [ 268.299071][ T29] audit: type=1326 audit(1739612278.108:22212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.1.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 268.435208][T13340] xt_CT: No such helper "pptp" [ 268.517813][T13347] atomic_op ffff88811720f128 conn xmit_atomic 0000000000000000 [ 268.555400][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x4 [ 268.563202][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x2 [ 268.571447][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.579124][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.586875][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.594599][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.602305][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.610058][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.617728][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.625407][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.633086][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.640917][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.648714][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.656462][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.664134][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.671932][ T3374] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 268.681727][ T3374] hid-generic 0000:3000000:0000.003B: hidraw0: HID v0.00 Device [sy] on syz0 [ 268.692711][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.700242][T13351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.709038][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.716492][T13351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.773760][T13366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3620'. [ 268.791173][T13366] netlink: 'syz.3.3620': attribute type 4 has an invalid length. [ 268.842608][T13375] atomic_op ffff88811720ed28 conn xmit_atomic 0000000000000000 [ 268.923300][T13387] netlink: 'syz.2.3629': attribute type 4 has an invalid length. [ 268.932578][T13382] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 268.941041][T13384] xt_CT: No such helper "pptp" [ 268.942373][T13382] gretap0: entered promiscuous mode [ 268.952223][T13382] gretap0: left promiscuous mode [ 269.213418][T13404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3635'. [ 269.235829][T13404] netlink: 'syz.2.3635': attribute type 4 has an invalid length. [ 269.340742][T13410] atomic_op ffff88810227a528 conn xmit_atomic 0000000000000000 [ 269.628383][T13406] Set syz1 is full, maxelem 65536 reached [ 269.697047][T13418] xt_CT: No such helper "pptp" [ 269.852241][T13428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3644'. [ 269.867155][T13428] netlink: 'syz.2.3644': attribute type 4 has an invalid length. [ 269.885145][T13432] netlink: 'syz.3.3646': attribute type 4 has an invalid length. [ 270.131578][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x4 [ 270.139431][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x2 [ 270.147132][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.154902][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.162607][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.170299][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.178036][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.185731][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.193439][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.201154][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.208801][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.216473][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.224214][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.231873][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.239570][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.247305][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.255154][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.262825][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.270549][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.278280][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.285942][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.293648][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.301321][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.308976][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.316685][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.324456][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.332241][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.339976][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.347660][ T3374] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0 [ 270.349111][T13469] xt_CT: No such helper "pptp" [ 270.367233][ T3374] hid-generic 0000:3000000:0000.003C: hidraw0: HID v0.00 Device [sy] on syz0 [ 270.589759][T13488] atomic_op ffff888117f1c928 conn xmit_atomic 0000000000000000 [ 270.615738][T13489] xt_CT: No such helper "pptp" [ 270.750392][T13493] netlink: 'syz.2.3671': attribute type 10 has an invalid length. [ 270.775059][T13493] team0: Port device dummy0 added [ 270.917326][T13496] xt_CT: No such helper "pptp" [ 271.128836][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x4 [ 271.136644][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x2 [ 271.144514][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.152279][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.160126][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.167777][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.175509][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.183307][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.190957][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.198679][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.206342][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.213993][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.221660][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.229340][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.237064][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.244763][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.252440][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.260135][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.267997][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.275768][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.283598][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.291350][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.299008][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.306799][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.314482][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.322218][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.329908][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.337560][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.345300][ T35] hid-generic 0000:3000000:0000.003D: unknown main item tag 0x0 [ 271.353734][ T35] hid-generic 0000:3000000:0000.003D: hidraw0: HID v0.00 Device [sy] on syz0 [ 271.559634][T13531] xt_CT: No such helper "pptp" [ 271.610075][T13537] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 271.620515][T13542] atomic_op ffff888116fa3928 conn xmit_atomic 0000000000000000 [ 271.621203][T13537] gretap0: entered promiscuous mode [ 271.643470][T13537] gretap0: left promiscuous mode [ 271.686915][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x4 [ 271.694674][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x2 [ 271.702456][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.710128][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.717981][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.725656][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.733387][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.741087][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.748743][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.756435][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.764154][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.771886][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.779602][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.787256][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.795065][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.802872][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.810743][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.818417][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.826086][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.833755][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.841467][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.849310][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.856982][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.864748][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.872480][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.880239][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.887908][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.895563][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.903321][ T35] hid-generic 0000:3000000:0000.003E: unknown main item tag 0x0 [ 271.912115][ T35] hid-generic 0000:3000000:0000.003E: hidraw0: HID v0.00 Device [sy] on syz0 [ 271.997590][T13559] __nla_validate_parse: 1 callbacks suppressed [ 271.997607][T13559] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3695'. [ 272.095558][T13571] atomic_op ffff888117f1e528 conn xmit_atomic 0000000000000000 [ 272.193702][T13577] netlink: 'syz.2.3703': attribute type 4 has an invalid length. [ 272.497300][T13597] atomic_op ffff888117f1e528 conn xmit_atomic 0000000000000000 [ 272.583661][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 272.666927][T13612] xt_CT: No such helper "pptp" [ 273.031373][T13634] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3728'. [ 273.084740][T13642] xt_hashlimit: size too large, truncated to 1048576 [ 273.184301][ T29] kauditd_printk_skb: 1356 callbacks suppressed [ 273.184315][ T29] audit: type=1326 audit(1739612283.168:23569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.5.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 273.214310][ T29] audit: type=1326 audit(1739612283.168:23570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.5.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 273.237884][ T29] audit: type=1326 audit(1739612283.168:23571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.5.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 273.261466][ T29] audit: type=1326 audit(1739612283.168:23572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.5.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 273.285142][ T29] audit: type=1326 audit(1739612283.168:23573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.5.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 273.308723][ T29] audit: type=1326 audit(1739612283.168:23574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.5.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 273.332838][ T29] audit: type=1326 audit(1739612283.168:23575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.5.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 273.356443][ T29] audit: type=1326 audit(1739612283.168:23576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.5.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 273.380117][ T29] audit: type=1326 audit(1739612283.168:23577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.5.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 273.403753][ T29] audit: type=1326 audit(1739612283.168:23578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.5.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 273.476209][T13652] netlink: 'syz.2.3730': attribute type 10 has an invalid length. [ 273.649816][T13674] FAULT_INJECTION: forcing a failure. [ 273.649816][T13674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.658513][T13671] xt_CT: No such helper "pptp" [ 273.662957][T13674] CPU: 0 UID: 0 PID: 13674 Comm: syz.3.3742 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 273.662988][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 273.663004][T13674] Call Trace: [ 273.663012][T13674] [ 273.663020][T13674] dump_stack_lvl+0xf2/0x150 [ 273.663125][T13674] dump_stack+0x15/0x1a [ 273.663152][T13674] should_fail_ex+0x24a/0x260 [ 273.663219][T13674] should_fail+0xb/0x10 [ 273.663250][T13674] should_fail_usercopy+0x1a/0x20 [ 273.663371][T13674] _copy_to_user+0x20/0xa0 [ 273.663413][T13674] simple_read_from_buffer+0xa0/0x110 [ 273.663502][T13674] proc_fail_nth_read+0xf9/0x140 [ 273.663538][T13674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.663593][T13674] vfs_read+0x19b/0x6f0 [ 273.663622][T13674] ? __rcu_read_unlock+0x4e/0x70 [ 273.663684][T13674] ? __fget_files+0x17c/0x1c0 [ 273.663806][T13674] ksys_read+0xe8/0x1b0 [ 273.663839][T13674] __x64_sys_read+0x42/0x50 [ 273.663870][T13674] x64_sys_call+0x2874/0x2dc0 [ 273.663902][T13674] do_syscall_64+0xc9/0x1c0 [ 273.663936][T13674] ? clear_bhb_loop+0x55/0xb0 [ 273.664029][T13674] ? clear_bhb_loop+0x55/0xb0 [ 273.664069][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.664103][T13674] RIP: 0033:0x7fb761c8b7fc [ 273.664146][T13674] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.664168][T13674] RSP: 002b:00007fb7602f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.664190][T13674] RAX: ffffffffffffffda RBX: 00007fb761ea5fa0 RCX: 00007fb761c8b7fc [ 273.664205][T13674] RDX: 000000000000000f RSI: 00007fb7602f70a0 RDI: 0000000000000006 [ 273.664219][T13674] RBP: 00007fb7602f7090 R08: 0000000000000000 R09: 0000000000000000 [ 273.664234][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.664289][T13674] R13: 0000000000000000 R14: 00007fb761ea5fa0 R15: 00007ffe8ec851c8 [ 273.664311][T13674] [ 273.862123][T13676] 9pnet_fd: Insufficient options for proto=fd [ 274.034895][T13698] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 274.044477][T13698] gretap0: entered promiscuous mode [ 274.050191][T13698] gretap0: left promiscuous mode [ 274.333981][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x4 [ 274.342342][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x2 [ 274.425554][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.433338][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.441022][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.448677][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.456466][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.464314][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.472080][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.479793][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.487467][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.495136][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.502813][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.510535][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.518191][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.525884][ T1108] hid-generic 0000:3000000:0000.003F: unknown main item tag 0x0 [ 274.642560][ T1108] hid-generic 0000:3000000:0000.003F: hidraw0: HID v0.00 Device [sy] on syz0 [ 274.861213][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 274.936149][T13739] rdma_op ffff88811779d980 conn xmit_rdma 0000000000000000 [ 275.176988][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x4 [ 275.184696][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x2 [ 275.193199][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.200951][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.208711][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.216553][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.224429][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.232128][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.239932][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.247692][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.255394][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.263089][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.270766][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.278514][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.286200][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.294082][ T9] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 275.302400][ T9] hid-generic 0000:3000000:0000.0040: hidraw0: HID v0.00 Device [sy] on syz0 [ 275.390592][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 275.523803][T13769] rdma_op ffff88811779cd80 conn xmit_rdma 0000000000000000 [ 275.740271][T13773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3782'. [ 275.967692][T13783] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 275.976995][T13783] gretap0: entered promiscuous mode [ 275.982780][T13783] gretap0: left promiscuous mode [ 276.011675][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3791'. [ 276.026429][T13793] tipc: Enabling of bearer rejected, failed to enable media [ 276.088753][T13799] rdma_op ffff888116fa0180 conn xmit_rdma 0000000000000000 [ 276.301049][T13803] xt_CT: No such helper "pptp" [ 276.979426][T13823] rdma_op ffff88811779c180 conn xmit_rdma 0000000000000000 [ 277.245231][T13833] netlink: 'syz.5.3805': attribute type 10 has an invalid length. [ 278.018498][T13847] serio: Serial port ptm0 [ 279.046018][T13883] netlink: 'syz.2.3825': attribute type 4 has an invalid length. [ 279.122461][T13886] gretap0: entered promiscuous mode [ 279.122508][T13881] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 279.152474][T13881] gretap0: left promiscuous mode [ 279.497105][T13910] netlink: 'syz.3.3833': attribute type 10 has an invalid length. [ 279.537724][T13910] team0: Port device dummy0 added [ 279.567900][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 279.567913][ T29] audit: type=1326 audit(1739612289.558:24256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 279.599624][ T29] audit: type=1326 audit(1739612289.588:24257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 279.623280][ T29] audit: type=1326 audit(1739612289.588:24258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 279.646865][ T29] audit: type=1326 audit(1739612289.588:24259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.1.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 279.784591][T13916] xt_CT: No such helper "pptp" [ 280.355751][T13937] xt_CT: No such helper "pptp" [ 280.373924][ T29] audit: type=1326 audit(1739612290.368:24260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.5.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 280.397645][ T29] audit: type=1326 audit(1739612290.368:24261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.5.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 280.421267][ T29] audit: type=1326 audit(1739612290.368:24262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.5.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 280.445273][T13942] rdma_op ffff888116fa2180 conn xmit_rdma 0000000000000000 [ 280.479755][ T29] audit: type=1326 audit(1739612290.368:24263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.5.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 280.503527][ T29] audit: type=1326 audit(1739612290.368:24264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.5.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 280.522283][T13951] xt_hashlimit: size too large, truncated to 1048576 [ 280.527185][ T29] audit: type=1326 audit(1739612290.438:24265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.5.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 280.567462][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3849'. [ 280.576585][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3849'. [ 280.798512][T13967] netlink: 'syz.3.3852': attribute type 10 has an invalid length. [ 280.924450][T13962] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3849'. [ 280.964263][T13976] xt_CT: No such helper "pptp" [ 281.011388][T13980] xt_CT: No such helper "pptp" [ 281.094431][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x4 [ 281.102203][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x2 [ 281.110523][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.118202][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.125981][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.133739][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.141441][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.149096][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.156801][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.164486][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.172194][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.180024][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.187671][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.195389][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.203074][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.210834][ T7287] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 281.263849][ T7287] hid-generic 0000:3000000:0000.0041: hidraw0: HID v0.00 Device [sy] on syz0 [ 281.367710][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3868'. [ 281.412837][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x4 [ 281.421149][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x2 [ 281.429498][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.437178][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.444893][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.452572][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.460308][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.468006][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.468036][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.483351][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.491022][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.498716][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.506386][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.514076][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.521782][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.529492][ T9] hid-generic 0000:3000000:0000.0042: unknown main item tag 0x0 [ 281.538438][T14010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3873'. [ 281.548452][T14010] netlink: 'syz.1.3873': attribute type 4 has an invalid length. [ 281.561125][ T9] hid-generic 0000:3000000:0000.0042: hidraw0: HID v0.00 Device [sy] on syz0 [ 281.611641][T14021] rdma_op ffff88811779c180 conn xmit_rdma 0000000000000000 [ 281.654887][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x4 [ 281.662682][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x2 [ 281.670999][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.678670][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.686445][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.694225][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.702117][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.709795][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.717443][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.725223][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.732986][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.740701][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.748345][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.756015][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.763686][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.771489][ T9] hid-generic 0000:3000000:0000.0043: unknown main item tag 0x0 [ 281.779796][ T9] hid-generic 0000:3000000:0000.0043: hidraw0: HID v0.00 Device [sy] on syz0 [ 281.894508][T14043] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3885'. [ 281.904342][T14043] netlink: 'syz.1.3885': attribute type 4 has an invalid length. [ 282.055607][T14053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3889'. [ 282.102666][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x4 [ 282.110390][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x2 [ 282.118138][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.125923][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.133625][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.141379][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.149050][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.157050][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.164879][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.172741][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.180508][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.188218][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.195940][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.195971][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.196035][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.196063][ T7287] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x0 [ 282.199516][ T7287] hid-generic 0000:3000000:0000.0044: hidraw0: HID v0.00 Device [sy] on syz0 [ 282.307698][T14068] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3896'. [ 282.317382][T14068] netlink: 'syz.4.3896': attribute type 4 has an invalid length. [ 282.449977][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3904'. [ 282.462640][T14080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3901'. [ 282.540827][T14084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.549298][T14084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.562924][T14084] Cannot find add_set index 0 as target [ 282.601653][T14097] netlink: 'syz.4.3909': attribute type 4 has an invalid length. [ 282.636047][T14095] xt_CT: No such helper "pptp" [ 282.672434][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x4 [ 282.680198][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x2 [ 282.699526][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.707223][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.715023][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.722781][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.730495][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.738305][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.746031][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.753770][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.761458][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.769168][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.776855][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.784617][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.792304][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.800091][ T35] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x0 [ 282.840818][ T35] hid-generic 0000:3000000:0000.0045: hidraw0: HID v0.00 Device [sy] on syz0 [ 283.140885][T14120] xt_CT: No such helper "pptp" [ 283.229429][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x4 [ 283.237138][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x2 [ 283.260772][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.268477][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.276162][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.283866][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.291632][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.299330][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.307045][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.314752][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.322430][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.330117][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.337850][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.345560][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.353263][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.360950][ T9] hid-generic 0000:3000000:0000.0046: unknown main item tag 0x0 [ 283.379447][ T9] hid-generic 0000:3000000:0000.0046: hidraw0: HID v0.00 Device [sy] on syz0 [ 283.474739][T14151] netlink: 'syz.2.3926': attribute type 10 has an invalid length. [ 283.501446][T14153] rdma_op ffff888116fa3980 conn xmit_rdma 0000000000000000 [ 283.619154][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x4 [ 283.626940][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x2 [ 283.641848][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.649621][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.657285][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.664999][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.673043][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.680767][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.688814][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.696687][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.704495][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.712182][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.719879][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.727592][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.735338][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.743030][ T7287] hid-generic 0000:3000000:0000.0047: unknown main item tag 0x0 [ 283.753351][ T7287] hid-generic 0000:3000000:0000.0047: hidraw0: HID v0.00 Device [sy] on syz0 [ 283.856677][T14195] netlink: 'syz.1.3949': attribute type 4 has an invalid length. [ 283.946268][T14200] xt_CT: No such helper "pptp" [ 284.074873][T14214] xt_CT: No such helper "pptp" [ 284.152855][T14225] netlink: 'syz.3.3960': attribute type 4 has an invalid length. [ 284.291920][T14237] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 284.298477][T14237] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.306087][T14237] vhci_hcd vhci_hcd.0: Device attached [ 284.328797][T14238] xt_CT: No such helper "pptp" [ 284.339512][T14239] vhci_hcd: connection closed [ 284.340042][ T4286] vhci_hcd: stop threads [ 284.349127][ T4286] vhci_hcd: release socket [ 284.353596][ T4286] vhci_hcd: disconnect device [ 284.358714][T14242] xt_CT: No such helper "pptp" [ 284.567968][T14255] netlink: 'syz.1.3972': attribute type 4 has an invalid length. [ 284.575945][ T29] kauditd_printk_skb: 762 callbacks suppressed [ 284.575963][ T29] audit: type=1326 audit(1739612294.568:25028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14219 comm="syz.4.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83ee623da7 code=0x7ffc0000 [ 284.606689][ T29] audit: type=1326 audit(1739612294.568:25029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14219 comm="syz.4.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f83ee5c8fb9 code=0x7ffc0000 [ 284.630419][ T29] audit: type=1326 audit(1739612294.568:25030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14219 comm="syz.4.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 284.654042][ T29] audit: type=1326 audit(1739612294.568:25031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14219 comm="syz.4.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83ee623da7 code=0x7ffc0000 [ 284.677946][ T29] audit: type=1326 audit(1739612294.568:25032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14219 comm="syz.4.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f83ee5c8fb9 code=0x7ffc0000 [ 284.701501][ T29] audit: type=1326 audit(1739612294.568:25033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14219 comm="syz.4.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 284.725282][ T29] audit: type=1326 audit(1739612294.578:25034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14219 comm="syz.4.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83ee623da7 code=0x7ffc0000 [ 284.748968][ T29] audit: type=1326 audit(1739612294.578:25035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14219 comm="syz.4.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f83ee5c8fb9 code=0x7ffc0000 [ 284.772974][ T29] audit: type=1326 audit(1739612294.578:25036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14219 comm="syz.4.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 284.796645][ T29] audit: type=1326 audit(1739612294.598:25037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14219 comm="syz.4.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83ee623da7 code=0x7ffc0000 [ 284.937609][T14278] xt_CT: No such helper "pptp" [ 284.963446][T14281] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 284.972287][T14281] gretap0: entered promiscuous mode [ 284.978207][T14281] gretap0: left promiscuous mode [ 285.180268][T14296] xt_CT: No such helper "pptp" [ 285.591737][T14330] xt_CT: No such helper "pptp" [ 285.847615][T14354] FAULT_INJECTION: forcing a failure. [ 285.847615][T14354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.860816][T14354] CPU: 0 UID: 0 PID: 14354 Comm: syz.3.4012 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 285.860841][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 285.860856][T14354] Call Trace: [ 285.860863][T14354] [ 285.860871][T14354] dump_stack_lvl+0xf2/0x150 [ 285.860946][T14354] dump_stack+0x15/0x1a [ 285.860968][T14354] should_fail_ex+0x24a/0x260 [ 285.861004][T14354] should_fail+0xb/0x10 [ 285.861036][T14354] should_fail_usercopy+0x1a/0x20 [ 285.861074][T14354] _copy_from_user+0x1c/0xa0 [ 285.861166][T14354] move_addr_to_kernel+0x82/0x120 [ 285.861291][T14354] copy_msghdr_from_user+0x271/0x2a0 [ 285.861324][T14354] __sys_sendmsg+0x13e/0x230 [ 285.861361][T14354] __x64_sys_sendmsg+0x46/0x50 [ 285.861384][T14354] x64_sys_call+0x2734/0x2dc0 [ 285.861482][T14354] do_syscall_64+0xc9/0x1c0 [ 285.861517][T14354] ? clear_bhb_loop+0x55/0xb0 [ 285.861550][T14354] ? clear_bhb_loop+0x55/0xb0 [ 285.861662][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.861693][T14354] RIP: 0033:0x7fb761c8cde9 [ 285.861800][T14354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.861821][T14354] RSP: 002b:00007fb7602f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.861841][T14354] RAX: ffffffffffffffda RBX: 00007fb761ea5fa0 RCX: 00007fb761c8cde9 [ 285.861855][T14354] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 285.861869][T14354] RBP: 00007fb7602f7090 R08: 0000000000000000 R09: 0000000000000000 [ 285.861943][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.861957][T14354] R13: 0000000000000000 R14: 00007fb761ea5fa0 R15: 00007ffe8ec851c8 [ 285.862004][T14354] [ 286.305469][T14374] __nla_validate_parse: 11 callbacks suppressed [ 286.305485][T14374] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4018'. [ 286.567608][T14395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4028'. [ 286.713358][T14406] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4029'. [ 286.729383][T14400] xt_CT: No such helper "pptp" [ 286.846311][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x4 [ 286.854136][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x2 [ 286.879816][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.887606][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.895346][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.903050][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.910732][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.918515][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.926194][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.933936][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.941621][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.949306][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.956965][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.964716][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.972472][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.980164][ T3374] hid-generic 0000:3000000:0000.0048: unknown main item tag 0x0 [ 286.990378][ T3374] hid-generic 0000:3000000:0000.0048: hidraw0: HID v0.00 Device [sy] on syz0 [ 287.005754][T14424] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4037'. [ 287.015463][T14420] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4037'. [ 287.260688][T14443] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4043'. [ 287.561129][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x4 [ 287.568868][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x2 [ 287.602993][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.610766][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.618422][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.626112][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.633828][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.641504][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.649174][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.656923][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.664590][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.672323][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.680342][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.688088][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.695773][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.703448][ T35] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x0 [ 287.857613][T14467] 9pnet: Could not find request transport: ܁t0x0000000000000003 [ 287.875533][ T35] hid-generic 0000:3000000:0000.0049: hidraw0: HID v0.00 Device [sy] on syz0 [ 287.890613][T14467] gretap0: entered promiscuous mode [ 287.897597][T14467] gretap0: left promiscuous mode [ 288.009797][T14482] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4056'. [ 288.159147][T14490] xt_ct_set_helper: 2 callbacks suppressed [ 288.159165][T14490] xt_CT: No such helper "pptp" [ 288.265141][T14498] Cannot find add_set index 0 as target [ 288.482694][T14514] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4068'. [ 288.785719][T14526] xt_CT: No such helper "pptp" [ 288.808554][T14529] xt_CT: No such helper "pptp" [ 288.918071][T14535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4074'. [ 288.942676][T14535] netlink: 'syz.3.4074': attribute type 4 has an invalid length. [ 289.064446][T14543] FAULT_INJECTION: forcing a failure. [ 289.064446][T14543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.077706][T14543] CPU: 1 UID: 0 PID: 14543 Comm: syz.4.4078 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 289.077732][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 289.077793][T14543] Call Trace: [ 289.077798][T14543] [ 289.077804][T14543] dump_stack_lvl+0xf2/0x150 [ 289.077829][T14543] dump_stack+0x15/0x1a [ 289.077852][T14543] should_fail_ex+0x24a/0x260 [ 289.077879][T14543] should_fail+0xb/0x10 [ 289.077972][T14543] should_fail_usercopy+0x1a/0x20 [ 289.078003][T14543] _copy_from_user+0x1c/0xa0 [ 289.078080][T14543] copy_msghdr_from_user+0x54/0x2a0 [ 289.078114][T14543] ? __fget_files+0x17c/0x1c0 [ 289.078147][T14543] __sys_sendmsg+0x13e/0x230 [ 289.078191][T14543] __x64_sys_sendmsg+0x46/0x50 [ 289.078279][T14543] x64_sys_call+0x2734/0x2dc0 [ 289.078308][T14543] do_syscall_64+0xc9/0x1c0 [ 289.078421][T14543] ? clear_bhb_loop+0x55/0xb0 [ 289.078462][T14543] ? clear_bhb_loop+0x55/0xb0 [ 289.078496][T14543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.078524][T14543] RIP: 0033:0x7f83ee62cde9 [ 289.078537][T14543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.078555][T14543] RSP: 002b:00007f83ecc97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.078575][T14543] RAX: ffffffffffffffda RBX: 00007f83ee845fa0 RCX: 00007f83ee62cde9 [ 289.078589][T14543] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003 [ 289.078602][T14543] RBP: 00007f83ecc97090 R08: 0000000000000000 R09: 0000000000000000 [ 289.078615][T14543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.078626][T14543] R13: 0000000000000000 R14: 00007f83ee845fa0 R15: 00007ffe9232b3e8 [ 289.078652][T14543] [ 289.078819][T14545] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4079'. [ 289.438937][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x4 [ 289.446662][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x2 [ 289.476310][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.484004][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.491710][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.499396][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.507045][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.514801][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.522601][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.530274][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.537982][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.545658][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.553409][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.561166][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.568823][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.576506][ T3377] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x0 [ 289.619372][T14563] xt_CT: No such helper "pptp" [ 289.661601][ T3377] hid-generic 0000:3000000:0000.004A: hidraw0: HID v0.00 Device [sy] on syz0 [ 289.828261][T14571] xt_CT: No such helper "pptp" [ 290.065231][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 290.065246][ T29] audit: type=1326 audit(1739612300.058:25281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.2.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 290.100487][ T29] audit: type=1326 audit(1739612300.088:25282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.2.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 290.124087][ T29] audit: type=1326 audit(1739612300.088:25283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.2.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 290.147786][ T29] audit: type=1326 audit(1739612300.088:25284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.2.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249261cde9 code=0x7ffc0000 [ 290.277981][T14599] xt_CT: No such helper "pptp" [ 290.371618][T14604] xt_CT: No such helper "pptp" [ 290.421698][T14606] xt_CT: No such helper "pptp" [ 290.541400][ T29] audit: type=1326 audit(1739612300.538:25285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.1.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 290.565244][ T29] audit: type=1326 audit(1739612300.538:25286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.1.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 290.567229][T14618] IPVS: Unknown mcast interface: bat [ 290.588937][ T29] audit: type=1326 audit(1739612300.538:25287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.1.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 290.618068][ T29] audit: type=1326 audit(1739612300.538:25288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.1.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87efedcde9 code=0x7ffc0000 [ 290.645090][T14625] FAULT_INJECTION: forcing a failure. [ 290.645090][T14625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.658394][T14625] CPU: 0 UID: 0 PID: 14625 Comm: syz.4.4107 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 290.658419][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 290.658434][T14625] Call Trace: [ 290.658440][T14625] [ 290.658449][T14625] dump_stack_lvl+0xf2/0x150 [ 290.658483][T14625] dump_stack+0x15/0x1a [ 290.658541][T14625] should_fail_ex+0x24a/0x260 [ 290.658588][T14625] should_fail+0xb/0x10 [ 290.658622][T14625] should_fail_usercopy+0x1a/0x20 [ 290.658661][T14625] _copy_to_user+0x20/0xa0 [ 290.658717][T14625] simple_read_from_buffer+0xa0/0x110 [ 290.658752][T14625] proc_fail_nth_read+0xf9/0x140 [ 290.658791][T14625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.658900][T14625] vfs_read+0x19b/0x6f0 [ 290.658931][T14625] ? __rcu_read_unlock+0x4e/0x70 [ 290.658959][T14625] ? __fget_files+0x17c/0x1c0 [ 290.659084][T14625] ksys_read+0xe8/0x1b0 [ 290.659118][T14625] __x64_sys_read+0x42/0x50 [ 290.659150][T14625] x64_sys_call+0x2874/0x2dc0 [ 290.659184][T14625] do_syscall_64+0xc9/0x1c0 [ 290.659221][T14625] ? clear_bhb_loop+0x55/0xb0 [ 290.659256][T14625] ? clear_bhb_loop+0x55/0xb0 [ 290.659295][T14625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.659329][T14625] RIP: 0033:0x7f83ee62b7fc [ 290.659349][T14625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 290.659437][T14625] RSP: 002b:00007f83ecc76030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.659460][T14625] RAX: ffffffffffffffda RBX: 00007f83ee846080 RCX: 00007f83ee62b7fc [ 290.659491][T14625] RDX: 000000000000000f RSI: 00007f83ecc760a0 RDI: 0000000000000004 [ 290.659506][T14625] RBP: 00007f83ecc76090 R08: 0000000000000000 R09: 0000000000000000 [ 290.659521][T14625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.659537][T14625] R13: 0000000000000000 R14: 00007f83ee846080 R15: 00007ffe9232b3e8 [ 290.659576][T14625] [ 290.660633][T14609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.860376][T14609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.942324][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x4 [ 290.950056][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x2 [ 290.957784][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 290.965665][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 290.973442][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 290.981117][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 290.988814][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 290.996485][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 290.997919][ T29] audit: type=1326 audit(1739612300.988:25289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 291.004154][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 291.027706][ T29] audit: type=1326 audit(1739612300.988:25290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f83ee62cde9 code=0x7ffc0000 [ 291.035362][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 291.035383][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 291.035402][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 291.081998][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 291.089724][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 291.097375][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 291.105062][ T3374] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x0 [ 291.229402][T14659] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 291.235952][T14659] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 291.243634][T14659] vhci_hcd vhci_hcd.0: Device attached [ 291.252874][ T3374] hid-generic 0000:3000000:0000.004B: hidraw0: HID v0.00 Device [sy] on syz0 [ 291.474604][T14669] xt_CT: No such helper "pptp" [ 291.490190][ T3364] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 291.499504][T14682] __nla_validate_parse: 6 callbacks suppressed [ 291.499570][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4129'. [ 291.537513][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4129'. [ 291.548318][T14682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.556835][T14682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.623455][T14690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=14690 comm=syz.2.4133 [ 292.044899][T14660] vhci_hcd: connection reset by peer [ 292.050506][ T28] vhci_hcd: stop threads [ 292.054771][ T28] vhci_hcd: release socket [ 292.059206][ T28] vhci_hcd: disconnect device [ 292.075856][T14703] serio: Serial port ptm0 [ 292.107766][T14708] serio: Serial port ptm1 [ 292.341851][T14720] xt_CT: No such helper "pptp" [ 292.429812][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4150'. [ 292.459707][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4150'. [ 292.480928][T14732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.493147][T14732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.502794][T14732] Cannot find add_set index 0 as target [ 292.537218][T14744] atomic_op ffff88811779c128 conn xmit_atomic 0000000000000000 [ 292.542988][T14742] 9pnet: Could not find request transport: r [ 292.620459][ T3377] hid-generic 0000:0003:0000.004C: unknown main item tag 0x0 [ 292.627902][ T3377] hid-generic 0000:0003:0000.004C: unknown main item tag 0x0 [ 292.636844][ T3377] hid-generic 0000:0003:0000.004C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 292.879598][T14776] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4167'. [ 292.892712][T14776] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 292.899248][T14776] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 292.906846][T14776] vhci_hcd vhci_hcd.0: Device attached [ 292.955773][T14780] atomic_op ffff888114ff3928 conn xmit_atomic 0000000000000000 [ 293.039941][T14785] netlink: 'syz.5.4169': attribute type 10 has an invalid length. [ 293.069748][T14784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4170'. [ 293.131279][T14791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4173'. [ 293.159490][ T3374] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 293.188641][T14797] FAULT_INJECTION: forcing a failure. [ 293.188641][T14797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.201775][T14797] CPU: 1 UID: 0 PID: 14797 Comm: syz.2.4176 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 293.201829][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 293.201844][T14797] Call Trace: [ 293.201850][T14797] [ 293.201858][T14797] dump_stack_lvl+0xf2/0x150 [ 293.201900][T14797] dump_stack+0x15/0x1a [ 293.201920][T14797] should_fail_ex+0x24a/0x260 [ 293.201972][T14797] should_fail+0xb/0x10 [ 293.202004][T14797] should_fail_usercopy+0x1a/0x20 [ 293.202045][T14797] _copy_from_user+0x1c/0xa0 [ 293.202075][T14797] do_ipv6_setsockopt+0x1ef/0x2250 [ 293.202201][T14797] ? _parse_integer+0x27/0x30 [ 293.202224][T14797] ? kstrtouint+0x77/0xc0 [ 293.202244][T14797] ? avc_has_perm_noaudit+0x1cc/0x210 [ 293.202276][T14797] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 293.202412][T14797] ipv6_setsockopt+0x57/0x130 [ 293.202446][T14797] tcp_setsockopt+0x93/0xb0 [ 293.202470][T14797] sock_common_setsockopt+0x64/0x80 [ 293.202575][T14797] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 293.202711][T14797] __sys_setsockopt+0x187/0x200 [ 293.202746][T14797] __x64_sys_setsockopt+0x66/0x80 [ 293.202772][T14797] x64_sys_call+0x282e/0x2dc0 [ 293.202886][T14797] do_syscall_64+0xc9/0x1c0 [ 293.202910][T14797] ? clear_bhb_loop+0x55/0xb0 [ 293.202935][T14797] ? clear_bhb_loop+0x55/0xb0 [ 293.203060][T14797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.203083][T14797] RIP: 0033:0x7f249261cde9 [ 293.203095][T14797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.203183][T14797] RSP: 002b:00007f2490c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 293.203199][T14797] RAX: ffffffffffffffda RBX: 00007f2492835fa0 RCX: 00007f249261cde9 [ 293.203210][T14797] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 293.203220][T14797] RBP: 00007f2490c87090 R08: 00000000000003d8 R09: 0000000000000000 [ 293.203231][T14797] R10: 00004000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 293.203241][T14797] R13: 0000000000000000 R14: 00007f2492835fa0 R15: 00007fff4c6e57f8 [ 293.203256][T14797] [ 293.482164][T14803] atomic_op ffff88811779cd28 conn xmit_atomic 0000000000000000 [ 293.526796][T14804] xt_ct_set_helper: 4 callbacks suppressed [ 293.526813][T14804] xt_CT: No such helper "pptp" [ 293.590327][T14809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4181'. [ 293.625777][T14815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4184'. [ 293.708666][T14777] vhci_hcd: connection reset by peer [ 293.717495][ T4286] vhci_hcd: stop threads [ 293.721859][ T4286] vhci_hcd: release socket [ 293.726302][ T4286] vhci_hcd: disconnect device [ 293.907446][T14831] atomic_op ffff888114ff3928 conn xmit_atomic 0000000000000000 [ 293.986946][T14834] rdma_op ffff888114ff3980 conn xmit_rdma 0000000000000000 [ 294.326462][T14841] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4194'. [ 294.338540][T14841] netlink: 'syz.4.4194': attribute type 4 has an invalid length. [ 294.538649][T14846] xt_CT: No such helper "pptp" [ 294.562728][T14855] rdma_op ffff888114ff3580 conn xmit_rdma 0000000000000000 [ 294.606867][T14858] netlink: 'syz.1.4199': attribute type 10 has an invalid length. [ 294.635158][T14858] team0: Port device dummy0 added [ 295.076257][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 295.076271][ T29] audit: type=1326 audit(1739612305.068:25653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff21f333da7 code=0x7ffc0000 [ 295.106012][T14884] xt_CT: No such helper "pptp" [ 295.134688][ T29] audit: type=1326 audit(1739612305.108:25654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff21f2d8fb9 code=0x7ffc0000 [ 295.158454][ T29] audit: type=1326 audit(1739612305.108:25655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff21f333da7 code=0x7ffc0000 [ 295.181968][ T29] audit: type=1326 audit(1739612305.108:25656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff21f2d8fb9 code=0x7ffc0000 [ 295.205493][ T29] audit: type=1326 audit(1739612305.108:25657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 295.229056][ T29] audit: type=1326 audit(1739612305.108:25658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff21f333da7 code=0x7ffc0000 [ 295.252651][ T29] audit: type=1326 audit(1739612305.108:25659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff21f2d8fb9 code=0x7ffc0000 [ 295.276166][ T29] audit: type=1326 audit(1739612305.108:25660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff21f33cde9 code=0x7ffc0000 [ 295.294045][T14899] xt_CT: No such helper "pptp" [ 295.299681][ T29] audit: type=1326 audit(1739612305.118:25661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff21f333da7 code=0x7ffc0000 [ 295.327981][ T29] audit: type=1326 audit(1739612305.118:25662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff21f2d8fb9 code=0x7ffc0000 [ 295.486838][T14912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.500750][T14912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.510787][T14912] Cannot find add_set index 0 as target [ 295.690531][T14920] xt_CT: No such helper "pptp" [ 295.750106][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.759004][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.769845][T14924] Cannot find add_set index 0 as target [ 295.894457][T14933] xt_CT: No such helper "pptp" [ 296.010825][T14941] atomic_op ffff888117f4c528 conn xmit_atomic 0000000000000000 [ 296.086788][T14944] xt_CT: No such helper "pptp" [ 296.456416][T14968] xt_CT: No such helper "pptp" [ 296.470782][T14973] atomic_op ffff888117f4f528 conn xmit_atomic 0000000000000000 [ 296.631488][ T3364] vhci_hcd: vhci_device speed not set [ 296.642047][T14983] FAULT_INJECTION: forcing a failure. [ 296.642047][T14983] name failslab, interval 1, probability 0, space 0, times 0 [ 296.654704][T14983] CPU: 1 UID: 0 PID: 14983 Comm: syz.2.4253 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 296.654730][T14983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 296.654743][T14983] Call Trace: [ 296.654750][T14983] [ 296.654757][T14983] dump_stack_lvl+0xf2/0x150 [ 296.654787][T14983] dump_stack+0x15/0x1a [ 296.654812][T14983] should_fail_ex+0x24a/0x260 [ 296.654917][T14983] should_failslab+0x8f/0xb0 [ 296.654955][T14983] kmem_cache_alloc_noprof+0x52/0x320 [ 296.654978][T14983] ? audit_log_start+0x34c/0x6b0 [ 296.655016][T14983] audit_log_start+0x34c/0x6b0 [ 296.655093][T14983] audit_seccomp+0x4b/0x130 [ 296.655121][T14983] __seccomp_filter+0x6fa/0x1180 [ 296.655204][T14983] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 296.655251][T14983] ? vfs_write+0x644/0x920 [ 296.655273][T14983] ? __schedule+0x75b/0x990 [ 296.655308][T14983] __secure_computing+0x9f/0x1c0 [ 296.655329][T14983] syscall_trace_enter+0xd1/0x1f0 [ 296.655352][T14983] do_syscall_64+0xaa/0x1c0 [ 296.655386][T14983] ? clear_bhb_loop+0x55/0xb0 [ 296.655411][T14983] ? clear_bhb_loop+0x55/0xb0 [ 296.655466][T14983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.655490][T14983] RIP: 0033:0x7f249261cde9 [ 296.655504][T14983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.655520][T14983] RSP: 002b:00007f2490c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 296.655536][T14983] RAX: ffffffffffffffda RBX: 00007f2492835fa0 RCX: 00007f249261cde9 [ 296.655547][T14983] RDX: 0000000000000000 RSI: 0000000000080001 RDI: 0000000000000000 [ 296.655627][T14983] RBP: 00007f2490c87090 R08: 0000000000000000 R09: 0000000000000000 [ 296.655638][T14983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.655648][T14983] R13: 0000000000000000 R14: 00007f2492835fa0 R15: 00007fff4c6e57f8 [ 296.655664][T14983] [ 296.915041][T14995] netlink: 'syz.2.4259': attribute type 4 has an invalid length. [ 296.940116][T14999] atomic_op ffff88811779d928 conn xmit_atomic 0000000000000000 [ 296.952407][T15002] __nla_validate_parse: 8 callbacks suppressed [ 296.952421][T15002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4262'. [ 296.970818][T15002] netlink: 'syz.2.4262': attribute type 4 has an invalid length. [ 297.106659][T15028] netlink: 'syz.3.4272': attribute type 4 has an invalid length. [ 297.127189][T15021] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.134480][T15021] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.144063][T15034] atomic_op ffff88811779c528 conn xmit_atomic 0000000000000000 [ 297.153292][T15021] bridge0: entered allmulticast mode [ 297.167916][T15032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4274'. [ 297.183545][T15032] netlink: 'syz.2.4274': attribute type 4 has an invalid length. [ 297.282106][T15048] FAULT_INJECTION: forcing a failure. [ 297.282106][T15048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.295262][T15048] CPU: 0 UID: 0 PID: 15048 Comm: syz.1.4279 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 297.295293][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 297.295309][T15048] Call Trace: [ 297.295316][T15048] [ 297.295342][T15048] dump_stack_lvl+0xf2/0x150 [ 297.295374][T15048] dump_stack+0x15/0x1a [ 297.295400][T15048] should_fail_ex+0x24a/0x260 [ 297.295431][T15048] should_fail+0xb/0x10 [ 297.295456][T15048] should_fail_usercopy+0x1a/0x20 [ 297.295593][T15048] _copy_from_user+0x1c/0xa0 [ 297.295726][T15048] copy_msghdr_from_user+0x54/0x2a0 [ 297.295791][T15048] ? __fget_files+0x17c/0x1c0 [ 297.295843][T15048] __sys_sendmsg+0x13e/0x230 [ 297.295880][T15048] __x64_sys_sendmsg+0x46/0x50 [ 297.295902][T15048] x64_sys_call+0x2734/0x2dc0 [ 297.295929][T15048] do_syscall_64+0xc9/0x1c0 [ 297.296005][T15048] ? clear_bhb_loop+0x55/0xb0 [ 297.296031][T15048] ? clear_bhb_loop+0x55/0xb0 [ 297.296057][T15048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.296106][T15048] RIP: 0033:0x7f87efedcde9 [ 297.296138][T15048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.296156][T15048] RSP: 002b:00007f87ee547038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.296174][T15048] RAX: ffffffffffffffda RBX: 00007f87f00f5fa0 RCX: 00007f87efedcde9 [ 297.296215][T15048] RDX: 0000000000044080 RSI: 0000400000000040 RDI: 0000000000000003 [ 297.296229][T15048] RBP: 00007f87ee547090 R08: 0000000000000000 R09: 0000000000000000 [ 297.296291][T15048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.296303][T15048] R13: 0000000000000000 R14: 00007f87f00f5fa0 R15: 00007fffd8812df8 [ 297.296320][T15048] [ 297.565867][T15059] xt_CT: No such helper "pptp" [ 297.604328][T15063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4290'. [ 297.614896][T15063] netlink: 'syz.4.4290': attribute type 4 has an invalid length. [ 297.678672][T15074] serio: Serial port ptm0 [ 297.754346][T15084] FAULT_INJECTION: forcing a failure. [ 297.754346][T15084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.767475][T15084] CPU: 0 UID: 0 PID: 15084 Comm: syz.4.4297 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 297.767503][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 297.767516][T15084] Call Trace: [ 297.767523][T15084] [ 297.767532][T15084] dump_stack_lvl+0xf2/0x150 [ 297.767585][T15084] dump_stack+0x15/0x1a [ 297.767611][T15084] should_fail_ex+0x24a/0x260 [ 297.767647][T15084] should_fail+0xb/0x10 [ 297.767717][T15084] should_fail_usercopy+0x1a/0x20 [ 297.767748][T15084] _copy_from_user+0x1c/0xa0 [ 297.767847][T15084] copy_msghdr_from_user+0x54/0x2a0 [ 297.767878][T15084] ? __fget_files+0x17c/0x1c0 [ 297.768041][T15084] __sys_sendmsg+0x13e/0x230 [ 297.768080][T15084] __x64_sys_sendmsg+0x46/0x50 [ 297.768135][T15084] x64_sys_call+0x2734/0x2dc0 [ 297.768217][T15084] do_syscall_64+0xc9/0x1c0 [ 297.768245][T15084] ? clear_bhb_loop+0x55/0xb0 [ 297.768302][T15084] ? clear_bhb_loop+0x55/0xb0 [ 297.768327][T15084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.768404][T15084] RIP: 0033:0x7f83ee62cde9 [ 297.768460][T15084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.768478][T15084] RSP: 002b:00007f83ecc97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.768495][T15084] RAX: ffffffffffffffda RBX: 00007f83ee845fa0 RCX: 00007f83ee62cde9 [ 297.768507][T15084] RDX: 0000000000044080 RSI: 0000400000000040 RDI: 0000000000000003 [ 297.768550][T15084] RBP: 00007f83ecc97090 R08: 0000000000000000 R09: 0000000000000000 [ 297.768562][T15084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.768574][T15084] R13: 0000000000000000 R14: 00007f83ee845fa0 R15: 00007ffe9232b3e8 [ 297.768592][T15084] [ 297.960629][T15096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4301'. [ 297.983676][T15096] netlink: 'syz.3.4301': attribute type 4 has an invalid length. [ 298.045359][T15107] ================================================================== [ 298.053577][T15107] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 298.062020][T15107] [ 298.064342][T15107] read-write to 0xffff8881069b93b8 of 4 bytes by task 50 on cpu 0: [ 298.072233][T15107] __writeback_single_inode+0x1f4/0x850 [ 298.077794][T15107] writeback_sb_inodes+0x461/0xa30 [ 298.082917][T15107] wb_writeback+0x262/0x640 [ 298.087427][T15107] wb_workfn+0x1a8/0x940 [ 298.091684][T15107] process_scheduled_works+0x4db/0xa20 [ 298.097149][T15107] worker_thread+0x51d/0x6f0 [ 298.101749][T15107] kthread+0x4ae/0x520 [ 298.105830][T15107] ret_from_fork+0x4b/0x60 [ 298.110256][T15107] ret_from_fork_asm+0x1a/0x30 [ 298.115029][T15107] [ 298.117347][T15107] read to 0xffff8881069b93b8 of 4 bytes by task 15107 on cpu 1: [ 298.124985][T15107] __mark_inode_dirty+0x198/0x7e0 [ 298.130020][T15107] file_update_time+0x285/0x2b0 [ 298.134892][T15107] ext4_page_mkwrite+0x19e/0xb70 [ 298.139844][T15107] do_wp_page+0xca1/0x2340 [ 298.144276][T15107] handle_mm_fault+0xc63/0x2ac0 [ 298.149141][T15107] exc_page_fault+0x3b9/0x650 [ 298.153822][T15107] asm_exc_page_fault+0x26/0x30 [ 298.158678][T15107] [ 298.160998][T15107] value changed: 0x00010022 -> 0x00000000 [ 298.166710][T15107] [ 298.169032][T15107] Reported by Kernel Concurrency Sanitizer on: [ 298.175187][T15107] CPU: 1 UID: 0 PID: 15107 Comm: syz.1.4307 Not tainted 6.14.0-rc2-syzkaller-00253-g78a632a2086c #0 [ 298.185947][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 298.196014][T15107] ================================================================== [ 298.275136][T15113] xt_CT: No such helper "pptp" [ 298.319368][ T3374] vhci_hcd: vhci_device speed not set [ 306.914589][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 306.914607][ T29] audit: type=1400 audit(1739612316.908:26445): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 306.942951][ T29] audit: type=1400 audit(1739612316.908:26446): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.964677][ T29] audit: type=1400 audit(1739612316.908:26447): avc: denied { append } for pid=2982 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 306.987100][ T29] audit: type=1400 audit(1739612316.908:26448): avc: denied { open } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 307.009754][ T29] audit: type=1400 audit(1739612316.908:26449): avc: denied { getattr } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1