last executing test programs: 3.632587454s ago: executing program 3 (id=259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x4000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xfe, 0xb99, 0x4, 0x1, 0x0, 0x9}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.404290877s ago: executing program 3 (id=264): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x4000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) 2.922906705s ago: executing program 0 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) kcmp(0x0, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2.441142193s ago: executing program 3 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0xc, 0x1c, 0x153, &(0x7f00000002c0)="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"}) r6 = dup(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(0x0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r9, 0x4c09, 0x3) r13 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64=r9, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r8, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="0200", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r12, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664", @ANYRESDEC=r10, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=@newpolicy={0x578, 0x13, 0x800, 0x70bd27, 0x25dfdbfd, {{@in=@empty, @in6=@mcast1, 0x4e24, 0xb640, 0x4e22, 0x0, 0xa, 0x80, 0x0, 0x29, 0x0, r10}, {0xfffffffffffffffe, 0x1, 0x52b1, 0x8, 0x3, 0x1, 0x1, 0x5}, {0x1, 0x3, 0x9, 0x8000000000000001}, 0x80000001, 0x6e6bb8, 0x0, 0x0, 0x4, 0x2}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @srcaddr={0x14, 0xd, @in=@loopback}, @algo_auth={0x126, 0x1, {{'blake2s-160-x86\x00'}, 0x6f0, "c1186f89e801c4cb4b15b184985bb111158309a025248258cc09619dea4186d5a4feaac2b81a79b8b6d5b32b19e93ee526b7d9892feb551fcb4d794382eeaef7a1f446209c1847cccd8cc70808cd7d4d9dba44e13a572fe4af56aebf70b05cd456213423145114148ae954b0d12d0a8a5fc59fbac94b8dda777cf4960050ae142b7023341bc8179ac783cecb068830d5b4f66e41052f096bfb0431ef5ee4d881dd8945832d4b46378d3514656ce78dd18bbb513da3a33d596f6a8e37f3d7c4d1b4b08d5ef181782c2ffb27695c6673a98c2a9099c6ae48d0e5ea85140856"}}, @srcaddr={0x14, 0xd, @in=@private=0xa010100}, @algo_auth_trunc={0x94, 0x14, {{'sha1-ni\x00'}, 0x240, 0x60, "8232f746280a9821416d346bcdb1e69c6ee6d9a19f83af5b33e770634a0d73adee3383b9c2bd1621d7a53d873f41943e323f5dff6c42558044d84031589f348ff06e94da9d0c7f2a"}}, @migrate={0x1cc, 0x11, [{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x3500, 0x2, 0x2}, {@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2d}, @in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in=@broadcast, 0x3c, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x7b, 0x0, 0x0, 0x3502, 0xa, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x32, 0x4, 0x0, 0x3507, 0x2, 0xa}, {@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, @in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x33, 0x0, 0x0, 0x3500, 0x2, 0xa}]}, @replay_thresh={0x8}, @migrate={0xe8, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3c, 0x5, 0x0, 0x3501, 0xa, 0x2}, {@in=@multicast1, @in6=@remote, @in=@empty, @in=@loopback, 0x2b, 0x6, 0x0, 0x0, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3c, 0x0, 0x0, 0x0, 0x2, 0x8}]}, @mark={0xc, 0x15, {0x35075b, 0x9}}]}, 0x578}, 0x1, 0x0, 0x0, 0x20004040}, 0xc040810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e20, 0x5, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x89, r7, r10}, {0x40, 0x8, 0x401, 0xbc, 0x0, 0x24, 0x8, 0x9}, {0x6, 0x81, 0x9, 0x7fffffff}, 0x9, 0x6e6bbd, 0xee3985dc951321e4, 0x1, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x32}, 0x2, @in=@private=0xa010101, 0x3505, 0x1, 0x1, 0x5, 0x3ff800, 0x8, 0x1}}, 0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.874290711s ago: executing program 2 (id=273): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1.802095952s ago: executing program 2 (id=275): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:* rw'], 0x9) 1.797151503s ago: executing program 3 (id=276): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000006000000003000000002000008000000000000000300000000050000000300000000000000000000000000000d000000000000000000000009020000000000"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001240)={0x0, 0x1, 0x0, [0x5, 0x0, 0x9, 0x400, 0x8], [0x7, 0x3, 0xe, 0x4b, 0x9, 0x5, 0x1, 0x9, 0x5, 0x3, 0x89a, 0x5, 0x6fa4, 0xfffffffffffff38b, 0xe, 0x7ea, 0x5, 0x2, 0xc, 0x9c6, 0xffffffff00000001, 0x3, 0x8, 0x9, 0xa875, 0x6, 0xa03, 0xd, 0x10, 0xa85, 0x9, 0x80000000000, 0xc, 0x8, 0x278, 0x7, 0x9, 0x0, 0x56, 0xff, 0x1, 0x4a, 0xf, 0x6, 0x0, 0xd7, 0x5, 0x2b, 0x2, 0x200, 0xffff, 0x2, 0x2, 0x200, 0x80000001, 0x7, 0x2, 0x5, 0xffffffff, 0x3, 0x1, 0x18, 0x0, 0x80, 0x5, 0x96, 0xd, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffff9, 0x7fff, 0x9, 0x100000000, 0xffffffffffffffff, 0xfe00000000000000, 0x9, 0x7f, 0x9, 0xffffffff, 0x2b, 0x4, 0xf, 0x2, 0x6, 0xffffffff, 0x8000, 0x101, 0x10001, 0x9, 0x8, 0x4be9, 0x29b, 0x8000000000000001, 0x9d, 0x44fb, 0x2, 0x80000000, 0x7, 0xbc, 0x6, 0x9, 0x7fff, 0x8000, 0x1, 0xd, 0x990e, 0x80, 0x2, 0x6, 0x5, 0x871, 0x2, 0xf, 0x4, 0x4, 0xfe50, 0x7fff, 0x0, 0x6800, 0xfffffffffffffff9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001900)={0x0, 0x7, 0x1, [0x180000000000, 0x860, 0x1, 0x1000, 0x7], [0x2, 0x4, 0x23, 0x800, 0xffffffff, 0x1, 0x10, 0x4, 0x80000000, 0x3ff, 0x4, 0x788c, 0x1ff, 0xfe, 0x1000000, 0x7, 0x4, 0x7, 0x9, 0x400, 0x1000, 0x5, 0xfffffffffffff357, 0x4, 0xc, 0x4, 0xcd8c, 0x9, 0x7, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x6, 0x5f44, 0x2, 0x5, 0x1, 0x7, 0x9, 0x5, 0x8, 0x0, 0x7f, 0x157, 0x2000000000000000, 0x0, 0xa, 0xea, 0x7, 0x0, 0x7fffffff, 0x2, 0x6d5e, 0x73, 0xb53, 0x401, 0xffffffffffffffff, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xfffffffffffffff8, 0x8, 0x1, 0x3, 0x2, 0x7, 0x0, 0x9, 0x9, 0xa, 0x8, 0x1, 0x2, 0x8, 0x8, 0x101, 0x2, 0x5, 0x9, 0xc8, 0x8, 0x8, 0xa72, 0x1, 0xd, 0x6, 0x8, 0x0, 0x46, 0x9, 0x8, 0x9, 0xb22, 0xd, 0xffffffff, 0xfffffffffffff83e, 0x2, 0x6, 0x8, 0x6, 0x3, 0x3198, 0x1, 0x7, 0x8, 0x7ff, 0x7, 0xbe0c, 0x8, 0x100, 0x5, 0xac4, 0x7, 0x1, 0x5]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_vif\x00') pread64(r4, &(0x7f0000000100)=""/199, 0xc7, 0x5) lseek(r4, 0xd2, 0x1) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0xfa, 0x40, 0x7, 0x2, 0xf00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x3, 0x0, 0x5, 0x800000007, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2f0000000400000004000000", @ANYRES32=r3, @ANYBLOB="591145d4acff21de7e05176993ca9cc3355a912b754e212a968eb99c854ab82efccf3ba2ec5844cc2570e2b0d65317d3e2ce903c13f8d0bccb2bc1ee6b356a8f8b9948c6fce720268d7a291b55a533f22897020394d187c86f61f71449386f24e9dc12b161792ce45d32dab819b620ecf704be40c46e28bfb140356efaab33303e474c010f46318811f476f462df07d915d44e47ac1e73d0fc3b37084b399222900c8ecf448019357231d24352fb3b41b0485af7de03acbdf24d7d14c32cd75e5e644284a8dfb3767da8567b", @ANYRES64=0x0], 0x20) syz_clone3(&(0x7f0000001880)={0x1008c0600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 1.796555182s ago: executing program 1 (id=277): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x1a, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="796104000000000001007e190000"], 0x14}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.729930123s ago: executing program 0 (id=278): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 1.704567414s ago: executing program 2 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r4}) 1.465809387s ago: executing program 0 (id=281): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x618, &(0x7f0000002200)="$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") 1.456513908s ago: executing program 1 (id=282): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x9, 0xc1a9, 0x200]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025cc", 0x8b}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1.373571189s ago: executing program 1 (id=283): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18) creat(0x0, 0x48) pipe2$9p(0x0, 0x0) syz_usbip_server_init(0x5) socketpair(0x2c, 0x1, 0xfffff800, 0x0) perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x36, 0xf, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x1419d, 0xffff, 0xe1, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x1, 0x0, 0x8000000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffeffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 1.361182009s ago: executing program 3 (id=284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) close(r2) 1.258250591s ago: executing program 3 (id=285): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18) creat(0x0, 0x48) pipe2$9p(0x0, 0x0) syz_usbip_server_init(0x5) socketpair(0x2c, 0x1, 0xfffff800, &(0x7f0000000180)) perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x36, 0xf, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x1419d, 0xffff, 0xe1, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x1, 0x0, 0x8000000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x8010000000000084) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffeffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 1.177546602s ago: executing program 0 (id=286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1.162120492s ago: executing program 4 (id=287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0xc, 0x1c, 0x153, &(0x7f00000002c0)="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"}) r6 = dup(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file1\x00', 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r9, 0x4c09, 0x3) r11 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64=r9, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r8, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="0200", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664", @ANYRESDEC, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=@newpolicy={0x578, 0x13, 0x800, 0x70bd27, 0x25dfdbfd, {{@in=@empty, @in6=@mcast1, 0x4e24, 0xb640, 0x4e22, 0x0, 0xa, 0x80, 0x0, 0x29}, {0xfffffffffffffffe, 0x1, 0x52b1, 0x8, 0x3, 0x1, 0x1, 0x5}, {0x1, 0x3, 0x9, 0x8000000000000001}, 0x80000001, 0x6e6bb8, 0x0, 0x0, 0x4, 0x2}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @srcaddr={0x14, 0xd, @in=@loopback}, @algo_auth={0x126, 0x1, {{'blake2s-160-x86\x00'}, 0x6f0, "c1186f89e801c4cb4b15b184985bb111158309a025248258cc09619dea4186d5a4feaac2b81a79b8b6d5b32b19e93ee526b7d9892feb551fcb4d794382eeaef7a1f446209c1847cccd8cc70808cd7d4d9dba44e13a572fe4af56aebf70b05cd456213423145114148ae954b0d12d0a8a5fc59fbac94b8dda777cf4960050ae142b7023341bc8179ac783cecb068830d5b4f66e41052f096bfb0431ef5ee4d881dd8945832d4b46378d3514656ce78dd18bbb513da3a33d596f6a8e37f3d7c4d1b4b08d5ef181782c2ffb27695c6673a98c2a9099c6ae48d0e5ea85140856"}}, @srcaddr={0x14, 0xd, @in=@private=0xa010100}, @algo_auth_trunc={0x94, 0x14, {{'sha1-ni\x00'}, 0x240, 0x60, "8232f746280a9821416d346bcdb1e69c6ee6d9a19f83af5b33e770634a0d73adee3383b9c2bd1621d7a53d873f41943e323f5dff6c42558044d84031589f348ff06e94da9d0c7f2a"}}, @migrate={0x1cc, 0x11, [{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x3500, 0x2, 0x2}, {@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2d}, @in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in=@broadcast, 0x3c, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x7b, 0x0, 0x0, 0x3502, 0xa, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x32, 0x4, 0x0, 0x3507, 0x2, 0xa}, {@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, @in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x33, 0x0, 0x0, 0x3500, 0x2, 0xa}]}, @replay_thresh={0x8}, @migrate={0xe8, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3c, 0x5, 0x0, 0x3501, 0xa, 0x2}, {@in=@multicast1, @in6=@remote, @in=@empty, @in=@loopback, 0x2b, 0x6, 0x0, 0x0, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3c, 0x0, 0x0, 0x0, 0x2, 0x8}]}, @mark={0xc, 0x15, {0x35075b, 0x9}}]}, 0x578}, 0x1, 0x0, 0x0, 0x20004040}, 0xc040810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e20, 0x5, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x89, r7}, {0x40, 0x8, 0x401, 0xbc, 0x0, 0x24, 0x8, 0x9}, {0x6, 0x81, 0x9, 0x7fffffff}, 0x9, 0x6e6bbd, 0xee3985dc951321e4, 0x1, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x32}, 0x2, @in=@private=0xa010101, 0x3505, 0x1, 0x1, 0x5, 0x3ff800, 0x8, 0x1}}, 0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.065984184s ago: executing program 4 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) kcmp(0x0, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 1.056339674s ago: executing program 0 (id=289): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x68, 0x0, 0x10, 0x70b52c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x9, 0xc1a9, 0x200, 0x8e2a, 0x1]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24011}, 0x2404c000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x9, 0x0}, 0xfffffe40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES16=r5, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r8, 0x5) flock(r8, 0x5) sendmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="71b28209c8", 0x5}], 0x1}, 0x40004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff01000000000000", 0xbb}], 0x1}, 0x20004804) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 659.85015ms ago: executing program 2 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="9e6fc1d300000000000061197400000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) clock_getres(0xfffffffffffffff1, &(0x7f0000000040)) write$binfmt_elf32(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4607066209020000000000000003000600416bde0799020000380000002a000000000600000500200001005b0400006f00000000000000006007000000ff0f0000fdffffff0f000000020000000500000009000000928b45cf7f426bdcb95af1012b58ecca1ad28e95a3ec5f322f7819a42a07d43c44d451d9d6d09134742647e582fcea75bf243fbfe00a4acd9d8389871a2b4276d1b3f17dec78c7de3b4f7131113bbd3ede5c2f26e495c0b4b2d673d0956b861dbca9baf4c7142de623ab862bbf949c1b9a615e8b2f8ce6649bc214682f8faab7c8cd4f6d74397d21c8b98156439ec58d1e699b6967d4e2e483275da2e5af6f296970c3e6678460f7b48a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013e87390c392af2700"/2058], 0x802) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x40, 0x40, 0xda, 0xf71, {{0xa, 0x4, 0x1, 0x8, 0x28, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @loopback, {[@ra={0x94, 0x4}, @generic={0x44, 0x2}, @ssrr={0x89, 0xb, 0xf9, [@empty, @rand_addr=0x64010101]}]}}}}}) fadvise64(0xffffffffffffffff, 0x8000, 0x3, 0x4) 607.610191ms ago: executing program 1 (id=291): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000006000000003000000002000008000000000000000300000000050000000300000000000000000000000000000d000000000000000000000009020000000000"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001240)={0x0, 0x1, 0x0, [0x5, 0x0, 0x9, 0x400, 0x8], [0x7, 0x3, 0xe, 0x4b, 0x9, 0x5, 0x1, 0x9, 0x5, 0x3, 0x89a, 0x5, 0x6fa4, 0xfffffffffffff38b, 0xe, 0x7ea, 0x5, 0x2, 0xc, 0x9c6, 0xffffffff00000001, 0x3, 0x8, 0x9, 0xa875, 0x6, 0xa03, 0xd, 0x10, 0xa85, 0x9, 0x80000000000, 0xc, 0x8, 0x278, 0x7, 0x9, 0x0, 0x56, 0xff, 0x1, 0x4a, 0xf, 0x6, 0x0, 0xd7, 0x5, 0x2b, 0x2, 0x200, 0xffff, 0x2, 0x2, 0x200, 0x80000001, 0x7, 0x2, 0x5, 0xffffffff, 0x3, 0x1, 0x18, 0x0, 0x80, 0x5, 0x96, 0xd, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffff9, 0x7fff, 0x9, 0x100000000, 0xffffffffffffffff, 0xfe00000000000000, 0x9, 0x7f, 0x9, 0xffffffff, 0x2b, 0x4, 0xf, 0x2, 0x6, 0xffffffff, 0x8000, 0x101, 0x10001, 0x9, 0x8, 0x4be9, 0x29b, 0x8000000000000001, 0x9d, 0x44fb, 0x2, 0x80000000, 0x7, 0xbc, 0x6, 0x9, 0x7fff, 0x8000, 0x1, 0xd, 0x990e, 0x80, 0x2, 0x6, 0x5, 0x871, 0x2, 0xf, 0x4, 0x4, 0xfe50, 0x7fff, 0x0, 0x6800, 0xfffffffffffffff9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001900)={0x0, 0x7, 0x1, [0x180000000000, 0x860, 0x1, 0x1000, 0x7], [0x2, 0x4, 0x23, 0x800, 0xffffffff, 0x1, 0x10, 0x4, 0x80000000, 0x3ff, 0x4, 0x788c, 0x1ff, 0xfe, 0x1000000, 0x7, 0x4, 0x7, 0x9, 0x400, 0x1000, 0x5, 0xfffffffffffff357, 0x4, 0xc, 0x4, 0xcd8c, 0x9, 0x7, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x6, 0x5f44, 0x2, 0x5, 0x1, 0x7, 0x9, 0x5, 0x8, 0x0, 0x7f, 0x157, 0x2000000000000000, 0x0, 0xa, 0xea, 0x7, 0x0, 0x7fffffff, 0x2, 0x6d5e, 0x73, 0xb53, 0x401, 0xffffffffffffffff, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xfffffffffffffff8, 0x8, 0x1, 0x3, 0x2, 0x7, 0x0, 0x9, 0x9, 0xa, 0x8, 0x1, 0x2, 0x8, 0x8, 0x101, 0x2, 0x5, 0x9, 0xc8, 0x8, 0x8, 0xa72, 0x1, 0xd, 0x6, 0x8, 0x0, 0x46, 0x9, 0x8, 0x9, 0xb22, 0xd, 0xffffffff, 0xfffffffffffff83e, 0x2, 0x6, 0x8, 0x6, 0x3, 0x3198, 0x1, 0x7, 0x8, 0x7ff, 0x7, 0xbe0c, 0x8, 0x100, 0x5, 0xac4, 0x7, 0x1, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001d40)={0x8, 0x4, {0x4, @struct={0xdd2d}, 0x0, 0xc6f8, 0x15, 0x7, 0x8, 0xffff, 0x20, @struct={0x6, 0x9}, 0x8, 0x9, [0x400, 0x7, 0x679c, 0x2, 0x6, 0x4]}, {0x0, @struct={0x7ff, 0x7ff}, r2, 0x40e, 0x99f7, 0x6, 0x8, 0x1, 0x20, @struct={0x80, 0xdf}, 0x7, 0xffffffff, [0x81, 0xf4, 0x707dd914, 0x0, 0x7, 0xfffffffffffffffc]}, {0x4, @struct={0x2, 0x5}, r3, 0x1, 0xffffffffffffffff, 0x7, 0xffffffffffffff57, 0x7fff, 0x80, @usage=0x2, 0x4, 0x0, [0x7f, 0x200, 0x5, 0x6, 0x883, 0xa]}, {0x8, 0x8000000000000000}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_vif\x00') pread64(r6, &(0x7f0000000100)=""/199, 0xc7, 0x5) lseek(r6, 0xd2, 0x1) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0xfa, 0x40, 0x7, 0x2, 0xf00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x3, 0x0, 0x5, 0x800000007, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="2f0000000400000004000000", @ANYRES32=r5, @ANYBLOB="591145d4acff21de7e05176993ca9cc3355a912b754e212a968eb99c854ab82efccf3ba2ec5844cc2570e2b0d65317d3e2ce903c13f8d0bccb2bc1ee6b356a8f8b9948c6fce720268d7a291b55a533f22897020394d187c86f61f71449386f24e9dc12b161792ce45d32dab819b620ecf704be40c46e28bfb140356efaab33303e474c010f46318811f476f462df07d915d44e47ac1e73d0fc3b37084b399222900c8ecf448019357231d24352fb3b41b0485af7de03acbdf24d7d14c32cd75e5e644284a8dfb3767da8567b", @ANYRES64=0x0], 0x20) syz_clone3(0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 234.933637ms ago: executing program 2 (id=292): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 121.593579ms ago: executing program 4 (id=293): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x9, 0xc1a9, 0x200]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025cc", 0x8b}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 121.195739ms ago: executing program 1 (id=294): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x87}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="78040000000000000d01000005000000ece538e8b62831eafcd9056be7c8a4f36891e0bd363476ba635f8d61e20221d10831df051097c214cf0e5f4345fa2c1eff6b0f8eedd3687f41fdd27b53aabf690ef80b8953b86b7943136212b1ec5c95809bc5d24c84f1ea4c6a1ff8b0dfc20e9b15115ddad4e233132bb07ee1577ae158a9ec4de6171ac0a7542ea221a3d97d80e7bed34fde3c64661a751d33a6d102ec5e611cee97f445ff21d4d3b360a17a83b7594ad811751ceb59ea8b5cde9525ac5679cf2e35907c0abbb85a25c776a98af56eff37c6627d00c51fd572f6113013d16a54d005b0f833f3c9cde6b897172b7ddc1b063781f822e06890c08ad3025e80b4a550a680e58053a8c33d2e1858f971a40788f6b287baa082a334140c0091f5f2d232ecbc86218a477e468e5be1b48d7787071b5c891cc3efde21a3b0337adeaa6a41ce8fd6edf1b0a47ca0cd6d785cc2c1c3803dde4d9749a10e21d489531efca60760b4ff2061dd7800c4f23c3d1e2bcd694fcc87261a2fdfee6baaa701c7083e9675a75b8d530f09f72d8d3fed4ed848ba18d11635893b52c84a6f0fdc9711b63cba52c9e33ac701261d5459b6ff53be036549b6d0e617d125a6a758370d0671f5f956918db7c4d0afb4f7369bad2a1cf0b7bcf130464bb031b092392a72e8234c1cc1d41190dad660bd1d9283d7d4c7f7410c83f6cfbd25b438097f3e5fd4a23e56c1995179797f03c6dfc5e8be4515fbc72ef9ecbb7cd80d4e71d2ac2f31396081eb9fee4b5d633aee32775a004f7aee9f33d81f9e469a1bef0a995ca8d50c2d853bfb1ebaf301d0c649b74827ae650b6a3bec85e2e9fd45e33bdd8c29cb0692d78a73700daf8eaff8efc06f8c07b3ce384ab1d925cdc440a4b85ace1edb6202df092fe6b37c11e10f3cb3d9e0cc19d55989766aec965403244c8dabfcdcc51c2297131307048ffc88b47d07e821656fa73395dd464d79ee82b3d4f47bd29f42f44f9521efdec7b0e8b5436d496ae046d72d69bc3d35a62829954fdf87fa10330a7864465ee86c540b2e1320e8453701898027ef86ad0d7c31c009f0e5f4c35eeb870ba4caa3708656b38c3797aa"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) creat(&(0x7f00000001c0)='./file0\x00', 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r3, @ANYBLOB=',wfdno', @ANYBLOB]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 119.925079ms ago: executing program 4 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) close(r2) 97.093569ms ago: executing program 4 (id=296): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:*'], 0x9) 90.636619ms ago: executing program 2 (id=297): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x4000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) 57.141579ms ago: executing program 1 (id=298): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) sendto$packet(r1, 0x0, 0x0, 0x240001d3, 0x0, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000002c0)={[{@grpjquota}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x460, &(0x7f0000000680)="$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") (rerun: 64) 272.111µs ago: executing program 4 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0xc, 0x1c, 0x153, &(0x7f00000002c0)="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"}) r6 = dup(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file1\x00', 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r9, 0x4c09, 0x3) r11 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64=r9, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r8, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="0200", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664", @ANYRESDEC, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=@newpolicy={0x578, 0x13, 0x800, 0x70bd27, 0x25dfdbfd, {{@in=@empty, @in6=@mcast1, 0x4e24, 0xb640, 0x4e22, 0x0, 0xa, 0x80, 0x0, 0x29}, {0xfffffffffffffffe, 0x1, 0x52b1, 0x8, 0x3, 0x1, 0x1, 0x5}, {0x1, 0x3, 0x9, 0x8000000000000001}, 0x80000001, 0x6e6bb8, 0x0, 0x0, 0x4, 0x2}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @srcaddr={0x14, 0xd, @in=@loopback}, @algo_auth={0x126, 0x1, {{'blake2s-160-x86\x00'}, 0x6f0, "c1186f89e801c4cb4b15b184985bb111158309a025248258cc09619dea4186d5a4feaac2b81a79b8b6d5b32b19e93ee526b7d9892feb551fcb4d794382eeaef7a1f446209c1847cccd8cc70808cd7d4d9dba44e13a572fe4af56aebf70b05cd456213423145114148ae954b0d12d0a8a5fc59fbac94b8dda777cf4960050ae142b7023341bc8179ac783cecb068830d5b4f66e41052f096bfb0431ef5ee4d881dd8945832d4b46378d3514656ce78dd18bbb513da3a33d596f6a8e37f3d7c4d1b4b08d5ef181782c2ffb27695c6673a98c2a9099c6ae48d0e5ea85140856"}}, @srcaddr={0x14, 0xd, @in=@private=0xa010100}, @algo_auth_trunc={0x94, 0x14, {{'sha1-ni\x00'}, 0x240, 0x60, "8232f746280a9821416d346bcdb1e69c6ee6d9a19f83af5b33e770634a0d73adee3383b9c2bd1621d7a53d873f41943e323f5dff6c42558044d84031589f348ff06e94da9d0c7f2a"}}, @migrate={0x1cc, 0x11, [{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x3500, 0x2, 0x2}, {@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2d}, @in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in=@broadcast, 0x3c, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x7b, 0x0, 0x0, 0x3502, 0xa, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x32, 0x4, 0x0, 0x3507, 0x2, 0xa}, {@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, @in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x33, 0x0, 0x0, 0x3500, 0x2, 0xa}]}, @replay_thresh={0x8}, @migrate={0xe8, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3c, 0x5, 0x0, 0x3501, 0xa, 0x2}, {@in=@multicast1, @in6=@remote, @in=@empty, @in=@loopback, 0x2b, 0x6, 0x0, 0x0, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3c, 0x0, 0x0, 0x0, 0x2, 0x8}]}, @mark={0xc, 0x15, {0x35075b, 0x9}}]}, 0x578}, 0x1, 0x0, 0x0, 0x20004040}, 0xc040810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e20, 0x5, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x89, r7}, {0x40, 0x8, 0x401, 0xbc, 0x0, 0x24, 0x8, 0x9}, {0x6, 0x81, 0x9, 0x7fffffff}, 0x9, 0x6e6bbd, 0xee3985dc951321e4, 0x1, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x32}, 0x2, @in=@private=0xa010101, 0x3505, 0x1, 0x1, 0x5, 0x3ff800, 0x8, 0x1}}, 0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 0s ago: executing program 0 (id=300): socket(0x11, 0xa, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) pread64(r0, &(0x7f00000002c0)=""/181, 0xb5, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gre0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000140)={[{@dioread_lock}, {@noquota}, {@grpid}]}, 0x1, 0x4db, &(0x7f0000001480)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 33.333559][ T29] audit: type=1400 audit(1753109599.993:62): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.334583][ T3299] cgroup: Unknown subsys name 'net' [ 33.356471][ T29] audit: type=1400 audit(1753109600.003:63): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.383840][ T29] audit: type=1400 audit(1753109600.023:64): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.524255][ T3299] cgroup: Unknown subsys name 'cpuset' [ 33.530430][ T3299] cgroup: Unknown subsys name 'rlimit' [ 33.721670][ T29] audit: type=1400 audit(1753109600.383:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.746201][ T29] audit: type=1400 audit(1753109600.383:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.766729][ T29] audit: type=1400 audit(1753109600.383:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.775383][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.787104][ T29] audit: type=1400 audit(1753109600.383:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.815958][ T29] audit: type=1400 audit(1753109600.393:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.822907][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.840794][ T29] audit: type=1400 audit(1753109600.393:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.840954][ T29] audit: type=1400 audit(1753109600.463:71): avc: denied { relabelto } for pid=3302 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.956566][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.029669][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.036895][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.044049][ T3309] bridge_slave_0: entered allmulticast mode [ 35.050447][ T3309] bridge_slave_0: entered promiscuous mode [ 35.058027][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.065118][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.072464][ T3309] bridge_slave_1: entered allmulticast mode [ 35.078822][ T3309] bridge_slave_1: entered promiscuous mode [ 35.113535][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.129085][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.138595][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.170846][ T3309] team0: Port device team_slave_0 added [ 35.179825][ T3309] team0: Port device team_slave_1 added [ 35.208868][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.232104][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.239081][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.264993][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.288354][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.295406][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.321387][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.370567][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.377760][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.384939][ T3310] bridge_slave_0: entered allmulticast mode [ 35.391291][ T3310] bridge_slave_0: entered promiscuous mode [ 35.400022][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.407229][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.414318][ T3310] bridge_slave_1: entered allmulticast mode [ 35.420768][ T3310] bridge_slave_1: entered promiscuous mode [ 35.431322][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.440211][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.447302][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.454440][ T3313] bridge_slave_0: entered allmulticast mode [ 35.460772][ T3313] bridge_slave_0: entered promiscuous mode [ 35.476140][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.491348][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.498426][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.505670][ T3313] bridge_slave_1: entered allmulticast mode [ 35.512079][ T3313] bridge_slave_1: entered promiscuous mode [ 35.524259][ T3309] hsr_slave_0: entered promiscuous mode [ 35.530192][ T3309] hsr_slave_1: entered promiscuous mode [ 35.551500][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.564021][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.574436][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.600183][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.636163][ T3313] team0: Port device team_slave_0 added [ 35.642520][ T3310] team0: Port device team_slave_0 added [ 35.660198][ T3313] team0: Port device team_slave_1 added [ 35.666424][ T3310] team0: Port device team_slave_1 added [ 35.698962][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.706138][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.732186][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.743093][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.750190][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.757405][ T3322] bridge_slave_0: entered allmulticast mode [ 35.763783][ T3322] bridge_slave_0: entered promiscuous mode [ 35.774884][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.781946][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.789086][ T3317] bridge_slave_0: entered allmulticast mode [ 35.795549][ T3317] bridge_slave_0: entered promiscuous mode [ 35.808398][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.815402][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.841384][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.852336][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.859326][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.885278][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.898390][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.905536][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.912757][ T3322] bridge_slave_1: entered allmulticast mode [ 35.919212][ T3322] bridge_slave_1: entered promiscuous mode [ 35.925526][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.932580][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.939829][ T3317] bridge_slave_1: entered allmulticast mode [ 35.946296][ T3317] bridge_slave_1: entered promiscuous mode [ 35.958652][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.965756][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.991686][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.036278][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.046575][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.056839][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.069025][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.084555][ T3313] hsr_slave_0: entered promiscuous mode [ 36.090710][ T3313] hsr_slave_1: entered promiscuous mode [ 36.096604][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.104186][ T3313] Cannot create hsr debugfs directory [ 36.145950][ T3317] team0: Port device team_slave_0 added [ 36.153754][ T3310] hsr_slave_0: entered promiscuous mode [ 36.159624][ T3310] hsr_slave_1: entered promiscuous mode [ 36.165535][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.173080][ T3310] Cannot create hsr debugfs directory [ 36.184484][ T3322] team0: Port device team_slave_0 added [ 36.194476][ T3317] team0: Port device team_slave_1 added [ 36.200817][ T3322] team0: Port device team_slave_1 added [ 36.238270][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.245406][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.271362][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.286804][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.293808][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.319761][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.332773][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.339858][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.365806][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.376960][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.383985][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.409961][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.471390][ T3317] hsr_slave_0: entered promiscuous mode [ 36.477491][ T3317] hsr_slave_1: entered promiscuous mode [ 36.483278][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.490918][ T3317] Cannot create hsr debugfs directory [ 36.498259][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.525341][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.536057][ T3322] hsr_slave_0: entered promiscuous mode [ 36.542108][ T3322] hsr_slave_1: entered promiscuous mode [ 36.548158][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.555847][ T3322] Cannot create hsr debugfs directory [ 36.566428][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.586948][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.646072][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.654714][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.664775][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.684435][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.726331][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.735294][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.747107][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.755633][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.795849][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.806365][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.814926][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.830528][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.866039][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.875447][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.884084][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.893077][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.904020][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.922279][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.939738][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.949898][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.962363][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.969499][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.980383][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.996576][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.003710][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.016171][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.026553][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.033701][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.043297][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.050357][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.079241][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.086305][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.096014][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.103096][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.167617][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.180749][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.201470][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.208576][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.220793][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.229890][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.245829][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.253036][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.288249][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.302218][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.316721][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.323839][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.343020][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.356610][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.363695][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.399290][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.409773][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.455572][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.485598][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.509949][ T3309] veth0_vlan: entered promiscuous mode [ 37.532304][ T3309] veth1_vlan: entered promiscuous mode [ 37.551948][ T3309] veth0_macvtap: entered promiscuous mode [ 37.566679][ T3313] veth0_vlan: entered promiscuous mode [ 37.573166][ T3309] veth1_macvtap: entered promiscuous mode [ 37.593477][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.605780][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.615551][ T3313] veth1_vlan: entered promiscuous mode [ 37.630484][ T3310] veth0_vlan: entered promiscuous mode [ 37.637734][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.646574][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.655384][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.664173][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.685479][ T3310] veth1_vlan: entered promiscuous mode [ 37.719570][ T3310] veth0_macvtap: entered promiscuous mode [ 37.727235][ T3313] veth0_macvtap: entered promiscuous mode [ 37.735021][ T3310] veth1_macvtap: entered promiscuous mode [ 37.742490][ T3317] veth0_vlan: entered promiscuous mode [ 37.752212][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.760082][ T3322] veth0_vlan: entered promiscuous mode [ 37.792723][ T3313] veth1_macvtap: entered promiscuous mode [ 37.805480][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.815449][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.825436][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.834297][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.843077][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.851796][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.876358][ T3322] veth1_vlan: entered promiscuous mode [ 37.885388][ T3317] veth1_vlan: entered promiscuous mode [ 37.902359][ T3322] veth0_macvtap: entered promiscuous mode [ 37.918073][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.929299][ T3317] veth0_macvtap: entered promiscuous mode [ 37.942623][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.952129][ T3322] veth1_macvtap: entered promiscuous mode [ 37.960713][ T3317] veth1_macvtap: entered promiscuous mode [ 37.970941][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.979697][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.988537][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.997310][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.028256][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.043866][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.063429][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.075270][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.097162][ T3322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.106026][ T3322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.114831][ T3322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.123596][ T3322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.144069][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.152825][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.161588][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.170428][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.377758][ T3503] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 38.483927][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 38.483942][ T29] audit: type=1400 audit(1753109605.103:102): avc: denied { create } for pid=3506 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.510454][ T29] audit: type=1400 audit(1753109605.113:103): avc: denied { write } for pid=3506 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.530637][ T29] audit: type=1400 audit(1753109605.113:104): avc: denied { read } for pid=3506 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.550729][ T29] audit: type=1400 audit(1753109605.113:105): avc: denied { ioctl } for pid=3506 comm="syz.2.12" path="socket:[5173]" dev="sockfs" ino=5173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.601883][ T3509] loop2: detected capacity change from 0 to 128 [ 38.622369][ T29] audit: type=1400 audit(1753109605.283:106): avc: denied { mount } for pid=3508 comm="syz.2.13" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.717270][ T3513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.728543][ T29] audit: type=1400 audit(1753109605.383:107): avc: denied { read write } for pid=3511 comm="syz.4.15" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.751815][ T29] audit: type=1400 audit(1753109605.383:108): avc: denied { open } for pid=3511 comm="syz.4.15" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.763877][ T3513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.775015][ T29] audit: type=1400 audit(1753109605.383:109): avc: denied { ioctl } for pid=3511 comm="syz.4.15" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.912742][ T29] audit: type=1400 audit(1753109605.573:110): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.918537][ T154] kworker/u8:6: attempt to access beyond end of device [ 38.918537][ T154] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 38.946232][ T154] kworker/u8:6: attempt to access beyond end of device [ 38.946232][ T154] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 38.961716][ T154] kworker/u8:6: attempt to access beyond end of device [ 38.961716][ T154] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 38.976355][ T154] kworker/u8:6: attempt to access beyond end of device [ 38.976355][ T154] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 38.990822][ T154] kworker/u8:6: attempt to access beyond end of device [ 38.990822][ T154] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 39.004518][ T154] kworker/u8:6: attempt to access beyond end of device [ 39.004518][ T154] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 39.018523][ T154] kworker/u8:6: attempt to access beyond end of device [ 39.018523][ T154] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 39.034853][ T154] kworker/u8:6: attempt to access beyond end of device [ 39.034853][ T154] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 39.048364][ T154] kworker/u8:6: attempt to access beyond end of device [ 39.048364][ T154] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 39.074912][ T154] kworker/u8:6: attempt to access beyond end of device [ 39.074912][ T154] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 39.122103][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.129542][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.136985][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.144409][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.151833][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.159337][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.166874][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.174334][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.176331][ T29] audit: type=1400 audit(1753109605.723:111): avc: denied { map_read map_write } for pid=3514 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.181711][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.208740][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.216157][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.223857][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.231332][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.238782][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.246184][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.253569][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.261023][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.268493][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.275909][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.283305][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.290719][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.298175][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.305608][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.313007][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.320407][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.327819][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.335289][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.342740][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.350189][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.357593][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.365007][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.372493][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.380073][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.387534][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.394953][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.402364][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.409776][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.417276][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.424690][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.432121][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.439537][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.446944][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.454343][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.466042][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.522936][ T3535] loop4: detected capacity change from 0 to 256 [ 39.530394][ T3535] ======================================================= [ 39.530394][ T3535] WARNING: The mand mount option has been deprecated and [ 39.530394][ T3535] and is ignored by this kernel. Remove the mand [ 39.530394][ T3535] option from the mount to silence this warning. [ 39.530394][ T3535] ======================================================= [ 39.921600][ T3531] fido_id[3531]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.974424][ T3546] loop0: detected capacity change from 0 to 512 [ 39.989814][ T3549] rdma_op ffff888119d85980 conn xmit_rdma 0000000000000000 [ 40.057893][ T3546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.110183][ T3546] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.224330][ T3546] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.25: corrupted xattr block 33: e_value out of bounds [ 40.301974][ T3546] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 40.807629][ T3566] block device autoloading is deprecated and will be removed. [ 40.840322][ T3567] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.25: corrupted xattr block 33: e_value out of bounds [ 40.939711][ T3546] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.25: corrupted xattr block 33: e_value out of bounds [ 40.953478][ T3546] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 40.970737][ T3567] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 41.122954][ T3573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.151702][ T3573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.176900][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.344192][ T3580] loop0: detected capacity change from 0 to 256 [ 41.368430][ T3580] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.377215][ T3580] FAT-fs (loop0): Filesystem has been set read-only [ 41.403569][ T3580] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.414051][ T3580] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.423394][ T3580] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.437156][ T3580] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.446334][ T3580] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.456056][ T3580] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.465220][ T3580] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.504483][ T3580] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.513238][ T3580] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 41.777388][ T3584] loop2: detected capacity change from 0 to 32768 [ 41.827660][ T3584] loop2: p1 p2 p3 < p5 p6 p7 > [ 41.833550][ T3584] loop2: p2 size 16775168 extends beyond EOD, truncated [ 41.855811][ T3584] loop2: p5 start 4294970168 is beyond EOD, truncated [ 41.890862][ T3596] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.908816][ T3599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 42.001339][ T3596] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 42.026675][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.035128][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 42.043302][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 42.059279][ T3602] udevd[3602]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 42.061654][ T3601] udevd[3601]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 42.171738][ T3596] syz.3.40 (3596) used greatest stack depth: 10712 bytes left [ 42.204101][ T3611] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 42.210812][ T3611] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 42.218509][ T3611] vhci_hcd vhci_hcd.0: Device attached [ 42.235378][ T3611] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.243458][ T3612] vhci_hcd: connection closed [ 42.249753][ T3614] siw: device registration error -23 [ 42.263714][ T12] vhci_hcd: stop threads [ 42.268060][ T12] vhci_hcd: release socket [ 42.272532][ T12] vhci_hcd: disconnect device [ 42.387816][ T3625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.435614][ T3625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.462222][ T3629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.53'. [ 42.476840][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 42.565850][ T3636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.55'. [ 42.708007][ T3640] siw: device registration error -23 [ 42.897747][ T3649] mmap: syz.2.60 (3649) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.045916][ T3647] siw: device registration error -23 [ 43.229191][ T3669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.67'. [ 43.255917][ T3666] usb usb1: usbfs: process 3666 (syz.0.65) did not claim interface 0 before use [ 43.265763][ T3669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 43.335512][ T3675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.69'. [ 43.501298][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 43.501314][ T29] audit: type=1326 audit(1753109610.153:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe17d085967 code=0x7ffc0000 [ 43.530730][ T29] audit: type=1326 audit(1753109610.153:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe17d02ab89 code=0x7ffc0000 [ 43.554331][ T29] audit: type=1326 audit(1753109610.153:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe17d085967 code=0x7ffc0000 [ 43.577660][ T29] audit: type=1326 audit(1753109610.153:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe17d02ab89 code=0x7ffc0000 [ 43.600749][ T29] audit: type=1326 audit(1753109610.153:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe17d085967 code=0x7ffc0000 [ 43.624441][ T29] audit: type=1326 audit(1753109610.153:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe17d02ab89 code=0x7ffc0000 [ 43.647874][ T29] audit: type=1326 audit(1753109610.153:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe17d085967 code=0x7ffc0000 [ 43.670915][ T29] audit: type=1326 audit(1753109610.153:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe17d02ab89 code=0x7ffc0000 [ 43.694060][ T29] audit: type=1326 audit(1753109610.153:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe17d085967 code=0x7ffc0000 [ 43.717418][ T29] audit: type=1326 audit(1753109610.153:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe17d02ab89 code=0x7ffc0000 [ 43.924968][ T3694] siw: device registration error -23 [ 44.195929][ T3706] loop4: detected capacity change from 0 to 256 [ 44.216459][ T3704] loop1: detected capacity change from 0 to 128 [ 44.225069][ T3707] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 44.246016][ T3706] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.254787][ T3706] FAT-fs (loop4): Filesystem has been set read-only [ 44.273800][ T3706] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.292660][ T3696] loop2: detected capacity change from 0 to 32768 [ 44.332616][ T3706] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.373746][ T3706] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.387725][ T3706] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.404072][ T3696] loop2: p1 p2 p3 < p5 p6 p7 > [ 44.409472][ T3696] loop2: p2 size 16775168 extends beyond EOD, truncated [ 44.417422][ T3696] loop2: p5 start 4294970168 is beyond EOD, truncated [ 44.437150][ T3706] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.540665][ T3706] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.595097][ T3706] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.618837][ T3722] loop2: detected capacity change from 0 to 512 [ 44.685218][ T3722] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.84: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 44.692811][ T3706] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.733701][ T3706] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 44.762174][ T3722] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.84: Bad quota inode: 3, type: 0 [ 44.868452][ T3722] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 44.913658][ T3737] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 44.920205][ T3737] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 44.927934][ T3737] vhci_hcd vhci_hcd.0: Device attached [ 44.935738][ T3722] EXT4-fs (loop2): mount failed [ 44.998684][ T3743] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 45.016101][ T3738] vhci_hcd: connection closed [ 45.023967][ T58] vhci_hcd: stop threads [ 45.033070][ T58] vhci_hcd: release socket [ 45.037543][ T58] vhci_hcd: disconnect device [ 45.155713][ T3746] usb usb1: usbfs: process 3746 (syz.1.93) did not claim interface 0 before use [ 45.186254][ T3747] loop4: detected capacity change from 0 to 128 [ 45.512262][ T3758] loop3: detected capacity change from 0 to 764 [ 45.519100][ T3761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.583925][ T3761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.865626][ T3779] loop4: detected capacity change from 0 to 128 [ 45.879185][ T3781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.106'. [ 45.974942][ T3788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 46.026562][ T3791] loop1: detected capacity change from 0 to 256 [ 46.055893][ T3791] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.064779][ T3791] FAT-fs (loop1): Filesystem has been set read-only [ 46.102360][ T3791] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.165249][ T3791] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.203710][ T3791] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.221197][ T3798] siw: device registration error -23 [ 46.232174][ T3791] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.257377][ T3801] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 46.263975][ T3801] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 46.271721][ T3801] vhci_hcd vhci_hcd.0: Device attached [ 46.274479][ T3791] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.299497][ T3804] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 46.313707][ T3791] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.322931][ T3802] vhci_hcd: connection closed [ 46.323216][ T12] vhci_hcd: stop threads [ 46.332227][ T12] vhci_hcd: release socket [ 46.332770][ T3791] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.336793][ T12] vhci_hcd: disconnect device [ 46.383760][ T3791] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.413156][ T3791] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 46.820084][ T3809] usb usb1: usbfs: process 3809 (syz.4.116) did not claim interface 0 before use [ 46.882896][ T3814] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 46.944497][ T3818] loop4: detected capacity change from 0 to 128 [ 47.045999][ T3827] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.115057][ T3819] netlink: 'syz.0.117': attribute type 10 has an invalid length. [ 47.122923][ T3819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.117'. [ 47.134042][ T3819] dummy0: entered promiscuous mode [ 47.141206][ T3819] bridge0: port 3(dummy0) entered blocking state [ 47.147707][ T3819] bridge0: port 3(dummy0) entered disabled state [ 47.163926][ T3819] dummy0: entered allmulticast mode [ 47.184263][ T3819] bridge0: port 3(dummy0) entered blocking state [ 47.190761][ T3819] bridge0: port 3(dummy0) entered forwarding state [ 47.210044][ T3814] syz.0.117 (3814) used greatest stack depth: 10192 bytes left [ 47.293229][ T3830] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 47.381378][ T3838] siw: device registration error -23 [ 47.431521][ T3841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.126'. [ 47.491952][ T3843] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 47.498538][ T3843] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 47.506344][ T3843] vhci_hcd vhci_hcd.0: Device attached [ 47.514120][ T3843] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.521908][ T3844] vhci_hcd: connection closed [ 47.522255][ T3841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 47.522260][ T58] vhci_hcd: stop threads [ 47.540084][ T58] vhci_hcd: release socket [ 47.544609][ T58] vhci_hcd: disconnect device [ 47.644587][ T3849] loop2: detected capacity change from 0 to 256 [ 47.663015][ T3849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.671996][ T3849] FAT-fs (loop2): Filesystem has been set read-only [ 47.698446][ T3849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.720559][ T3849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.739389][ T3849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.758266][ T3849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.777159][ T3849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.814146][ T3852] loop1: detected capacity change from 0 to 256 [ 47.814792][ T3849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.831644][ T3852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.840482][ T3852] FAT-fs (loop1): Filesystem has been set read-only [ 47.846196][ T3849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.865751][ T3849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.884837][ T3852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.923708][ T3852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.933624][ T3849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.942754][ T3852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.963102][ T3852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.993290][ T3852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.023810][ T3852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.049337][ T3852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.068175][ T3852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.088149][ T3852] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.148260][ T3871] loop4: detected capacity change from 0 to 256 [ 48.164657][ T3871] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.173420][ T3871] FAT-fs (loop4): Filesystem has been set read-only [ 48.182804][ T3871] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.192013][ T3871] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.202903][ T3871] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.293967][ T3871] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.333349][ T3871] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.363722][ T3871] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.401317][ T3871] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.446217][ T3875] siw: device registration error -23 [ 48.453788][ T3871] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.488158][ T3871] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 48.544238][ T29] kauditd_printk_skb: 1038 callbacks suppressed [ 48.544250][ T29] audit: type=1400 audit(1753109615.213:1487): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 48.583728][ T3879] syz.3.141 uses obsolete (PF_INET,SOCK_PACKET) [ 48.625584][ T29] audit: type=1326 audit(1753109615.253:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.4.138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ee6cfe9a9 code=0x0 [ 48.648345][ T29] audit: type=1400 audit(1753109615.273:1489): avc: denied { ioctl } for pid=3878 comm="syz.3.141" path="socket:[4829]" dev="sockfs" ino=4829 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.699987][ C1] hrtimer: interrupt took 31586 ns [ 48.735310][ T3887] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 48.852912][ T29] audit: type=1326 audit(1753109615.503:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe17d085967 code=0x7ffc0000 [ 48.876422][ T29] audit: type=1326 audit(1753109615.503:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe17d02ab89 code=0x7ffc0000 [ 48.899672][ T29] audit: type=1326 audit(1753109615.503:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17d08e9a9 code=0x7ffc0000 [ 48.923013][ T29] audit: type=1326 audit(1753109615.503:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe17d085967 code=0x7ffc0000 [ 48.946340][ T29] audit: type=1326 audit(1753109615.503:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe17d02ab89 code=0x7ffc0000 [ 48.969640][ T29] audit: type=1326 audit(1753109615.503:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe17d08d310 code=0x7ffc0000 [ 48.993466][ T29] audit: type=1326 audit(1753109615.503:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3885 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe17d085967 code=0x7ffc0000 [ 49.229622][ T3899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.147'. [ 49.308171][ T3903] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 49.314746][ T3903] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 49.322478][ T3903] vhci_hcd vhci_hcd.0: Device attached [ 49.352967][ T3903] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 49.366385][ T3910] loop3: detected capacity change from 0 to 256 [ 49.373569][ T3904] vhci_hcd: connection closed [ 49.373883][ T58] vhci_hcd: stop threads [ 49.383283][ T58] vhci_hcd: release socket [ 49.387806][ T58] vhci_hcd: disconnect device [ 49.395611][ T3910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 49.402607][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.404409][ T3910] FAT-fs (loop3): Filesystem has been set read-only [ 49.411811][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.425900][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.428621][ T3910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 49.433381][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.445210][ T3910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 49.449463][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.465759][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.473171][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.480599][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.488021][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.495548][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.502993][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.510498][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.517950][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.525499][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.532915][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.540389][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.547827][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.555307][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.562801][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.570281][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.577705][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.585194][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.592693][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.600152][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.607610][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.615098][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.622580][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.630757][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.638450][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.645897][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.653335][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.660763][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.668356][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.675827][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.678156][ T3915] netlink: 'syz.1.150': attribute type 1 has an invalid length. [ 49.683207][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.698266][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.705737][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.713328][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.720763][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.728216][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.735654][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.743133][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.750562][ T3162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.758970][ T3910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 49.767861][ T3910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 49.776750][ T3910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 49.785641][ T3910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 49.794453][ T3910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 49.803349][ T3910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 49.812165][ T3910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 49.822196][ T3162] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 49.997688][ T3908] loop1: detected capacity change from 0 to 32768 [ 50.030934][ T3922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 50.045677][ T3908] loop1: p1 p2 p3 < p5 p6 p7 > [ 50.051697][ T3908] loop1: p2 size 16775168 extends beyond EOD, truncated [ 50.065848][ T3908] loop1: p5 start 4294970168 is beyond EOD, truncated [ 50.164181][ T3929] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.253363][ T3937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.161'. [ 50.274047][ T3935] Zero length message leads to an empty skb [ 50.396714][ T3950] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 50.403352][ T3950] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 50.411102][ T3950] vhci_hcd vhci_hcd.0: Device attached [ 50.426691][ T3950] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.434851][ T3951] vhci_hcd: connection closed [ 50.450086][ T31] vhci_hcd: stop threads [ 50.459186][ T31] vhci_hcd: release socket [ 50.463634][ T31] vhci_hcd: disconnect device [ 50.572333][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 50.717868][ T3964] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.889054][ T3970] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 51.036252][ T3976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 51.047956][ T3964] netlink: 'syz.4.170': attribute type 10 has an invalid length. [ 51.055818][ T3964] netlink: 40 bytes leftover after parsing attributes in process `syz.4.170'. [ 51.109243][ T3964] dummy0: entered promiscuous mode [ 51.129426][ T3964] bridge0: port 3(dummy0) entered blocking state [ 51.136090][ T3964] bridge0: port 3(dummy0) entered disabled state [ 51.157752][ T3964] dummy0: entered allmulticast mode [ 51.166011][ T3980] loop2: detected capacity change from 0 to 256 [ 51.206084][ T3980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.214888][ T3980] FAT-fs (loop2): Filesystem has been set read-only [ 51.227865][ T3964] bridge0: port 3(dummy0) entered blocking state [ 51.234298][ T3964] bridge0: port 3(dummy0) entered forwarding state [ 51.239616][ T3980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.295338][ T3980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.314758][ T3980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.327341][ T3980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.383054][ T3980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.428643][ T3980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.459863][ T3993] lo speed is unknown, defaulting to 1000 [ 51.505077][ T3999] siw: device registration error -23 [ 51.513755][ T3993] lo speed is unknown, defaulting to 1000 [ 51.519771][ T3993] lo speed is unknown, defaulting to 1000 [ 51.567443][ T3980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.583906][ T4004] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 51.590542][ T4004] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 51.598474][ T4004] vhci_hcd vhci_hcd.0: Device attached [ 51.626580][ T3993] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 51.640751][ T3980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.661389][ T4009] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.683830][ T3980] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 51.796729][ T3993] lo speed is unknown, defaulting to 1000 [ 51.903271][ T3993] lo speed is unknown, defaulting to 1000 [ 51.933849][ T3993] lo speed is unknown, defaulting to 1000 [ 51.999936][ T3993] lo speed is unknown, defaulting to 1000 [ 52.005906][ T4005] vhci_hcd: connection closed [ 52.043872][ T31] vhci_hcd: stop threads [ 52.052913][ T31] vhci_hcd: release socket [ 52.057415][ T31] vhci_hcd: disconnect device [ 52.076834][ T3993] lo speed is unknown, defaulting to 1000 [ 52.093377][ T4015] netlink: 'syz.1.180': attribute type 2 has an invalid length. [ 52.101381][ T4015] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.180'. [ 52.517455][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 52.877972][ T4029] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 53.024451][ T4032] lo speed is unknown, defaulting to 1000 [ 53.126714][ T4041] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 53.133404][ T4041] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 53.141160][ T4041] vhci_hcd vhci_hcd.0: Device attached [ 53.141321][ T4045] loop4: detected capacity change from 0 to 2048 [ 53.152665][ T4029] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 53.160891][ T4029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.190'. [ 53.201705][ T4041] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.209558][ T4043] vhci_hcd: connection closed [ 53.209757][ T12] vhci_hcd: stop threads [ 53.218783][ T12] vhci_hcd: release socket [ 53.223232][ T12] vhci_hcd: disconnect device [ 53.268405][ T4051] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 53.284774][ T4049] netlink: 'syz.3.197': attribute type 13 has an invalid length. [ 53.309693][ T4049] gretap0: refused to change device tx_queue_len [ 53.327198][ T4045] loop4: p1 p3 p4 [ 53.334400][ T4049] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 53.356137][ T4045] loop4: p4 size 589824 extends beyond EOD, truncated [ 53.370244][ T4053] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 53.472399][ T4053] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 53.480224][ T4053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.199'. [ 53.658991][ T4073] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 53.762688][ T4079] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 53.769367][ T4079] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 53.777112][ T4079] vhci_hcd vhci_hcd.0: Device attached [ 53.798824][ T4089] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.824372][ T4092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.210'. [ 53.824868][ T4084] vhci_hcd: connection closed [ 53.834615][ T31] vhci_hcd: stop threads [ 53.843639][ T31] vhci_hcd: release socket [ 53.848113][ T31] vhci_hcd: disconnect device [ 53.871892][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 53.897217][ T4097] loop3: detected capacity change from 0 to 2048 [ 53.943239][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 53.943256][ T29] audit: type=1326 audit(1753109620.603:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17ef2e9a9 code=0x7ffc0000 [ 53.982159][ T4101] usb usb1: usbfs: process 4101 (syz.0.213) did not claim interface 0 before use [ 53.983947][ T4097] loop3: p1 < > p4 [ 53.996823][ T4097] loop3: p4 size 8388608 extends beyond EOD, truncated [ 54.023729][ T29] audit: type=1326 audit(1753109620.613:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17ef2e9a9 code=0x7ffc0000 [ 54.047107][ T29] audit: type=1326 audit(1753109620.613:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff17ef2e9a9 code=0x7ffc0000 [ 54.070509][ T29] audit: type=1326 audit(1753109620.613:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17ef2e9a9 code=0x7ffc0000 [ 54.093906][ T29] audit: type=1326 audit(1753109620.613:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17ef2e9a9 code=0x7ffc0000 [ 54.117324][ T29] audit: type=1326 audit(1753109620.613:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff17ef2e9a9 code=0x7ffc0000 [ 54.140707][ T29] audit: type=1326 audit(1753109620.613:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17ef2e9a9 code=0x7ffc0000 [ 54.164082][ T29] audit: type=1326 audit(1753109620.613:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17ef2e9a9 code=0x7ffc0000 [ 54.187389][ T29] audit: type=1326 audit(1753109620.613:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17ef2e9a9 code=0x7ffc0000 [ 54.210738][ T29] audit: type=1326 audit(1753109620.613:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff17ef2e9a9 code=0x7ffc0000 [ 54.323849][ T4114] siw: device registration error -23 [ 54.364300][ T4118] loop1: detected capacity change from 0 to 128 [ 54.365466][ T4119] loop4: detected capacity change from 0 to 256 [ 54.431472][ T4129] siw: device registration error -23 [ 54.431861][ T4119] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.445567][ T4119] FAT-fs (loop4): Filesystem has been set read-only [ 54.449367][ T4132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.224'. [ 54.462349][ T4119] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.482934][ T4119] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.517176][ T4119] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.529542][ T4126] siw: device registration error -23 [ 54.566296][ T4119] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.584516][ T4119] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.594086][ T4144] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 54.608100][ T4119] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.643741][ T4119] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.672762][ T4119] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.693591][ T4119] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 54.914708][ T4154] lo speed is unknown, defaulting to 1000 [ 55.264085][ T4144] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 55.271927][ T4144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.227'. [ 55.345154][ T4190] loop4: detected capacity change from 0 to 2048 [ 55.394832][ T4144] dummy0: entered promiscuous mode [ 55.424114][ T4190] loop4: p1 < > p4 [ 55.435301][ T4190] loop4: p4 size 8388608 extends beyond EOD, truncated [ 55.443191][ T4144] bridge0: port 3(dummy0) entered blocking state [ 55.449600][ T4144] bridge0: port 3(dummy0) entered disabled state [ 55.484986][ T4185] siw: device registration error -23 [ 55.542737][ T4200] loop4: detected capacity change from 0 to 128 [ 55.553158][ T4144] dummy0: entered allmulticast mode [ 55.631749][ T4144] bridge0: port 3(dummy0) entered blocking state [ 55.638390][ T4144] bridge0: port 3(dummy0) entered forwarding state [ 55.765591][ T4209] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 56.424773][ T4223] siw: device registration error -23 [ 56.716770][ T4232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.257'. [ 56.786953][ T4201] syz.2.245 (4201) used greatest stack depth: 7160 bytes left [ 56.977070][ T4248] loop2: detected capacity change from 0 to 256 [ 57.005620][ T4248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.014439][ T4248] FAT-fs (loop2): Filesystem has been set read-only [ 57.022172][ T4248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.045857][ T4248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.079394][ T4252] loop0: detected capacity change from 0 to 2048 [ 57.135154][ T4248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.161558][ T4248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.180546][ T4248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.195538][ T4248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.219684][ T4248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.238604][ T4248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.254055][ T4234] netlink: 'syz.4.258': attribute type 2 has an invalid length. [ 57.261800][ T4234] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.258'. [ 57.263762][ T4248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 57.283832][ T4252] loop0: p1 p3 p4 [ 57.311317][ T4252] loop0: p4 size 589824 extends beyond EOD, truncated [ 57.533590][ T4264] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 57.969775][ T4251] syz.4.258 (4251) used greatest stack depth: 6064 bytes left [ 58.016340][ T4269] siw: device registration error -23 [ 58.283070][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 58.624622][ T4286] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 58.658320][ T4291] loop2: detected capacity change from 0 to 256 [ 58.685634][ T4291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 58.693529][ T4286] lo speed is unknown, defaulting to 1000 [ 58.694352][ T4291] FAT-fs (loop2): Filesystem has been set read-only [ 58.695442][ T4291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 58.744151][ T4291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 58.760131][ T4291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 58.771839][ T4286] netlink: 'syz.1.277': attribute type 10 has an invalid length. [ 58.779176][ T4291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 58.779612][ T4286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.277'. [ 58.808669][ T4291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 58.813686][ T4286] dummy0: entered promiscuous mode [ 58.832895][ T4291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 58.842388][ T4286] bridge0: port 3(dummy0) entered blocking state [ 58.848819][ T4286] bridge0: port 3(dummy0) entered disabled state [ 58.856522][ T4286] dummy0: entered allmulticast mode [ 58.863925][ T4286] bridge0: port 3(dummy0) entered blocking state [ 58.870388][ T4286] bridge0: port 3(dummy0) entered forwarding state [ 58.872137][ T4291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 58.906182][ T4292] siw: device registration error -23 [ 58.915833][ T4291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 58.947649][ T4301] loop0: detected capacity change from 0 to 2048 [ 58.961811][ T4291] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 59.005279][ T4301] loop0: p1 < > p4 [ 59.058116][ T4301] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.067804][ T4306] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 59.074354][ T4306] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 59.082155][ T4306] vhci_hcd vhci_hcd.0: Device attached [ 59.146653][ T4306] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 59.163752][ T4308] vhci_hcd: connection closed [ 59.164060][ T12] vhci_hcd: stop threads [ 59.173034][ T12] vhci_hcd: release socket [ 59.177497][ T12] vhci_hcd: disconnect device [ 59.216283][ T4314] siw: device registration error -23 [ 59.253470][ T4316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.286'. [ 59.264066][ T4312] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 59.270621][ T4312] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 59.270669][ T4312] vhci_hcd vhci_hcd.0: Device attached [ 59.423612][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 59.423640][ T29] audit: type=1400 audit(1753109626.083:2111): avc: denied { read } for pid=4319 comm="syz.0.289" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.452821][ T29] audit: type=1400 audit(1753109626.083:2112): avc: denied { open } for pid=4319 comm="syz.0.289" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.507874][ T4312] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 59.526904][ T29] audit: type=1400 audit(1753109626.163:2113): avc: denied { ioctl } for pid=4319 comm="syz.0.289" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.617724][ T3417] usb 8-1: SetAddress Request (2) to port 0 [ 59.630500][ T3417] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 59.790119][ T4317] vhci_hcd: connection closed [ 59.790470][ T2135] vhci_hcd: stop threads [ 59.799506][ T2135] vhci_hcd: release socket [ 59.804025][ T2135] vhci_hcd: disconnect device [ 59.847389][ T29] audit: type=1400 audit(1753109626.353:2114): avc: denied { create } for pid=4319 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.867381][ T29] audit: type=1400 audit(1753109626.353:2115): avc: denied { write } for pid=4319 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.871494][ T3417] usb 8-1: enqueue for inactive port 0 [ 59.887282][ T29] audit: type=1326 audit(1753109626.503:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17d08e9a9 code=0x7ffc0000 [ 59.901539][ T4329] loop0: detected capacity change from 0 to 512 [ 59.916016][ T29] audit: type=1326 audit(1753109626.503:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17d08e9a9 code=0x7ffc0000 [ 59.925488][ T3417] usb 8-1: enqueue for inactive port 0 [ 59.945541][ T29] audit: type=1326 audit(1753109626.503:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fe17d08e9a9 code=0x7ffc0000 [ 59.974370][ T29] audit: type=1326 audit(1753109626.503:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17d08e9a9 code=0x7ffc0000 [ 59.995602][ T3417] usb 8-1: enqueue for inactive port 0 [ 59.997654][ T29] audit: type=1326 audit(1753109626.503:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17d08e9a9 code=0x7ffc0000 [ 60.064550][ T4329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.103788][ T3417] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 60.133713][ T3417] usb 8-1: enqueue for inactive port 0 [ 60.141323][ T3417] usb 8-1: enqueue for inactive port 0 [ 60.166817][ T4329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.262561][ T3417] usb 8-1: enqueue for inactive port 0 [ 60.340611][ T4356] loop1: detected capacity change from 0 to 512 [ 60.369156][ T4358] siw: device registration error -23 [ 60.374727][ T2135] ================================================================== [ 60.382836][ T2135] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid [ 60.390602][ T2135] [ 60.392928][ T2135] write to 0xffff88810a18baa8 of 4 bytes by interrupt on cpu 0: [ 60.400561][ T2135] __bpf_get_stackid+0x76b/0x800 [ 60.405506][ T2135] bpf_get_stackid+0xee/0x120 [ 60.410192][ T2135] bpf_get_stackid_raw_tp+0xf6/0x120 [ 60.415485][ T2135] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 60.420958][ T2135] bpf_trace_run2+0x107/0x1c0 [ 60.425650][ T2135] kfree+0x27b/0x320 [ 60.429567][ T2135] shmem_free_in_core_inode+0x50/0x80 [ 60.434977][ T2135] i_callback+0x36/0x70 [ 60.439158][ T2135] rcu_core+0x5a5/0xc00 [ 60.443325][ T2135] rcu_core_si+0xd/0x20 [ 60.447491][ T2135] handle_softirqs+0xb7/0x290 [ 60.452197][ T2135] run_ksoftirqd+0x1c/0x30 [ 60.456622][ T2135] smpboot_thread_fn+0x328/0x530 [ 60.461573][ T2135] kthread+0x489/0x510 [ 60.465646][ T2135] ret_from_fork+0xda/0x150 [ 60.470155][ T2135] ret_from_fork_asm+0x1a/0x30 [ 60.474929][ T2135] [ 60.477255][ T2135] read to 0xffff88810a18baa8 of 4 bytes by task 2135 on cpu 1: [ 60.484802][ T2135] __bpf_get_stackid+0x287/0x800 [ 60.489762][ T2135] bpf_get_stackid+0xee/0x120 [ 60.494467][ T2135] bpf_get_stackid_raw_tp+0xf6/0x120 [ 60.499765][ T2135] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 60.505229][ T2135] bpf_trace_run2+0x107/0x1c0 [ 60.509948][ T2135] kfree+0x27b/0x320 [ 60.513860][ T2135] skb_free_head+0xb8/0x150 [ 60.518368][ T2135] skb_release_data+0x33b/0x370 [ 60.523244][ T2135] __kfree_skb+0x44/0x150 [ 60.527601][ T2135] consume_skb+0x49/0x150 [ 60.531946][ T2135] nsim_dev_trap_report_work+0x533/0x630 [ 60.537586][ T2135] process_scheduled_works+0x4cb/0x9d0 [ 60.543073][ T2135] worker_thread+0x582/0x770 [ 60.547687][ T2135] kthread+0x489/0x510 [ 60.551760][ T2135] ret_from_fork+0xda/0x150 [ 60.556286][ T2135] ret_from_fork_asm+0x1a/0x30 [ 60.561058][ T2135] [ 60.563392][ T2135] value changed: 0xc0b24379 -> 0x628911eb [ 60.569125][ T2135] [ 60.571456][ T2135] Reported by Kernel Concurrency Sanitizer on: [ 60.577615][ T2135] CPU: 1 UID: 0 PID: 2135 Comm: kworker/u8:8 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 60.588466][ T2135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.598527][ T2135] Workqueue: events_unbound nsim_dev_trap_report_work [ 60.605310][ T2135] ================================================================== [ 60.645522][ T4356] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.658670][ T4356] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.676431][ T4361] loop0: detected capacity change from 0 to 512 [ 60.755068][ T4356] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.298: bg 0: block 435: padding at end of block bitmap is not set [ 60.769835][ T4361] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.300: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 60.778882][ T4356] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.794267][ T4361] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.300: Bad quota inode: 3, type: 0 [ 60.813471][ T4356] EXT4-fs (loop1): 1 truncate cleaned up [ 60.821822][ T4356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.834215][ T4361] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 60.864055][ T4361] EXT4-fs (loop0): mount failed [ 61.090306][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.553949][ T3417] usb usb8-port1: attempt power cycle [ 63.374692][ T3417] usb usb8-port1: unable to enumerate USB device