last executing test programs: 9.165770272s ago: executing program 1 (id=2900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000b00)=ANY=[@ANYBLOB='showassoc,map=acorn,showassoc,utf8,check=relaxed,norock,gid=', @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRESHEX=0xee01, @ANYBLOB=',unh\t\x00\x00\x00\x00\x00\x00\x00,session}0x0000000000000049,sbsector=0x0000000080000001,norock,uid=', @ANYRES64=0x0, @ANYBLOB="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"], 0x9, 0x943, &(0x7f0000002040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}]}}]}, 0x9c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500040000002020207b1a31616474abb4a4dbe248d1f8ff00000000bfa100000000000007010000f8ffffffb70200008500000070000000850000000500"/96], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101201) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) 8.278533684s ago: executing program 1 (id=2913): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 8.222973148s ago: executing program 1 (id=2914): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7}, 0x18) socket$kcm(0x10, 0x2, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10000006) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0083000000000000140012800a000100767863616e0000000400028098001a"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000004) r4 = epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x1a) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x60000002}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) 7.189818981s ago: executing program 1 (id=2925): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x476, &(0x7f0000000580)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ95725n/zpvd2ZndDaBnjaabLGJLRPwREcO17PITRmt/rl05N/3PlXPTWVQqb/6dVc+7euXcdHlqeb/NtUylEjGUkkNNyr3wTsTU3Nzs6SI/vnjy/fGFM2efO35y6tjssdlTk4cPH9i/e/DQ5MG24suLvymuqzs/mt+149W3L74+feTiuz9/k+q7pTheH8ctSdE2GK09uo0eTTdPtlXYHeXXdLO1bkfW3/rksdtQIVavLyJScw1U+/9w9MXGpWPD8cqnXa0csK4qlUql2etz4XwF+B/Lots1ALqjfKFP73/L7TYNPe4Il1+svQFKcV8rttqR/qW5g4GG97edNBoRR87/+2XaohPzEAAAN/F9Gv8822z8l8cDdefdU6yhjETEvRGxLSLui4jtEXF/RPXcByPioTWW37hCcuP4J790S4GtUhr/vVCsbS0f/5WjvxjpK3Jbq/EPZEePz83uKx6TvTEwlPITK5Txw8u/f16mNzQcqx//pS2VX44Fi3pc6m+YoJuZWpxqN+7S5U8idvY3iz+Lchkni4gdEbHzFss4/vTXu1odu3n8K1hhnWm1Kl9FPFVr//OxLP7rTZW1XJ+ceP7Q5MHxDTE3u2+8vCpu9MtvF95oVX5b8XdAav9NTa//pVXgkWxDxMKZsyeq67ULay/jwp+f1fXpZavLKf7824g1X/+D2VvV9GCx78OpxcXTExGD2Ws37p+8ft8yX56f4t+7p3n/31ZX44cjIl3EuyPikWIRN7XdYxHxeETsWSH+n1564r1Wx1q3/wqz8h2U4p+5WftHffuvPdF34sfv1h5/KbX/gWpqb7FnNc9/q61gO48dAAAA3C3y6mfgs3xsKZ3nY2O1z/Bvj0353PzC4jNH5z84NVP7rPxIDOTlTNdw3XzoRDE3XOYnG/L7i3njL/o2VvNj0/NzM90OHnrc5hb9P/mrr9u1A9ZdB9bRgLuU/g+9S/+H3qX/Q+/S/6F3Nev/H3ehHsDt5/Ufepf+D71L/4fepf9DT2r53fi8ra/8dzlR/nbCnVKfLiU2rmcRkXc/wNaJ8sdbOvYPs66F058u4y3rWMRQ00NdfFICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADooP8CAAD//+Qb3n0=") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x48, &(0x7f0000000540)=[&(0x7f0000000280)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x200}]) 6.128982387s ago: executing program 1 (id=2933): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7}, 0x18) socket$kcm(0x10, 0x2, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10000006) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0083000000000000140012800a000100767863616e0000000400028098001a"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000004) r4 = epoll_create1(0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x1a) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x60000002}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) 5.929299602s ago: executing program 1 (id=2936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x91, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.928585722s ago: executing program 32 (id=2936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x91, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.054569585s ago: executing program 3 (id=2989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0e80001cffffffffffffbbbbbbbbbbbb89020000"], 0xf2) 1.928623214s ago: executing program 3 (id=2992): r0 = open(&(0x7f0000000000)='./file0\x00', 0x181000, 0x180) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x29000014}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x26c, r1, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x57}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xd99}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xfc, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe5, 0x2, "b8e4c2910a976e1512c0d785eec7f18caf7d255bcd7ec69743eb2b560e7d3a35eecfb13d1a190c2b54dbf9529c8cdbc69a3d8b33fc73f466cbf3273152fc9fe6e612ab2c2423a8a5a8a6572b9aa5887a35422aaeecd2731313d19f85623c4cb49e0d24879b19ffb7622ad1f1ff82f73176d9a5f25aa628bdf1e770da39fa1fc24c903d9b06b42831bce44be2c2cf3b7ebf71991f6fb80b8126aeb2b4b971b6365c5339402b3db79447c324eef28505ea579f4684e7dc40566d174f91af8c09e71be0244a24d232184a49e4c5abcb292f8d46480da77a11de84b7d64130f8347ede"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xcb7b}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10c, 0x3, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x101, 0x1, "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"}}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40841}, 0x8008890) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, 0x453, 0x10, 0x70bd2d, 0x25dfdbfd, "39ec246d78eda43b46866825d364607cb1aea4581a41cbbe513d6c688ad4ea8f5a5a244ac30c78cea11ffa16c89df013fd0a75e2cce9777b47613ad8af6776a3506be00093debb4d0545b41c6dde35053965076370e50cf66595c608211ca4a9cdc68e81f79139dc5a042d2e9b900acd688e4e1952c1a9fea644d9f156b05155abf45c86032fa39875e7f46cf4c14ebf125b22d6cb7e71bb590580b63f2e74b21513ce8e92307d441c7e01b982dea250bfce227c6f259cb2c24a9000cd46f2e69b7a6833", ["", "", "", "", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x448a0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc085}, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x1f, &(0x7f0000000840)=@raw=[@alu={0x4, 0x1, 0xc, 0x6, 0x6, 0x20, 0xffffffffffffffff}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000940)='GPL\x00', 0x7, 0x90, &(0x7f0000000980)=""/144, 0x40f00, 0x40, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000a40)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[r0, r0, r0], &(0x7f0000000ac0)=[{0x1, 0x3, 0xc, 0x7}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000bc0)=r6, 0x4) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x1401, 0x700, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}}, 0x40000) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000041) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000e00)={0x0, 'ip_vti0\x00', {0x3}, 0x74c3}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000e40)={0x0, 0xc, "614ba41930e1f671f59e4f3c"}, &(0x7f0000000e80)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000ec0)={0x0, @in6={{0xa, 0x4e21, 0x1a, @loopback}}}, &(0x7f0000000f80)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000fc0)={r7, 0xec, 0x3ff, 0x7, 0x5, 0x8000, 0xca8, 0x200, {r8, @in6={{0xa, 0x4e20, 0x3, @loopback, 0x3}}, 0x8, 0x1, 0xb, 0x7, 0xb7d}}, &(0x7f0000001080)=0xb0) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001240)={0xffffffffffffffff}, 0xc) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001280), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x6, &(0x7f00000010c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x1, 0x0, 0x5, 0x2, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000001100)='GPL\x00', 0x3, 0x5e, &(0x7f0000001140)=""/94, 0x41100, 0x28, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000011c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0xc, 0xd, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[r0, r9, r10, r0, r0, r0, r0, r0, r0], &(0x7f0000001300)=[{0x3, 0x2, 0x2, 0x1}, {0x2, 0x3, 0x6, 0x5}]}, 0x94) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000001400), &(0x7f0000001440)=0x4) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000014c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x38, r3, 0x20, 0x10001, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r13 = socket$inet6(0xa, 0x3, 0x80) connect$inet6(r13, &(0x7f00000015c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}, 0x1c) faccessat(r0, &(0x7f0000001600)='./file0\x00', 0xa) writev(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000001680)="ef829a064c8791cf05373716a9bc7384a64c8186d32fbfff5737343048496bd610e04061def37a31e6d062712b032a2c1c5d7c11405853c23682c5191d058f7916f559e5530dd5e0653c57e2b7cff323ed0542d54b1119e5e896e110bf861ee785e9ded5be8951718654197ac9a09a69", 0x70}, {&(0x7f0000001700)="ee5d9b336dd3404e41b6489a5c566396f2e14cfbd93d15c2d7c52de0e1e4459fcabc96ac48eecd90d8382e7713f0e4dac7a264fcf465bcc7eb52180cfded483868feeca3ac18badf030180984ebb263a258f877f313ae6a5f31966a0cc3d69590c9ee96c0fbf6c368bcda62ea3abd3744a1b919336eada52fa9ccebb9e94d01d77454eff0805a893cbb5bf54370370f17c2a8415092a343662e2df16eb88004abe13d2cf0381de169e4ea744f2132a671f78e0739037898ff5b9fc537053e27ffdf9f46a3f5f5313cef597aca76a0897bcfcdebfbd708587f94495e8dd2fe46d370745ffe8", 0xe5}, {&(0x7f0000001800)="83679f83e326dc56e4a4e4db22fdc39f2e0ea82c6053717a87d80ab88080f42612884013c211649cc2379ea37b8662755a9fbb64388158966ceebba12d8e848310db19ee381dca13bae6adb92acd67970d98ba3de4c7beda60e9455c951fc8e2ae876c8ae41cb9d96d25fa578d984c74accc19ce78b49737536c6eb9515b5edc15a3a0bed5b73fd894a8b65af6498b436eaecc388d7d4060988de9084a1457c446cf2e8ebc3eda955ba26e209b17e1264c53ca1bf1121de053", 0xb9}], 0x3) 1.690977714s ago: executing program 3 (id=2993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) (fail_nth: 1) 1.471635102s ago: executing program 5 (id=2998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0xc, 0x7fff0006}]}) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.429581675s ago: executing program 5 (id=3000): sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="00082bbd7001ffdbdf250400000014000200626f6e645f086c6176655f31000000000900010073797a3100000000140002006272696467655f736c6176655f31000014000200766c616e310000000000000000000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000906010800000000000000000200ffff180007800c00018008000140e000000208000a40000000020900020073797a31000000000d00"], 0x40}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78a29f}, 0x40c0080) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.399237777s ago: executing program 5 (id=3001): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.382980988s ago: executing program 5 (id=3002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r0 = socket(0x1e, 0x2, 0x0) mmap(&(0x7f00001cc000/0x4000)=nil, 0x4000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x24000000) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') read(r5, &(0x7f00000028c0)=""/105, 0x69) preadv(r5, &(0x7f0000004100)=[{&(0x7f0000002c40)=""/209, 0xd1}], 0x1, 0x5, 0x3) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0x1) 1.36782471s ago: executing program 0 (id=3003): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x2, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000010000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.323447633s ago: executing program 0 (id=3005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x8, 0x80000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r5 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") r6 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bind$unix(r6, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYRESOCT], 0x2c}], 0x1}, 0x80) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0xf00, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x0, 0xfe}, {}, {0x6}, {0x2, 0x3, 0x8, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x40040c0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000100000000ff4245c36c3cb71800000000007b8af8ff000000b97f080000000000007b8af0ff00000800bfa1000000000000070100ffffbfa408000000000007040000f0ffffff050000000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r10}, 0x10) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'veth0_macvtap\x00', @local}) setsockopt$MRT_FLUSH(r11, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r12, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r12, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0xfff, 0x603ff71b3576156, 0x7fff, 0x40, r4}, &(0x7f0000000100)=0x10) 1.215839972s ago: executing program 0 (id=3009): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x2, 0x7, 0xfffffff8, 0xd, 0x10, 0x2, 0x8}, &(0x7f0000000100)=0x9c) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31f43bd1d62288c403eee7db47d164886c1fbb599665397adefcfe53401743b08ba4a79a7e140e09096a2c", 0x7e}], 0x2}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) (fail_nth: 6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7d, 0x0, &(0x7f00000000c0)) io_setup(0x7, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1.100025031s ago: executing program 3 (id=3010): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xcd, 0x2, 0x2, 0x2, 0x1, 0x1, 0x6, {0x3, 0x2, "2cb6"}, 0x4, 0xf, 0xfc, 0x70, 0x4, "73642ecc"}}, 0x17) 882.221789ms ago: executing program 0 (id=3011): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xcd, 0x2, 0x2, 0x2, 0x1, 0x1, 0x6, {0x3, 0x2, "2cb6"}, 0x4, 0xf, 0xfc, 0x70, 0x4, "73642ecc"}}, 0x17) 863.88576ms ago: executing program 2 (id=3012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 796.432576ms ago: executing program 3 (id=3015): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xe, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000700000000000000a02d000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000002532f8db34514000000b7030000000000008500000083000000bf090000000000005509010000006ab95a86c34f7d1295165f3976d1000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000096c100008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xe, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000700000000000000a02d000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000002532f8db34514000000b7030000000000008500000083000000bf090000000000005509010000006ab95a86c34f7d1295165f3976d1000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000096c100008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000ffff000e0000000000009500000000000000"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000ffff000e0000000000009500000000000000"], 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c94d4740a295a2d47ae5ccdd35200", @ANYRES16=r3, @ANYBLOB="01003cbd7000fddbdf2511000000180001801400020062726964676530000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="11"], 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='asymmetric\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x617a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 796.000666ms ago: executing program 0 (id=3016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f74"], 0xa8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x6) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 795.348366ms ago: executing program 4 (id=3017): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1) openat$cgroup_subtree(r1, &(0x7f0000000240), 0x2, 0x0) r2 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 773.463257ms ago: executing program 4 (id=3018): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000070000000080000001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000edc1272c0101134bac997ae1bd2964457385b06f8a2fcc1fca8d740915bca6be9c27ec455d966f7919d71244968ece676e546264c74aa74bd9471f8458998aff951d500fdbc0b1e2de6d78f8739ca5bf517612999e60dc30cb613a09274d0cdcdc171b9a335027c598e520f40a33802744c62a62e8799c0f1db2003513f85e134a5e691536d43894450856b4ce440fe469a568523fccd3d527528601f7ab0fdfb4a8b0"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xf, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r3, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000340)='cpu\t&-&&\t') mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) 712.035023ms ago: executing program 3 (id=3019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}]}}]}, 0x9c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500040000002020207b1a31616474abb4a4dbe248d1f8ff00000000bfa100000000000007010000f8ffffffb70200008500000070000000850000000500"/96], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101201) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) 710.959983ms ago: executing program 0 (id=3020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}]}}]}, 0x9c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500040000002020207b1a31616474abb4a4dbe248d1f8ff00000000bfa100000000000007010000f8ffffffb70200008500000070000000850000000500"/96], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101201) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 590.806772ms ago: executing program 4 (id=3021): r0 = socket$rds(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2, 0x1c0) openat2(r7, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x42280, 0x2, 0x4}, 0x18) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000003b68e0fedbdf2501000000180001801400020076657468305f746f5f7465616d"], 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) 589.658532ms ago: executing program 2 (id=3022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0xc, 0x7fff0006}]}) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) 413.652307ms ago: executing program 5 (id=3023): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000070000000080000001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000edc1272c0101134bac997ae1bd2964457385b06f8a2fcc1fca8d740915bca6be9c27ec455d966f7919d71244968ece676e546264c74aa74bd9471f8458998aff951d500fdbc0b1e2de6d78f8739ca5bf517612999e60dc30cb613a09274d0cdcdc171b9a335027c598e520f40a33802744c62a62e8799c0f1db2003513f85e134a5e691536d43894450856b4ce440fe469a568523fccd3d527528601f7ab0fdfb4a8b0"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xf, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r3, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000340)='cpu\t&-&&\t') mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) 331.949393ms ago: executing program 4 (id=3024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 308.953385ms ago: executing program 2 (id=3025): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xcd, 0x2, 0x2, 0x2, 0x1, 0x1, 0x6, {0x3, 0x2, "2cb6"}, 0x4, 0xf, 0xfc, 0x70, 0x4, "73642ecc"}}, 0x17) 244.9656ms ago: executing program 4 (id=3026): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xcd, 0x2, 0x2, 0x2, 0x1, 0x1, 0x6, {0x3, 0x2, "2cb6"}, 0x4, 0xf, 0xfc, 0x70, 0x4, "73642ecc"}}, 0x17) 168.855106ms ago: executing program 2 (id=3027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e80001cffffffffffffbbbbbbbbbbbb89020000"], 0xf2) 168.396247ms ago: executing program 4 (id=3028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200610308060001080006040002aaaaaaaaaabbac1414bbaaaaaaaaaa23ac1414bb"], 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@journal_async_commit}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") 167.313977ms ago: executing program 5 (id=3029): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250400000008000800640101020800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2, 0x0, 0x9}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1700000055003d0926bd70000200000007"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18) r8 = fsmount(0xffffffffffffffff, 0x0, 0x83) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r9, &(0x7f0000000d40)=""/43, 0x2b) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000001000)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000d40)=0xe8) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000d00), 0x80000, &(0x7f0000000f40)=ANY=[@ANYBLOB="7472616e733d66642c7266646ea43d", @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',fscache,loose,ignoreqv,cache=loose,dfltuid=', @ANYRESHEX=r10, @ANYBLOB=',noxattr,fsmagic=0x0000000000000004,\x00']) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) getrlimit(0x0, &(0x7f0000000d80)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r11, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000100c2e80876f8330f879ee839f525cc46333fa370f699ab9d"], 0x28}}, 0x0) r14 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r0) sendmsg$NET_DM_CMD_START(r12, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r14, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44) 112.444931ms ago: executing program 2 (id=3030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9']) (fail_nth: 6) 0s ago: executing program 2 (id=3031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 183.979147][T11557] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 183.993405][T11554] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 184.000203][T11554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.007946][T11554] vhci_hcd vhci_hcd.0: Device attached [ 184.009295][T11561] syzkaller0: entered promiscuous mode [ 184.019055][T11561] syzkaller0: entered allmulticast mode [ 184.037227][T11557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 184.047450][T11554] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 184.050110][T11557] EXT4-fs (loop1): orphan cleanup on readonly fs [ 184.054210][T11554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.054312][T11554] vhci_hcd vhci_hcd.0: Device attached [ 184.076324][T11557] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.2723: attempt to clear invalid blocks 1024 len 1 [ 184.099870][T11557] EXT4-fs (loop1): Remounting filesystem read-only [ 184.107780][T11554] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 184.108085][T11557] EXT4-fs (loop1): 1 truncate cleaned up [ 184.114471][T11554] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.114742][T11554] vhci_hcd vhci_hcd.0: Device attached [ 184.129919][T11557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 184.143479][T11554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 184.165010][T11554] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 184.171671][T11554] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 184.179369][T11554] vhci_hcd vhci_hcd.0: Device attached [ 184.205142][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 184.208210][T11573] vhci_hcd: connection closed [ 184.214917][T11563] vhci_hcd: connection closed [ 184.214944][T11569] vhci_hcd: connection closed [ 184.219921][T11559] vhci_hcd: connection closed [ 184.230456][ T589] vhci_hcd: stop threads [ 184.239619][ T589] vhci_hcd: release socket [ 184.244545][ T589] vhci_hcd: disconnect device [ 184.251178][ T3383] usb 7-1: new low-speed USB device number 12 using vhci_hcd [ 184.260154][T11560] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 184.284082][ T589] vhci_hcd: stop threads [ 184.288491][ T589] vhci_hcd: release socket [ 184.292976][ T589] vhci_hcd: disconnect device [ 184.309297][ T589] vhci_hcd: stop threads [ 184.313766][ T589] vhci_hcd: release socket [ 184.318502][ T589] vhci_hcd: disconnect device [ 184.323716][T11576] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 184.330416][T11576] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.338051][T11576] vhci_hcd vhci_hcd.0: Device attached [ 184.346946][ T589] vhci_hcd: stop threads [ 184.351267][ T589] vhci_hcd: release socket [ 184.355782][ T589] vhci_hcd: disconnect device [ 184.365966][T11584] loop2: detected capacity change from 0 to 2364 [ 184.374114][T11576] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 184.380767][T11576] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.388462][T11576] vhci_hcd vhci_hcd.0: Device attached [ 184.417114][T11576] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 184.418792][T11584] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 184.432055][T11584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.439682][T11584] vhci_hcd vhci_hcd.0: Device attached [ 184.461291][T11576] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 184.467965][T11576] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 184.475775][T11576] vhci_hcd vhci_hcd.0: Device attached [ 184.525705][T11596] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 184.535307][T11584] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 184.542003][T11584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.549650][T11584] vhci_hcd vhci_hcd.0: Device attached [ 184.565287][T11595] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 184.572047][T11595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 184.579878][T11595] vhci_hcd vhci_hcd.0: Device attached [ 184.588493][T11596] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 184.595157][T11596] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 184.602854][T11596] vhci_hcd vhci_hcd.0: Device attached [ 184.610866][T11591] vhci_hcd: connection closed [ 184.611154][T11597] vhci_hcd: connection closed [ 184.616134][T11587] vhci_hcd: connection closed [ 184.622350][T11581] vhci_hcd: connection closed [ 184.627064][ T4196] vhci_hcd: stop threads [ 184.636174][ T4196] vhci_hcd: release socket [ 184.640623][ T4196] vhci_hcd: disconnect device [ 184.646904][T11584] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 184.653633][T11584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 184.661340][T11584] vhci_hcd vhci_hcd.0: Device attached [ 184.668408][ T4196] vhci_hcd: stop threads [ 184.672768][ T4196] vhci_hcd: release socket [ 184.677296][ T4196] vhci_hcd: disconnect device [ 184.683289][T11589] vhci_hcd: connection closed [ 184.683416][T11602] vhci_hcd: connection closed [ 184.688217][T11593] vhci_hcd: connection closed [ 184.691101][ T3411] usb 1-1: new low-speed USB device number 12 using vhci_hcd [ 184.693306][T11599] vhci_hcd: connection closed [ 184.697733][T11582] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 184.705293][ T10] usb 5-1: new low-speed USB device number 6 using vhci_hcd [ 184.723837][T11590] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 184.730085][ T4196] vhci_hcd: stop threads [ 184.734585][ T4196] vhci_hcd: release socket [ 184.739095][ T4196] vhci_hcd: disconnect device [ 184.744122][ T4196] vhci_hcd: stop threads [ 184.748504][ T4196] vhci_hcd: release socket [ 184.752998][ T4196] vhci_hcd: disconnect device [ 184.758003][ T4196] vhci_hcd: stop threads [ 184.762387][ T4196] vhci_hcd: release socket [ 184.766835][ T4196] vhci_hcd: disconnect device [ 184.787485][ T4196] vhci_hcd: stop threads [ 184.791919][ T4196] vhci_hcd: release socket [ 184.796380][ T4196] vhci_hcd: disconnect device [ 184.801447][ T4196] vhci_hcd: stop threads [ 184.805719][ T4196] vhci_hcd: release socket [ 184.810254][ T4196] vhci_hcd: disconnect device [ 184.815913][ T4196] vhci_hcd: stop threads [ 184.820206][ T4196] vhci_hcd: release socket [ 184.824821][ T4196] vhci_hcd: disconnect device [ 184.930594][T11609] loop3: detected capacity change from 0 to 2048 [ 184.963908][ T3295] Alternate GPT is invalid, using primary GPT. [ 184.970293][ T3295] loop3: p2 p3 p7 [ 184.981804][T11609] Alternate GPT is invalid, using primary GPT. [ 184.988348][T11609] loop3: p2 p3 p7 [ 185.072587][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 185.073478][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 185.083699][ T3610] udevd[3610]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 185.262679][ T3610] udevd[3610]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 185.274176][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 185.281445][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 185.333435][T11624] syzkaller0: entered promiscuous mode [ 185.338762][T11620] loop2: detected capacity change from 0 to 2364 [ 185.338965][T11624] syzkaller0: entered allmulticast mode [ 185.417680][T11629] loop4: detected capacity change from 0 to 1024 [ 185.418358][T11633] syzkaller0: entered promiscuous mode [ 185.429875][T11633] syzkaller0: entered allmulticast mode [ 185.434921][T11629] EXT4-fs: inline encryption not supported [ 185.447665][T11630] loop3: detected capacity change from 0 to 2364 [ 185.457279][T11629] EXT4-fs: Ignoring removed bh option [ 185.457724][T11620] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 185.469477][T11620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.477022][T11620] vhci_hcd vhci_hcd.0: Device attached [ 185.498054][T11620] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 185.504771][T11620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.512562][T11620] vhci_hcd vhci_hcd.0: Device attached [ 185.518713][T11630] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 185.522271][T11629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.525437][T11630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.525712][T11630] vhci_hcd vhci_hcd.0: Device attached [ 185.538581][T11620] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 185.557902][T11620] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 185.565593][T11620] vhci_hcd vhci_hcd.0: Device attached [ 185.573307][T11649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 185.583390][T11630] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 185.590243][T11630] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 185.598102][T11630] vhci_hcd vhci_hcd.0: Device attached [ 185.610741][T11653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 185.621143][T11620] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 185.627929][T11620] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.635683][T11620] vhci_hcd vhci_hcd.0: Device attached [ 185.644418][T11630] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 185.651084][T11630] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.653672][T11658] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2744'. [ 185.659049][T11630] vhci_hcd vhci_hcd.0: Device attached [ 185.677698][T11630] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 185.684424][T11630] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.692679][T11630] vhci_hcd vhci_hcd.0: Device attached [ 185.697753][T11620] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(22) [ 185.700733][T11660] vhci_hcd: connection closed [ 185.704836][T11620] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.704935][T11620] vhci_hcd vhci_hcd.0: Device attached [ 185.710629][T11642] vhci_hcd: connection closed [ 185.717650][T11647] vhci_hcd: connection closed [ 185.717878][T11654] vhci_hcd: connection closed [ 185.734561][ T589] vhci_hcd: stop threads [ 185.743875][ T589] vhci_hcd: release socket [ 185.748415][ T589] vhci_hcd: disconnect device [ 185.749493][T11656] vhci_hcd: connection closed [ 185.753720][T11651] vhci_hcd: connection closed [ 185.754008][T11640] vhci_hcd: connection closed [ 185.758513][T11645] vhci_hcd: connection closed [ 185.771111][T11634] vhci_hcd: connection closed [ 185.783630][ T589] vhci_hcd: stop threads [ 185.792792][ T589] vhci_hcd: release socket [ 185.797351][ T589] vhci_hcd: disconnect device [ 185.804580][T11663] loop1: detected capacity change from 0 to 2048 [ 185.811723][ T589] vhci_hcd: stop threads [ 185.816091][ T589] vhci_hcd: release socket [ 185.820587][ T589] vhci_hcd: disconnect device [ 185.827671][ T589] vhci_hcd: stop threads [ 185.832150][ T589] vhci_hcd: release socket [ 185.836684][ T589] vhci_hcd: disconnect device [ 185.841927][ T589] vhci_hcd: stop threads [ 185.842444][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.846219][ T589] vhci_hcd: release socket [ 185.846238][ T589] vhci_hcd: disconnect device [ 185.846554][ T589] vhci_hcd: stop threads [ 185.868854][ T589] vhci_hcd: release socket [ 185.873406][ T589] vhci_hcd: disconnect device [ 185.878729][ T589] vhci_hcd: stop threads [ 185.883041][ T589] vhci_hcd: release socket [ 185.883644][T11663] Alternate GPT is invalid, using primary GPT. [ 185.887487][ T589] vhci_hcd: disconnect device [ 185.887764][ T589] vhci_hcd: stop threads [ 185.894123][T11663] loop1: p2 p3 p7 [ 185.898732][ T589] vhci_hcd: release socket [ 185.898749][ T589] vhci_hcd: disconnect device [ 185.916675][ T589] vhci_hcd: stop threads [ 185.920963][ T589] vhci_hcd: release socket [ 185.925468][ T589] vhci_hcd: disconnect device [ 185.977612][T11665] loop4: detected capacity change from 0 to 2364 [ 186.001507][T11665] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 186.008209][T11665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.015892][T11665] vhci_hcd vhci_hcd.0: Device attached [ 186.043710][T11665] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 186.050395][T11665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.058082][T11665] vhci_hcd vhci_hcd.0: Device attached [ 186.058570][T11669] loop1: detected capacity change from 0 to 2364 [ 186.066826][T11665] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 186.076622][T11665] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 186.084553][T11665] vhci_hcd vhci_hcd.0: Device attached [ 186.094215][T11665] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.108157][T11665] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 186.114827][T11665] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.114874][T11679] loop1: detected capacity change from 0 to 512 [ 186.122484][T11665] vhci_hcd vhci_hcd.0: Device attached [ 186.131924][T11679] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 186.145960][T11679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 186.145960][T11665] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(22) [ 186.145994][T11665] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.155050][T11679] EXT4-fs (loop1): orphan cleanup on readonly fs [ 186.160956][T11665] vhci_hcd vhci_hcd.0: Device attached [ 186.182678][T11679] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.2748: attempt to clear invalid blocks 1024 len 1 [ 186.188925][T11676] vhci_hcd: connection closed [ 186.196307][T11680] vhci_hcd: connection closed [ 186.196461][T11668] vhci_hcd: connection closed [ 186.201091][T11672] vhci_hcd: connection closed [ 186.206670][ T31] vhci_hcd: stop threads [ 186.210643][T11674] vhci_hcd: connection closed [ 186.215315][ T31] vhci_hcd: release socket [ 186.215333][ T31] vhci_hcd: disconnect device [ 186.215536][ T31] vhci_hcd: stop threads [ 186.222540][T11679] EXT4-fs (loop1): Remounting filesystem read-only [ 186.224527][ T31] vhci_hcd: release socket [ 186.229434][T11679] EXT4-fs (loop1): 1 truncate cleaned up [ 186.233918][ T31] vhci_hcd: disconnect device [ 186.247808][ T31] vhci_hcd: stop threads [ 186.250434][T11679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 186.255406][ T31] vhci_hcd: release socket [ 186.281272][ T31] vhci_hcd: disconnect device [ 186.286284][ T2956] usb 9-1: new low-speed USB device number 8 using vhci_hcd [ 186.286808][ T31] vhci_hcd: stop threads [ 186.293719][ T2956] usb 9-1: enqueue for inactive port 0 [ 186.298305][ T31] vhci_hcd: release socket [ 186.305506][ T2956] usb 9-1: enqueue for inactive port 0 [ 186.313712][ T31] vhci_hcd: disconnect device [ 186.313824][ T2956] usb 9-1: enqueue for inactive port 0 [ 186.325706][ T31] vhci_hcd: stop threads [ 186.330052][ T31] vhci_hcd: release socket [ 186.334538][ T31] vhci_hcd: disconnect device [ 186.345299][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 186.391636][ T2956] vhci_hcd: vhci_device speed not set [ 186.415765][T11690] loop1: detected capacity change from 0 to 512 [ 186.423153][T11690] EXT4-fs: Ignoring removed bh option [ 186.424118][T11692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2751'. [ 186.445200][T11690] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.454454][T11690] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 186.468765][T11695] loop2: detected capacity change from 0 to 512 [ 186.473122][T11688] loop3: detected capacity change from 0 to 2048 [ 186.476062][T11690] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 186.486702][T11695] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 186.500808][T11690] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 186.501498][T11695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 186.510603][T11690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.517071][T11695] EXT4-fs (loop2): orphan cleanup on readonly fs [ 186.533650][ T3497] Alternate GPT is invalid, using primary GPT. [ 186.541720][ T3497] loop3: p2 p3 p7 [ 186.542648][T11695] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2754: attempt to clear invalid blocks 1024 len 1 [ 186.559345][T11695] EXT4-fs (loop2): Remounting filesystem read-only [ 186.579819][T11695] EXT4-fs (loop2): 1 truncate cleaned up [ 186.586751][T11688] Alternate GPT is invalid, using primary GPT. [ 186.593190][T11688] loop3: p2 p3 p7 [ 186.597802][T11695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 186.613415][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.625335][ T2993] Alternate GPT is invalid, using primary GPT. [ 186.631764][ T2993] loop3: p2 p3 p7 [ 186.647876][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 186.689765][T11701] random: crng reseeded on system resumption [ 186.727360][ T3610] udevd[3610]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 186.737448][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 186.738700][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 186.758411][T11703] loop3: detected capacity change from 0 to 512 [ 186.774890][T11703] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 186.786645][T11700] syzkaller0: entered promiscuous mode [ 186.792344][T11700] syzkaller0: entered allmulticast mode [ 186.798494][T11703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 186.810403][T11703] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.818834][T11703] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.2757: attempt to clear invalid blocks 1024 len 1 [ 186.836546][T11703] EXT4-fs (loop3): Remounting filesystem read-only [ 186.838117][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 186.843795][T11703] EXT4-fs (loop3): 1 truncate cleaned up [ 186.875825][T11710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2759'. [ 186.907360][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 186.907380][ T29] audit: type=1326 audit(1756232990.624:15062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9970eebe9 code=0x7ffc0000 [ 186.945072][ T29] audit: type=1326 audit(1756232990.624:15063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9970eebe9 code=0x7ffc0000 [ 186.969203][ T29] audit: type=1326 audit(1756232990.624:15064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9970eebe9 code=0x7ffc0000 [ 186.992838][ T29] audit: type=1326 audit(1756232990.624:15065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9970eebe9 code=0x7ffc0000 [ 187.016527][ T29] audit: type=1326 audit(1756232990.624:15066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9970eebe9 code=0x7ffc0000 [ 187.040529][ T29] audit: type=1326 audit(1756232990.624:15067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9970eebe9 code=0x7ffc0000 [ 187.064241][ T29] audit: type=1326 audit(1756232990.624:15068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9970eebe9 code=0x7ffc0000 [ 187.088147][ T29] audit: type=1326 audit(1756232990.624:15069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9970eebe9 code=0x7ffc0000 [ 187.088404][T11714] loop2: detected capacity change from 0 to 2364 [ 187.111808][ T29] audit: type=1326 audit(1756232990.624:15070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9970ed550 code=0x7ffc0000 [ 187.141738][ T29] audit: type=1326 audit(1756232990.624:15071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11711 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9970eebe9 code=0x7ffc0000 [ 187.157690][T11721] loop4: detected capacity change from 0 to 2364 [ 187.187137][T11721] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 187.193789][T11721] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.201392][T11721] vhci_hcd vhci_hcd.0: Device attached [ 187.227905][T11714] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 187.234635][T11714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.242225][T11714] vhci_hcd vhci_hcd.0: Device attached [ 187.249209][T11717] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 187.256011][T11717] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 187.259456][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2765'. [ 187.263679][T11717] vhci_hcd vhci_hcd.0: Device attached [ 187.279284][T11721] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 187.281897][T11732] 8021q: adding VLAN 0 to HW filter on device bond14 [ 187.290288][T11714] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 187.301073][T11717] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 187.301198][T11714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.307772][T11717] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.315489][T11714] vhci_hcd vhci_hcd.0: Device attached [ 187.322847][T11717] vhci_hcd vhci_hcd.0: Device attached [ 187.344564][T11738] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 187.351234][T11738] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 187.354849][T11717] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 187.358951][T11738] vhci_hcd vhci_hcd.0: Device attached [ 187.365444][T11717] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.365539][T11717] vhci_hcd vhci_hcd.0: Device attached [ 187.379831][T11714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 187.396975][T11729] vhci_hcd: connection closed [ 187.398408][T11723] vhci_hcd: connection closed [ 187.403223][ T31] vhci_hcd: stop threads [ 187.404019][T11746] syzkaller0: entered promiscuous mode [ 187.407966][ T31] vhci_hcd: release socket [ 187.407986][ T31] vhci_hcd: disconnect device [ 187.412358][T11746] syzkaller0: entered allmulticast mode [ 187.419442][T11740] vhci_hcd: connection closed [ 187.427213][T11745] loop3: detected capacity change from 0 to 512 [ 187.434508][T11736] vhci_hcd: connection closed [ 187.439616][T11745] EXT4-fs: Ignoring removed bh option [ 187.447019][ T31] vhci_hcd: stop threads [ 187.448996][T11714] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 187.453836][ T31] vhci_hcd: release socket [ 187.458151][T11714] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.464881][ T31] vhci_hcd: disconnect device [ 187.469432][T11714] vhci_hcd vhci_hcd.0: Device attached [ 187.482350][T11745] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.493563][ T31] vhci_hcd: stop threads [ 187.496602][T11745] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 187.500739][ T31] vhci_hcd: release socket [ 187.512425][T11746] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2767'. [ 187.513471][ T31] vhci_hcd: disconnect device [ 187.527150][T11738] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(23) [ 187.527633][ T31] vhci_hcd: stop threads [ 187.533842][T11738] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.534010][T11738] vhci_hcd vhci_hcd.0: Device attached [ 187.538154][ T31] vhci_hcd: release socket [ 187.538169][ T31] vhci_hcd: disconnect device [ 187.551242][T11745] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 187.551443][T11745] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 187.559595][T11749] vhci_hcd: connection closed [ 187.578265][T11739] vhci_hcd: connection closed [ 187.578954][T11747] vhci_hcd: connection closed [ 187.589475][ T589] vhci_hcd: stop threads [ 187.589777][T11734] vhci_hcd: connection closed [ 187.594245][ T589] vhci_hcd: release socket [ 187.604690][T11727] vhci_hcd: connection closed [ 187.608230][ T589] vhci_hcd: disconnect device [ 187.619273][ T589] vhci_hcd: stop threads [ 187.623789][ T589] vhci_hcd: release socket [ 187.628236][ T589] vhci_hcd: disconnect device [ 187.634279][ T589] vhci_hcd: stop threads [ 187.638549][ T589] vhci_hcd: release socket [ 187.643097][ T589] vhci_hcd: disconnect device [ 187.648061][ T589] vhci_hcd: stop threads [ 187.652428][ T589] vhci_hcd: release socket [ 187.657020][ T589] vhci_hcd: disconnect device [ 187.663186][ T589] vhci_hcd: stop threads [ 187.667483][ T589] vhci_hcd: release socket [ 187.671973][ T589] vhci_hcd: disconnect device [ 187.688884][T11754] loop3: detected capacity change from 0 to 2364 [ 187.774445][T11764] syzkaller0: entered promiscuous mode [ 187.780166][T11764] syzkaller0: entered allmulticast mode [ 187.788769][T11754] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 187.795440][T11754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.803067][T11754] vhci_hcd vhci_hcd.0: Device attached [ 187.818542][T11768] loop1: detected capacity change from 0 to 2048 [ 187.825149][T11754] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 187.831773][T11754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.839393][T11754] vhci_hcd vhci_hcd.0: Device attached [ 187.846199][T11754] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 187.852937][T11754] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 187.860724][T11754] vhci_hcd vhci_hcd.0: Device attached [ 187.867105][T11754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 187.876101][T11754] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 187.882827][T11754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.890509][T11754] vhci_hcd vhci_hcd.0: Device attached [ 187.896607][T11777] vhci_hcd: connection closed [ 187.896733][T11773] vhci_hcd: connection closed [ 187.896758][T11771] vhci_hcd: connection closed [ 187.906584][T11775] vhci_hcd: connection closed [ 187.907024][ T31] vhci_hcd: stop threads [ 187.920491][ T31] vhci_hcd: release socket [ 187.925082][ T31] vhci_hcd: disconnect device [ 187.926180][ T3295] Alternate GPT is invalid, using primary GPT. [ 187.936196][ T3295] loop1: p2 p3 p7 [ 187.944631][ T31] vhci_hcd: stop threads [ 187.949018][ T31] vhci_hcd: release socket [ 187.950200][T11768] Alternate GPT is invalid, using primary GPT. [ 187.953620][ T31] vhci_hcd: disconnect device [ 187.960029][T11768] loop1: p2 p3 p7 [ 187.978101][ T31] vhci_hcd: stop threads [ 187.982550][ T31] vhci_hcd: release socket [ 187.987008][ T31] vhci_hcd: disconnect device [ 187.995089][ T31] vhci_hcd: stop threads [ 187.999390][ T31] vhci_hcd: release socket [ 188.004285][ T31] vhci_hcd: disconnect device [ 188.011575][T11782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2775'. [ 188.093094][T11787] veth13: entered promiscuous mode [ 188.211664][T11790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.289788][T11802] 8021q: adding VLAN 0 to HW filter on device bond15 [ 188.308707][T11802] 8021q: adding VLAN 0 to HW filter on device bond15 [ 188.321542][T11802] bond15: (slave vxcan7): The slave device specified does not support setting the MAC address [ 188.343679][T11802] bond15: (slave vxcan7): Error -95 calling set_mac_address [ 188.372915][T11814] veth7: entered promiscuous mode [ 188.379380][T11814] bond15: (slave veth7): Enslaving as an active interface with an up link [ 188.483720][T11822] syzkaller0: entered promiscuous mode [ 188.489543][T11822] syzkaller0: entered allmulticast mode [ 188.527459][T11828] loop3: detected capacity change from 0 to 2364 [ 188.543640][T11828] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 188.550409][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.558040][T11828] vhci_hcd vhci_hcd.0: Device attached [ 188.567844][T11828] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 188.574584][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.582371][T11828] vhci_hcd vhci_hcd.0: Device attached [ 188.588777][T11828] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.597657][T11828] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 188.599955][T11843] loop4: detected capacity change from 0 to 2364 [ 188.604300][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.604384][T11828] vhci_hcd vhci_hcd.0: Device attached [ 188.629858][T11828] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 188.636512][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.644439][T11828] vhci_hcd vhci_hcd.0: Device attached [ 188.666200][T11847] vhci_hcd: connection closed [ 188.666610][ T4203] vhci_hcd: stop threads [ 188.675773][ T4203] vhci_hcd: release socket [ 188.677529][T11840] vhci_hcd: connection closed [ 188.680518][ T4203] vhci_hcd: disconnect device [ 188.682818][T11845] vhci_hcd: connection closed [ 188.685274][T11838] vhci_hcd: connection closed [ 188.690623][ T4203] vhci_hcd: stop threads [ 188.703893][ T4203] vhci_hcd: release socket [ 188.708331][ T4203] vhci_hcd: disconnect device [ 188.713463][ T4203] vhci_hcd: stop threads [ 188.717791][ T4203] vhci_hcd: release socket [ 188.722307][ T4203] vhci_hcd: disconnect device [ 188.727406][ T4203] vhci_hcd: stop threads [ 188.731779][ T4203] vhci_hcd: release socket [ 188.736225][ T4203] vhci_hcd: disconnect device [ 188.876100][T11857] loop2: detected capacity change from 0 to 2364 [ 188.898234][T11857] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 188.904894][T11857] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.912592][T11857] vhci_hcd vhci_hcd.0: Device attached [ 188.921452][T11857] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 188.928143][T11857] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.935742][T11857] vhci_hcd vhci_hcd.0: Device attached [ 188.945660][T11857] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 188.952391][T11857] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.960182][T11857] vhci_hcd vhci_hcd.0: Device attached [ 188.966224][T11857] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.978347][T11857] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 188.984996][T11857] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.992708][T11857] vhci_hcd vhci_hcd.0: Device attached [ 188.999395][T11857] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(22) [ 189.006034][T11857] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.013666][T11857] vhci_hcd vhci_hcd.0: Device attached [ 189.019598][T11874] vhci_hcd: connection closed [ 189.019725][T11871] vhci_hcd: connection closed [ 189.019766][ T589] vhci_hcd: stop threads [ 189.019778][ T589] vhci_hcd: release socket [ 189.019791][ T589] vhci_hcd: disconnect device [ 189.026341][T11868] vhci_hcd: connection closed [ 189.031172][T11861] vhci_hcd: connection closed [ 189.033994][T11863] vhci_hcd: connection closed [ 189.038209][ T589] vhci_hcd: stop threads [ 189.061520][ T589] vhci_hcd: release socket [ 189.062593][T11877] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 189.065951][ T589] vhci_hcd: disconnect device [ 189.068148][ T589] vhci_hcd: stop threads [ 189.090882][ T589] vhci_hcd: release socket [ 189.095394][ T589] vhci_hcd: disconnect device [ 189.101298][ T589] vhci_hcd: stop threads [ 189.105715][ T589] vhci_hcd: release socket [ 189.110170][ T589] vhci_hcd: disconnect device [ 189.116363][ T589] vhci_hcd: stop threads [ 189.120652][ T589] vhci_hcd: release socket [ 189.125227][ T589] vhci_hcd: disconnect device [ 189.258668][T11886] loop3: detected capacity change from 0 to 2048 [ 189.281689][ T3383] usb 7-1: enqueue for inactive port 0 [ 189.287290][ T3383] usb 7-1: enqueue for inactive port 0 [ 189.294588][T11886] Alternate GPT is invalid, using primary GPT. [ 189.301283][T11886] loop3: p2 p3 p7 [ 189.361506][ T3383] vhci_hcd: vhci_device speed not set [ 189.371374][T11889] loop3: detected capacity change from 0 to 2364 [ 189.553210][T11897] syzkaller0: entered promiscuous mode [ 189.558798][T11897] syzkaller0: entered allmulticast mode [ 189.647888][T11915] loop2: detected capacity change from 0 to 2364 [ 189.664337][T11915] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 189.671005][T11915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.678688][T11915] vhci_hcd vhci_hcd.0: Device attached [ 189.708389][T11915] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 189.715193][T11915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.722805][T11915] vhci_hcd vhci_hcd.0: Device attached [ 189.733674][T11915] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 189.740396][T11915] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.748145][T11915] vhci_hcd vhci_hcd.0: Device attached [ 189.755086][T11915] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.764161][ T3411] usb 1-1: enqueue for inactive port 0 [ 189.779930][T11915] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 189.784198][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. [ 189.786592][T11915] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.803188][T11915] vhci_hcd vhci_hcd.0: Device attached [ 189.813603][ T3411] usb 1-1: enqueue for inactive port 0 [ 189.827664][T11915] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(22) [ 189.834327][T11915] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.842146][T11915] vhci_hcd vhci_hcd.0: Device attached [ 189.850116][T11939] vhci_hcd: connection closed [ 189.850230][T11934] vhci_hcd: connection closed [ 189.851992][T11925] vhci_hcd: connection closed [ 189.855336][ T31] vhci_hcd: stop threads [ 189.859761][T11929] vhci_hcd: connection closed [ 189.864890][ T31] vhci_hcd: release socket [ 189.878344][ T31] vhci_hcd: disconnect device [ 189.881901][T11919] vhci_hcd: connection reset by peer [ 189.891316][ T3411] vhci_hcd: vhci_device speed not set [ 189.892429][T11938] loop4: detected capacity change from 0 to 164 [ 189.906671][T11942] veth11: entered promiscuous mode [ 189.912287][T11938] rock: directory entry would overflow storage [ 189.918538][T11938] rock: sig=0x66, size=4, remaining=3 [ 189.942455][ T31] vhci_hcd: stop threads [ 189.947169][ T31] vhci_hcd: release socket [ 189.951660][ T31] vhci_hcd: disconnect device [ 189.956862][ T31] vhci_hcd: stop threads [ 189.961253][ T31] vhci_hcd: release socket [ 189.965698][ T31] vhci_hcd: disconnect device [ 190.007286][ T31] vhci_hcd: stop threads [ 190.011697][ T31] vhci_hcd: release socket [ 190.016233][ T31] vhci_hcd: disconnect device [ 190.054551][T11947] syzkaller0: entered promiscuous mode [ 190.060106][T11947] syzkaller0: entered allmulticast mode [ 190.071236][ T31] vhci_hcd: stop threads [ 190.075546][ T31] vhci_hcd: release socket [ 190.080001][ T31] vhci_hcd: disconnect device [ 190.085088][ T10] usb 5-1: enqueue for inactive port 0 [ 190.100320][T11954] loop3: detected capacity change from 0 to 2048 [ 190.106868][ T10] usb 5-1: enqueue for inactive port 0 [ 190.164021][T11954] Alternate GPT is invalid, using primary GPT. [ 190.170491][T11954] loop3: p2 p3 p7 [ 190.181404][ T10] vhci_hcd: vhci_device speed not set [ 190.263016][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2813'. [ 190.287835][T11979] 8021q: adding VLAN 0 to HW filter on device bond16 [ 190.310018][T11964] lo speed is unknown, defaulting to 1000 [ 190.339980][T11985] loop1: detected capacity change from 0 to 2048 [ 190.437134][ T3497] Alternate GPT is invalid, using primary GPT. [ 190.443551][ T3497] loop1: p2 p3 p7 [ 190.465402][T11990] loop2: detected capacity change from 0 to 512 [ 190.499210][T11985] Alternate GPT is invalid, using primary GPT. [ 190.505697][T11985] loop1: p2 p3 p7 [ 190.511505][T11964] chnl_net:caif_netlink_parms(): no params data found [ 190.519098][T11990] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 190.546006][T11990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 190.584346][ T2993] Alternate GPT is invalid, using primary GPT. [ 190.590999][ T2993] loop1: p2 p3 p7 [ 190.596208][T11990] EXT4-fs (loop2): orphan cleanup on readonly fs [ 190.608890][T11990] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2818: attempt to clear invalid blocks 1024 len 1 [ 190.631884][T11964] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.639005][T11964] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.669188][ T3610] udevd[3610]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 190.670545][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 190.679509][T11990] EXT4-fs (loop2): Remounting filesystem read-only [ 190.699901][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 190.709961][T11964] bridge_slave_0: entered allmulticast mode [ 190.717969][T11964] bridge_slave_0: entered promiscuous mode [ 190.726589][T11990] EXT4-fs (loop2): 1 truncate cleaned up [ 190.749078][T11964] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.756266][T11964] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.787831][T11964] bridge_slave_1: entered allmulticast mode [ 190.809039][T11964] bridge_slave_1: entered promiscuous mode [ 190.840037][T12006] syzkaller0: entered promiscuous mode [ 190.845701][T12006] syzkaller0: entered allmulticast mode [ 190.867794][T11964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.881862][ T3610] udevd[3610]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 190.893740][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 190.905867][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 190.917789][T11964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.936880][ T3610] udevd[3610]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 190.952480][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 190.963580][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 190.987274][T11964] team0: Port device team_slave_0 added [ 191.004890][T11964] team0: Port device team_slave_1 added [ 191.063932][T12013] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2826'. [ 191.073332][T12008] loop2: detected capacity change from 0 to 2364 [ 191.092345][T11964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.099357][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.125823][T11964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.143314][T11964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.150938][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.177222][T11964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.188048][T12014] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 191.194763][T12014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.202544][T12014] vhci_hcd vhci_hcd.0: Device attached [ 191.213267][T12008] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 191.219915][T12008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.227487][T12008] vhci_hcd vhci_hcd.0: Device attached [ 191.257131][T12008] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.263951][T12022] loop1: detected capacity change from 0 to 2364 [ 191.270233][T11964] hsr_slave_0: entered promiscuous mode [ 191.278335][T11964] hsr_slave_1: entered promiscuous mode [ 191.287184][T11964] debugfs: 'hsr0' already exists in 'hsr' [ 191.293145][T11964] Cannot create hsr debugfs directory [ 191.300094][T12008] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 191.306738][T12008] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.314444][T12008] vhci_hcd vhci_hcd.0: Device attached [ 191.323249][T12017] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 191.330033][T12017] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.337676][T12017] vhci_hcd vhci_hcd.0: Device attached [ 191.344876][T12008] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 191.351615][T12008] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.359552][T12008] vhci_hcd vhci_hcd.0: Device attached [ 191.367906][T12027] vhci_hcd: connection closed [ 191.368232][T12023] vhci_hcd: connection closed [ 191.371373][ T4206] vhci_hcd: stop threads [ 191.373765][T12015] vhci_hcd: connection closed [ 191.377882][ T4206] vhci_hcd: release socket [ 191.377902][ T4206] vhci_hcd: disconnect device [ 191.384540][T12022] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 191.391258][T12020] vhci_hcd: connection closed [ 191.391328][T12022] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.414985][T12022] vhci_hcd vhci_hcd.0: Device attached [ 191.414990][ T4206] vhci_hcd: stop threads [ 191.420398][T12017] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.420678][ T4206] vhci_hcd: release socket [ 191.427067][T12017] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 191.433127][ T4206] vhci_hcd: disconnect device [ 191.437527][T12017] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.437638][T12017] vhci_hcd vhci_hcd.0: Device attached [ 191.466026][ T4206] vhci_hcd: stop threads [ 191.470417][ T4206] vhci_hcd: release socket [ 191.474943][ T4206] vhci_hcd: disconnect device [ 191.479815][ T4206] vhci_hcd: stop threads [ 191.480041][T12017] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 191.484298][ T4206] vhci_hcd: release socket [ 191.490822][T12017] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.491015][T12017] vhci_hcd vhci_hcd.0: Device attached [ 191.495388][ T4206] vhci_hcd: disconnect device [ 191.507031][T12039] vhci_hcd: connection closed [ 191.508656][T12035] vhci_hcd: connection closed [ 191.518597][T12031] vhci_hcd: connection closed [ 191.522476][ T4206] vhci_hcd: stop threads [ 191.523546][T12024] vhci_hcd: connection closed [ 191.532761][ T4206] vhci_hcd: release socket [ 191.541908][ T4206] vhci_hcd: disconnect device [ 191.548949][ T4206] vhci_hcd: stop threads [ 191.553313][ T4206] vhci_hcd: release socket [ 191.558161][ T4206] vhci_hcd: disconnect device [ 191.564387][ T4206] vhci_hcd: stop threads [ 191.568699][ T4206] vhci_hcd: release socket [ 191.573260][ T4206] vhci_hcd: disconnect device [ 191.586893][ T4206] vhci_hcd: stop threads [ 191.591274][ T3383] usb 3-1: new low-speed USB device number 10 using vhci_hcd [ 191.591406][ T4206] vhci_hcd: release socket [ 191.603320][ T4206] vhci_hcd: disconnect device [ 191.622685][T12038] -1: renamed from syzkaller0 [ 191.670522][T12048] loop3: detected capacity change from 0 to 2364 [ 191.687787][T12048] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 191.694450][T12048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.702057][T12048] vhci_hcd vhci_hcd.0: Device attached [ 191.708308][T12048] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 191.714952][T12048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.722703][T12048] vhci_hcd vhci_hcd.0: Device attached [ 191.732990][T12048] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 191.739720][T12048] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.747439][T12048] vhci_hcd vhci_hcd.0: Device attached [ 191.755555][T12048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.764844][T12048] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 191.771595][T12048] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.779468][T12048] vhci_hcd vhci_hcd.0: Device attached [ 191.788553][T12048] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(22) [ 191.795235][T12048] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.803220][T12048] vhci_hcd vhci_hcd.0: Device attached [ 191.814226][T12063] vhci_hcd: connection closed [ 191.814240][T12058] vhci_hcd: connection closed [ 191.819156][ T4206] vhci_hcd: stop threads [ 191.825563][T12052] vhci_hcd: connection closed [ 191.828246][ T4206] vhci_hcd: release socket [ 191.828336][T12050] vhci_hcd: connection closed [ 191.828462][T12056] vhci_hcd: connection closed [ 191.833051][ T4206] vhci_hcd: disconnect device [ 191.845800][ T4206] vhci_hcd: stop threads [ 191.851454][T12061] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 191.851777][ T4206] vhci_hcd: release socket [ 191.855866][T12061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.855914][T12061] vhci_hcd vhci_hcd.0: Device attached [ 191.862711][ T4206] vhci_hcd: disconnect device [ 191.865790][ T4206] vhci_hcd: stop threads [ 191.869750][T12061] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 191.874953][ T4206] vhci_hcd: release socket [ 191.880363][T12061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.880512][T12061] vhci_hcd vhci_hcd.0: Device attached [ 191.885167][ T4206] vhci_hcd: disconnect device [ 191.893819][T12061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.897086][ T4206] vhci_hcd: stop threads [ 191.903551][T12061] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 191.908064][ T4206] vhci_hcd: release socket [ 191.913441][T12061] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.913558][T12061] vhci_hcd vhci_hcd.0: Device attached [ 191.918209][ T4206] vhci_hcd: disconnect device [ 191.930851][T12061] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 191.937784][ T4957] vhci_hcd: vhci_device speed not set [ 191.942087][T12061] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.972991][T11964] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.979795][T12061] vhci_hcd vhci_hcd.0: Device attached [ 191.988580][ T4206] vhci_hcd: stop threads [ 191.996318][ T4206] vhci_hcd: release socket [ 191.997351][T12071] vhci_hcd: connection closed [ 192.000800][ T4206] vhci_hcd: disconnect device [ 192.000948][T12069] vhci_hcd: connection closed [ 192.006462][ T4206] vhci_hcd: stop threads [ 192.019496][ T4206] vhci_hcd: release socket [ 192.023986][ T4206] vhci_hcd: disconnect device [ 192.028940][T11964] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.036086][T12065] vhci_hcd: connection closed [ 192.036300][T12067] vhci_hcd: connection closed [ 192.041708][ T4206] vhci_hcd: stop threads [ 192.050759][ T4206] vhci_hcd: release socket [ 192.055317][ T4206] vhci_hcd: disconnect device [ 192.060794][ T4206] vhci_hcd: stop threads [ 192.065258][ T4206] vhci_hcd: release socket [ 192.069816][ T4206] vhci_hcd: disconnect device [ 192.074839][ T2956] vhci_hcd: vhci_device speed not set [ 192.078788][T11964] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.080640][ T4206] vhci_hcd: stop threads [ 192.091345][ T4206] vhci_hcd: release socket [ 192.095795][ T4206] vhci_hcd: disconnect device [ 192.102898][T11964] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.119247][T12074] loop2: detected capacity change from 0 to 2048 [ 192.126758][T12077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2836'. [ 192.155354][ T3295] Alternate GPT is invalid, using primary GPT. [ 192.162123][ T3295] loop2: p2 p3 p7 [ 192.174876][T12074] Alternate GPT is invalid, using primary GPT. [ 192.180763][T11964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.181479][T12074] loop2: p2 p3 p7 [ 192.198245][T11964] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.216726][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.218432][T12085] loop1: detected capacity change from 0 to 2048 [ 192.223909][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.254789][T11964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.265430][T11964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.280849][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.288033][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.304388][ T5788] Alternate GPT is invalid, using primary GPT. [ 192.310834][ T5788] loop1: p2 p3 p7 [ 192.354311][T12085] Alternate GPT is invalid, using primary GPT. [ 192.360799][T12085] loop1: p2 p3 p7 [ 192.394415][T11964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.480404][T12099] mmap: syz.3.2839 (12099) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 192.627309][T11964] veth0_vlan: entered promiscuous mode [ 192.644234][T11964] veth1_vlan: entered promiscuous mode [ 192.677024][T11964] veth0_macvtap: entered promiscuous mode [ 192.683313][T12116] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=12116 comm=syz.0.2841 [ 192.694606][T11964] veth1_macvtap: entered promiscuous mode [ 192.717498][T11964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.731606][T11964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.781812][ T589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.803919][ T589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.820276][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 192.820371][ T29] audit: type=1400 audit(1756232996.534:15283): avc: denied { mount } for pid=11964 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 192.828333][ T589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.863997][ T29] audit: type=1400 audit(1756232996.544:15284): avc: denied { mounton } for pid=11964 comm="syz-executor" path="/root/syzkaller.BznAaE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 192.893117][ T589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.939699][T12125] random: crng reseeded on system resumption [ 193.165520][T12128] lo speed is unknown, defaulting to 1000 [ 193.246631][T12142] loop4: detected capacity change from 0 to 2364 [ 193.258516][T12145] loop1: detected capacity change from 0 to 2364 [ 193.275523][ T29] audit: type=1326 audit(1756232996.994:15285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 193.299374][ T29] audit: type=1326 audit(1756232996.994:15286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 193.343530][T12145] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 193.350378][T12145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.357994][T12145] vhci_hcd vhci_hcd.0: Device attached [ 193.364729][ T29] audit: type=1326 audit(1756232997.044:15287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 193.388478][ T29] audit: type=1326 audit(1756232997.044:15288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 193.412098][ T29] audit: type=1326 audit(1756232997.044:15289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 193.435869][ T29] audit: type=1326 audit(1756232997.044:15290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 193.459534][ T29] audit: type=1326 audit(1756232997.054:15291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 193.463904][T12145] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 193.483296][ T29] audit: type=1326 audit(1756232997.054:15292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.2.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 193.489755][T12145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.489877][T12145] vhci_hcd vhci_hcd.0: Device attached [ 193.516394][T12158] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 193.533221][T12158] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.538065][T12157] loop4: detected capacity change from 0 to 2364 [ 193.541138][T12158] vhci_hcd vhci_hcd.0: Device attached [ 193.565570][T12158] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.580279][T12162] FAULT_INJECTION: forcing a failure. [ 193.580279][T12162] name failslab, interval 1, probability 0, space 0, times 0 [ 193.593246][T12162] CPU: 0 UID: 0 PID: 12162 Comm: syz.3.2851 Not tainted syzkaller #0 PREEMPT(voluntary) [ 193.593284][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.593368][T12162] Call Trace: [ 193.593377][T12162] [ 193.593386][T12162] __dump_stack+0x1d/0x30 [ 193.593463][T12162] dump_stack_lvl+0xe8/0x140 [ 193.593488][T12162] dump_stack+0x15/0x1b [ 193.593509][T12162] should_fail_ex+0x265/0x280 [ 193.593601][T12162] should_failslab+0x8c/0xb0 [ 193.593692][T12162] kmem_cache_alloc_noprof+0x50/0x310 [ 193.593785][T12162] ? audit_log_start+0x365/0x6c0 [ 193.593821][T12162] audit_log_start+0x365/0x6c0 [ 193.593930][T12162] audit_seccomp+0x48/0x100 [ 193.593970][T12162] ? __seccomp_filter+0x68c/0x10d0 [ 193.594065][T12162] __seccomp_filter+0x69d/0x10d0 [ 193.594171][T12162] __secure_computing+0x82/0x150 [ 193.594193][T12162] syscall_trace_enter+0xcf/0x1e0 [ 193.594217][T12162] do_syscall_64+0xac/0x200 [ 193.594247][T12162] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 193.594335][T12162] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 193.594377][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.594400][T12162] RIP: 0033:0x7f880117d5fc [ 193.594479][T12162] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 193.594502][T12162] RSP: 002b:00007f87ffbdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.594522][T12162] RAX: ffffffffffffffda RBX: 00007f88013a5fa0 RCX: 00007f880117d5fc [ 193.594535][T12162] RDX: 000000000000000f RSI: 00007f87ffbdf0a0 RDI: 0000000000000006 [ 193.594547][T12162] RBP: 00007f87ffbdf090 R08: 0000000000000000 R09: 0000000000000000 [ 193.594558][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.594583][T12162] R13: 00007f88013a6038 R14: 00007f88013a5fa0 R15: 00007fff41c28a88 [ 193.594607][T12162] [ 193.789778][T12155] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 193.796622][T12155] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.804334][T12155] vhci_hcd vhci_hcd.0: Device attached [ 193.804619][T12158] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 193.816573][T12158] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.824597][T12167] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(16) [ 193.831256][T12167] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.839062][T12167] vhci_hcd vhci_hcd.0: Device attached [ 193.839065][T12158] vhci_hcd vhci_hcd.0: Device attached [ 193.845351][T12155] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.863210][T12157] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 193.869869][T12157] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.877493][T12157] vhci_hcd vhci_hcd.0: Device attached [ 193.889467][T12165] vhci_hcd: connection closed [ 193.889637][T12152] vhci_hcd: connection closed [ 193.894625][ T4206] vhci_hcd: stop threads [ 193.901617][T12150] vhci_hcd: connection reset by peer [ 193.903723][ T4206] vhci_hcd: release socket [ 193.913462][ T4206] vhci_hcd: disconnect device [ 193.918375][ T4206] vhci_hcd: stop threads [ 193.918486][T12159] vhci_hcd: connection closed [ 193.922724][ T4206] vhci_hcd: release socket [ 193.922742][ T4206] vhci_hcd: disconnect device [ 193.923196][ T4206] vhci_hcd: stop threads [ 193.928385][T12171] vhci_hcd: connection closed [ 193.932347][ T4206] vhci_hcd: release socket [ 193.932359][ T4206] vhci_hcd: disconnect device [ 193.956490][ T4206] vhci_hcd: stop threads [ 193.957913][T12177] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 193.960900][ T4206] vhci_hcd: release socket [ 193.967580][T12177] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.972100][ T4206] vhci_hcd: disconnect device [ 193.979694][T12177] vhci_hcd vhci_hcd.0: Device attached [ 193.998253][T12128] chnl_net:caif_netlink_parms(): no params data found [ 194.022811][ T4206] vhci_hcd: stop threads [ 194.023665][T12155] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 194.027215][ T4206] vhci_hcd: release socket [ 194.033880][T12155] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 194.038560][ T4206] vhci_hcd: disconnect device [ 194.046296][T12155] vhci_hcd vhci_hcd.0: Device attached [ 194.053137][T12181] vhci_hcd: connection closed [ 194.056676][T12178] vhci_hcd: connection closed [ 194.057062][ T9] usb 9-1: new low-speed USB device number 9 using vhci_hcd [ 194.066362][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2855'. [ 194.073529][T12163] vhci_hcd: connection closed [ 194.082638][T12169] vhci_hcd: connection closed [ 194.083109][T12164] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 194.089477][ T4206] vhci_hcd: stop threads [ 194.102374][ T4206] vhci_hcd: release socket [ 194.106939][ T4206] vhci_hcd: disconnect device [ 194.116869][ T4206] vhci_hcd: stop threads [ 194.121478][ T4206] vhci_hcd: release socket [ 194.125943][ T4206] vhci_hcd: disconnect device [ 194.130835][ T4206] vhci_hcd: stop threads [ 194.135121][ T4206] vhci_hcd: release socket [ 194.138979][T12187] 8021q: adding VLAN 0 to HW filter on device bond10 [ 194.139547][ T4206] vhci_hcd: disconnect device [ 194.139979][ T4206] vhci_hcd: stop threads [ 194.155700][ T4206] vhci_hcd: release socket [ 194.160128][ T4206] vhci_hcd: disconnect device [ 194.194127][T12128] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.201340][T12128] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.208858][T12128] bridge_slave_0: entered allmulticast mode [ 194.216155][T12128] bridge_slave_0: entered promiscuous mode [ 194.223265][T12128] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.230413][T12128] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.244499][T12128] bridge_slave_1: entered allmulticast mode [ 194.251338][T12128] bridge_slave_1: entered promiscuous mode [ 194.274815][T12128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.286494][T12128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.312754][T12128] team0: Port device team_slave_0 added [ 194.320062][T12128] team0: Port device team_slave_1 added [ 194.348626][T12128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.355771][T12128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.381845][T12128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.400275][T12128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.407448][T12128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.433499][T12128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.484585][T12208] process 'syz.3.2861' launched '/dev/fd/3' with NULL argv: empty string added [ 194.523966][T12128] hsr_slave_0: entered promiscuous mode [ 194.530558][T12128] hsr_slave_1: entered promiscuous mode [ 194.536987][T12128] debugfs: 'hsr0' already exists in 'hsr' [ 194.542935][T12128] Cannot create hsr debugfs directory [ 194.567351][T12218] loop3: detected capacity change from 0 to 512 [ 194.574745][T12218] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 194.589987][T12218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 194.598320][T12218] EXT4-fs (loop3): orphan cleanup on readonly fs [ 194.609283][T12218] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.2864: attempt to clear invalid blocks 1024 len 1 [ 194.624424][T12218] EXT4-fs (loop3): Remounting filesystem read-only [ 194.631589][T12218] EXT4-fs (loop3): 1 truncate cleaned up [ 194.639475][T12218] EXT4-fs mount: 6 callbacks suppressed [ 194.639505][T12218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 194.659100][T12128] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.674949][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2865'. [ 194.684363][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 194.724058][T12128] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.745583][T12229] tipc: Started in network mode [ 194.750502][T12229] tipc: Node identity 1acaeb822c9e, cluster identity 4711 [ 194.757872][T12229] tipc: Enabled bearer , priority 0 [ 194.765498][T12225] loop3: detected capacity change from 0 to 164 [ 194.769153][T12229] syzkaller0: entered promiscuous mode [ 194.777304][T12229] syzkaller0: entered allmulticast mode [ 194.783558][T12225] rock: directory entry would overflow storage [ 194.789794][T12225] rock: sig=0x66, size=4, remaining=3 [ 194.798371][T12128] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.821242][T12229] tipc: Resetting bearer [ 194.829033][T12228] tipc: Resetting bearer [ 194.836597][T12228] tipc: Disabling bearer [ 194.852731][T12128] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.938405][T12234] loop4: detected capacity change from 0 to 2364 [ 194.953648][T12236] loop3: detected capacity change from 0 to 2048 [ 194.962672][T12234] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 194.969331][T12234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.974224][T12128] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.977087][T12234] vhci_hcd vhci_hcd.0: Device attached [ 194.992544][T12234] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 194.999181][T12234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.001781][ T3497] loop3: p1 < > p4 [ 195.006925][T12234] vhci_hcd vhci_hcd.0: Device attached [ 195.013976][ T3497] loop3: p4 size 8388608 extends beyond EOD, truncated [ 195.019339][T12234] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 195.029567][T12234] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 195.037626][T12234] vhci_hcd vhci_hcd.0: Device attached [ 195.044313][T12234] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.046370][T12236] loop3: p1 < > p4 [ 195.053171][T12234] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 195.060635][T12236] loop3: p4 size 8388608 extends beyond EOD, [ 195.063037][T12234] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.063127][T12234] vhci_hcd vhci_hcd.0: Device attached [ 195.069195][T12236] truncated [ 195.078993][T12234] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 195.092114][T12234] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.099835][T12234] vhci_hcd vhci_hcd.0: Device attached [ 195.106106][T12245] vhci_hcd: connection closed [ 195.106196][T12128] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.106326][T12243] vhci_hcd: connection closed [ 195.106574][T12241] vhci_hcd: connection closed [ 195.111714][ T4196] vhci_hcd: stop threads [ 195.118179][T12239] vhci_hcd: connection closed [ 195.122690][ T4196] vhci_hcd: release socket [ 195.127842][T12237] vhci_hcd: connection closed [ 195.131614][ T4196] vhci_hcd: disconnect device [ 195.155060][T12128] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.159710][ T4196] vhci_hcd: stop threads [ 195.166114][ T4196] vhci_hcd: release socket [ 195.170608][ T4196] vhci_hcd: disconnect device [ 195.178371][T12128] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.187370][ T4196] vhci_hcd: stop threads [ 195.191693][ T4196] vhci_hcd: release socket [ 195.196144][ T4196] vhci_hcd: disconnect device [ 195.201513][ T4196] vhci_hcd: stop threads [ 195.205819][ T4196] vhci_hcd: release socket [ 195.210343][ T4196] vhci_hcd: disconnect device [ 195.215664][ T4196] vhci_hcd: stop threads [ 195.219977][ T4196] vhci_hcd: release socket [ 195.224635][ T4196] vhci_hcd: disconnect device [ 195.310357][T12128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.326076][T12128] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.336054][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.343230][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.361575][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.368830][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.398841][T12128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.409482][T12128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.431545][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2875'. [ 195.456451][T12267] loop2: detected capacity change from 0 to 2364 [ 195.484059][T12269] 9pnet: p9_errstr2errno: server reported unknown error [ 195.503280][T12258] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 195.510073][T12258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.517776][T12258] vhci_hcd vhci_hcd.0: Device attached [ 195.530562][T12271] loop3: detected capacity change from 0 to 1024 [ 195.537694][T12258] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 195.544481][T12258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.552416][T12258] vhci_hcd vhci_hcd.0: Device attached [ 195.558608][T12271] ext4: Bad value for 'mb_optimize_scan' [ 195.565282][T12258] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.606700][T12258] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 195.613423][T12258] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.619911][T12128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.621194][T12258] vhci_hcd vhci_hcd.0: Device attached [ 195.635433][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2877'. [ 195.652699][T12283] 8021q: adding VLAN 0 to HW filter on device bond20 [ 195.653598][T12258] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 195.666030][T12258] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.673956][T12258] vhci_hcd vhci_hcd.0: Device attached [ 195.689419][T12285] loop3: detected capacity change from 0 to 164 [ 195.697101][T12285] rock: directory entry would overflow storage [ 195.703405][T12285] rock: sig=0x66, size=4, remaining=3 [ 195.727247][T12293] loop4: detected capacity change from 0 to 512 [ 195.729315][T12295] loop1: detected capacity change from 0 to 512 [ 195.740867][T12295] EXT4-fs: Ignoring removed bh option [ 195.746660][T12288] vhci_hcd: connection closed [ 195.746834][T12280] vhci_hcd: connection closed [ 195.749832][T12293] EXT4-fs: Ignoring removed bh option [ 195.751764][T12273] vhci_hcd: connection closed [ 195.751969][T12276] vhci_hcd: connection closed [ 195.768593][ T4196] vhci_hcd: stop threads [ 195.777718][ T4196] vhci_hcd: release socket [ 195.782332][ T4196] vhci_hcd: disconnect device [ 195.786104][ T23] usb 5-1: new low-speed USB device number 7 using vhci_hcd [ 195.799310][T12274] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 195.807156][T12295] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.816314][T12295] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 195.830355][ T4196] vhci_hcd: stop threads [ 195.834743][ T4196] vhci_hcd: release socket [ 195.839224][ T4196] vhci_hcd: disconnect device [ 195.844425][T12293] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.853552][T12293] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 195.865164][ T4196] vhci_hcd: stop threads [ 195.869468][ T4196] vhci_hcd: release socket [ 195.873261][T12128] veth0_vlan: entered promiscuous mode [ 195.874064][ T4196] vhci_hcd: disconnect device [ 195.897932][T12128] veth1_vlan: entered promiscuous mode [ 195.907232][T12293] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 195.915812][T12128] veth0_macvtap: entered promiscuous mode [ 195.924200][ T4196] vhci_hcd: stop threads [ 195.928483][ T4196] vhci_hcd: release socket [ 195.928506][T12295] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 195.933125][ T4196] vhci_hcd: disconnect device [ 195.935158][T12305] FAULT_INJECTION: forcing a failure. [ 195.935158][T12305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.945960][T12295] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 195.947047][T12305] CPU: 1 UID: 0 PID: 12305 Comm: syz.3.2882 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.947083][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.947101][T12305] Call Trace: [ 195.947112][T12305] [ 195.947123][T12305] __dump_stack+0x1d/0x30 [ 195.947228][T12305] dump_stack_lvl+0xe8/0x140 [ 195.947303][T12305] dump_stack+0x15/0x1b [ 195.947327][T12305] should_fail_ex+0x265/0x280 [ 195.947356][T12305] should_fail+0xb/0x20 [ 195.947381][T12305] should_fail_usercopy+0x1a/0x20 [ 195.947412][T12305] _copy_from_user+0x1c/0xb0 [ 195.947477][T12305] kstrtouint_from_user+0x69/0xf0 [ 195.947555][T12305] ? 0xffffffff81000000 [ 195.947573][T12305] ? selinux_file_permission+0x1e4/0x320 [ 195.947607][T12305] proc_fail_nth_write+0x50/0x160 [ 195.947644][T12305] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.947681][T12305] vfs_write+0x269/0x960 [ 195.947712][T12305] ? vfs_read+0x4e6/0x770 [ 195.947740][T12305] ? __rcu_read_unlock+0x4f/0x70 [ 195.947779][T12305] ? __fget_files+0x184/0x1c0 [ 195.947880][T12305] ksys_write+0xda/0x1a0 [ 195.947913][T12305] __x64_sys_write+0x40/0x50 [ 195.947944][T12305] x64_sys_call+0x27fe/0x2ff0 [ 195.947973][T12305] do_syscall_64+0xd2/0x200 [ 195.948026][T12305] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.948060][T12305] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 195.948096][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.948138][T12305] RIP: 0033:0x7f880117d69f [ 195.948160][T12305] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 195.948184][T12305] RSP: 002b:00007f87ffbdf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 195.948211][T12305] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f880117d69f [ 195.948228][T12305] RDX: 0000000000000001 RSI: 00007f87ffbdf0a0 RDI: 0000000000000004 [ 195.948246][T12305] RBP: 00007f87ffbdf090 R08: 0000000000000000 R09: 0000000000000000 [ 195.948295][T12305] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 195.948312][T12305] R13: 00007f88013a6038 R14: 00007f88013a5fa0 R15: 00007fff41c28a88 [ 195.948340][T12305] [ 195.948437][T12293] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 195.965101][T12128] veth1_macvtap: entered promiscuous mode [ 195.987753][T12293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.995995][T12128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.026161][T12295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.031449][T12128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.041947][T12308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2883'. [ 196.099702][ T4209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.181121][T12306] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 196.184957][ T4209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.280678][ T4209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.301489][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.314547][T11964] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.329741][T12322] sd 0:0:1:0: device reset [ 196.337771][ T4209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.383796][T12324] loop4: detected capacity change from 0 to 512 [ 196.393811][T12327] FAULT_INJECTION: forcing a failure. [ 196.393811][T12327] name failslab, interval 1, probability 0, space 0, times 0 [ 196.406696][T12327] CPU: 0 UID: 0 PID: 12327 Comm: syz.1.2884 Not tainted syzkaller #0 PREEMPT(voluntary) [ 196.406725][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.406737][T12327] Call Trace: [ 196.406763][T12327] [ 196.406772][T12327] __dump_stack+0x1d/0x30 [ 196.406868][T12327] dump_stack_lvl+0xe8/0x140 [ 196.406888][T12327] dump_stack+0x15/0x1b [ 196.406909][T12327] should_fail_ex+0x265/0x280 [ 196.406937][T12327] should_failslab+0x8c/0xb0 [ 196.407042][T12327] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 196.407076][T12327] ? sidtab_sid2str_get+0xa0/0x130 [ 196.407101][T12327] kmemdup_noprof+0x2b/0x70 [ 196.407134][T12327] sidtab_sid2str_get+0xa0/0x130 [ 196.407186][T12327] security_sid_to_context_core+0x1eb/0x2e0 [ 196.407222][T12327] security_sid_to_context+0x27/0x40 [ 196.407293][T12327] selinux_lsmprop_to_secctx+0x67/0xf0 [ 196.407322][T12327] security_lsmprop_to_secctx+0x43/0x80 [ 196.407358][T12327] audit_log_task_context+0x77/0x190 [ 196.407467][T12327] audit_log_task+0xf4/0x250 [ 196.407568][T12327] audit_seccomp+0x61/0x100 [ 196.407592][T12327] ? __seccomp_filter+0x68c/0x10d0 [ 196.407625][T12327] __seccomp_filter+0x69d/0x10d0 [ 196.407656][T12327] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 196.407692][T12327] ? vfs_write+0x7e8/0x960 [ 196.407781][T12327] ? __rcu_read_unlock+0x4f/0x70 [ 196.407860][T12327] ? __fget_files+0x184/0x1c0 [ 196.407966][T12327] __secure_computing+0x82/0x150 [ 196.407992][T12327] syscall_trace_enter+0xcf/0x1e0 [ 196.408071][T12327] do_syscall_64+0xac/0x200 [ 196.408104][T12327] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 196.408131][T12327] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 196.408226][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.408300][T12327] RIP: 0033:0x7fa9970eebe9 [ 196.408320][T12327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.408382][T12327] RSP: 002b:00007fa995b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 196.408406][T12327] RAX: ffffffffffffffda RBX: 00007fa997315fa0 RCX: 00007fa9970eebe9 [ 196.408421][T12327] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000007 [ 196.408437][T12327] RBP: 00007fa995b57090 R08: 0000000000000000 R09: 0000000000000000 [ 196.408499][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.408513][T12327] R13: 00007fa997316038 R14: 00007fa997315fa0 R15: 00007ffc54fc0098 [ 196.408538][T12327] [ 196.436888][T12331] syzkaller0: entered promiscuous mode [ 196.453167][T12324] ext4: Unknown parameter 'noacl' [ 196.455238][T12331] syzkaller0: entered allmulticast mode [ 196.605774][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'. [ 196.625957][T12333] loop4: detected capacity change from 0 to 128 [ 196.642647][ T3383] usb 3-1: enqueue for inactive port 0 [ 196.696342][T12337] tipc: Enabled bearer , priority 0 [ 196.703027][ T3383] usb 3-1: enqueue for inactive port 0 [ 196.771459][ T3383] vhci_hcd: vhci_device speed not set [ 196.810500][T12337] syzkaller0: entered promiscuous mode [ 196.816072][T12337] syzkaller0: entered allmulticast mode [ 196.854833][T12346] loop4: detected capacity change from 0 to 512 [ 196.864404][T12337] tipc: Resetting bearer [ 196.874911][T12346] EXT4-fs: Ignoring removed bh option [ 196.887600][T12335] tipc: Resetting bearer [ 196.900467][T12346] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.909748][T12346] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 196.920493][T12346] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 196.930610][T12346] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 196.939420][T12346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.953800][T12335] tipc: Disabling bearer [ 196.972604][T11964] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.092960][T12366] netlink: 'syz.2.2901': attribute type 39 has an invalid length. [ 197.125847][T12369] loop1: detected capacity change from 0 to 2364 [ 197.144074][T12375] loop4: detected capacity change from 0 to 512 [ 197.154465][T12340] lo speed is unknown, defaulting to 1000 [ 197.160100][T12369] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 197.166958][T12369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.174772][T12369] vhci_hcd vhci_hcd.0: Device attached [ 197.184521][T12369] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 197.191244][T12369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.198930][T12369] vhci_hcd vhci_hcd.0: Device attached [ 197.200815][T12375] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 197.238661][T12375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 197.239337][T12369] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 197.253572][T12369] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 197.261305][T12369] vhci_hcd vhci_hcd.0: Device attached [ 197.272127][T12375] EXT4-fs (loop4): orphan cleanup on readonly fs [ 197.279115][T12375] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.2903: attempt to clear invalid blocks 1024 len 1 [ 197.295746][T12375] EXT4-fs (loop4): Remounting filesystem read-only [ 197.296967][T12369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.324817][T12375] EXT4-fs (loop4): 1 truncate cleaned up [ 197.330919][T12369] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 197.337618][T12369] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.345349][T12369] vhci_hcd vhci_hcd.0: Device attached [ 197.355902][T12390] loop2: detected capacity change from 0 to 512 [ 197.370216][T12375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 197.371431][T12388] vhci_hcd: connection closed [ 197.386207][T12390] EXT4-fs: Ignoring removed bh option [ 197.386655][ T4209] vhci_hcd: stop threads [ 197.398878][T12390] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.400633][ T4209] vhci_hcd: release socket [ 197.400652][ T4209] vhci_hcd: disconnect device [ 197.409731][T12390] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 197.415087][T12383] vhci_hcd: connection closed [ 197.427316][T12379] vhci_hcd: connection closed [ 197.432111][T12376] vhci_hcd: connection closed [ 197.446657][T12390] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 197.462397][ T4209] vhci_hcd: stop threads [ 197.466725][ T4209] vhci_hcd: release socket [ 197.471257][ T4209] vhci_hcd: disconnect device [ 197.484115][ T4209] vhci_hcd: stop threads [ 197.484219][T11964] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 197.488574][ T4209] vhci_hcd: release socket [ 197.502004][ T4209] vhci_hcd: disconnect device [ 197.507061][T12340] chnl_net:caif_netlink_parms(): no params data found [ 197.509409][T12390] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 197.525295][ T4209] vhci_hcd: stop threads [ 197.529766][ T4209] vhci_hcd: release socket [ 197.534391][ T4209] vhci_hcd: disconnect device [ 197.539686][T12390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.575889][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.614704][T12340] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.622036][T12340] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.629488][T12340] bridge_slave_0: entered allmulticast mode [ 197.636406][T12340] bridge_slave_0: entered promiscuous mode [ 197.642501][ T3383] usb 3-1: enqueue for inactive port 0 [ 197.644517][T12340] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.655336][T12340] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.661112][ T3383] usb 3-1: enqueue for inactive port 0 [ 197.664779][T12340] bridge_slave_1: entered allmulticast mode [ 197.667864][ T3383] usb 3-1: enqueue for inactive port 0 [ 197.674826][T12340] bridge_slave_1: entered promiscuous mode [ 197.706464][T12340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.717606][T12340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.746453][T12340] team0: Port device team_slave_0 added [ 197.752206][ T3383] vhci_hcd: vhci_device speed not set [ 197.759571][T12340] team0: Port device team_slave_1 added [ 197.787419][T12340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.794534][T12340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.820750][T12340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.832599][T12340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.839734][T12340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.866274][T12340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.888023][T12413] loop2: detected capacity change from 0 to 512 [ 197.904534][T12413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.917781][T12413] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.929575][T12413] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 197.934685][T12340] hsr_slave_0: entered promiscuous mode [ 197.963573][T12340] hsr_slave_1: entered promiscuous mode [ 197.984354][T12340] debugfs: 'hsr0' already exists in 'hsr' [ 197.990340][T12340] Cannot create hsr debugfs directory [ 198.165056][T12340] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.301948][T12340] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.392171][T12425] loop4: detected capacity change from 0 to 164 [ 198.414144][T12340] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.429562][T12425] rock: directory entry would overflow storage [ 198.436039][T12425] rock: sig=0x66, size=4, remaining=3 [ 198.542278][T12340] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.677048][T12340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.678685][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.695280][T12340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.705377][T12340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.724467][T12340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.739528][T12442] tipc: Started in network mode [ 198.744577][T12442] tipc: Node identity 8afd3be36e0b, cluster identity 4711 [ 198.751897][T12442] tipc: Enabled bearer , priority 0 [ 198.759234][T12442] syzkaller0: entered promiscuous mode [ 198.765109][T12442] syzkaller0: entered allmulticast mode [ 198.778111][T12445] loop2: detected capacity change from 0 to 512 [ 198.785935][T12442] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2922'. [ 198.804008][T12445] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 198.814804][T12445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 198.814914][T12440] tipc: Resetting bearer [ 198.823588][T12445] EXT4-fs (loop2): orphan cleanup on readonly fs [ 198.835884][T12445] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2923: attempt to clear invalid blocks 1024 len 1 [ 198.850770][T12445] EXT4-fs (loop2): Remounting filesystem read-only [ 198.851098][T12440] tipc: Disabling bearer [ 198.865552][T12445] EXT4-fs (loop2): 1 truncate cleaned up [ 198.871883][T12445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 198.897498][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 198.919099][T12340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.935183][T12340] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.946438][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.953563][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.964252][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 198.964267][ T29] audit: type=1326 audit(1756233002.684:15626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 199.002384][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.009521][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.018927][ T29] audit: type=1326 audit(1756233002.684:15627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 199.042767][ T29] audit: type=1326 audit(1756233002.684:15628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 199.062119][T12340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.067183][ T29] audit: type=1326 audit(1756233002.684:15629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 199.100753][ T29] audit: type=1326 audit(1756233002.684:15630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 199.119380][T12458] loop1: detected capacity change from 0 to 512 [ 199.124718][ T29] audit: type=1326 audit(1756233002.684:15631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 199.130944][ T9] usb 9-1: enqueue for inactive port 0 [ 199.130963][ T9] usb 9-1: enqueue for inactive port 0 [ 199.155222][ T29] audit: type=1326 audit(1756233002.684:15632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 199.190411][ T29] audit: type=1326 audit(1756233002.684:15633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 199.191671][T12458] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 199.214677][ T29] audit: type=1326 audit(1756233002.714:15634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2294beebe9 code=0x7ffc0000 [ 199.214713][ T29] audit: type=1326 audit(1756233002.724:15635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2294bed550 code=0x7ffc0000 [ 199.271681][ T9] vhci_hcd: vhci_device speed not set [ 199.278130][T12458] EXT4-fs (loop1): invalid journal inode [ 199.284134][T12458] EXT4-fs (loop1): can't get journal size [ 199.296860][T12458] EXT4-fs (loop1): 1 truncate cleaned up [ 199.304038][T12458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.312521][T12340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.386855][T12340] veth0_vlan: entered promiscuous mode [ 199.395114][T12340] veth1_vlan: entered promiscuous mode [ 199.401303][T12458] loop1: detected capacity change from 512 to 0 [ 199.411762][ C0] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 199.418511][T12340] veth0_macvtap: entered promiscuous mode [ 199.421415][ C0] I/O error, dev loop1, sector 20 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 199.429891][T12340] veth1_macvtap: entered promiscuous mode [ 199.436741][ C0] I/O error, dev loop1, sector 18 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 199.450548][T12340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.459957][T12469] EXT4-fs error (device loop1): ext4_get_inode_loc:4999: inode #18: block 9: comm syz.1.2925: unable to read itable block [ 199.475967][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 199.485509][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 199.495056][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 199.516073][T12469] EXT4-fs (loop1): I/O error while writing superblock [ 199.525450][T12340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.534719][ C0] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 199.544417][ C0] I/O error, dev loop1, sector 20 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 199.554160][ C0] I/O error, dev loop1, sector 18 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 199.563774][T12469] EXT4-fs error (device loop1): ext4_get_inode_loc:4999: inode #18: block 9: comm syz.1.2925: unable to read itable block [ 199.579901][ T589] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.582176][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 199.592673][ T589] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.598206][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 199.616502][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 199.634162][T12469] EXT4-fs (loop1): I/O error while writing superblock [ 199.640991][T12469] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: IO failure [ 199.663436][ T589] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.673101][ T589] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.684633][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 199.695794][T12469] EXT4-fs (loop1): I/O error while writing superblock [ 199.702786][T12469] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #18: comm syz.1.2925: mark_inode_dirty error [ 199.740950][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 199.750874][T12469] EXT4-fs (loop1): I/O error while writing superblock [ 199.768907][T12469] EXT4-fs error (device loop1): ext4_get_inode_loc:4999: inode #18: block 9: comm syz.1.2925: unable to read itable block [ 199.787474][T12479] loop4: detected capacity change from 0 to 164 [ 199.796503][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 199.805062][T12469] EXT4-fs (loop1): I/O error while writing superblock [ 199.811993][T12469] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: IO failure [ 199.823707][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 199.834933][T12469] EXT4-fs (loop1): I/O error while writing superblock [ 199.841795][T12469] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #18: comm syz.1.2925: mark_inode_dirty error [ 199.873478][T12479] rock: directory entry would overflow storage [ 199.879688][T12479] rock: sig=0x66, size=4, remaining=3 [ 199.892685][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 199.901200][T12469] EXT4-fs (loop1): I/O error while writing superblock [ 199.909761][T12469] EXT4-fs error (device loop1): ext4_check_bdev_write_error:228: comm syz.1.2925: Error while async write back metadata [ 199.936527][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 199.936584][T12469] EXT4-fs (loop1): I/O error while writing superblock [ 199.936600][T12469] EXT4-fs error (device loop1): ext4_check_bdev_write_error:228: comm syz.1.2925: Error while async write back metadata [ 199.936672][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 199.936714][T12469] EXT4-fs (loop1): I/O error while writing superblock [ 199.937064][T12469] EXT4-fs error (device loop1): ext4_get_inode_loc:4999: inode #18: block 9: comm syz.1.2925: unable to read itable block [ 200.008070][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 200.079315][T12495] smc: net device bond0 applied user defined pnetid SYZ0 [ 200.087667][T12495] smc: net device bond0 erased user defined pnetid SYZ0 [ 200.111843][ T3304] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 200.177487][T12497] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 200.184145][T12497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.187866][T12502] loop3: detected capacity change from 0 to 512 [ 200.191988][T12497] vhci_hcd vhci_hcd.0: Device attached [ 200.199494][T12502] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 200.214765][T12497] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 200.215397][T12502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 200.221525][T12497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.221734][T12497] vhci_hcd vhci_hcd.0: Device attached [ 200.230187][T12502] EXT4-fs (loop3): orphan cleanup on readonly fs [ 200.249745][T12502] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.2935: attempt to clear invalid blocks 1024 len 1 [ 200.265279][T12502] EXT4-fs (loop3): Remounting filesystem read-only [ 200.273338][T12502] EXT4-fs (loop3): 1 truncate cleaned up [ 200.279146][T12497] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(16) [ 200.279636][T12502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 200.286010][T12497] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 200.286171][T12497] vhci_hcd vhci_hcd.0: Device attached [ 200.314828][T12497] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.327531][T12497] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 200.334378][T12497] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 200.342271][T12497] vhci_hcd vhci_hcd.0: Device attached [ 200.350978][T12509] vhci_hcd: connection closed [ 200.351232][T12506] vhci_hcd: connection closed [ 200.356196][ T4203] vhci_hcd: stop threads [ 200.365486][ T4203] vhci_hcd: release socket [ 200.370084][ T4203] vhci_hcd: disconnect device [ 200.374898][T12500] vhci_hcd: connection closed [ 200.375050][T12503] vhci_hcd: connection closed [ 200.382073][ T4203] vhci_hcd: stop threads [ 200.391155][ T4203] vhci_hcd: release socket [ 200.395700][ T4203] vhci_hcd: disconnect device [ 200.401647][T12340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 200.413769][ T4203] vhci_hcd: stop threads [ 200.418088][ T4203] vhci_hcd: release socket [ 200.422806][ T4203] vhci_hcd: disconnect device [ 200.441184][ T3411] usb 1-1: new low-speed USB device number 14 using vhci_hcd [ 200.448957][ T3411] usb 1-1: enqueue for inactive port 0 [ 200.455396][ T3411] usb 1-1: enqueue for inactive port 0 [ 200.465983][ T3411] usb 1-1: enqueue for inactive port 0 [ 200.471634][T12520] tipc: Started in network mode [ 200.476697][T12520] tipc: Node identity 72c75e57ce1b, cluster identity 4711 [ 200.484077][T12520] tipc: Enabled bearer , priority 0 [ 200.491856][ T4203] vhci_hcd: stop threads [ 200.496219][ T4203] vhci_hcd: release socket [ 200.498231][T12520] tipc: Resetting bearer [ 200.500726][ T4203] vhci_hcd: disconnect device [ 200.513378][T12519] tipc: Disabling bearer [ 200.525305][T12511] lo speed is unknown, defaulting to 1000 [ 200.541334][ T3411] vhci_hcd: vhci_device speed not set [ 200.668994][T12511] chnl_net:caif_netlink_parms(): no params data found [ 200.707607][T12511] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.715018][T12511] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.722704][T12511] bridge_slave_0: entered allmulticast mode [ 200.729321][T12511] bridge_slave_0: entered promiscuous mode [ 200.737833][T12511] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.745062][T12511] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.752823][T12511] bridge_slave_1: entered allmulticast mode [ 200.759667][T12511] bridge_slave_1: entered promiscuous mode [ 200.779322][T12511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.789984][T12511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.801454][ T23] usb 5-1: enqueue for inactive port 0 [ 200.807103][ T23] usb 5-1: enqueue for inactive port 0 [ 200.821164][T12511] team0: Port device team_slave_0 added [ 200.827051][T12538] loop2: detected capacity change from 0 to 164 [ 200.828445][T12511] team0: Port device team_slave_1 added [ 200.841766][T12538] rock: directory entry would overflow storage [ 200.848014][T12538] rock: sig=0x66, size=4, remaining=3 [ 200.883485][ T23] vhci_hcd: vhci_device speed not set [ 200.901892][T12511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.909495][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.917260][T12541] loop4: detected capacity change from 0 to 512 [ 200.935530][T12511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.954157][T12511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.961254][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.971932][T12541] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 200.988288][T12511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.020707][T12541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 201.029725][T12541] EXT4-fs (loop4): orphan cleanup on readonly fs [ 201.047611][T12541] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.2943: attempt to clear invalid blocks 1024 len 1 [ 201.062430][T12541] EXT4-fs (loop4): Remounting filesystem read-only [ 201.067777][T12549] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 201.069341][T12541] EXT4-fs (loop4): 1 truncate cleaned up [ 201.083597][T12541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 201.085366][T12511] hsr_slave_0: entered promiscuous mode [ 201.110011][T12511] hsr_slave_1: entered promiscuous mode [ 201.116267][T12511] debugfs: 'hsr0' already exists in 'hsr' [ 201.122093][T12511] Cannot create hsr debugfs directory [ 201.142805][T11964] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 201.250857][T12560] tipc: Enabled bearer , priority 0 [ 201.268845][T12560] tipc: Resetting bearer [ 201.278319][T12559] tipc: Disabling bearer [ 201.283049][T12566] FAULT_INJECTION: forcing a failure. [ 201.283049][T12566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.297368][T12566] CPU: 0 UID: 0 PID: 12566 Comm: syz.0.2948 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.297416][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.297433][T12566] Call Trace: [ 201.297441][T12566] [ 201.297451][T12566] __dump_stack+0x1d/0x30 [ 201.297474][T12566] dump_stack_lvl+0xe8/0x140 [ 201.297501][T12566] dump_stack+0x15/0x1b [ 201.297519][T12566] should_fail_ex+0x265/0x280 [ 201.297544][T12566] should_fail+0xb/0x20 [ 201.297561][T12566] should_fail_usercopy+0x1a/0x20 [ 201.297648][T12566] strncpy_from_user+0x25/0x230 [ 201.297771][T12566] ? kmem_cache_alloc_noprof+0x186/0x310 [ 201.297852][T12566] ? getname_flags+0x80/0x3b0 [ 201.297924][T12566] getname_flags+0xae/0x3b0 [ 201.297958][T12566] do_sys_openat2+0x60/0x110 [ 201.297991][T12566] __x64_sys_openat+0xf2/0x120 [ 201.298104][T12566] x64_sys_call+0x2e9c/0x2ff0 [ 201.298132][T12566] do_syscall_64+0xd2/0x200 [ 201.298195][T12566] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.298293][T12566] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 201.298327][T12566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.298381][T12566] RIP: 0033:0x7f234b09d550 [ 201.298401][T12566] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 201.298424][T12566] RSP: 002b:00007f2349addf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 201.298493][T12566] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f234b09d550 [ 201.298506][T12566] RDX: 0000000000000002 RSI: 00007f2349addfa0 RDI: 00000000ffffff9c [ 201.298518][T12566] RBP: 00007f2349addfa0 R08: 0000000000000000 R09: 0000000000000000 [ 201.298533][T12566] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 201.298549][T12566] R13: 00007f234b2c6128 R14: 00007f234b2c6090 R15: 00007ffe44161798 [ 201.298574][T12566] [ 201.513130][T12511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.529643][T12511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.544610][T12511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.561341][T12511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.563376][T12571] loop3: detected capacity change from 0 to 2048 [ 201.613841][T12511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.620955][T12576] loop2: detected capacity change from 0 to 164 [ 201.626267][T12511] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.635199][T12576] rock: directory entry would overflow storage [ 201.641568][T12576] rock: sig=0x66, size=4, remaining=3 [ 201.648775][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.655915][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.675273][ T3497] Alternate GPT is invalid, using primary GPT. [ 201.681930][ T3497] loop3: p2 p3 p7 [ 201.685691][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.692857][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.710951][T12585] netlink: 'syz.2.2955': attribute type 13 has an invalid length. [ 201.724351][T12571] Alternate GPT is invalid, using primary GPT. [ 201.730837][T12571] loop3: p2 p3 p7 [ 201.818551][T12585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.838827][ T4957] lo speed is unknown, defaulting to 1000 [ 201.844972][ T4957] syz0: Port: 1 Link ACTIVE [ 201.856572][ T4957] lo speed is unknown, defaulting to 1000 [ 201.866393][T12511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.916318][T12591] lo speed is unknown, defaulting to 1000 [ 201.998831][T12511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.248247][T12612] tipc: Enabled bearer , priority 0 [ 202.315805][T12612] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2959'. [ 202.327360][T12612] tipc: Resetting bearer [ 202.335621][T12610] tipc: Disabling bearer [ 202.384949][T12511] veth0_vlan: entered promiscuous mode [ 202.417653][T12511] veth1_vlan: entered promiscuous mode [ 202.440760][T12511] veth0_macvtap: entered promiscuous mode [ 202.546899][T12511] veth1_macvtap: entered promiscuous mode [ 202.560646][T12511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.571136][T12511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.588848][ T4196] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.609901][ T4196] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.682911][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2962'. [ 202.864294][T12635] tipc: Enabled bearer , priority 0 [ 202.875684][T12631] tipc: Resetting bearer [ 202.914498][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2962'. [ 202.931665][T12630] tipc: Disabling bearer [ 203.066517][ T4196] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.098610][ T4196] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.398059][T12650] loop5: detected capacity change from 0 to 164 [ 203.401967][T12656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12656 comm=syz.4.2970 [ 203.421437][T12650] rock: directory entry would overflow storage [ 203.427678][T12650] rock: sig=0x66, size=4, remaining=3 [ 203.545287][T12670] random: crng reseeded on system resumption [ 203.702845][T12688] loop2: detected capacity change from 0 to 512 [ 203.709791][T12688] EXT4-fs: Ignoring removed bh option [ 203.720749][T12688] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.730115][T12688] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 203.746974][T12688] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 203.763347][T12688] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 203.772547][T12688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.798103][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.855630][T12700] netlink: 'syz.3.2984': attribute type 10 has an invalid length. [ 203.867422][T12700] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.876540][T12700] bond0: (slave team0): Enslaving as an active interface with an up link [ 203.887489][T12700] netlink: 'syz.3.2984': attribute type 10 has an invalid length. [ 203.887731][T12696] loop2: detected capacity change from 0 to 164 [ 203.906077][T12700] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 203.926219][T12696] rock: directory entry would overflow storage [ 203.932559][T12696] rock: sig=0x66, size=4, remaining=3 [ 203.987640][ T29] kauditd_printk_skb: 537 callbacks suppressed [ 203.987658][ T29] audit: type=1326 audit(1756233007.704:16173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234b09ebe9 code=0x7ffc0000 [ 204.022038][ T29] audit: type=1326 audit(1756233007.734:16174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f234b09ebe9 code=0x7ffc0000 [ 204.046009][ T29] audit: type=1326 audit(1756233007.734:16175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234b09ebe9 code=0x7ffc0000 [ 204.046049][ T29] audit: type=1326 audit(1756233007.734:16176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234b09ebe9 code=0x7ffc0000 [ 204.046999][ T29] audit: type=1326 audit(1756233007.744:16177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f234b09e7eb code=0x7ffc0000 [ 204.117915][ T29] audit: type=1326 audit(1756233007.744:16178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f234b09d550 code=0x7ffc0000 [ 204.141790][ T29] audit: type=1326 audit(1756233007.744:16179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234b09ebe9 code=0x7ffc0000 [ 204.166438][ T29] audit: type=1326 audit(1756233007.744:16180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f234b09ebe9 code=0x7ffc0000 [ 204.166678][ T29] audit: type=1326 audit(1756233007.744:16181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234b09ebe9 code=0x7ffc0000 [ 204.166705][ T29] audit: type=1326 audit(1756233007.744:16182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f234b09ebe9 code=0x7ffc0000 [ 204.357692][T12727] FAULT_INJECTION: forcing a failure. [ 204.357692][T12727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.371052][T12727] CPU: 1 UID: 0 PID: 12727 Comm: syz.3.2993 Not tainted syzkaller #0 PREEMPT(voluntary) [ 204.371162][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.371179][T12727] Call Trace: [ 204.371187][T12727] [ 204.371196][T12727] __dump_stack+0x1d/0x30 [ 204.371286][T12727] dump_stack_lvl+0xe8/0x140 [ 204.371329][T12727] dump_stack+0x15/0x1b [ 204.371391][T12727] should_fail_ex+0x265/0x280 [ 204.371413][T12727] should_fail+0xb/0x20 [ 204.371431][T12727] should_fail_usercopy+0x1a/0x20 [ 204.371454][T12727] _copy_from_user+0x1c/0xb0 [ 204.371489][T12727] get_timespec64+0x4c/0x100 [ 204.371510][T12727] __se_sys_clock_nanosleep+0x10b/0x250 [ 204.371604][T12727] __x64_sys_clock_nanosleep+0x55/0x70 [ 204.371685][T12727] x64_sys_call+0x272d/0x2ff0 [ 204.371707][T12727] do_syscall_64+0xd2/0x200 [ 204.371790][T12727] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 204.371814][T12727] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 204.371842][T12727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.371864][T12727] RIP: 0033:0x7f59be7c14a5 [ 204.371892][T12727] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 204.371911][T12727] RSP: 002b:00007f59bd1eefa0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 204.371930][T12727] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f59be7c14a5 [ 204.371943][T12727] RDX: 00007f59bd1eefe0 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.371955][T12727] RBP: 00007f59bd1ef090 R08: 0000000000000000 R09: 0000000000000000 [ 204.372016][T12727] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 204.372029][T12727] R13: 00007f59be9b6038 R14: 00007f59be9b5fa0 R15: 00007ffe295916f8 [ 204.372049][T12727] [ 204.729107][T12740] loop5: detected capacity change from 0 to 164 [ 204.737946][T12740] rock: directory entry would overflow storage [ 204.744258][T12740] rock: sig=0x66, size=4, remaining=3 [ 204.788915][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2998'. [ 204.816732][T12746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12746 comm=syz.5.3000 [ 204.909638][T12754] loop4: detected capacity change from 0 to 1024 [ 204.927164][T12754] bridge: RTM_NEWNEIGH with invalid ether address [ 204.935760][T12756] syz_tun: entered allmulticast mode [ 204.960945][T12758] loop4: detected capacity change from 0 to 256 [ 204.983489][T12755] syz_tun: left allmulticast mode [ 204.984327][T12762] random: crng reseeded on system resumption [ 205.027133][T12764] netlink: 'syz.0.3009': attribute type 10 has an invalid length. [ 205.040072][T12764] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.048720][T12764] bond0: (slave team0): Enslaving as an active interface with an up link [ 205.059961][T12764] netlink: 'syz.0.3009': attribute type 10 has an invalid length. [ 205.073128][T12764] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 205.084877][T12764] FAULT_INJECTION: forcing a failure. [ 205.084877][T12764] name failslab, interval 1, probability 0, space 0, times 0 [ 205.097711][T12764] CPU: 0 UID: 0 PID: 12764 Comm: syz.0.3009 Not tainted syzkaller #0 PREEMPT(voluntary) [ 205.097745][T12764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.097759][T12764] Call Trace: [ 205.097767][T12764] [ 205.097775][T12764] __dump_stack+0x1d/0x30 [ 205.097796][T12764] dump_stack_lvl+0xe8/0x140 [ 205.097875][T12764] dump_stack+0x15/0x1b [ 205.097895][T12764] should_fail_ex+0x265/0x280 [ 205.097919][T12764] ? rdma_restrack_init+0x31/0x270 [ 205.097944][T12764] should_failslab+0x8c/0xb0 [ 205.097974][T12764] __kmalloc_cache_noprof+0x4c/0x320 [ 205.098079][T12764] rdma_restrack_init+0x31/0x270 [ 205.098104][T12764] _ib_alloc_device+0x4e/0x460 [ 205.098226][T12764] siw_newlink+0xd6/0x680 [ 205.098340][T12764] nldev_newlink+0x369/0x3f0 [ 205.098507][T12764] ? __pfx_nldev_newlink+0x10/0x10 [ 205.098535][T12764] rdma_nl_rcv+0x479/0x5a0 [ 205.098584][T12764] ? selinux_nlmsg_lookup+0x99/0x890 [ 205.098642][T12764] netlink_unicast+0x5c0/0x690 [ 205.098686][T12764] netlink_sendmsg+0x58b/0x6b0 [ 205.098716][T12764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.098745][T12764] __sock_sendmsg+0x142/0x180 [ 205.098831][T12764] ____sys_sendmsg+0x31e/0x4e0 [ 205.098862][T12764] ___sys_sendmsg+0x17b/0x1d0 [ 205.098975][T12764] __x64_sys_sendmsg+0xd4/0x160 [ 205.099007][T12764] x64_sys_call+0x191e/0x2ff0 [ 205.099032][T12764] do_syscall_64+0xd2/0x200 [ 205.099100][T12764] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 205.099194][T12764] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 205.099224][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.099244][T12764] RIP: 0033:0x7f234b09ebe9 [ 205.099260][T12764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.099361][T12764] RSP: 002b:00007f2349aff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.099386][T12764] RAX: ffffffffffffffda RBX: 00007f234b2c5fa0 RCX: 00007f234b09ebe9 [ 205.099410][T12764] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 205.099426][T12764] RBP: 00007f2349aff090 R08: 0000000000000000 R09: 0000000000000000 [ 205.099441][T12764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.099531][T12764] R13: 00007f234b2c6038 R14: 00007f234b2c5fa0 R15: 00007ffe44161798 [ 205.099557][T12764] [ 205.337547][T12766] loop4: detected capacity change from 0 to 164 [ 205.363850][T12766] rock: directory entry would overflow storage [ 205.370181][T12766] rock: sig=0x66, size=4, remaining=3 [ 205.406394][T12776] tipc: Enabled bearer , priority 0 [ 205.442167][T12776] syzkaller0: entered promiscuous mode [ 205.447795][T12776] syzkaller0: entered allmulticast mode [ 205.477763][T12774] tipc: Resetting bearer [ 205.486450][T12792] random: crng reseeded on system resumption [ 205.521540][T12774] tipc: Disabling bearer [ 205.559914][T12797] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 205.560017][T12799] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 205.566720][T12797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.566926][T12797] vhci_hcd vhci_hcd.0: Device attached [ 205.573447][T12799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.573686][T12799] vhci_hcd vhci_hcd.0: Device attached [ 205.588723][T12797] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 205.606963][T12797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.614686][T12797] vhci_hcd vhci_hcd.0: Device attached [ 205.628841][T12808] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 205.635570][T12808] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.643159][T12808] vhci_hcd vhci_hcd.0: Device attached [ 205.653384][T12799] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.661763][T12797] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 205.668394][T12797] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 205.676182][T12797] vhci_hcd vhci_hcd.0: Device attached [ 205.684047][T12817] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.684293][T12816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3022'. [ 205.693827][T12797] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 205.707998][T12797] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.715972][T12797] vhci_hcd vhci_hcd.0: Device attached [ 205.721681][T12799] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 205.724097][T12813] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12813 comm=syz.4.3021 [ 205.729118][T12799] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.742469][T12813] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12813 comm=syz.4.3021 [ 205.752991][T12799] vhci_hcd vhci_hcd.0: Device attached [ 205.783093][ T3410] IPVS: starting estimator thread 0... [ 205.793034][T12816] 8021q: adding VLAN 0 to HW filter on device bond11 [ 205.798544][T12825] random: crng reseeded on system resumption [ 205.807190][T12808] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 205.809826][T12806] vhci_hcd: connection closed [ 205.813934][T12808] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.814210][T12808] vhci_hcd vhci_hcd.0: Device attached [ 205.819358][ T37] vhci_hcd: stop threads [ 205.827014][T12810] vhci_hcd: connection closed [ 205.832170][ T37] vhci_hcd: release socket [ 205.832228][ T37] vhci_hcd: disconnect device [ 205.836979][T12820] vhci_hcd: connection closed [ 205.870420][T12802] vhci_hcd: connection closed [ 205.875827][ T37] vhci_hcd: stop threads [ 205.885076][ T37] vhci_hcd: release socket [ 205.889535][ T37] vhci_hcd: disconnect device [ 205.896511][ T37] vhci_hcd: stop threads [ 205.900928][ T37] vhci_hcd: release socket [ 205.905428][ T37] vhci_hcd: disconnect device [ 205.910244][ T9] usb 7-1: new low-speed USB device number 14 using vhci_hcd [ 205.911757][T12823] IPVS: using max 2400 ests per chain, 120000 per kthread [ 205.917858][T12803] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 205.924973][ T3390] usb 1-1: new low-speed USB device number 15 using vhci_hcd [ 205.939058][ T37] vhci_hcd: stop threads [ 205.943404][ T37] vhci_hcd: release socket [ 205.947942][ T37] vhci_hcd: disconnect device [ 205.957088][T12826] vhci_hcd: connection closed [ 205.957400][ T4203] vhci_hcd: stop threads [ 205.966695][ T4203] vhci_hcd: release socket [ 205.971216][ T4203] vhci_hcd: disconnect device [ 205.980351][T12818] vhci_hcd: connection closed [ 205.980624][T12804] vhci_hcd: connection reset by peer [ 205.980681][T12809] vhci_hcd: connection closed [ 205.991815][ T4203] vhci_hcd: stop threads [ 206.001221][ T4203] vhci_hcd: release socket [ 206.005698][ T4203] vhci_hcd: disconnect device [ 206.013181][ T4203] vhci_hcd: stop threads [ 206.017464][ T4203] vhci_hcd: release socket [ 206.022127][ T4203] vhci_hcd: disconnect device [ 206.048598][ T4203] vhci_hcd: stop threads [ 206.052979][ T4203] vhci_hcd: release socket [ 206.057425][ T4203] vhci_hcd: disconnect device [ 206.064937][T12844] loop4: detected capacity change from 0 to 512 [ 206.079422][T12844] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 206.094639][T12844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 206.104247][T12844] EXT4-fs (loop4): orphan cleanup on readonly fs [ 206.111150][T12844] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.3028: attempt to clear invalid blocks 1024 len 1 [ 206.130683][T12844] EXT4-fs (loop4): Remounting filesystem read-only [ 206.138113][T12844] EXT4-fs (loop4): 1 truncate cleaned up [ 206.148046][T12844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 206.160969][T12849] FAULT_INJECTION: forcing a failure. [ 206.160969][T12849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.174201][T12849] CPU: 1 UID: 0 PID: 12849 Comm: syz.2.3030 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.174256][T12846] loop5: detected capacity change from 0 to 512 [ 206.174353][T12849] ================================================================== [ 206.174384][T12849] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 206.174431][T12849] [ 206.174436][T12849] write to 0xffffffff8687b1a8 of 8 bytes by task 12846 on cpu 0: [ 206.174450][T12849] data_alloc+0x27d/0x2b0 [ 206.174476][T12849] prb_reserve+0x808/0xaf0 [ 206.174508][T12849] vprintk_store+0x56d/0x860 [ 206.174545][T12849] vprintk_emit+0x178/0x650 [ 206.174567][T12849] vprintk_default+0x26/0x30 [ 206.174592][T12849] vprintk+0x1d/0x30 [ 206.174624][T12849] _printk+0x79/0xa0 [ 206.174660][T12849] set_capacity_and_notify+0x14c/0x1f0 [ 206.174696][T12849] loop_set_size+0x2e/0x70 [ 206.174719][T12849] loop_configure+0x825/0x9c0 [ 206.174740][T12849] lo_ioctl+0x1e1/0x1240 [ 206.174780][T12849] blkdev_ioctl+0x34f/0x440 [ 206.174805][T12849] __se_sys_ioctl+0xce/0x140 [ 206.174828][T12849] __x64_sys_ioctl+0x43/0x50 [ 206.174871][T12849] x64_sys_call+0x1816/0x2ff0 [ 206.174898][T12849] do_syscall_64+0xd2/0x200 [ 206.174935][T12849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.174963][T12849] [ 206.174970][T12849] read to 0xffffffff8687b1a8 of 8 bytes by task 12849 on cpu 1: [ 206.174991][T12849] prb_reserve+0x221/0xaf0 [ 206.175028][T12849] vprintk_store+0x56d/0x860 [ 206.175070][T12849] vprintk_emit+0x178/0x650 [ 206.175091][T12849] vprintk_default+0x26/0x30 [ 206.175115][T12849] vprintk+0x1d/0x30 [ 206.175144][T12849] _printk+0x79/0xa0 [ 206.175178][T12849] dump_stack_print_info+0x1a0/0x1b0 [ 206.175204][T12849] __dump_stack+0x11/0x30 [ 206.175225][T12849] dump_stack_lvl+0xe8/0x140 [ 206.175247][T12849] dump_stack+0x15/0x1b [ 206.175269][T12849] should_fail_ex+0x265/0x280 [ 206.175294][T12849] should_fail+0xb/0x20 [ 206.175316][T12849] should_fail_usercopy+0x1a/0x20 [ 206.175345][T12849] strncpy_from_user+0x25/0x230 [ 206.175385][T12849] getname_flags+0xae/0x3b0 [ 206.175427][T12849] user_path_at+0x28/0x130 [ 206.175469][T12849] __se_sys_mount+0x25b/0x2e0 [ 206.175497][T12849] __x64_sys_mount+0x67/0x80 [ 206.175525][T12849] x64_sys_call+0x2b4d/0x2ff0 [ 206.175553][T12849] do_syscall_64+0xd2/0x200 [ 206.175586][T12849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.175613][T12849] [ 206.175619][T12849] value changed: 0xffffffffffff9098 -> 0x000000000007fda8 [ 206.175635][T12849] [ 206.175639][T12849] Reported by Kernel Concurrency Sanitizer on: [ 206.175658][T12849] CPU: 1 UID: 0 PID: 12849 Comm: syz.2.3030 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.175691][T12849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.175709][T12849] ================================================================== [ 206.174234][T12849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.175730][T12849] Call Trace: [ 206.175739][T12849] [ 206.175748][T12849] __dump_stack+0x1d/0x30 [ 206.175774][T12849] dump_stack_lvl+0xe8/0x140 [ 206.175841][T12849] dump_stack+0x15/0x1b [ 206.175863][T12849] should_fail_ex+0x265/0x280 [ 206.175891][T12849] should_fail+0xb/0x20 [ 206.175978][T12849] should_fail_usercopy+0x1a/0x20 [ 206.176011][T12849] strncpy_from_user+0x25/0x230 [ 206.176053][T12849] ? kmem_cache_alloc_noprof+0x186/0x310 [ 206.176093][T12849] ? getname_flags+0x80/0x3b0 [ 206.176152][T12849] getname_flags+0xae/0x3b0 [ 206.176190][T12849] user_path_at+0x28/0x130 [ 206.176259][T12849] __se_sys_mount+0x25b/0x2e0 [ 206.176289][T12849] ? fput+0x8f/0xc0 [ 206.176333][T12849] __x64_sys_mount+0x67/0x80 [ 206.176429][T12849] x64_sys_call+0x2b4d/0x2ff0 [ 206.176464][T12849] do_syscall_64+0xd2/0x200 [ 206.176571][T12849] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.176680][T12849] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.176765][T12849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.176794][T12849] RIP: 0033:0x7f2294beebe9 [ 206.176814][T12849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.176851][T12849] RSP: 002b:00007f2293657038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.176876][T12849] RAX: ffffffffffffffda RBX: 00007f2294e15fa0 RCX: 00007f2294beebe9 [ 206.176893][T12849] RDX: 00002000000003c0 RSI: 0000200000000140 RDI: 0000000000000000 [ 206.176910][T12849] RBP: 00007f2293657090 R08: 0000200000000580 R09: 0000000000000000 [ 206.176935][T12849] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 206.176952][T12849] R13: 00007f2294e16038 R14: 00007f2294e15fa0 R15: 00007ffdc5268c78 [ 206.176980][T12849] [ 206.652927][T11964] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 206.675410][T12846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.688126][T12846] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.700272][T12846] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3029: corrupted inode contents [ 206.712532][T12846] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.3029: mark_inode_dirty error [ 206.724510][T12846] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3029: corrupted inode contents [ 206.739135][T12846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3029'. [ 206.759679][T12511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.961151][ T9] usb 7-1: enqueue for inactive port 0 [ 210.961169][ T3390] usb 1-1: enqueue for inactive port 0 [ 210.966817][ T9] usb 7-1: enqueue for inactive port 0 [ 210.974558][ T3390] usb 1-1: enqueue for inactive port 0 [ 211.041264][ T9] vhci_hcd: vhci_device speed not set [ 211.051141][ T3390] vhci_hcd: vhci_device speed not set