last executing test programs: 1m55.636680893s ago: executing program 3 (id=3573): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m55.602860123s ago: executing program 3 (id=3574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) memfd_create(&(0x7f0000000080)='-@', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x26, 0xfffffffffffffe47, &(0x7f0000000080)="b9ff030711a5268c019e14f088a847e0ffff00124000632177fbac141417e000000194029f03", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8ec0, 0x0) fcntl$setpipe(r3, 0x407, 0x100000) dup2(0xffffffffffffffff, r3) sendmsg$key(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000440)=ANY=[], 0x118}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) gettid() bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="fc7464ca2331472516088b9b42ea06f5b81cd319b971d442e550306c3e2c1e0929a0f989912c80e5183458abd41a56baff608b29a27ddda774b55844560f7400e2ffea31d589399bd146ac90748c64960b1d4c06b39d8271c5e161e0a8e7f2b4277d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000009704000000000000850000005700000095164087ace9b1508b341bc3b1bb2a10cf1e657355f02338cf6e5aadd0b2a524d9d67c6f79b0ea2c6b34699c23653e60bb727ab2da81b7baf36977977255d41e0382b7fca2f68fe87a480e1b92744c95d9602b8a7b92d442d0bce351e57c93c1774f67c65140224ec97df2ac504cb1f0521eb149151f9baf5935bb756ceff2bb5c1578629766efe21a5b187f6252e9d911b92d40a5211ebd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="c50f00800000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r9, @ANYBLOB="080001"], 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, 0x0, 0x20048050) 1m55.501544992s ago: executing program 3 (id=3577): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="ebffffffffffff0c99080000000000007b8af81a01000000bfa2000009f7df123c07ca27f8ffffffb703008f31"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) 1m55.410720842s ago: executing program 3 (id=3582): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0, 0x0, 0x100000000}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='rose0\x00', 0xfffffffffffffffe) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000003c0)) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x8) (fail_nth: 2) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/igmp\x00') bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 1m55.055437611s ago: executing program 3 (id=3585): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f00000010c0)="$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") madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x16) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000036000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000280)=[{0x0, 0xffffffffffffffff}], 0x1, 0x4, 0x0, 0x0, 0x26}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x13) r3 = open(&(0x7f00000003c0)='./file1\x00', 0x14127e, 0x2) fallocate(r3, 0x1, 0x7fff, 0x8) r4 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000040)={{0x2, 0x4e20, @local}, {0x1, @multicast}, 0x20, {0x2, 0x1, @rand_addr=0x64010100}, 'batadv0\x00'}) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m54.78735916s ago: executing program 3 (id=3595): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200010004000008080100000100000080000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000100)="333dab6edf4fd46068aab01fc4287e030ccbd07116077afe469e2ced54d0b30125922ac8274db6ae757ff755998813802e36853aead1ef2d4f671b299299f174c2c27008b2bb56544dfb7160b339", &(0x7f0000000080), &(0x7f0000000180)="ed15982a8788415d767c842a72b1f166d1d2cdadc10c1d6b06097ad44a1152eef7e040d571a9fb5a0a1604", &(0x7f00000001c0)="0a1fb24d9cde84f0b5726c5f10d597bf5227cf0034e19edd874cc1daa18e058e1a1bee3b32cefa0e146ec874aeb8bb3a39e70329c8c969ffe0e5989ece9b92077ff333", 0x2, r0}, 0x38) lsm_set_self_attr(0x64, 0x0, 0x0, 0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x16) r2 = open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000300)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x1}, {0x3, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x93) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8c000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m39.721067315s ago: executing program 32 (id=3595): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200010004000008080100000100000080000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000100)="333dab6edf4fd46068aab01fc4287e030ccbd07116077afe469e2ced54d0b30125922ac8274db6ae757ff755998813802e36853aead1ef2d4f671b299299f174c2c27008b2bb56544dfb7160b339", &(0x7f0000000080), &(0x7f0000000180)="ed15982a8788415d767c842a72b1f166d1d2cdadc10c1d6b06097ad44a1152eef7e040d571a9fb5a0a1604", &(0x7f00000001c0)="0a1fb24d9cde84f0b5726c5f10d597bf5227cf0034e19edd874cc1daa18e058e1a1bee3b32cefa0e146ec874aeb8bb3a39e70329c8c969ffe0e5989ece9b92077ff333", 0x2, r0}, 0x38) lsm_set_self_attr(0x64, 0x0, 0x0, 0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x16) r2 = open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000300)=[{{0x2, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x1}, {0x3, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x93) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000340), 0x8c000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16.519115468s ago: executing program 1 (id=5450): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x110) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x13}, 0xff000000, 0x0, 0x3, 0x7, {@mac=@local, {[0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xbb4de195e1e2c5a6, 0x0, 0xff]}}, 0x8, 0x6, 0x2, 0x1, 0x10, 0x9, 'veth0_virt_wifi\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x2b5}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @empty, @multicast2, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0xad) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r3}) 16.452902068s ago: executing program 1 (id=5453): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffcc4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="eb1103f9b8357e440000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb701000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001300)='./file2\x00', 0x0, &(0x7f0000000380)={[{@oldalloc}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nobh}, {@lazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@grpjquota}]}, 0x1, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=") r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1759a3e17a35b5c765f6fe71d2943af00000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000e6fb3fab189413b8d47afd21f826f2f375487fb56e99d046355a7cd60ac54519c9a0b46443078056ffe25cc35f5f0e535033cf8a373261b975da6b9560367a316c7c4ba170970316e3be05cff44a1467c05f3def6b7e16cc217b14012c20885e4c5296e42a42a949172b8edca0bdbbbcae5ed56b23daeb49bb347e6a7161a4f11525b4f74ab7413f20b9cc36326296921fc9dcee1da800c3b0043f83d366543a356e", @ANYRES16=r6, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3000000000"], 0x54}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x10020, 0x0) read$eventfd(r2, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4) 16.249298667s ago: executing program 1 (id=5455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) unlinkat(0xffffffffffffffff, 0x0, 0x200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 16.223642647s ago: executing program 1 (id=5456): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0, 0x0, 0x100000000}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='rose0\x00', 0xfffffffffffffffe) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000003c0)) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x8) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000f900001e0700000084910000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="07000000020000000300"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x573240, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) 15.996761796s ago: executing program 1 (id=5466): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r0, &(0x7f0000000440)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.usage_user\x00', 0x275a, 0x408) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) lremovexattr(0x0, 0x0) 15.175380503s ago: executing program 1 (id=5477): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000600)=""/222, 0xde}, {&(0x7f00000001c0)=""/111, 0x6f}], 0x3) 15.175036173s ago: executing program 33 (id=5477): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000600)=""/222, 0xde}, {&(0x7f00000001c0)=""/111, 0x6f}], 0x3) 3.298453234s ago: executing program 2 (id=5625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r2, 0x1}}, 0x18) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10001, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0x7f, 0x6}, {0xf, 0x8}, {0x9, 0x100}, {0x4, 0x4}, {0x8001, 0xf801}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r4, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 3.235745434s ago: executing program 2 (id=5626): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x9, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = io_uring_setup(0x70f7, &(0x7f0000000940)={0x0, 0x1fff, 0x400, 0x0, 0x8000}) listen(r1, 0x5) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 3.216199554s ago: executing program 2 (id=5628): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="002000000000000000000000002f5416b889545851bae70000000040"], 0x50) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x2c, 0x11, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4}, {0x1}}, [{0x8, 0xb, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000007000000170300000ee600a8bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x3, 0x3) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 3.103800823s ago: executing program 2 (id=5630): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = getpid() syz_usb_connect(0x5, 0x8b4, &(0x7f0000000ec0)={{0x12, 0x1, 0x250, 0x6f, 0x18, 0x72, 0x20, 0x65a, 0x9, 0x5d35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a2, 0x4, 0x87, 0x5, 0x60, 0x0, [{{0x9, 0x4, 0x2e, 0x8, 0xb, 0x7e, 0xd2, 0x79, 0x3, [], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0x7c, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x9, 0x1ff}, @generic={0x5a, 0x22, "4ec9c7794e7c3c887fa0b2f0c4f5c525f40a13dfeb25d717fc0b2af8b664b27b577b4629361676d22565e468bfcf3e5ac414826ee96c0dd63d84f0b072f34db3800f90394d6b8ce7ec66f27b1e8fb321107b7b2ae35e20e8"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x8, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x200}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x10, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x5, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x3, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x9, 0x10, 0x10}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x7, 0x2, 0x6, [@generic={0xcc, 0x2, "eb6d7c321a5ab2a0ea878ef44d7ae94b4fc94d724dcaeac1816a3e40cc0998e3a5b0ab369df03aa1cef2ad2b06ab5978d7619ef985c19ec92fcd794d57ab6ef71bd7ca00c46d2d35e1f6143c07598d494d191f0a35b8268d551b4edb734ce8cace33a81a958040317d93dc3d405e98118f8d0e7739fc25ec55bcdec6ae573341f65f651798305e47d28b62f0dab00600cc88917f97c852aed504aae3d4171c53dda9e155f551db910e0e14bff478a9bd64d345fdfc9a05a7d174b0151461b343cba5973016816c41402f"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x3, 0x10, 0x9, [@generic={0x6a, 0xe, "520982e58d767cfe0acf09078698e7b3555284dc39d43f0a6183bb032ff142fa5d9511d2609ad92af0faae9c106336e7f6228c4e3d23c0bd38750179cf7a197425cb92179eb1bc7fedc2de6e2955e90a7a618305fb79bbc27040193c7e2ad52df6d1ff08e58fa953"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x10, 0x4, 0xc2, [@generic={0xd9, 0x6, "74c7e1f28e0388220c4059bdecdc1c79d043403fc4fd43ec79fb53d7db2f3e41a9859cf0a5a65590afa0ae378520b5ae6581e04ff36cbe2fa29d4e48a7ce9db78eb492eb0a5cf2a22bf2e1f421ab4b4fd562df8e629d8ccbc0c93097e3ac0711d41b867262bb442ea86e261798b24023dd3ca04a9abd92097e302b219db98edca7a5e33296f589578450fd15a8122ed2404250b0c2ca41c0eff4dc01272198c248ff219a47280f4968f5f091e36a44df9a98c81741308ffcaaeb909a766aa617cfa8f66694eb35986ab7d324924b70608fa128c326f828"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x80, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xff81}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x3, 0x1, [@generic={0x7a, 0x6, "b8c8cf43e5c112cc8749fb7001355fd734dc15f18ada7e41c63ab951832522eb801063e806c02661ed007da571d030646c3e87a99d6d344867652703bf8a79f5429496192e183159a9d151fef7d9e98570fe8cd941aa8b040ba59e6ce50440e04eaa5ee9c1af92f1f1e7978d593a5729b718533b13ed431f"}, @generic={0x50, 0x3, "f513f270712984e2a4f850338d4ba701369ef3bc30526b29771727aa34ceab8947e2fc57d38a5e6f2e2b36aecbfc6a3244eced6acb58c6c4918302a7fa81825d6785c38d7797b18acd2729ed14b5"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x5, 0x4, 0x9}}]}}, {{0x9, 0x4, 0xa0, 0xa, 0x7, 0x7f, 0x1, 0x58, 0x10, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0xb4, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb, 0x7, 0xd5, "47f9ab4112ff07"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xd, 0x3, 0x0, 0x66}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe, 0x8, 0x3, 0x2, '%', "80"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa, 0x2, 0x1, 0xb}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "04"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x235, 0x5, 0x0, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}], [{{0x9, 0x5, 0x1, 0x10, 0x40, 0x9d, 0xf}}, {{0x9, 0x5, 0xa, 0x3, 0x50, 0xff, 0xd0, 0xf9}}, {{0x9, 0x5, 0x8d, 0x0, 0x10, 0xfd, 0x6, 0x7, [@generic={0xea, 0x22, "cefb10502afcc8627a34ded90c4a93e713497525ac17b6933819181ae96f7b23afff55b770c4a6fc8f858682f0b2ff2ffb621931ed558a42b9728adbf6ceb7638b7894ee32e14ff893676cb93523d2f6d91c697a86d1919abfae3a83fd82499b5e625d116f4861e604d4299c16705f3b1f30458707b53da91a2a929b2fb6f88849c829d56ea7d38f3ac61cce298ed78067f498fdead62145a7cb433c0c52d37259840d5cbdbbb701a44e3896565801cb6bf06abd82172a401ed4ec372174bc7708c9091bf618f52bc959aa8f06026d97f6768618ecf2a72657a9c1b773538ce4bf360ab059d14f56"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x74d3}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x6, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x7, 0x162a}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x5, 0x8}]}}, {{0x9, 0x5, 0x80, 0x3, 0x2042ba1a6e91d959, 0x7, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x29}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0xe0, 0x76, [@generic={0x100, 0x6, "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"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x8, 0x0, 0x9, [@generic={0x51, 0x21, "5168f138e30512bbf63ef59a99b4291fe4d745d12b1561e49e6d698e63260db16229c12fbf644a65ad0e880a08356fb7f72bfa8ba0b5e7e8a91834b20d97aed07f37e2c33b5288c5891eb28330c93b"}]}}]}}, {{0x9, 0x4, 0xfe, 0x8, 0x0, 0x29, 0x3d, 0x9c, 0xff}}, {{0x9, 0x4, 0x35, 0x81, 0x9, 0x3, 0x0, 0x0, 0x4, [@hid_hid={0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0xd33}}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x34, 0x0, 0x74}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x0, 0xbb, 0xf8}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x1, 0xd}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x4, 0x3, 0x2, [@generic={0x35, 0xd, "c233e6b3928954822e69531f525162bf3d0c21c83fba8205eacbcf93e721076976828cef995a638eee24a5c442884eb118227f"}, @generic={0x27, 0x2, "a46c456c9f899f5c489025567b9102215f8c2e20f14b7de4d872899145c821e9b564f3b3e9"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x4, 0x5, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x7, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x4, 0x8, 0xf}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x5, 0xf2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x58, 0xb01a}, @generic={0xe4, 0x30, "60f576508755993357bedc5786caac2d1132ef8ed85ec83d8e046f567e650767cc38f11f1a757b2954f0c39b8f90ffb88540ddef774c41287651e938235b107732bd5819499a95dda6b35f62110ff7188e405f5929c411ad54ec7c48de26b020ade706b9d2c010ef9919c1f30aa69de318f193c2197cfdba073444d4317a46e358d4abcc456264a5dae11afc5c8534c5079bb85628778c42070a6e8aefc145bb0ec25ddc22c5c64681789a34af3cc3a247bbf046cff77084c5505a2de0f6c01b108790ae676be7e0a7572dc1bacf48262670139113d7b70f24a9fb363e0ba5ed1653"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x3, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x10, 0x33, 0x0, 0x78, 0x7}, 0x5a, &(0x7f00000001c0)={0x5, 0xf, 0x5a, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xc, 0x0, 0xfd10, [0xff41c0, 0x30, 0xff000f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "33ba3cd631aa4ed5ecb149627f8fd350"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x6c5c, 0xff00, 0x3, [0xffc0, 0xffff60]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x1, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xa, 0x8}]}, 0x1, [{0x4d, &(0x7f0000000240)=@string={0x4d, 0x3, "b7b2fe26bd7a42a715a2de5d94f92fcb7c750f01d8e837964a6cbb82b26593706d973f64fe3e2cf59fb4c9f1a4c2877804a4544066130f450a991fcd51f23befdcfb924b8cf373440e0538"}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 2.884371583s ago: executing program 4 (id=5635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 2.848863062s ago: executing program 4 (id=5637): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) 2.018726599s ago: executing program 2 (id=5647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) 1.931759778s ago: executing program 2 (id=5648): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = getpid() syz_usb_connect(0x5, 0x8ab, &(0x7f0000000ec0)={{0x12, 0x1, 0x250, 0x6f, 0x18, 0x72, 0x20, 0x65a, 0x9, 0x5d35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x899, 0x4, 0x87, 0x5, 0x60, 0x0, [{{0x9, 0x4, 0x2e, 0x8, 0xb, 0x7e, 0xd2, 0x79, 0x3, [], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0x7c, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x9, 0x1ff}, @generic={0x5a, 0x22, "4ec9c7794e7c3c887fa0b2f0c4f5c525f40a13dfeb25d717fc0b2af8b664b27b577b4629361676d22565e468bfcf3e5ac414826ee96c0dd63d84f0b072f34db3800f90394d6b8ce7ec66f27b1e8fb321107b7b2ae35e20e8"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x8, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x200}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x10, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x5, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x3, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x9, 0x10, 0x10}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x7, 0x2, 0x6, [@generic={0xcc, 0x2, "eb6d7c321a5ab2a0ea878ef44d7ae94b4fc94d724dcaeac1816a3e40cc0998e3a5b0ab369df03aa1cef2ad2b06ab5978d7619ef985c19ec92fcd794d57ab6ef71bd7ca00c46d2d35e1f6143c07598d494d191f0a35b8268d551b4edb734ce8cace33a81a958040317d93dc3d405e98118f8d0e7739fc25ec55bcdec6ae573341f65f651798305e47d28b62f0dab00600cc88917f97c852aed504aae3d4171c53dda9e155f551db910e0e14bff478a9bd64d345fdfc9a05a7d174b0151461b343cba5973016816c41402f"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x3, 0x10, 0x9, [@generic={0x6a, 0xe, "520982e58d767cfe0acf09078698e7b3555284dc39d43f0a6183bb032ff142fa5d9511d2609ad92af0faae9c106336e7f6228c4e3d23c0bd38750179cf7a197425cb92179eb1bc7fedc2de6e2955e90a7a618305fb79bbc27040193c7e2ad52df6d1ff08e58fa953"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x10, 0x4, 0xc2, [@generic={0xd9, 0x6, "74c7e1f28e0388220c4059bdecdc1c79d043403fc4fd43ec79fb53d7db2f3e41a9859cf0a5a65590afa0ae378520b5ae6581e04ff36cbe2fa29d4e48a7ce9db78eb492eb0a5cf2a22bf2e1f421ab4b4fd562df8e629d8ccbc0c93097e3ac0711d41b867262bb442ea86e261798b24023dd3ca04a9abd92097e302b219db98edca7a5e33296f589578450fd15a8122ed2404250b0c2ca41c0eff4dc01272198c248ff219a47280f4968f5f091e36a44df9a98c81741308ffcaaeb909a766aa617cfa8f66694eb35986ab7d324924b70608fa128c326f828"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x80, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xff81}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x3, 0x1, [@generic={0x7a, 0x6, "b8c8cf43e5c112cc8749fb7001355fd734dc15f18ada7e41c63ab951832522eb801063e806c02661ed007da571d030646c3e87a99d6d344867652703bf8a79f5429496192e183159a9d151fef7d9e98570fe8cd941aa8b040ba59e6ce50440e04eaa5ee9c1af92f1f1e7978d593a5729b718533b13ed431f"}, @generic={0x50, 0x3, "f513f270712984e2a4f850338d4ba701369ef3bc30526b29771727aa34ceab8947e2fc57d38a5e6f2e2b36aecbfc6a3244eced6acb58c6c4918302a7fa81825d6785c38d7797b18acd2729ed14b5"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x5, 0x4, 0x9}}]}}, {{0x9, 0x4, 0xa0, 0xa, 0x7, 0x7f, 0x1, 0x58, 0x10, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0xb4, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb, 0x7, 0xd5, "47f9ab4112ff07"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xd, 0x3, 0x0, 0x66}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe, 0x8, 0x3, 0x2, '%', "80"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa, 0x2, 0x1, 0xb}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "04"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x235, 0x5, 0x0, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}], [{{0x9, 0x5, 0x1, 0x10, 0x40, 0x9d, 0xf}}, {{0x9, 0x5, 0xa, 0x3, 0x50, 0xff, 0xd0, 0xf9}}, {{0x9, 0x5, 0x8d, 0x0, 0x10, 0xfd, 0x6, 0x7, [@generic={0xea, 0x22, "cefb10502afcc8627a34ded90c4a93e713497525ac17b6933819181ae96f7b23afff55b770c4a6fc8f858682f0b2ff2ffb621931ed558a42b9728adbf6ceb7638b7894ee32e14ff893676cb93523d2f6d91c697a86d1919abfae3a83fd82499b5e625d116f4861e604d4299c16705f3b1f30458707b53da91a2a929b2fb6f88849c829d56ea7d38f3ac61cce298ed78067f498fdead62145a7cb433c0c52d37259840d5cbdbbb701a44e3896565801cb6bf06abd82172a401ed4ec372174bc7708c9091bf618f52bc959aa8f06026d97f6768618ecf2a72657a9c1b773538ce4bf360ab059d14f56"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x74d3}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x6, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x7, 0x162a}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x5, 0x8}]}}, {{0x9, 0x5, 0x80, 0x3, 0x2042ba1a6e91d959, 0x7, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x29}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0xe0, 0x76, [@generic={0x100, 0x6, "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"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x8, 0x0, 0x9, [@generic={0x51, 0x21, "5168f138e30512bbf63ef59a99b4291fe4d745d12b1561e49e6d698e63260db16229c12fbf644a65ad0e880a08356fb7f72bfa8ba0b5e7e8a91834b20d97aed07f37e2c33b5288c5891eb28330c93b"}]}}]}}, {{0x9, 0x4, 0xfe, 0x8, 0x0, 0x29, 0x3d, 0x9c, 0xff}}, {{0x9, 0x4, 0x35, 0x81, 0x8, 0x3, 0x0, 0x0, 0x4, [@hid_hid={0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0xd33}}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x34, 0x0, 0x74}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x0, 0xbb, 0xf8}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x1, 0xd}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x4, 0x3, 0x2, [@generic={0x35, 0xd, "c233e6b3928954822e69531f525162bf3d0c21c83fba8205eacbcf93e721076976828cef995a638eee24a5c442884eb118227f"}, @generic={0x27, 0x2, "a46c456c9f899f5c489025567b9102215f8c2e20f14b7de4d872899145c821e9b564f3b3e9"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x7, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x4, 0x8, 0xf}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x5, 0xf2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x58, 0xb01a}, @generic={0xe4, 0x30, "60f576508755993357bedc5786caac2d1132ef8ed85ec83d8e046f567e650767cc38f11f1a757b2954f0c39b8f90ffb88540ddef774c41287651e938235b107732bd5819499a95dda6b35f62110ff7188e405f5929c411ad54ec7c48de26b020ade706b9d2c010ef9919c1f30aa69de318f193c2197cfdba073444d4317a46e358d4abcc456264a5dae11afc5c8534c5079bb85628778c42070a6e8aefc145bb0ec25ddc22c5c64681789a34af3cc3a247bbf046cff77084c5505a2de0f6c01b108790ae676be7e0a7572dc1bacf48262670139113d7b70f24a9fb363e0ba5ed1653"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x3, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x10, 0x33, 0x0, 0x78, 0x7}, 0x5a, &(0x7f00000001c0)={0x5, 0xf, 0x5a, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xc, 0x0, 0xfd10, [0xff41c0, 0x30, 0xff000f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "33ba3cd631aa4ed5ecb149627f8fd350"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x6c5c, 0xff00, 0x3, [0xffc0, 0xffff60]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x1, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xa, 0x8}]}, 0x1, [{0x4d, &(0x7f0000000240)=@string={0x4d, 0x3, "b7b2fe26bd7a42a715a2de5d94f92fcb7c750f01d8e837964a6cbb82b26593706d973f64fe3e2cf59fb4c9f1a4c2877804a4544066130f450a991fcd51f23befdcfb924b8cf373440e0538"}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 1.931131639s ago: executing program 4 (id=5649): r0 = socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 1.730865057s ago: executing program 4 (id=5657): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) (fail_nth: 1) 1.495010857s ago: executing program 4 (id=5659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) unlinkat(0xffffffffffffffff, 0x0, 0x200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 1.494044037s ago: executing program 4 (id=5660): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='GPL\x00') r1 = socket$inet(0x2, 0x2, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000041cb2d5eaf85921558656b3cae39f36dd7a049", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x183) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r5, &(0x7f0000001fc0)=""/175, 0xaf) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x1046, &(0x7f000001a600)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6001810010101100fc000000000000000000000000000000fe8000000000000000000000000000aa00000e22004d"], 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000001c0)={r8, r0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r6}, 0x10) getpgid(0x0) syz_io_uring_setup(0x22d3, &(0x7f0000000140)={0x0, 0xece5, 0x100, 0x3, 0x9, 0x0, r5}, &(0x7f00000003c0), &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 1.243368406s ago: executing program 0 (id=5668): r0 = socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 1.126066465s ago: executing program 0 (id=5669): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 986.014074ms ago: executing program 0 (id=5673): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x2) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000002c0)="dc016fc9d70d6c03249cedbb9a0d868f6a813b2e77cd7c9c4fa5e12f51cb99688bda48806720ca3a0da567800ab867e2c6a50fa9f772b0ecb0331be0be98547d6f7cdb23f825dafd487b076e2b6cc625852de7f22da06876d05c88bb7a4238eaa0346d99f0cc48d48bbfa2434030fe43b579925c4ed04a6200a65d29af043b04d64d618f01bd35bab8e314f36041bb7c2b9081dbefbec9199fabbbaa9c0480b1a124d0ea9425226e7d9c6240c4bbf5578a77b39b62350e1bc61828cdc46bf8faa79a7d0fed78877ea8b8ed4134d5c24183e975c0b64c0322bb5142a5dd434f6e96", 0xe1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) read(r3, &(0x7f0000000540)=""/200, 0xc8) timerfd_settime(r3, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 809.099354ms ago: executing program 0 (id=5676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noextend}], [], 0x6b}}) 626.412013ms ago: executing program 6 (id=5679): r0 = socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) 521.444683ms ago: executing program 6 (id=5680): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000e6fb3fab189413b8d47afd21f826f2f375487fb56e99d046355a7cd60ac54519c9a0b46443078056ffe25cc35f5f0e535033cf8a373261b975da6b9560367a316c7c4ba170970316e3be05cff44a1467c05f3def6b7e16cc217b14012c20885e4c5296e42a42a949172b8edca0bdbbbcae5ed56b23daeb49bb347e6a7161a4f11525b4f74ab7413f20b9cc36326296921fc9dcee1da800c3b0043f83d366543a356e", @ANYRES16, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3000000000"], 0x54}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10020, 0x0) 499.866423ms ago: executing program 6 (id=5681): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x5) (async) sendmmsg$inet_sctp(r0, &(0x7f000000a2c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}], 0x18, 0x24004850}], 0x1, 0x2000c000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x15) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2, 0x7, 0x20000004}}) (async) r4 = memfd_secret(0x0) fcntl$setlease(r4, 0x400, 0x0) (async) fremovexattr(r4, &(0x7f00000001c0)=@random={'btrfs.', 'system.posix_acl_default\x00'}) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f00000000c0)="7a590f24afdfbb7e021fd36211080ef1d30d1fece97df006aea3671b8365f281a679866564c8adf1e36f419b77c12000e341de43404f6b2d735ab00a", &(0x7f0000000100)=""/51, 0x4}, 0x20) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 438.248942ms ago: executing program 0 (id=5683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 331.441522ms ago: executing program 5 (id=5685): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x2) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000002c0)="dc016fc9d70d6c03249cedbb9a0d868f6a813b2e77cd7c9c4fa5e12f51cb99688bda48806720ca3a0da567800ab867e2c6a50fa9f772b0ecb0331be0be98547d6f7cdb23f825dafd487b076e2b6cc625852de7f22da06876d05c88bb7a4238eaa0346d99f0cc48d48bbfa2434030fe43b579925c4ed04a6200a65d29af043b04d64d618f01bd35bab8e314f36041bb7c2b9081dbefbec9199fabbbaa9c0480b1a124d0ea9425226e7d9c6240c4bbf5578a77b39b62350e1bc61828cdc46bf8faa79a7d0fed78877ea8b8ed4134d5c24183e975c0b64c0322bb5142a5dd434f6e96", 0xe1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) read(r3, &(0x7f0000000540)=""/200, 0xc8) timerfd_settime(r3, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 284.420562ms ago: executing program 0 (id=5686): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x4}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r4], 0x20}}, 0x0) 222.106762ms ago: executing program 5 (id=5687): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r1}) 197.911021ms ago: executing program 5 (id=5688): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2000000000000100, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffc}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000080)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000001300000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4ac9, 0x0, 0x5, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) listen(r4, 0xfffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0x8, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0800450000340000000000019078ac1e0001ac1414aa03019078036100004600000000004000002f00097f000001ac0414bb4404003e01e69eb100f0218b2ed361a59aea743c2b166d17864900083347334c"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) 87.401391ms ago: executing program 5 (id=5689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) unlinkat(0xffffffffffffffff, 0x0, 0x200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 86.778401ms ago: executing program 5 (id=5690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 59.535771ms ago: executing program 5 (id=5691): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17.66357ms ago: executing program 6 (id=5692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) 17.03224ms ago: executing program 6 (id=5693): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000e6fb3fab189413b8d47afd21f826f2f375487fb56e99d046355a7cd60ac54519c9a0b46443078056ffe25cc35f5f0e535033cf8a373261b975da6b9560367a316c7c4ba170970316e3be05cff44a1467c05f3def6b7e16cc217b14012c20885e4c5296e42a42a949172b8edca0bdbbbcae5ed56b23daeb49bb347e6a7161a4f11525b4f74ab7413f20b9cc36326296921fc9dcee1da800c3b0043f83d366543a356e", @ANYRES16, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3000000000"], 0x54}}, 0x0) splice(r3, 0x0, r2, 0x0, 0x10020, 0x0) 0s ago: executing program 6 (id=5694): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = getpid() syz_usb_connect(0x5, 0x8b6, &(0x7f0000000ec0)={{0x12, 0x1, 0x250, 0x6f, 0x18, 0x72, 0x20, 0x65a, 0x9, 0x5d35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a4, 0x4, 0x87, 0x5, 0x60, 0x0, [{{0x9, 0x4, 0x2e, 0x8, 0xb, 0x7e, 0xd2, 0x79, 0x3, [], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0x7c, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x9, 0x1ff}, @generic={0x5a, 0x22, "4ec9c7794e7c3c887fa0b2f0c4f5c525f40a13dfeb25d717fc0b2af8b664b27b577b4629361676d22565e468bfcf3e5ac414826ee96c0dd63d84f0b072f34db3800f90394d6b8ce7ec66f27b1e8fb321107b7b2ae35e20e8"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x8, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x200}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x10, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x5, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x3, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x9, 0x10, 0x10}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x7, 0x2, 0x6, [@generic={0xcc, 0x2, "eb6d7c321a5ab2a0ea878ef44d7ae94b4fc94d724dcaeac1816a3e40cc0998e3a5b0ab369df03aa1cef2ad2b06ab5978d7619ef985c19ec92fcd794d57ab6ef71bd7ca00c46d2d35e1f6143c07598d494d191f0a35b8268d551b4edb734ce8cace33a81a958040317d93dc3d405e98118f8d0e7739fc25ec55bcdec6ae573341f65f651798305e47d28b62f0dab00600cc88917f97c852aed504aae3d4171c53dda9e155f551db910e0e14bff478a9bd64d345fdfc9a05a7d174b0151461b343cba5973016816c41402f"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x3, 0x10, 0x9, [@generic={0x6a, 0xe, "520982e58d767cfe0acf09078698e7b3555284dc39d43f0a6183bb032ff142fa5d9511d2609ad92af0faae9c106336e7f6228c4e3d23c0bd38750179cf7a197425cb92179eb1bc7fedc2de6e2955e90a7a618305fb79bbc27040193c7e2ad52df6d1ff08e58fa953"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x10, 0x4, 0xc2, [@generic={0xd9, 0x6, "74c7e1f28e0388220c4059bdecdc1c79d043403fc4fd43ec79fb53d7db2f3e41a9859cf0a5a65590afa0ae378520b5ae6581e04ff36cbe2fa29d4e48a7ce9db78eb492eb0a5cf2a22bf2e1f421ab4b4fd562df8e629d8ccbc0c93097e3ac0711d41b867262bb442ea86e261798b24023dd3ca04a9abd92097e302b219db98edca7a5e33296f589578450fd15a8122ed2404250b0c2ca41c0eff4dc01272198c248ff219a47280f4968f5f091e36a44df9a98c81741308ffcaaeb909a766aa617cfa8f66694eb35986ab7d324924b70608fa128c326f828"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x80, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xff81}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x3, 0x1, [@generic={0x7a, 0x6, "b8c8cf43e5c112cc8749fb7001355fd734dc15f18ada7e41c63ab951832522eb801063e806c02661ed007da571d030646c3e87a99d6d344867652703bf8a79f5429496192e183159a9d151fef7d9e98570fe8cd941aa8b040ba59e6ce50440e04eaa5ee9c1af92f1f1e7978d593a5729b718533b13ed431f"}, @generic={0x50, 0x3, "f513f270712984e2a4f850338d4ba701369ef3bc30526b29771727aa34ceab8947e2fc57d38a5e6f2e2b36aecbfc6a3244eced6acb58c6c4918302a7fa81825d6785c38d7797b18acd2729ed14b5"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x5, 0x4, 0x9}}]}}, {{0x9, 0x4, 0xa0, 0xa, 0x7, 0x7f, 0x1, 0x58, 0x10, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0xb4, 0x2}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb, 0x7, 0xd5, "47f9ab4112ff07"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xd, 0x3, 0x0, 0x66}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe, 0x8, 0x3, 0x2, '%', "80"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa, 0x2, 0x1, 0xb}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "04"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x235, 0x5, 0x0, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}], [{{0x9, 0x5, 0x1, 0x10, 0x40, 0x9d, 0xf}}, {{0x9, 0x5, 0xa, 0x3, 0x50, 0xff, 0xd0, 0xf9}}, {{0x9, 0x5, 0x8d, 0x0, 0x10, 0xfd, 0x6, 0x7, [@generic={0xea, 0x22, "cefb10502afcc8627a34ded90c4a93e713497525ac17b6933819181ae96f7b23afff55b770c4a6fc8f858682f0b2ff2ffb621931ed558a42b9728adbf6ceb7638b7894ee32e14ff893676cb93523d2f6d91c697a86d1919abfae3a83fd82499b5e625d116f4861e604d4299c16705f3b1f30458707b53da91a2a929b2fb6f88849c829d56ea7d38f3ac61cce298ed78067f498fdead62145a7cb433c0c52d37259840d5cbdbbb701a44e3896565801cb6bf06abd82172a401ed4ec372174bc7708c9091bf618f52bc959aa8f06026d97f6768618ecf2a72657a9c1b773538ce4bf360ab059d14f56"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x74d3}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x6, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x7, 0x162a}, @uac_iso={0x7, 0x25, 0x1, 0x87, 0x5, 0x8}]}}, {{0x9, 0x5, 0x80, 0x3, 0x2042ba1a6e91d959, 0x7, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x29}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0xe0, 0x76, [@generic={0x100, 0x6, "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"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x8, 0x0, 0x9, [@generic={0x51, 0x21, "5168f138e30512bbf63ef59a99b4291fe4d745d12b1561e49e6d698e63260db16229c12fbf644a65ad0e880a08356fb7f72bfa8ba0b5e7e8a91834b20d97aed07f37e2c33b5288c5891eb28330c93b"}]}}]}}, {{0x9, 0x4, 0xfe, 0x8, 0x0, 0x29, 0x3d, 0x9c, 0xff}}, {{0x9, 0x4, 0x35, 0x81, 0x9, 0x3, 0x0, 0x0, 0x4, [@hid_hid={0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0xd33}}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x34, 0x0, 0x74}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x0, 0xbb, 0xf8}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x1, 0xd}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x4, 0x3, 0x2, [@generic={0x35, 0xd, "c233e6b3928954822e69531f525162bf3d0c21c83fba8205eacbcf93e721076976828cef995a638eee24a5c442884eb118227f"}, @generic={0x27, 0x2, "a46c456c9f899f5c489025567b9102215f8c2e20f14b7de4d872899145c821e9b564f3b3e9"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x4, 0x5, 0x2, [@generic={0x2, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x7, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x4, 0x8, 0xf}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x5, 0xf2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x58, 0xb01a}, @generic={0xe4, 0x30, "60f576508755993357bedc5786caac2d1132ef8ed85ec83d8e046f567e650767cc38f11f1a757b2954f0c39b8f90ffb88540ddef774c41287651e938235b107732bd5819499a95dda6b35f62110ff7188e405f5929c411ad54ec7c48de26b020ade706b9d2c010ef9919c1f30aa69de318f193c2197cfdba073444d4317a46e358d4abcc456264a5dae11afc5c8534c5079bb85628778c42070a6e8aefc145bb0ec25ddc22c5c64681789a34af3cc3a247bbf046cff77084c5505a2de0f6c01b108790ae676be7e0a7572dc1bacf48262670139113d7b70f24a9fb363e0ba5ed1653"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x3, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x10, 0x33, 0x0, 0x78, 0x7}, 0x5a, &(0x7f00000001c0)={0x5, 0xf, 0x5a, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xc, 0x0, 0xfd10, [0xff41c0, 0x30, 0xff000f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "33ba3cd631aa4ed5ecb149627f8fd350"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x6c5c, 0xff00, 0x3, [0xffc0, 0xffff60]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x1, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xa, 0x8}]}, 0x1, [{0x4d, &(0x7f0000000240)=@string={0x4d, 0x3, "b7b2fe26bd7a42a715a2de5d94f92fcb7c750f01d8e837964a6cbb82b26593706d973f64fe3e2cf59fb4c9f1a4c2877804a4544066130f450a991fcd51f23befdcfb924b8cf373440e0538"}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) kernel console output (not intermixed with test programs): m tag 0x4 [ 220.456778][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x2 [ 220.475448][ T3375] hid-generic 0000:3000000:0000.00A6: unknown main item tag 0x3 [ 220.509023][ T3375] hid-generic 0000:3000000:0000.00A6: hidraw0: HID v0.00 Device [sy] on syz0 [ 220.546876][T15791] hub 5-0:1.0: USB hub found [ 220.562709][T15791] hub 5-0:1.0: 8 ports detected [ 220.579955][T15791] netlink: 'syz.1.4631': attribute type 10 has an invalid length. [ 220.583137][T15796] syz.2.4633[15796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.588066][T15796] syz.2.4633[15796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.594419][T15791] veth0_vlan: entered allmulticast mode [ 220.600174][T15796] syz.2.4633[15796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.616296][T15791] team0: Port device vlan1 added [ 220.834152][T15724] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.845665][T15724] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.861771][T15724] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.885720][T15724] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.903711][T15801] lo speed is unknown, defaulting to 1000 [ 221.013148][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4637'. [ 221.060742][ T3378] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x4 [ 221.068564][ T3378] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x2 [ 221.076428][ T3378] hid-generic 0000:3000000:0000.00A7: unknown main item tag 0x3 [ 221.084651][ T3378] hid-generic 0000:3000000:0000.00A7: hidraw0: HID v0.00 Device [sy] on syz0 [ 221.113451][T15812] hub 5-0:1.0: USB hub found [ 221.118217][T15812] hub 5-0:1.0: 8 ports detected [ 221.129643][T15812] netlink: 'syz.1.4639': attribute type 10 has an invalid length. [ 221.137889][T15812] veth0_vlan: left allmulticast mode [ 221.224921][T15820] team0: Port device vlan1 removed [ 221.464482][T15835] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 221.582068][T15841] usb usb4: usbfs: process 15841 (syz.1.4645) did not claim interface 0 before use [ 221.836262][T15854] Cannot find map_set index 0 as target [ 221.954185][T15858] netlink: 'syz.4.4655': attribute type 1 has an invalid length. [ 221.970020][T15858] bond9: entered promiscuous mode [ 221.992110][T15858] bond9: (slave team_slave_1): making interface the new active one [ 222.000106][T15858] team_slave_1: entered promiscuous mode [ 222.026325][T15858] bond9: (slave team_slave_1): Enslaving as an active interface with an up link [ 222.039478][T15864] 9pnet_fd: Insufficient options for proto=fd [ 222.205933][T15872] 9pnet_fd: Insufficient options for proto=fd [ 222.219678][T15875] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 222.273229][T15881] 9pnet_fd: Insufficient options for proto=fd [ 222.305776][T15883] bond0: (slave syz_tun): Releasing backup interface [ 222.315223][T15883] bond0: (slave team0): Releasing backup interface [ 222.331930][T15883] bond0: (slave bond_slave_0): Releasing backup interface [ 222.342309][T15883] bond0: (slave bond_slave_1): Releasing backup interface [ 222.355227][T15883] team0: Port device team_slave_0 removed [ 222.362751][T15883] bond6: (slave team_slave_1): Releasing active interface [ 222.371085][T15883] team_slave_1: left promiscuous mode [ 222.378854][T15883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.386327][T15883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.405860][T15883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.413480][T15883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.440740][T15889] netlink: 'syz.2.4666': attribute type 1 has an invalid length. [ 222.442018][T15883] team0: Port device vlan1 removed [ 222.469733][T15889] bond8: entered promiscuous mode [ 222.491280][T15889] bond8: (slave team_slave_1): making interface the new active one [ 222.497698][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4667'. [ 222.499254][T15889] team_slave_1: entered promiscuous mode [ 222.514558][T15889] bond8: (slave team_slave_1): Enslaving as an active interface with an up link [ 222.523896][T15887] lo speed is unknown, defaulting to 1000 [ 222.550344][T15889] 9pnet_fd: Insufficient options for proto=fd [ 222.658950][T15906] 9pnet_fd: Insufficient options for proto=fd [ 222.698038][T15910] lo speed is unknown, defaulting to 1000 [ 222.897245][T15932] 9pnet_fd: Insufficient options for proto=fd [ 222.981601][ T3378] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x4 [ 222.989459][ T3378] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x2 [ 223.003021][ T3378] hid-generic 0000:3000000:0000.00A8: unknown main item tag 0x3 [ 223.028858][ T3378] hid-generic 0000:3000000:0000.00A8: hidraw0: HID v0.00 Device [sy] on syz0 [ 223.085592][T15937] hub 5-0:1.0: USB hub found [ 223.098679][T15937] hub 5-0:1.0: 8 ports detected [ 223.110989][T15937] netlink: 'syz.5.4686': attribute type 10 has an invalid length. [ 223.126250][T15937] veth0_vlan: entered allmulticast mode [ 223.142697][T15937] team0: Port device vlan1 added [ 223.220432][T15955] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4693'. [ 223.249444][T15963] syz.5.4696[15963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.249628][T15963] syz.5.4696[15963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.261454][T15963] syz.5.4696[15963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.285826][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4694'. [ 223.457808][ T35] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x4 [ 223.465582][ T35] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x2 [ 223.473597][ T35] hid-generic 0000:3000000:0000.00A9: unknown main item tag 0x3 [ 223.481772][ T35] hid-generic 0000:3000000:0000.00A9: hidraw0: HID v0.00 Device [sy] on syz0 [ 223.520337][T15980] hub 5-0:1.0: USB hub found [ 223.525119][T15980] hub 5-0:1.0: 8 ports detected [ 223.534761][T15980] netlink: 'syz.0.4703': attribute type 10 has an invalid length. [ 223.544130][T15980] veth0_vlan: entered allmulticast mode [ 223.553168][T15980] team0: Port device vlan1 added [ 223.599405][T15988] rdma_op ffff88811a954d80 conn xmit_rdma 0000000000000000 [ 223.781198][T15996] lo speed is unknown, defaulting to 1000 [ 223.889948][T16011] 9pnet_fd: Insufficient options for proto=fd [ 223.960457][T16020] 9pnet_fd: Insufficient options for proto=fd [ 223.968611][T16019] rdma_op ffff888115c7c980 conn xmit_rdma 0000000000000000 [ 224.181263][T16030] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 224.699218][T16078] rdma_op ffff888115453980 conn xmit_rdma 0000000000000000 [ 224.737714][T16083] lo speed is unknown, defaulting to 1000 [ 224.798890][ T35] hid-generic 0000:3000000:0000.00AA: unknown main item tag 0x4 [ 224.806602][ T35] hid-generic 0000:3000000:0000.00AA: unknown main item tag 0x2 [ 224.815252][ T35] hid-generic 0000:3000000:0000.00AA: unknown main item tag 0x3 [ 224.832370][ T35] hid-generic 0000:3000000:0000.00AA: hidraw0: HID v0.00 Device [sy] on syz0 [ 224.888019][T16093] hub 5-0:1.0: USB hub found [ 224.893658][T16101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.907125][T16093] hub 5-0:1.0: 8 ports detected [ 224.919868][T16101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.928046][T16093] netlink: 'syz.1.4734': attribute type 10 has an invalid length. [ 224.936511][T16093] veth0_vlan: entered allmulticast mode [ 224.944655][T16093] team0: Port device vlan1 added [ 224.962216][T16101] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.990268][T16106] 9pnet_fd: Insufficient options for proto=fd [ 225.033646][T16101] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.092683][T16101] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.179210][T16128] usb usb4: usbfs: process 16128 (syz.4.4742) did not claim interface 0 before use [ 225.240293][T16101] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.279632][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 225.279717][ T29] audit: type=1326 audit(1734999233.671:32745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.1.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f67d45d29 code=0x7ffc0000 [ 225.309735][ T29] audit: type=1326 audit(1734999233.671:32746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16113 comm="syz.1.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f67d45d29 code=0x7ffc0000 [ 225.333386][ T29] audit: type=1326 audit(1734999233.681:32747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.4.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 225.357125][ T29] audit: type=1326 audit(1734999233.681:32748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.4.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 225.380769][ T29] audit: type=1326 audit(1734999233.681:32749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.4.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 225.404410][ T29] audit: type=1326 audit(1734999233.681:32750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.4.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 225.428006][ T29] audit: type=1326 audit(1734999233.681:32751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.4.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 225.451698][ T29] audit: type=1326 audit(1734999233.681:32752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.4.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 225.475397][ T29] audit: type=1326 audit(1734999233.681:32753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.4.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 225.499003][ T29] audit: type=1326 audit(1734999233.681:32754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.4.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 225.503277][T16138] lo speed is unknown, defaulting to 1000 [ 225.540772][T16101] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.578048][T16101] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.625817][T16101] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.644003][T16101] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.821404][T16173] 9pnet_fd: Insufficient options for proto=fd [ 226.350346][T16241] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 226.556967][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4757'. [ 226.565961][T16272] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4757'. [ 226.617968][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4758'. [ 226.715740][T16294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 226.807906][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4774'. [ 226.891652][T16318] $Hÿ: renamed from bond0 (while UP) [ 226.912348][T16318] $Hÿ: entered promiscuous mode [ 227.009890][T16330] 9pnet_fd: Insufficient options for proto=fd [ 227.143540][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4787'. [ 227.144727][T16336] bond9: (slave team_slave_1): Releasing active interface [ 227.188553][T16336] team_slave_1: left promiscuous mode [ 227.672518][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4801'. [ 227.986344][T16398] usb usb4: usbfs: process 16398 (syz.4.4803) did not claim interface 0 before use [ 228.425304][T16420] netlink: 'syz.2.4815': attribute type 1 has an invalid length. [ 228.440760][T16420] bond9: entered promiscuous mode [ 228.462918][T16420] bond8: (slave team_slave_1): Releasing active interface [ 228.470195][T16420] team_slave_1: left promiscuous mode [ 228.478611][T16420] bond9: (slave team_slave_1): making interface the new active one [ 228.486551][T16420] team_slave_1: entered promiscuous mode [ 228.492774][T16420] bond9: (slave team_slave_1): Enslaving as an active interface with an up link [ 228.505889][T16420] 9pnet_fd: Insufficient options for proto=fd [ 228.594871][T16426] rdma_op ffff888116dd0980 conn xmit_rdma 0000000000000000 [ 228.626700][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4818'. [ 228.682299][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4822'. [ 228.735850][T16436] veth0_vlan: left allmulticast mode [ 228.745725][T16436] team0: Port device vlan1 removed [ 228.790912][T16439] hub 5-0:1.0: USB hub found [ 228.795714][T16439] hub 5-0:1.0: 8 ports detected [ 228.803783][T16439] netlink: 'syz.2.4824': attribute type 10 has an invalid length. [ 228.812210][T16439] veth0_vlan: entered allmulticast mode [ 228.818790][T16439] team0: Port device vlan1 added [ 228.881839][T16454] rdma_op ffff888100e2a980 conn xmit_rdma 0000000000000000 [ 228.952832][T16463] netlink: 'syz.5.4834': attribute type 1 has an invalid length. [ 228.970328][T16463] 9pnet_fd: Insufficient options for proto=fd [ 228.977653][T16465] syz.2.4836[16465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.977745][T16465] syz.2.4836[16465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.989634][T16465] syz.2.4836[16465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.003610][T16467] FAULT_INJECTION: forcing a failure. [ 229.003610][T16467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.028184][T16467] CPU: 0 UID: 0 PID: 16467 Comm: syz.0.4837 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 229.039010][T16467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.049079][T16467] Call Trace: [ 229.052364][T16467] [ 229.055336][T16467] dump_stack_lvl+0xf2/0x150 [ 229.059972][T16467] dump_stack+0x15/0x1a [ 229.064162][T16467] should_fail_ex+0x223/0x230 [ 229.068959][T16467] should_fail+0xb/0x10 [ 229.073219][T16467] should_fail_usercopy+0x1a/0x20 [ 229.078341][T16467] _copy_to_user+0x20/0xa0 [ 229.082790][T16467] store_msg+0x4e/0xf0 [ 229.086915][T16467] do_mq_timedreceive+0x5a8/0x6d0 [ 229.091957][T16467] __x64_sys_mq_timedreceive+0xca/0x150 [ 229.097620][T16467] x64_sys_call+0x18f1/0x2dc0 [ 229.102346][T16467] do_syscall_64+0xc9/0x1c0 [ 229.106867][T16467] ? clear_bhb_loop+0x55/0xb0 [ 229.111543][T16467] ? clear_bhb_loop+0x55/0xb0 [ 229.116242][T16467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.122266][T16467] RIP: 0033:0x7fc230315d29 [ 229.126702][T16467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.146431][T16467] RSP: 002b:00007fc22e987038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 229.154845][T16467] RAX: ffffffffffffffda RBX: 00007fc230505fa0 RCX: 00007fc230315d29 [ 229.162823][T16467] RDX: 00000000fffffceb RSI: 0000000020004600 RDI: 0000000000000006 [ 229.170840][T16467] RBP: 00007fc22e987090 R08: 0000000000000000 R09: 0000000000000000 [ 229.178907][T16467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.186894][T16467] R13: 0000000000000000 R14: 00007fc230505fa0 R15: 00007ffd441120d8 [ 229.194890][T16467] [ 229.257982][T16479] syz.1.4841[16479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.258102][T16479] syz.1.4841[16479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.269945][T16479] syz.1.4841[16479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.582025][T16499] veth0_vlan: left allmulticast mode [ 229.600746][T16499] team0: Port device vlan1 removed [ 229.728241][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4851'. [ 229.823394][T16517] syz.2.4856[16517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.823526][T16517] syz.2.4856[16517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.835357][T16517] syz.2.4856[16517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.897235][T16529] 9pnet_fd: Insufficient options for proto=fd [ 229.975420][ T3378] hid-generic 0000:3000000:0000.00AB: unknown main item tag 0x4 [ 229.983294][ T3378] hid-generic 0000:3000000:0000.00AB: unknown main item tag 0x2 [ 230.002892][ T3378] hid-generic 0000:3000000:0000.00AB: unknown main item tag 0x3 [ 230.012559][ T3378] hid-generic 0000:3000000:0000.00AB: hidraw0: HID v0.00 Device [sy] on syz0 [ 230.060639][T16534] hub 5-0:1.0: USB hub found [ 230.073954][T16534] hub 5-0:1.0: 8 ports detected [ 230.082061][T16534] netlink: 'syz.0.4864': attribute type 10 has an invalid length. [ 230.098439][T16534] veth0_vlan: entered allmulticast mode [ 230.107335][T16534] team0: Port device vlan1 added [ 230.121447][T16542] syz.1.4867[16542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.217193][T16555] lo speed is unknown, defaulting to 1000 [ 230.287450][T16563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.296391][T16563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.299664][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 230.299680][ T29] audit: type=1326 audit(1734999238.751:33306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 230.336383][ T29] audit: type=1326 audit(1734999238.791:33307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 230.360148][ T29] audit: type=1326 audit(1734999238.791:33308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 230.383816][ T29] audit: type=1326 audit(1734999238.791:33309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 230.407424][ T29] audit: type=1326 audit(1734999238.791:33310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 230.431179][ T29] audit: type=1326 audit(1734999238.791:33311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 230.454831][ T29] audit: type=1326 audit(1734999238.791:33312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 230.478432][ T29] audit: type=1326 audit(1734999238.791:33313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 230.502024][ T29] audit: type=1326 audit(1734999238.791:33314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 230.525623][ T29] audit: type=1326 audit(1734999238.791:33315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 230.550615][T16563] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.610511][T16563] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.680874][T16563] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.729936][T16563] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.796038][T16563] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.809725][T16563] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.821212][T16563] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.832516][T16563] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.181558][T16616] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4896'. [ 231.376358][T16623] netlink: 'syz.4.4898': attribute type 1 has an invalid length. [ 231.385080][T16623] 9pnet_fd: Insufficient options for proto=fd [ 231.438934][T16629] rdma_op ffff888115c6e980 conn xmit_rdma 0000000000000000 [ 231.741386][T16644] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4907'. [ 231.775802][T16642] Process accounting resumed [ 231.780536][T16642] warn_unsupported: 13 callbacks suppressed [ 231.780552][T16642] kernel write not supported for file task/533/attr/sockcreate (pid: 16642 comm: syz.4.4904) [ 231.817688][T16650] kernel write not supported for file task/533/attr/sockcreate (pid: 16650 comm: syz.4.4909) [ 232.015952][T16656] kernel write not supported for file task/533/attr/sockcreate (pid: 16656 comm: syz.4.4910) [ 232.039648][T16679] netlink: 'syz.1.4914': attribute type 1 has an invalid length. [ 232.048035][T16679] 9pnet_fd: Insufficient options for proto=fd [ 232.682485][T16652] kernel write not supported for file task/533/attr/sockcreate (pid: 16652 comm: syz.4.4910) [ 232.731077][T16782] 9pnet_fd: Insufficient options for proto=fd [ 232.753903][T16782] kernel write not supported for file task/533/attr/sockcreate (pid: 16782 comm: syz.4.4923) [ 232.784247][T16789] kernel write not supported for file task/533/attr/sockcreate (pid: 16789 comm: syz.4.4924) [ 233.074531][T16834] netlink: 'syz.1.4926': attribute type 1 has an invalid length. [ 233.083069][T16834] 9pnet_fd: Insufficient options for proto=fd [ 233.238472][T16838] dccp_close: ABORT with 32 bytes unread [ 233.290599][ T3378] hid-generic 0000:3000000:0000.00AC: unknown main item tag 0x4 [ 233.298429][ T3378] hid-generic 0000:3000000:0000.00AC: unknown main item tag 0x2 [ 233.306169][ T3378] hid-generic 0000:3000000:0000.00AC: unknown main item tag 0x3 [ 233.314532][ T3378] hid-generic 0000:3000000:0000.00AC: hidraw0: HID v0.00 Device [sy] on syz0 [ 233.337730][T16846] hub 5-0:1.0: USB hub found [ 233.342540][T16846] hub 5-0:1.0: 8 ports detected [ 233.350483][T16846] netlink: 'syz.0.4928': attribute type 10 has an invalid length. [ 233.358585][T16846] veth0_vlan: left allmulticast mode [ 233.578908][T16854] block device autoloading is deprecated and will be removed. [ 233.651321][T16795] kernel write not supported for file task/533/attr/sockcreate (pid: 16795 comm: syz.4.4925) [ 233.747776][T16870] lo speed is unknown, defaulting to 1000 [ 233.830922][T16870] kernel write not supported for file task/533/attr/sockcreate (pid: 16870 comm: syz.4.4936) [ 233.876514][T16884] 9pnet_fd: Insufficient options for proto=fd [ 233.902495][T16884] kernel write not supported for file task/533/attr/sockcreate (pid: 16884 comm: syz.4.4937) [ 233.960514][T16887] kernel write not supported for file task/533/attr/sockcreate (pid: 16887 comm: syz.4.4938) [ 234.664344][T16853] syz.0.4934 (16853) used greatest stack depth: 7184 bytes left [ 234.750111][T16998] lo speed is unknown, defaulting to 1000 [ 234.851464][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4957'. [ 234.860538][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4957'. [ 235.016504][T17013] bond9: (slave team_slave_1): Releasing active interface [ 235.030789][T17013] team_slave_1: left promiscuous mode [ 235.055935][T17013] veth0_vlan: left allmulticast mode [ 235.064757][T17013] team0: Port device vlan1 removed [ 235.104977][T17028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.114152][T17028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.142692][T17028] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.167006][T17032] lo speed is unknown, defaulting to 1000 [ 235.189644][T17028] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.244431][T17042] rdma_op ffff888115c6dd80 conn xmit_rdma 0000000000000000 [ 235.259488][T17028] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.321484][T17028] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.361591][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 235.361607][ T29] audit: type=1326 audit(1734999243.811:33720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.2.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146f9d5d29 code=0x7ffc0000 [ 235.391606][ T29] audit: type=1326 audit(1734999243.811:33721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.2.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146f9d5d29 code=0x7ffc0000 [ 235.415488][ T29] audit: type=1326 audit(1734999243.811:33722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17039 comm="syz.2.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f146f9d5d29 code=0x7ffc0000 [ 235.445804][T17028] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.459592][T17028] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.480192][T17028] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.494546][T17028] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.534875][ T29] audit: type=1326 audit(1734999243.981:33723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17057 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 235.558602][ T29] audit: type=1326 audit(1734999243.981:33724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17057 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 235.582393][ T29] audit: type=1326 audit(1734999243.981:33725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17057 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 235.606038][ T29] audit: type=1326 audit(1734999243.981:33726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17057 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 235.630139][ T29] audit: type=1326 audit(1734999243.981:33727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17057 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 235.653826][ T29] audit: type=1326 audit(1734999243.981:33728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17057 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 235.677646][ T29] audit: type=1326 audit(1734999243.981:33729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17057 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 235.775755][T17067] 9pnet_fd: Insufficient options for proto=fd [ 235.870283][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4981'. [ 235.910864][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4982'. [ 235.919891][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4982'. [ 236.084089][T17093] lo speed is unknown, defaulting to 1000 [ 236.121507][ T35] hid-generic 0000:3000000:0000.00AD: unknown main item tag 0x4 [ 236.129244][ T35] hid-generic 0000:3000000:0000.00AD: unknown main item tag 0x2 [ 236.137506][ T35] hid-generic 0000:3000000:0000.00AD: unknown main item tag 0x3 [ 236.147142][ T35] hid-generic 0000:3000000:0000.00AD: hidraw0: HID v0.00 Device [sy] on syz0 [ 236.181699][T17097] netlink: 'syz.4.4992': attribute type 10 has an invalid length. [ 236.190227][T17097] veth0_vlan: entered allmulticast mode [ 236.197516][T17097] team0: Port device vlan1 added [ 236.725631][T17185] rdma_op ffff888117952180 conn xmit_rdma 0000000000000000 [ 236.785943][T17196] lo speed is unknown, defaulting to 1000 [ 236.845797][T17195] warn_unsupported: 20 callbacks suppressed [ 236.845816][T17195] kernel write not supported for file task/533/attr/sockcreate (pid: 17195 comm: syz.4.5003) [ 236.894405][T17211] netlink: 'syz.2.5004': attribute type 10 has an invalid length. [ 236.899521][T17216] rdma_op ffff888115c95980 conn xmit_rdma 0000000000000000 [ 236.921174][T17211] veth0_vlan: entered allmulticast mode [ 236.930678][T17220] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5006'. [ 236.931333][T17211] team0: Port device vlan1 added [ 236.961991][T17216] kernel write not supported for file task/533/attr/sockcreate (pid: 17216 comm: syz.4.5005) [ 237.160695][T17258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5013'. [ 237.195068][T17268] bpf_get_probe_write_proto: 5 callbacks suppressed [ 237.195084][T17268] syz.2.5014[17268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.209548][T17268] syz.2.5014[17268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.221958][T17268] syz.2.5014[17268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.310693][T17286] veth0_vlan: left allmulticast mode [ 237.332082][T17286] team0: Port device vlan1 removed [ 237.398055][T17288] veth0_vlan: left allmulticast mode [ 237.410655][T17288] team0: Port device vlan1 removed [ 237.507270][ T3375] hid-generic 0000:3000000:0000.00AE: unknown main item tag 0x4 [ 237.515167][ T3375] hid-generic 0000:3000000:0000.00AE: unknown main item tag 0x2 [ 237.530491][ T3375] hid-generic 0000:3000000:0000.00AE: unknown main item tag 0x3 [ 237.540937][ T3375] hid-generic 0000:3000000:0000.00AE: hidraw0: HID v0.00 Device [sy] on syz0 [ 237.570546][T17316] hub 5-0:1.0: USB hub found [ 237.575284][T17316] hub 5-0:1.0: 8 ports detected [ 237.586959][T17316] netlink: 'syz.2.5023': attribute type 10 has an invalid length. [ 237.588723][T17326] rdma_op ffff888115c95980 conn xmit_rdma 0000000000000000 [ 237.595427][T17316] veth0_vlan: entered allmulticast mode [ 237.609214][T17316] team0: Port device vlan1 added [ 237.626444][T17328] syz.0.5027[17328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.626513][T17328] syz.0.5027[17328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.638522][T17328] syz.0.5027[17328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.828654][T17345] 9pnet_fd: Insufficient options for proto=fd [ 237.857168][T17224] kernel write not supported for file task/533/attr/sockcreate (pid: 17224 comm: syz.4.5008) [ 237.888865][T17347] veth0_vlan: left allmulticast mode [ 237.898245][T17347] team0: Port device vlan1 removed [ 237.967708][T17350] usb usb4: usbfs: process 17350 (syz.5.5031) did not claim interface 0 before use [ 238.262417][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5039'. [ 238.393313][T17348] kernel write not supported for file task/533/attr/sockcreate (pid: 17348 comm: syz.4.5036) [ 238.434820][T12364] hid-generic 0000:3000000:0000.00AF: unknown main item tag 0x4 [ 238.442606][T12364] hid-generic 0000:3000000:0000.00AF: unknown main item tag 0x2 [ 238.454860][T12364] hid-generic 0000:3000000:0000.00AF: unknown main item tag 0x3 [ 238.468687][T12364] hid-generic 0000:3000000:0000.00AF: hidraw0: HID v0.00 Device [sy] on syz0 [ 238.512966][T17368] kernel write not supported for file task/533/attr/sockcreate (pid: 17368 comm: syz.4.5043) [ 238.526524][T17373] hub 5-0:1.0: USB hub found [ 238.535562][T17373] hub 5-0:1.0: 8 ports detected [ 238.541203][T17375] 9pnet_fd: Insufficient options for proto=fd [ 238.551885][T17373] netlink: 'syz.2.5044': attribute type 10 has an invalid length. [ 238.569615][T17373] veth0_vlan: entered allmulticast mode [ 238.586562][T17373] team0: Port device vlan1 added [ 238.602507][T17379] kernel write not supported for file task/533/attr/sockcreate (pid: 17379 comm: syz.4.5048) [ 238.655702][T17382] kernel write not supported for file task/533/attr/sockcreate (pid: 17382 comm: syz.4.5050) [ 238.904790][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5054'. [ 238.913768][T17396] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5054'. [ 238.936392][T17392] kernel write not supported for file task/533/attr/sockcreate (pid: 17392 comm: syz.4.5052) [ 238.981658][T17400] FAULT_INJECTION: forcing a failure. [ 238.981658][T17400] name failslab, interval 1, probability 0, space 0, times 0 [ 238.994413][T17400] CPU: 0 UID: 0 PID: 17400 Comm: syz.2.5056 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 239.005226][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.009234][T17397] kernel write not supported for file task/533/attr/sockcreate (pid: 17397 comm: syz.4.5055) [ 239.015374][T17400] Call Trace: [ 239.015384][T17400] [ 239.015394][T17400] dump_stack_lvl+0xf2/0x150 [ 239.036446][T17400] dump_stack+0x15/0x1a [ 239.040654][T17400] should_fail_ex+0x223/0x230 [ 239.045388][T17400] should_failslab+0x8f/0xb0 [ 239.050030][T17400] kmem_cache_alloc_node_noprof+0x59/0x320 [ 239.055863][T17400] ? __alloc_skb+0x10b/0x310 [ 239.060478][T17400] __alloc_skb+0x10b/0x310 [ 239.064983][T17400] netlink_alloc_large_skb+0xad/0xe0 [ 239.070299][T17400] netlink_sendmsg+0x3b4/0x6e0 [ 239.075086][T17400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.080388][T17400] __sock_sendmsg+0x140/0x180 [ 239.085220][T17400] ____sys_sendmsg+0x312/0x410 [ 239.090030][T17400] __sys_sendmsg+0x19d/0x230 [ 239.094650][T17400] __x64_sys_sendmsg+0x46/0x50 [ 239.099458][T17400] x64_sys_call+0x2734/0x2dc0 [ 239.104177][T17400] do_syscall_64+0xc9/0x1c0 [ 239.108767][T17400] ? clear_bhb_loop+0x55/0xb0 [ 239.113531][T17400] ? clear_bhb_loop+0x55/0xb0 [ 239.118317][T17400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.124232][T17400] RIP: 0033:0x7f146f9d5d29 [ 239.128657][T17400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.148275][T17400] RSP: 002b:00007f146e041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.156700][T17400] RAX: ffffffffffffffda RBX: 00007f146fbc5fa0 RCX: 00007f146f9d5d29 [ 239.164682][T17400] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000006 [ 239.172676][T17400] RBP: 00007f146e041090 R08: 0000000000000000 R09: 0000000000000000 [ 239.180730][T17400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.188711][T17400] R13: 0000000000000000 R14: 00007f146fbc5fa0 R15: 00007fff8cc96ac8 [ 239.196783][T17400] [ 239.277567][T17407] kernel write not supported for file task/533/attr/sockcreate (pid: 17407 comm: syz.4.5059) [ 239.736353][T17476] usb usb4: usbfs: process 17476 (syz.0.5067) did not claim interface 0 before use [ 240.491885][T17576] lo speed is unknown, defaulting to 1000 [ 240.583556][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 240.583573][ T29] audit: type=1400 audit(1734999249.031:34162): avc: denied { watch watch_reads } for pid=17591 comm="syz.2.5081" path="/364" dev="tmpfs" ino=1918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 240.636405][ T29] audit: type=1400 audit(1734999249.081:34163): avc: denied { ioctl } for pid=17591 comm="syz.2.5081" path="socket:[59455]" dev="sockfs" ino=59455 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.748408][T17606] __nla_validate_parse: 3 callbacks suppressed [ 240.748504][T17606] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5083'. [ 240.813354][T17617] dccp_close: ABORT with 32 bytes unread [ 240.868512][ T29] audit: type=1326 audit(1734999249.311:34164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.4.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 240.892227][ T29] audit: type=1326 audit(1734999249.311:34165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.4.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 240.916269][ T29] audit: type=1326 audit(1734999249.311:34166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.4.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 240.939935][ T29] audit: type=1326 audit(1734999249.311:34167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.4.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 240.963706][ T29] audit: type=1326 audit(1734999249.311:34168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.4.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 240.987980][T17629] veth0_vlan: left allmulticast mode [ 240.996931][T17629] team0: Port device vlan1 removed [ 240.998526][ T29] audit: type=1326 audit(1734999249.321:34169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.4.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 241.025723][ T29] audit: type=1326 audit(1734999249.321:34170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.4.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 241.049558][ T29] audit: type=1326 audit(1734999249.321:34171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17622 comm="syz.4.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 241.078400][T17632] lo speed is unknown, defaulting to 1000 [ 241.155288][T17641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5094'. [ 241.165484][T17641] 9pnet_fd: Insufficient options for proto=fd [ 241.309257][T17649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5097'. [ 241.347476][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5098'. [ 241.357459][T17654] 9pnet_fd: Insufficient options for proto=fd [ 241.610774][T17662] usb usb4: usbfs: process 17662 (syz.2.5100) did not claim interface 0 before use [ 241.871102][T17668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.914705][T17633] warn_unsupported: 5 callbacks suppressed [ 241.914725][T17633] kernel write not supported for file task/533/attr/sockcreate (pid: 17633 comm: syz.4.5087) [ 241.940915][T17668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.958532][T17668] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.970918][T17672] rdma_op ffff88811793c580 conn xmit_rdma 0000000000000000 [ 241.987860][T17672] kernel write not supported for file task/533/attr/sockcreate (pid: 17672 comm: syz.4.5104) [ 242.050973][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5108'. [ 242.060033][T17682] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5108'. [ 242.074072][T17668] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.083534][T17685] kernel write not supported for file task/533/attr/sockcreate (pid: 17685 comm: syz.4.5105) [ 242.112980][T17687] kernel write not supported for file task/533/attr/sockcreate (pid: 17687 comm: syz.4.5110) [ 242.131881][T17692] syz.4.5112[17692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.131993][T17692] syz.4.5112[17692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.144147][T17692] syz.4.5112[17692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.144677][T17668] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.210263][T17668] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.285512][T17668] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.299873][T17668] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.312587][T17668] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.324791][T17668] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.583686][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5119'. [ 242.592691][T17710] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5119'. [ 242.704943][T17714] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5121'. [ 242.714607][T17714] 9pnet_fd: Insufficient options for proto=fd [ 242.839084][T17718] rdma_op ffff8881020a7d80 conn xmit_rdma 0000000000000000 [ 242.872000][ T3375] hid-generic 0000:3000000:0000.00B0: unknown main item tag 0x4 [ 242.879770][ T3375] hid-generic 0000:3000000:0000.00B0: unknown main item tag 0x2 [ 242.887503][ T3375] hid-generic 0000:3000000:0000.00B0: unknown main item tag 0x3 [ 242.896070][ T3375] hid-generic 0000:3000000:0000.00B0: hidraw0: HID v0.00 Device [sy] on syz0 [ 242.923056][T17722] loop1: detected capacity change from 0 to 512 [ 242.939615][T17722] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5125: bg 0: block 35: padding at end of block bitmap is not set [ 242.953729][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5126'. [ 242.954483][T17722] EXT4-fs (loop1): Remounting filesystem read-only [ 242.969834][T17722] EXT4-fs (loop1): 1 truncate cleaned up [ 242.975956][T17722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.982034][T17695] kernel write not supported for file task/533/attr/sockcreate (pid: 17695 comm: syz.4.5112) [ 242.990772][T17722] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 243.005348][T17722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.034067][T17722] hub 5-0:1.0: USB hub found [ 243.038954][T17722] hub 5-0:1.0: 8 ports detected [ 243.046795][T17722] netlink: 'syz.1.5125': attribute type 10 has an invalid length. [ 243.055290][T17722] veth0_vlan: entered allmulticast mode [ 243.063115][T17722] team0: Port device vlan1 added [ 243.104930][T17734] kernel write not supported for file task/533/attr/sockcreate (pid: 17734 comm: syz.4.5128) [ 243.163973][T17740] blktrace: Concurrent blktraces are not allowed on sg0 [ 243.177184][T17737] kernel write not supported for file task/533/attr/sockcreate (pid: 17737 comm: syz.4.5130) [ 243.191193][T17740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17740 comm=syz.1.5131 [ 243.203851][T17740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17740 comm=syz.1.5131 [ 243.290891][T17744] kernel write not supported for file task/533/attr/sockcreate (pid: 17744 comm: syz.4.5133) [ 243.311610][T17748] rdma_op ffff8881032ac580 conn xmit_rdma 0000000000000000 [ 243.328144][T17748] kernel write not supported for file task/533/attr/sockcreate (pid: 17748 comm: syz.4.5135) [ 243.368520][T17750] kernel write not supported for file task/533/attr/sockcreate (pid: 17750 comm: syz.4.5137) [ 243.547519][T17766] syz.4.5143[17766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.550868][T17766] syz.4.5143[17766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.562708][T17766] syz.4.5143[17766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.580061][T17768] 9pnet_fd: Insufficient options for proto=fd [ 243.746066][T17773] lo speed is unknown, defaulting to 1000 [ 243.877584][T17780] rdma_op ffff8881032ac180 conn xmit_rdma 0000000000000000 [ 243.979611][T17787] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17787 comm=syz.0.5149 [ 243.992263][T17787] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17787 comm=syz.0.5149 [ 244.226938][T17797] 9pnet_fd: Insufficient options for proto=fd [ 244.267457][T17796] loop1: detected capacity change from 0 to 512 [ 244.285814][T17796] EXT4-fs: Ignoring removed oldalloc option [ 244.295426][T17796] EXT4-fs: Ignoring removed nobh option [ 244.303175][T17796] ext4: Bad value for 'max_batch_time' [ 244.324805][T17798] lo speed is unknown, defaulting to 1000 [ 244.499852][T17806] loop1: detected capacity change from 0 to 8192 [ 244.522702][T17806] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.526456][T17810] lo speed is unknown, defaulting to 1000 [ 244.713650][T17806] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 244.722654][T17806] FAT-fs (loop1): Filesystem has been set read-only [ 244.748870][T17806] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 244.808597][T17806] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 244.842398][T17814] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 244.876246][ T3378] hid-generic 0000:3000000:0000.00B1: unknown main item tag 0x4 [ 244.884050][ T3378] hid-generic 0000:3000000:0000.00B1: unknown main item tag 0x2 [ 244.898413][ T3378] hid-generic 0000:3000000:0000.00B1: unknown main item tag 0x3 [ 244.917304][ T3378] hid-generic 0000:3000000:0000.00B1: hidraw0: HID v0.00 Device [sy] on syz0 [ 244.957463][T17820] hub 5-0:1.0: USB hub found [ 244.969761][T17820] hub 5-0:1.0: 8 ports detected [ 244.983432][T17820] netlink: 'syz.2.5163': attribute type 10 has an invalid length. [ 244.999159][T17820] veth0_vlan: entered allmulticast mode [ 245.015247][T17820] team0: Port device vlan1 added [ 245.026159][T17806] 9pnet_fd: Insufficient options for proto=fd [ 245.275773][T17830] 9pnet_fd: Insufficient options for proto=fd [ 245.292610][T11947] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 245.616309][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 245.616344][ T29] audit: type=1326 audit(1734999254.061:34499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 245.646273][ T29] audit: type=1326 audit(1734999254.061:34500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 245.670082][ T29] audit: type=1326 audit(1734999254.061:34501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 245.693768][ T29] audit: type=1326 audit(1734999254.061:34502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 245.717392][ T29] audit: type=1326 audit(1734999254.061:34503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 245.741062][ T29] audit: type=1326 audit(1734999254.061:34504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 245.764741][ T29] audit: type=1326 audit(1734999254.061:34505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 245.788497][ T29] audit: type=1326 audit(1734999254.061:34506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 245.812263][ T29] audit: type=1326 audit(1734999254.061:34507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 245.836026][ T29] audit: type=1326 audit(1734999254.061:34508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 246.062632][T17923] rdma_op ffff888115453d80 conn xmit_rdma 0000000000000000 [ 246.090901][T17929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17929 comm=syz.5.5183 [ 246.103714][T17929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17929 comm=syz.5.5183 [ 246.416656][T17979] veth0_vlan: left allmulticast mode [ 246.425730][T17979] team0: Port device vlan1 removed [ 246.608599][T18008] __nla_validate_parse: 3 callbacks suppressed [ 246.608641][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5192'. [ 246.772488][T18037] dccp_close: ABORT with 32 bytes unread [ 246.900828][T18055] loop1: detected capacity change from 0 to 2048 [ 246.946773][T18055] Alternate GPT is invalid, using primary GPT. [ 246.953320][T18055] loop1: p2 p3 p7 [ 246.966432][T18055] usb usb4: usbfs: process 18055 (syz.1.5197) did not claim interface 0 before use [ 246.990349][ T3001] Alternate GPT is invalid, using primary GPT. [ 246.996797][ T3001] loop1: p2 p3 p7 [ 247.360689][T18051] warn_unsupported: 14 callbacks suppressed [ 247.360723][T18051] kernel write not supported for file task/533/attr/sockcreate (pid: 18051 comm: syz.4.5201) [ 247.403658][T18074] kernel write not supported for file task/533/attr/sockcreate (pid: 18074 comm: syz.4.5204) [ 247.424748][T18077] blktrace: Concurrent blktraces are not allowed on sg0 [ 247.435256][T18077] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18077 comm=syz.4.5206 [ 247.447919][T18077] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18077 comm=syz.4.5206 [ 247.500238][T18077] kernel write not supported for file task/533/attr/sockcreate (pid: 18077 comm: syz.4.5206) [ 247.570412][T18086] kernel write not supported for file task/533/attr/sockcreate (pid: 18086 comm: iou-sqp-18085) [ 247.598503][T18090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18090 comm=syz.0.5208 [ 247.611160][T18090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18090 comm=syz.0.5208 [ 247.657874][T18092] kernel write not supported for file task/533/attr/sockcreate (pid: 18092 comm: syz.4.5211) [ 247.721291][T18096] kernel write not supported for file task/533/attr/sockcreate (pid: 18096 comm: syz.4.5213) [ 247.782432][T18100] 9pnet_fd: Insufficient options for proto=fd [ 247.783379][T18098] kernel write not supported for file task/533/attr/sockcreate (pid: 18098 comm: syz.4.5214) [ 247.850749][T18101] kernel write not supported for file task/533/attr/sockcreate (pid: 18101 comm: syz.4.5215) [ 247.897179][T18104] syz.4.5216[18104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.897255][T18104] syz.4.5216[18104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.918769][T18104] syz.4.5216[18104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.996095][T18109] rdma_op ffff888115453d80 conn xmit_rdma 0000000000000000 [ 248.462728][T18123] blktrace: Concurrent blktraces are not allowed on sg0 [ 248.465952][T18124] 9pnet_fd: Insufficient options for proto=fd [ 248.510356][T18128] syz.5.5226[18128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.510489][T18128] syz.5.5226[18128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.522618][T18128] syz.5.5226[18128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.578494][T18132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.598533][T18132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.609506][T18132] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.649599][T18132] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.699560][T18132] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.736010][T18108] kernel write not supported for file task/533/attr/sockcreate (pid: 18108 comm: syz.4.5216) [ 248.760018][T18132] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.765638][T18136] kernel write not supported for file task/533/attr/sockcreate (pid: 18136 comm: syz.4.5229) [ 248.825436][T18132] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.837525][T18132] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.849495][T18132] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.862144][T18132] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.154878][T18156] veth0_vlan: left allmulticast mode [ 249.162188][T18156] team0: Port device vlan1 removed [ 249.170311][T18152] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18152 comm=syz.0.5236 [ 249.182905][T18152] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18152 comm=syz.0.5236 [ 249.530374][T18185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18185 comm=syz.5.5251 [ 249.543070][T18185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18185 comm=syz.5.5251 [ 249.603259][T18181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18181 comm=syz.1.5249 [ 249.616048][T18181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18181 comm=syz.1.5249 [ 249.687221][T18196] syz.0.5254[18196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.687334][T18196] syz.0.5254[18196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.718368][T18196] syz.0.5254[18196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.937700][T18219] lo speed is unknown, defaulting to 1000 [ 250.021622][T18222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5266'. [ 250.775972][T18250] lo speed is unknown, defaulting to 1000 [ 250.840385][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 250.840399][ T29] audit: type=1326 audit(1734999259.291:34763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18256 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 250.859848][T18259] rdma_op ffff888117076980 conn xmit_rdma 0000000000000000 [ 250.899386][ T29] audit: type=1326 audit(1734999259.331:34764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18256 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 250.915262][T18263] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5283'. [ 250.923013][ T29] audit: type=1326 audit(1734999259.331:34765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18256 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 250.923042][ T29] audit: type=1326 audit(1734999259.331:34766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18256 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 250.979799][ T29] audit: type=1326 audit(1734999259.331:34767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18256 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 251.003487][ T29] audit: type=1326 audit(1734999259.331:34768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18256 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 251.005776][T18268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.027256][ T29] audit: type=1326 audit(1734999259.331:34769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18256 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 251.037825][T18268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.059281][ T29] audit: type=1326 audit(1734999259.331:34770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18256 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 251.090642][ T29] audit: type=1326 audit(1734999259.331:34771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18256 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 251.114311][ T29] audit: type=1326 audit(1734999259.331:34772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18256 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 251.142882][T18267] netlink: 'syz.4.5285': attribute type 1 has an invalid length. [ 251.153101][T18265] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.168922][ T35] hid-generic 0000:3000000:0000.00B2: unknown main item tag 0x4 [ 251.171635][T18267] bond10: entered promiscuous mode [ 251.176643][ T35] hid-generic 0000:3000000:0000.00B2: unknown main item tag 0x2 [ 251.189692][ T35] hid-generic 0000:3000000:0000.00B2: unknown main item tag 0x3 [ 251.197937][ T35] hid-generic 0000:3000000:0000.00B2: hidraw0: HID v0.00 Device [sy] on syz0 [ 251.199649][T18267] team_slave_1: entered promiscuous mode [ 251.218895][T18267] bond10: (slave team_slave_1): Enslaving as an active interface with an up link [ 251.233021][T18265] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.242117][T18272] hub 5-0:1.0: USB hub found [ 251.248818][T18272] hub 5-0:1.0: 8 ports detected [ 251.249509][T18267] 9pnet_fd: Insufficient options for proto=fd [ 251.262449][T18272] netlink: 'syz.2.5287': attribute type 10 has an invalid length. [ 251.271370][T18272] veth0_vlan: left allmulticast mode [ 251.291148][T18265] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.325701][T18275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5288'. [ 251.367139][T18265] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.441475][T18265] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.453667][T18265] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.475055][T18265] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.497182][T18265] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.956120][T18313] usb usb4: usbfs: process 18313 (syz.2.5301) did not claim interface 0 before use [ 252.391454][T18325] loop1: detected capacity change from 0 to 8192 [ 252.410794][T18325] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.499129][T18331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5308'. [ 252.611882][T18325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 252.620804][T18325] FAT-fs (loop1): Filesystem has been set read-only [ 252.627996][T18324] warn_unsupported: 23 callbacks suppressed [ 252.628012][T18324] kernel write not supported for file task/533/attr/sockcreate (pid: 18324 comm: +}[@) [ 252.637707][T18325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 252.653104][T18325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 252.664976][T18332] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 252.699271][T18350] syz.2.5313[18350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.699379][T18350] syz.2.5313[18350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.711073][T18350] syz.2.5313[18350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.715503][T18347] kernel write not supported for file task/533/attr/sockcreate (pid: 18347 comm: syz.4.5312) [ 252.769159][T18354] bond11: entered promiscuous mode [ 252.781014][T18354] bond10: (slave team_slave_1): Releasing backup interface [ 252.790819][T18354] team_slave_1: left promiscuous mode [ 252.805217][T18354] team_slave_1: entered promiscuous mode [ 252.811900][T18354] bond11: (slave team_slave_1): Enslaving as an active interface with an up link [ 252.835222][T18354] 9pnet_fd: Insufficient options for proto=fd [ 252.942016][T18354] kernel write not supported for file task/533/attr/sockcreate (pid: 18354 comm: syz.4.5314) [ 253.203714][T18409] 9pnet_fd: Insufficient options for proto=fd [ 253.279057][T18415] loop1: detected capacity change from 0 to 512 [ 253.301030][T18415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.321310][T18412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5321'. [ 253.343521][T18415] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 253.369318][T18415] EXT4-fs (loop1): 1 truncate cleaned up [ 253.381306][T18415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.405083][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5319'. [ 253.477100][T11947] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.691182][T18448] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18448 comm=syz.1.5326 [ 253.703823][T18448] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18448 comm=syz.1.5326 [ 253.855852][T18381] kernel write not supported for file task/533/attr/sockcreate (pid: 18381 comm: syz.4.5316) [ 253.909708][T18471] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18471 comm=syz.1.5329 [ 253.912226][T18475] kernel write not supported for file task/533/attr/sockcreate (pid: 18475 comm: syz.4.5330) [ 253.922293][T18471] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18471 comm=syz.1.5329 [ 253.970881][T18483] 9pnet_fd: Insufficient options for proto=fd [ 253.997611][T18482] kernel write not supported for file task/533/attr/sockcreate (pid: 18482 comm: syz.4.5331) [ 254.042518][T18494] 9pnet_fd: Insufficient options for proto=fd [ 254.060523][T18494] kernel write not supported for file task/533/attr/sockcreate (pid: 18494 comm: syz.4.5333) [ 254.300816][T18526] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5337'. [ 254.554257][T18505] kernel write not supported for file task/533/attr/sockcreate (pid: 18505 comm: syz.4.5335) [ 254.649769][T18566] 9pnet_fd: Insufficient options for proto=fd [ 254.687260][T18562] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18562 comm=syz.2.5343 [ 254.699839][T18562] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18562 comm=syz.2.5343 [ 254.720496][T18568] kernel write not supported for file task/533/attr/sockcreate (pid: 18568 comm: syz.4.5344) [ 254.789054][T18573] kernel write not supported for file task/533/attr/sockcreate (pid: 18573 comm: syz.4.5348) [ 254.793704][T18575] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5349'. [ 255.001721][T18594] 9pnet_fd: Insufficient options for proto=fd [ 255.013093][T18592] loop1: detected capacity change from 0 to 512 [ 255.028559][T18592] EXT4-fs: Ignoring removed oldalloc option [ 255.034625][T18592] EXT4-fs: Ignoring removed nobh option [ 255.052899][T18592] ext4: Bad value for 'max_batch_time' [ 255.180140][ T3440] hid-generic 0000:3000000:0000.00B3: unknown main item tag 0x4 [ 255.187844][ T3440] hid-generic 0000:3000000:0000.00B3: unknown main item tag 0x2 [ 255.195943][ T3440] hid-generic 0000:3000000:0000.00B3: unknown main item tag 0x3 [ 255.216949][ T3440] hid-generic 0000:3000000:0000.00B3: hidraw0: HID v0.00 Device [sy] on syz0 [ 255.246890][ T3440] hid-generic 0000:3000000:0000.00B4: unknown main item tag 0x4 [ 255.254628][ T3440] hid-generic 0000:3000000:0000.00B4: unknown main item tag 0x2 [ 255.267725][T18611] hub 5-0:1.0: USB hub found [ 255.272720][T18611] hub 5-0:1.0: 8 ports detected [ 255.277664][ T3440] hid-generic 0000:3000000:0000.00B4: unknown main item tag 0x3 [ 255.288801][ T3440] hid-generic 0000:3000000:0000.00B4: hidraw0: HID v0.00 Device [sy] on syz0 [ 255.289645][T18611] netlink: 'syz.0.5362': attribute type 10 has an invalid length. [ 255.349645][T18617] hub 5-0:1.0: USB hub found [ 255.358287][T18617] hub 5-0:1.0: 8 ports detected [ 255.386482][T18617] netlink: 'syz.2.5365': attribute type 10 has an invalid length. [ 255.421318][T18631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.430909][T18631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.449282][T18631] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.517085][T18643] loop1: detected capacity change from 0 to 2048 [ 255.540004][T18631] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.584667][T18643] Alternate GPT is invalid, using primary GPT. [ 255.591038][T18643] loop1: p2 p3 p7 [ 255.621869][T18643] usb usb4: usbfs: process 18643 (syz.1.5364) did not claim interface 0 before use [ 255.653494][T18631] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.722528][ T3375] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x4 [ 255.730367][ T3375] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x2 [ 255.741346][ T3375] hid-generic 0000:3000000:0000.00B5: unknown main item tag 0x3 [ 255.751301][T18631] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.769964][ T3375] hid-generic 0000:3000000:0000.00B5: hidraw0: HID v0.00 Device [sy] on syz0 [ 255.817855][T18649] hub 5-0:1.0: USB hub found [ 255.822622][T18649] hub 5-0:1.0: 8 ports detected [ 255.833058][T18649] netlink: 'syz.5.5374': attribute type 10 has an invalid length. [ 255.841222][T18649] veth0_vlan: entered allmulticast mode [ 255.848813][T18649] team0: Port device vlan1 added [ 255.859000][T18631] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.871375][T18631] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.884823][T18631] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.896728][T18631] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.006353][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 256.006370][ T29] audit: type=1326 audit(1734999264.451:35163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 256.036321][ T29] audit: type=1326 audit(1734999264.451:35164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 256.067576][ T29] audit: type=1326 audit(1734999264.451:35165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 256.091348][ T29] audit: type=1326 audit(1734999264.451:35166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 256.095567][T16598] udevd[16598]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 256.114951][ T29] audit: type=1326 audit(1734999264.451:35167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 256.127243][T16444] udevd[16444]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 256.148555][ T29] audit: type=1326 audit(1734999264.451:35168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 256.160195][T18060] udevd[18060]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 256.181975][ T29] audit: type=1326 audit(1734999264.451:35169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 256.215560][ T29] audit: type=1326 audit(1734999264.451:35170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 256.239178][ T29] audit: type=1326 audit(1734999264.451:35171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 256.262777][ T29] audit: type=1326 audit(1734999264.451:35172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18678 comm="syz.5.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 256.507956][T18722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5384'. [ 256.527511][T18722] 9pnet_fd: Insufficient options for proto=fd [ 256.548294][T18730] netlink: 'syz.4.5385': attribute type 1 has an invalid length. [ 256.562114][T18730] bond12: entered promiscuous mode [ 256.572538][T18730] bond11: (slave team_slave_1): Releasing backup interface [ 256.581785][T18730] team_slave_1: left promiscuous mode [ 256.596054][T18737] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5386'. [ 256.596937][T18730] team_slave_1: entered promiscuous mode [ 256.611230][T18730] bond12: (slave team_slave_1): Enslaving as an active interface with an up link [ 256.628948][T18741] 9pnet_fd: Insufficient options for proto=fd [ 256.959383][T18776] 9pnet_fd: Insufficient options for proto=fd [ 257.557375][T18845] 9pnet_fd: Insufficient options for proto=fd [ 257.631734][ T9] hid-generic 0000:3000000:0000.00B6: unknown main item tag 0x4 [ 257.639569][ T9] hid-generic 0000:3000000:0000.00B6: unknown main item tag 0x2 [ 257.647775][ T9] hid-generic 0000:3000000:0000.00B6: unknown main item tag 0x3 [ 257.648499][T18856] 9pnet_fd: Insufficient options for proto=fd [ 257.657293][ T9] hid-generic 0000:3000000:0000.00B6: hidraw0: HID v0.00 Device [sy] on syz0 [ 257.690485][T18854] loop1: detected capacity change from 0 to 512 [ 257.708546][T18854] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5400: bg 0: block 35: padding at end of block bitmap is not set [ 257.723363][T18854] EXT4-fs (loop1): Remounting filesystem read-only [ 257.730240][T18854] EXT4-fs (loop1): 1 truncate cleaned up [ 257.736187][T18854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.748471][T18854] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 257.755552][T18854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.774242][T18854] hub 5-0:1.0: USB hub found [ 257.779237][T18854] hub 5-0:1.0: 8 ports detected [ 257.788927][T18854] netlink: 'syz.1.5400': attribute type 10 has an invalid length. [ 257.796994][T18854] veth0_vlan: entered allmulticast mode [ 257.804461][T18854] team0: Port device vlan1 added [ 258.051230][T18879] usb usb4: usbfs: process 18879 (syz.0.5405) did not claim interface 0 before use [ 258.070023][T18812] warn_unsupported: 19 callbacks suppressed [ 258.070042][T18812] kernel write not supported for file task/533/attr/sockcreate (pid: 18812 comm: syz.4.5393) [ 258.119444][T18881] team0: Port device vlan1 removed [ 258.476669][T18895] syz.1.5415[18895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.476749][T18895] syz.1.5415[18895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.489908][T18895] syz.1.5415[18895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.556150][T18886] kernel write not supported for file task/533/attr/sockcreate (pid: 18886 comm: syz.4.5410) [ 258.586452][T18900] syz.2.5416[18900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.586533][T18900] syz.2.5416[18900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.615568][T18900] syz.2.5416[18900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.641532][T18900] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5416'. [ 258.724065][T18902] kernel write not supported for file task/533/attr/sockcreate (pid: 18902 comm: syz.4.5418) [ 258.769944][T18912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18912 comm=syz.2.5419 [ 258.782958][T18912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18912 comm=syz.2.5419 [ 258.799368][T18909] 9pnet_fd: Insufficient options for proto=fd [ 258.891545][T18910] kernel write not supported for file task/533/attr/sockcreate (pid: 18910 comm: syz.4.5420) [ 259.000631][T18922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18922 comm=syz.5.5425 [ 259.013728][T18922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18922 comm=syz.5.5425 [ 259.154794][T18939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.166264][T18939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.437038][T18942] 9pnet_fd: Insufficient options for proto=fd [ 259.623476][T18953] blktrace: Concurrent blktraces are not allowed on sg0 [ 259.633247][T18953] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18953 comm=syz.1.5438 [ 259.646193][T18953] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18953 comm=syz.1.5438 [ 259.749663][T18957] loop1: detected capacity change from 0 to 512 [ 259.756446][T18957] EXT4-fs: Ignoring removed oldalloc option [ 259.763062][T18957] EXT4-fs: Ignoring removed nobh option [ 259.766181][T18931] kernel write not supported for file task/533/attr/sockcreate (pid: 18931 comm: syz.4.5426) [ 259.769525][T18957] ext4: Bad value for 'max_batch_time' [ 259.802777][T18959] bond12: (slave team_slave_1): Releasing backup interface [ 259.811620][T18959] team_slave_1: left promiscuous mode [ 259.821971][T18959] 9pnet_fd: Insufficient options for proto=fd [ 259.869277][ T3375] hid-generic 0000:3000000:0000.00B7: unknown main item tag 0x4 [ 259.877390][ T3375] hid-generic 0000:3000000:0000.00B7: unknown main item tag 0x2 [ 259.887002][ T3375] hid-generic 0000:3000000:0000.00B7: unknown main item tag 0x3 [ 259.895649][ T3375] hid-generic 0000:3000000:0000.00B7: hidraw0: HID v0.00 Device [sy] on syz0 [ 259.925570][T18959] kernel write not supported for file task/533/attr/sockcreate (pid: 18959 comm: syz.4.5441) [ 259.949555][T18963] hub 5-0:1.0: USB hub found [ 259.955350][T18963] hub 5-0:1.0: 8 ports detected [ 259.988779][T18963] netlink: 'syz.0.5442': attribute type 10 has an invalid length. [ 260.159070][T18983] loop1: detected capacity change from 0 to 512 [ 260.175983][T18983] EXT4-fs: Ignoring removed oldalloc option [ 260.199319][T18983] EXT4-fs: Ignoring removed nobh option [ 260.205138][T18983] ext4: Bad value for 'max_batch_time' [ 260.252098][T18976] kernel write not supported for file task/533/attr/sockcreate (pid: 18976 comm: syz.4.5447) [ 260.341368][T18991] loop1: detected capacity change from 0 to 2048 [ 260.357708][T18994] kernel write not supported for file task/533/attr/sockcreate (pid: 18994 comm: syz.4.5454) [ 260.370738][T18991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.385373][T18999] 9pnet_fd: Insufficient options for proto=fd [ 260.446459][T19006] 9pnet_fd: Insufficient options for proto=fd [ 260.478027][T18999] kernel write not supported for file task/533/attr/sockcreate (pid: 18999 comm: syz.4.5458) [ 260.529280][T19016] kernel write not supported for file task/533/attr/sockcreate (pid: 19016 comm: syz.4.5464) [ 260.535322][T11947] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /440/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 260.580117][T11947] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 260.586945][T19024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5470'. [ 260.602206][T11947] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 260.617824][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.621802][T11947] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /440/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 260.630058][T19024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5470'. [ 260.654651][T11947] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 260.661906][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.684068][T11947] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 260.702844][T19028] wireguard0: entered promiscuous mode [ 260.703833][T11947] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /440/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 260.708369][T19028] wireguard0: entered allmulticast mode [ 260.736160][T19024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5470'. [ 260.737679][T11947] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 260.767522][T19024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5470'. [ 260.768947][T11947] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 260.788808][T11947] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /440/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 260.816425][T19027] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.826685][T11947] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 260.849646][T11947] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 260.872938][T11947] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /440/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 260.874234][T19024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5470'. [ 260.897529][T11947] EXT4-fs error (device loop1): ext4_empty_dir:3112: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2130706434, rec_len=0, size=2048 fake=0 [ 260.935094][T11947] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 260.947767][T11947] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 260.949401][T19024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5470'. [ 260.961924][T19031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5470'. [ 260.978564][T11947] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 260.979559][T19027] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.008257][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 261.008272][ T29] audit: type=1326 audit(1734999269.461:35565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.0.5470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 261.039202][T11947] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 261.048400][ T29] audit: type=1326 audit(1734999269.461:35566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19023 comm="syz.0.5470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 261.052946][T11947] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 261.088421][T19027] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.089886][T11947] EXT4-fs warning (device loop1): ext4_empty_dir:3114: inode #11: comm syz-executor: directory missing '..' [ 261.169871][T19027] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.201118][T13315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.221926][T19045] syz.2.5476[19045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.222000][T19045] syz.2.5476[19045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.234181][T19045] syz.2.5476[19045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.249982][T19046] 9pnet_fd: Insufficient options for proto=fd [ 261.274244][T19027] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.286195][T19027] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.298380][T19027] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.310963][T19027] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.360932][ T11] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.430750][ T11] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.470899][ T11] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.492376][T19051] lo speed is unknown, defaulting to 1000 [ 261.520387][ T11] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.558170][ T29] audit: type=1326 audit(1734999270.001:35567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.0.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 261.583340][ T29] audit: type=1326 audit(1734999270.011:35568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.0.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 261.587623][T19051] chnl_net:caif_netlink_parms(): no params data found [ 261.607738][ T29] audit: type=1326 audit(1734999270.011:35569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.0.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 261.638384][ T29] audit: type=1326 audit(1734999270.011:35570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.0.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 261.663027][ T29] audit: type=1326 audit(1734999270.011:35571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.0.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 261.687426][ T29] audit: type=1326 audit(1734999270.011:35572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.0.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 261.712280][ T29] audit: type=1326 audit(1734999270.011:35573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.0.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 261.736796][ T29] audit: type=1326 audit(1734999270.011:35574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.0.5481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc230315d29 code=0x7ffc0000 [ 261.846584][T19025] Process accounting paused [ 261.949928][ T11] $Hÿ (unregistering): Released all slaves [ 261.961886][ T11] bond1 (unregistering): Released all slaves [ 261.983145][ T11] bond2 (unregistering): Released all slaves [ 261.998984][T19097] 9pnet_fd: Insufficient options for proto=fd [ 262.002519][ T11] bond3 (unregistering): Released all slaves [ 262.086532][T19051] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.093642][T19051] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.130368][T19051] bridge_slave_0: entered allmulticast mode [ 262.137656][T19110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19110 comm=syz.5.5485 [ 262.148407][T19051] bridge_slave_0: entered promiscuous mode [ 262.150294][T19110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19110 comm=syz.5.5485 [ 262.172428][ T11] hsr_slave_0: left promiscuous mode [ 262.181288][ T11] hsr_slave_1: left promiscuous mode [ 262.197127][ T11] veth1_vlan: left promiscuous mode [ 262.202397][ T11] veth0_vlan: left allmulticast mode [ 262.207742][ T11] veth0_vlan: left promiscuous mode [ 262.230354][T19113] FAULT_INJECTION: forcing a failure. [ 262.230354][T19113] name failslab, interval 1, probability 0, space 0, times 0 [ 262.243039][T19113] CPU: 1 UID: 0 PID: 19113 Comm: syz.2.5486 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 262.253826][T19113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 262.263915][T19113] Call Trace: [ 262.267231][T19113] [ 262.270166][T19113] dump_stack_lvl+0xf2/0x150 [ 262.274857][T19113] dump_stack+0x15/0x1a [ 262.279062][T19113] should_fail_ex+0x223/0x230 [ 262.283850][T19113] should_failslab+0x8f/0xb0 [ 262.288464][T19113] kmem_cache_alloc_node_noprof+0x59/0x320 [ 262.294302][T19113] ? __alloc_skb+0x10b/0x310 [ 262.298970][T19113] __alloc_skb+0x10b/0x310 [ 262.303435][T19113] ? audit_log_start+0x34c/0x6b0 [ 262.308408][T19113] audit_log_start+0x368/0x6b0 [ 262.313204][T19113] audit_seccomp+0x4b/0x130 [ 262.317734][T19113] __seccomp_filter+0x6fa/0x1180 [ 262.322741][T19113] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 262.328456][T19113] ? vfs_write+0x596/0x920 [ 262.332938][T19113] __secure_computing+0x9f/0x1c0 [ 262.337943][T19113] syscall_trace_enter+0xd1/0x1f0 [ 262.343116][T19113] ? fpregs_assert_state_consistent+0x83/0xa0 [ 262.349215][T19113] do_syscall_64+0xaa/0x1c0 [ 262.353745][T19113] ? clear_bhb_loop+0x55/0xb0 [ 262.358435][T19113] ? clear_bhb_loop+0x55/0xb0 [ 262.363125][T19113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.369353][T19113] RIP: 0033:0x7f146f9d5d29 [ 262.373797][T19113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.393459][T19113] RSP: 002b:00007f146e041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 262.401888][T19113] RAX: ffffffffffffffda RBX: 00007f146fbc5fa0 RCX: 00007f146f9d5d29 [ 262.409888][T19113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 262.417925][T19113] RBP: 00007f146e041090 R08: 0000000020b63fe4 R09: 000000000000001c [ 262.425913][T19113] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 262.433904][T19113] R13: 0000000000000000 R14: 00007f146fbc5fa0 R15: 00007fff8cc96ac8 [ 262.441905][T19113] [ 262.484393][T19142] sd 0:0:1:0: device reset [ 262.533425][ T11] team0 (unregistering): Port device vlan1 removed [ 262.708080][T19051] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.715296][T19051] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.756857][T19051] bridge_slave_1: entered allmulticast mode [ 262.778912][T19051] bridge_slave_1: entered promiscuous mode [ 262.816123][T19051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.836388][T19051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.886800][T19051] team0: Port device team_slave_0 added [ 262.904693][T19051] team0: Port device team_slave_1 added [ 262.941144][T19051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.948175][T19051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.974302][T19051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.990336][T19051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.997312][T19051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.023304][T19051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.060286][T19210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5499'. [ 263.077283][T19051] hsr_slave_0: entered promiscuous mode [ 263.090630][T19051] hsr_slave_1: entered promiscuous mode [ 263.103141][T19051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.115314][T19051] Cannot create hsr debugfs directory [ 263.281685][T19051] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 263.294972][T19051] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 263.306896][T19051] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 263.317118][T19051] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 263.380193][T19051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.411009][T19051] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.434212][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.441380][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.462321][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.469422][T16971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.610372][T19051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.826660][T19344] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19344 comm=syz.5.5509 [ 263.839321][T19344] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19344 comm=syz.5.5509 [ 263.880967][T19352] FAULT_INJECTION: forcing a failure. [ 263.880967][T19352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.894162][T19352] CPU: 1 UID: 0 PID: 19352 Comm: syz.5.5511 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 263.905006][T19352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.914402][T19051] veth0_vlan: entered promiscuous mode [ 263.915064][T19352] Call Trace: [ 263.915074][T19352] [ 263.915083][T19352] dump_stack_lvl+0xf2/0x150 [ 263.923896][T19051] veth1_vlan: entered promiscuous mode [ 263.926734][T19352] dump_stack+0x15/0x1a [ 263.940969][T19352] should_fail_ex+0x223/0x230 [ 263.941335][T19051] veth0_macvtap: entered promiscuous mode [ 263.945687][T19352] should_fail+0xb/0x10 [ 263.945711][T19352] should_fail_usercopy+0x1a/0x20 [ 263.953068][T19051] veth1_macvtap: entered promiscuous mode [ 263.955674][T19352] _copy_from_iter+0xd5/0xd00 [ 263.966977][T19051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.971101][T19352] ? kmalloc_reserve+0x16e/0x190 [ 263.980729][T19051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.983247][T19352] ? __build_skb_around+0x196/0x1f0 [ 263.992005][T19051] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.995634][T19352] ? __alloc_skb+0x21f/0x310 [ 263.995659][T19352] ? __virt_addr_valid+0x1ed/0x250 [ 264.004367][T19051] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.008872][T19352] ? __check_object_size+0x364/0x520 [ 264.014027][T19051] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.022624][T19352] netlink_sendmsg+0x460/0x6e0 [ 264.027919][T19051] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.036566][T19352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.048474][T19350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.050002][T19352] __sock_sendmsg+0x140/0x180 [ 264.056113][T19350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.063588][T19352] ____sys_sendmsg+0x312/0x410 [ 264.081029][T19352] __sys_sendmsg+0x19d/0x230 [ 264.085660][T19352] __x64_sys_sendmsg+0x46/0x50 [ 264.090471][T19352] x64_sys_call+0x2734/0x2dc0 [ 264.095172][T19352] do_syscall_64+0xc9/0x1c0 [ 264.099748][T19352] ? clear_bhb_loop+0x55/0xb0 [ 264.104432][T19352] ? clear_bhb_loop+0x55/0xb0 [ 264.109120][T19352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.115102][T19352] RIP: 0033:0x7fc558f45d29 [ 264.119594][T19352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.139241][T19352] RSP: 002b:00007fc5575b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.147656][T19352] RAX: ffffffffffffffda RBX: 00007fc559135fa0 RCX: 00007fc558f45d29 [ 264.155627][T19352] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 264.163623][T19352] RBP: 00007fc5575b7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.171676][T19352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.179656][T19352] R13: 0000000000000000 R14: 00007fc559135fa0 R15: 00007ffcc4a58708 [ 264.187634][T19352] [ 264.205444][T19350] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.251921][T19350] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.293116][T19350] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.331146][T19377] 9pnet_fd: Insufficient options for proto=fd [ 264.350171][T19350] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.405297][T19350] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.441130][T19350] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.469523][T19350] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.503985][T19350] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.585225][ T1602] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.644544][ T1602] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.710191][ T1602] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.770076][ T1602] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.804806][T19407] lo speed is unknown, defaulting to 1000 [ 265.387165][T19474] usb usb4: usbfs: process 19474 (syz.6.5527) did not claim interface 0 before use [ 265.571058][ T1602] bond0 (unregistering): Released all slaves [ 265.582915][ T1602] bond1 (unregistering): Released all slaves [ 265.632960][ T1602] bond2 (unregistering): Released all slaves [ 265.690344][ T1602] bond3 (unregistering): Released all slaves [ 265.713563][ T1602] bond4 (unregistering): Released all slaves [ 265.721943][ T1602] bond5 (unregistering): Released all slaves [ 265.730324][ T1602] bond6 (unregistering): Released all slaves [ 265.752589][T19447] @: renamed from vlan0 (while UP) [ 265.798436][ T1602] hsr_slave_0: left promiscuous mode [ 265.814108][ T1602] hsr_slave_1: left promiscuous mode [ 265.831985][ T1602] veth1_vlan: left promiscuous mode [ 265.837401][ T1602] veth0_vlan: left promiscuous mode [ 265.918642][ T1602] pimreg (unregistering): left allmulticast mode [ 265.964994][ T1602] team0 (unregistering): Port device vlan1 removed [ 266.124092][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 266.124109][ T29] audit: type=1326 audit(1734999274.571:35733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.5.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 266.154260][ T29] audit: type=1326 audit(1734999274.571:35734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.5.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 266.209151][ T29] audit: type=1326 audit(1734999274.661:35735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.6.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6136c95d29 code=0x7ffc0000 [ 266.238771][ T29] audit: type=1326 audit(1734999274.661:35736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.6.5533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6136c95d29 code=0x7ffc0000 [ 266.262441][ T29] audit: type=1326 audit(1734999274.661:35737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.5.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 266.286158][ T29] audit: type=1326 audit(1734999274.661:35738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.5.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 266.309879][ T29] audit: type=1326 audit(1734999274.661:35739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.5.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 266.333482][ T29] audit: type=1326 audit(1734999274.661:35740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.5.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 266.357213][ T29] audit: type=1326 audit(1734999274.661:35741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.5.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 266.362103][T19407] chnl_net:caif_netlink_parms(): no params data found [ 266.380912][ T29] audit: type=1326 audit(1734999274.661:35742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.5.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc558f45d29 code=0x7ffc0000 [ 266.543462][T19407] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.550615][T19407] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.558122][T19407] bridge_slave_0: entered allmulticast mode [ 266.564980][T19407] bridge_slave_0: entered promiscuous mode [ 266.576527][T19407] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.583711][T19407] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.591315][T19407] bridge_slave_1: entered allmulticast mode [ 266.604537][T19407] bridge_slave_1: entered promiscuous mode [ 266.627690][T19407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.640423][T19407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.671875][T19407] team0: Port device team_slave_0 added [ 266.691320][T19407] team0: Port device team_slave_1 added [ 266.731033][ T1602] IPVS: stop unused estimator thread 0... [ 266.732199][T19407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.743824][T19407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.769868][T19407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.840558][T19407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.847690][T19407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.873717][T19407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.946299][T19407] hsr_slave_0: entered promiscuous mode [ 266.952813][T19407] hsr_slave_1: entered promiscuous mode [ 266.961423][T19407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.978273][T19407] Cannot create hsr debugfs directory [ 267.350511][T19407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.362192][T19407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.372002][T19407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.383430][T19407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.392091][ T3363] hid-generic 0000:3000000:0000.00B8: unknown main item tag 0x4 [ 267.399874][ T3363] hid-generic 0000:3000000:0000.00B8: unknown main item tag 0x2 [ 267.410108][ T3363] hid-generic 0000:3000000:0000.00B8: unknown main item tag 0x3 [ 267.420094][ T3363] hid-generic 0000:3000000:0000.00B8: hidraw0: HID v0.00 Device [sy] on syz0 [ 267.431851][T19407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.443513][T19407] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.455095][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.462271][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.472714][T19641] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5537'. [ 267.481822][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.481865][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.508655][T19407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.519122][T19407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.533637][T19645] hub 5-0:1.0: USB hub found [ 267.538841][T19645] hub 5-0:1.0: 8 ports detected [ 267.551311][T19651] 9pnet_fd: Insufficient options for proto=fd [ 267.560164][T19641] team0: Port device team_slave_1 removed [ 267.568141][T19645] netlink: 'syz.2.5538': attribute type 10 has an invalid length. [ 267.583870][T19645] veth0_vlan: entered allmulticast mode [ 267.591889][T19645] team0: Port device vlan1 added [ 267.694901][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5539'. [ 267.699128][T19407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.741966][T19680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19680 comm=syz.6.5541 [ 267.754570][T19680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19680 comm=syz.6.5541 [ 267.887978][T19407] veth0_vlan: entered promiscuous mode [ 267.900004][T19407] veth1_vlan: entered promiscuous mode [ 267.927427][T19407] veth0_macvtap: entered promiscuous mode [ 267.960579][T19407] veth1_macvtap: entered promiscuous mode [ 267.979782][T19407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.990324][T19407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.028108][T19407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.040424][T19407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.051053][T19407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.081166][T19407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.100891][T19407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.109877][T19407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.118628][T19407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.127404][T19407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.350910][T19752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19752 comm=syz.0.5551 [ 268.363567][T19752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19752 comm=syz.0.5551 [ 268.514408][ T35] hid-generic 0000:3000000:0000.00B9: unknown main item tag 0x4 [ 268.522179][ T35] hid-generic 0000:3000000:0000.00B9: unknown main item tag 0x2 [ 268.531535][ T35] hid-generic 0000:3000000:0000.00B9: unknown main item tag 0x3 [ 268.563139][T19766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5556'. [ 268.574675][T19766] 9pnet_fd: Insufficient options for proto=fd [ 268.625422][T19769] hub 5-0:1.0: USB hub found [ 268.630178][T19769] hub 5-0:1.0: 8 ports detected [ 268.640090][T19769] netlink: 'syz.4.5555': attribute type 10 has an invalid length. [ 268.648174][T19769] veth0_vlan: entered allmulticast mode [ 268.654738][ T35] hid-generic 0000:3000000:0000.00B9: hidraw0: HID v0.00 Device [sy] on syz0 [ 268.716701][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5558'. [ 268.838961][T19769] team0: Port device vlan1 added [ 268.878908][T19786] dccp_close: ABORT with 32 bytes unread [ 268.963025][T19795] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5567'. [ 268.986310][T19795] 9pnet_fd: Insufficient options for proto=fd [ 269.439905][T19829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5579'. [ 269.448981][T19829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5579'. [ 269.466321][T19829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5579'. [ 269.575784][T19838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5583'. [ 269.861025][T19845] usb usb4: usbfs: process 19845 (syz.2.5584) did not claim interface 0 before use [ 270.284961][T19867] 9pnet_fd: Insufficient options for proto=fd [ 271.231385][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 271.231401][ T29] audit: type=1326 audit(1734999279.681:36085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 271.261347][ T29] audit: type=1326 audit(1734999279.681:36086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 271.285206][ T29] audit: type=1326 audit(1734999279.681:36087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 271.309024][ T29] audit: type=1326 audit(1734999279.681:36088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 271.332619][ T29] audit: type=1326 audit(1734999279.681:36089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19897 comm="syz.4.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 271.384540][ T29] audit: type=1326 audit(1734999279.831:36090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm="syz.4.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 271.408344][ T29] audit: type=1326 audit(1734999279.831:36091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm="syz.4.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 271.424774][T19904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.439634][ T29] audit: type=1326 audit(1734999279.841:36092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm="syz.4.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 271.463356][ T29] audit: type=1326 audit(1734999279.841:36093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm="syz.4.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 271.487027][ T29] audit: type=1326 audit(1734999279.841:36094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm="syz.4.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b3115d29 code=0x7ffc0000 [ 271.499912][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5606'. [ 271.520778][T19904] batadv_slave_0: entered allmulticast mode [ 271.875253][T19919] usb usb4: usbfs: process 19919 (syz.6.5611) did not claim interface 0 before use [ 272.482053][T19936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19936 comm=syz.6.5619 [ 272.495188][T19936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19936 comm=syz.6.5619 [ 272.679078][T19942] usb usb4: usbfs: process 19942 (syz.0.5622) did not claim interface 0 before use [ 272.896444][T19949] 9pnet_fd: Insufficient options for proto=fd [ 273.265134][T19953] syz.2.5626[19953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.265197][T19953] syz.2.5626[19953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.276813][T19953] syz.2.5626[19953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.336014][T19957] __nla_validate_parse: 2 callbacks suppressed [ 273.336030][T19957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5628'. [ 273.412102][T19961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.433026][T19961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.443871][T19964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.460388][T19964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.471447][T19961] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.494870][T19964] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.533686][T19961] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.570144][T19964] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.612815][T19961] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.688875][T19980] syzkaller0: entered promiscuous mode [ 273.694436][T19980] syzkaller0: entered allmulticast mode [ 273.705450][T19964] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.733759][T19961] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.761121][T19964] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.817282][T19961] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.846430][T19961] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.866146][T19964] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.880301][T19961] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.899970][T19964] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.925372][T19961] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.937676][T19964] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.950083][T19964] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.592723][T20030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.608656][T20030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.630333][T20030] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.700791][T20030] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.760159][T20030] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.806687][T20057] FAULT_INJECTION: forcing a failure. [ 274.806687][T20057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.819850][T20057] CPU: 1 UID: 0 PID: 20057 Comm: syz.4.5657 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 274.830690][T20057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.840823][T20057] Call Trace: [ 274.844108][T20057] [ 274.847038][T20057] dump_stack_lvl+0xf2/0x150 [ 274.851743][T20057] dump_stack+0x15/0x1a [ 274.856013][T20057] should_fail_ex+0x223/0x230 [ 274.860702][T20057] should_fail+0xb/0x10 [ 274.864859][T20057] should_fail_usercopy+0x1a/0x20 [ 274.869979][T20057] _copy_from_user+0x1e/0xb0 [ 274.874639][T20057] do_sock_getsockopt+0xd3/0x260 [ 274.879583][T20057] __x64_sys_getsockopt+0x18c/0x200 [ 274.884824][T20057] x64_sys_call+0x1288/0x2dc0 [ 274.889506][T20057] do_syscall_64+0xc9/0x1c0 [ 274.894009][T20057] ? clear_bhb_loop+0x55/0xb0 [ 274.898687][T20057] ? clear_bhb_loop+0x55/0xb0 [ 274.903368][T20057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.909342][T20057] RIP: 0033:0x7f70b3115d29 [ 274.913754][T20057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.933393][T20057] RSP: 002b:00007f70b1787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 274.941807][T20057] RAX: ffffffffffffffda RBX: 00007f70b3305fa0 RCX: 00007f70b3115d29 [ 274.949797][T20057] RDX: 000000000000006c RSI: 0000000000000084 RDI: 0000000000000004 [ 274.957765][T20057] RBP: 00007f70b1787090 R08: 0000000020000000 R09: 0000000000000000 [ 274.965766][T20057] R10: 0000000020003140 R11: 0000000000000246 R12: 0000000000000001 [ 274.973823][T20057] R13: 0000000000000000 R14: 00007f70b3305fa0 R15: 00007ffc02f85c38 [ 274.981886][T20057] [ 274.990510][T20030] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.111285][T20071] syz.0.5663[20071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.111405][T20071] syz.0.5663[20071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.123004][T20071] syz.0.5663[20071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.439200][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.490360][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.511935][T20082] lo speed is unknown, defaulting to 1000 [ 275.540137][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.592970][T20082] chnl_net:caif_netlink_parms(): no params data found [ 275.603833][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.660374][T20082] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.667553][T20082] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.674794][T20082] bridge_slave_0: entered allmulticast mode [ 275.681270][T20082] bridge_slave_0: entered promiscuous mode [ 275.688598][T20082] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.695749][T20082] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.703128][T20082] bridge_slave_1: entered allmulticast mode [ 275.709595][T20082] bridge_slave_1: entered promiscuous mode [ 275.730277][T20082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.759620][T20082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.260079][ T36] bond0 (unregistering): Released all slaves [ 276.268907][ T36] bond1 (unregistering): Released all slaves [ 276.277226][ T36] bond2 (unregistering): Released all slaves [ 276.285481][ T36] bond3 (unregistering): Released all slaves [ 276.294059][ T36] bond4 (unregistering): Released all slaves [ 276.303235][ T36] bond5 (unregistering): Released all slaves [ 276.312488][ T36] bond6 (unregistering): Released all slaves [ 276.321071][ T36] bond7 (unregistering): Released all slaves [ 276.329925][ T36] bond8 (unregistering): Released all slaves [ 276.333661][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 276.333676][ T29] audit: type=1400 audit(1734999284.781:36304): avc: denied { accept } for pid=20153 comm="syz.5.5688" lport=55789 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.338056][ T36] bond9 (unregistering): Released all slaves [ 276.344179][ T29] audit: type=1400 audit(1734999284.801:36305): avc: denied { getopt } for pid=20153 comm="syz.5.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 276.369409][ T36] bond10 (unregistering): Released all slaves [ 276.373194][ T29] audit: type=1400 audit(1734999284.821:36306): avc: denied { write } for pid=20153 comm="syz.5.5688" lport=55789 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 276.395305][ T36] bond11 (unregistering): Released all slaves [ 276.430417][ T36] bond12 (unregistering): Released all slaves [ 276.473720][T20082] team0: Port device team_slave_0 added [ 276.482196][T20082] team0: Port device team_slave_1 added [ 276.532391][T20166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.541351][T20166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.572316][T20166] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.584912][ T36] hsr_slave_0: left promiscuous mode [ 276.590971][ T36] hsr_slave_1: left promiscuous mode [ 276.597830][ T36] veth1_vlan: left promiscuous mode [ 276.603253][ T36] veth0_vlan: left allmulticast mode [ 276.608703][ T36] veth0_vlan: left promiscuous mode [ 276.642776][ T36] team0 (unregistering): Port device vlan1 removed [ 276.688141][T20082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.695154][T20082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.721203][T20082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.732604][T20082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.739699][T20082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.765775][T20082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.779281][T20166] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.790610][ T3375] lo speed is unknown, defaulting to 1000 [ 276.811311][T20082] hsr_slave_0: entered promiscuous mode [ 276.817494][T20082] hsr_slave_1: entered promiscuous mode [ 276.826355][T20082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.834248][T20082] Cannot create hsr debugfs directory [ 276.864305][T20166] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.913433][T20166] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.999594][T20166] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.011098][T20166] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.011177][ T2990] ================================================================== [ 277.011204][ T2990] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 277.011237][ T2990] [ 277.024264][T20166] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.027508][ T2990] write to 0xffffffff866a1da0 of 8 bytes by task 20166 on cpu 0: [ 277.038103][T20166] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.044962][ T2990] prb_reserve+0x740/0xb60 [ 277.044993][ T2990] vprintk_store+0x558/0x870 [ 277.045023][ T2990] vprintk_emit+0x15e/0x680 [ 277.074390][ T2990] dev_vprintk_emit+0x1df/0x210 [ 277.079282][ T2990] dev_printk_emit+0x82/0xb0 [ 277.083904][ T2990] __netdev_printk+0x352/0x3e0 [ 277.088673][ T2990] netdev_info+0x99/0xc0 [ 277.092947][ T2990] nsim_udp_tunnel_set_port+0x175/0x190 [ 277.098506][ T2990] __udp_tunnel_nic_device_sync+0x57b/0x9e0 [ 277.104409][ T2990] __udp_tunnel_nic_add_port+0x66d/0x6e0 [ 277.110052][ T2990] udp_tunnel_push_rx_port+0xea/0x120 [ 277.115603][ T2990] geneve_netdevice_event+0x169/0x1c0 [ 277.120987][ T2990] raw_notifier_call_chain+0x6f/0x1d0 [ 277.126397][ T2990] call_netdevice_notifiers_info+0xae/0x100 [ 277.132315][ T2990] call_netdevice_notifiers+0x49/0x70 [ 277.137695][ T2990] udp_tunnel_nic_netdevice_event+0xa49/0xc80 [ 277.143772][ T2990] raw_notifier_call_chain+0x6f/0x1d0 [ 277.149163][ T2990] call_netdevice_notifiers_info+0xae/0x100 [ 277.155067][ T2990] register_netdevice+0xca9/0xe30 [ 277.160106][ T2990] nsim_create+0x473/0x590 [ 277.164520][ T2990] __nsim_dev_port_add+0x425/0x590 [ 277.169659][ T2990] nsim_dev_reload_up+0x434/0x510 [ 277.174692][ T2990] devlink_reload+0x31a/0x5a0 [ 277.179378][ T2990] devlink_nl_reload_doit+0x78c/0x8f0 [ 277.184764][ T2990] genl_rcv_msg+0x61b/0x6c0 [ 277.189282][ T2990] netlink_rcv_skb+0x12c/0x230 [ 277.194053][ T2990] genl_rcv+0x28/0x40 [ 277.198051][ T2990] netlink_unicast+0x599/0x670 [ 277.202819][ T2990] netlink_sendmsg+0x5cc/0x6e0 [ 277.207591][ T2990] __sock_sendmsg+0x140/0x180 [ 277.212280][ T2990] ____sys_sendmsg+0x312/0x410 [ 277.217479][ T2990] __sys_sendmsg+0x19d/0x230 [ 277.222074][ T2990] __x64_sys_sendmsg+0x46/0x50 [ 277.226858][ T2990] x64_sys_call+0x2734/0x2dc0 [ 277.231561][ T2990] do_syscall_64+0xc9/0x1c0 [ 277.236080][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.241993][ T2990] [ 277.244316][ T2990] read to 0xffffffff866a1da0 of 8 bytes by task 2990 on cpu 1: [ 277.251866][ T2990] _prb_read_valid+0x3bb/0xba0 [ 277.256637][ T2990] prb_read_valid+0x3d/0x60 [ 277.261153][ T2990] syslog_print+0xfc/0x760 [ 277.265577][ T2990] do_syslog+0x3a1/0x7f0 [ 277.269827][ T2990] __x64_sys_syslog+0x43/0x50 [ 277.274509][ T2990] x64_sys_call+0x29be/0x2dc0 [ 277.279188][ T2990] do_syscall_64+0xc9/0x1c0 [ 277.283696][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.289609][ T2990] [ 277.291927][ T2990] value changed: 0x0000000000000284 -> 0x0000000000000000 [ 277.299035][ T2990] [ 277.301354][ T2990] Reported by Kernel Concurrency Sanitizer on: [ 277.307498][ T2990] CPU: 1 UID: 0 PID: 2990 Comm: klogd Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 277.317740][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.327840][ T2990] ================================================================== [ 277.516696][T20082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.525484][T20082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.534291][T20082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.543437][T20082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.585495][T20082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.600617][T20082] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.610539][ T1715] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.617804][ T1715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.640316][ T1715] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.647434][ T1715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.711813][T20082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.828934][T20082] veth0_vlan: entered promiscuous mode [ 277.836438][T20082] veth1_vlan: entered promiscuous mode [ 277.851047][T20082] veth0_macvtap: entered promiscuous mode [ 277.859057][T20082] veth1_macvtap: entered promiscuous mode [ 277.870220][T20082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.880780][T20082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.891908][T20082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.902225][T20082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.912720][T20082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.922550][T20082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.933229][T20082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.944184][T20082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.952572][T20082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.961468][T20082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.970204][T20082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.978939][T20082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.073159][T20030] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.083985][T20030] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.095288][T20030] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.106991][T20030] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0