last executing test programs: 5m55.692939301s ago: executing program 1 (id=1135): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x5}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fe, &(0x7f0000000600)="$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") 5m53.016778143s ago: executing program 1 (id=1159): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x5}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 5m52.209159158s ago: executing program 1 (id=1176): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xe}, 0x18) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xeb, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000740)='dlm_bast\x00', 0xffffffffffffffff, 0x0, 0x405}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2000c800) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$eJzs281qE1EYBuA3tdW2LtKFK3Ex4MZVaHsFFqkgBgSlCwVBsQ1IRwIWArqw2bnwJrwct3olLrsQRppp7Q+piNoMJM+zyQfnvMl3DiSZMzAvbr3Z3e7v9Z73vmSx1crc3arKQSsrmcuxYQCAaXJQVfleVVV1bZilz6mqqumOAIDL5v8fAGbPk6fPHm50u5uPi2IxKT8OtgZb9Ws9vtHL65TZyWra+ZHDC4QjdX3/QXdztRhZyady/yi/P9i6cja/lnZWxufX6nxxNr+Q5dP59bRzY3x+fWz+au7cPpXvpJ1vr9JPme0cZk/yH9aK4t6j7rn89dE8AAAAmAad4pex5/dO56LxOr/R+uP7A+fO1/O5Od/s2gFgVu29e7/7six33jZWJBn+Zs7X5brRyTVW/GX8eEub3Mx/K5by/995Ic2va3qK/txlf8RiklHR4I8SMBEn3/6mOwEAAAAAAAAAAAAAAC4yiUeXml4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPnZwAAAP//RL2Oaw==") (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r3, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) 5m51.08289335s ago: executing program 0 (id=1196): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000003c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) msgget$private(0x0, 0x8) r0 = geteuid() quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000001c0)=@filename='./file0\x00', r0, &(0x7f0000000240)={0x6, 0x3, 0x1, 0x1}) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f00000008c0)='GPL\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xaa}, 0x94) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xfffffffe}, 0x10, 0x80000) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f0000000680)=ANY=[@ANYBLOB="00fba0010681cf1ef7623875170e1e223b138416392a5e0ef3289637f654d81d696d90ec731cf72f759abe1b7cdedb1496721709c1abe13f8a67b14e3b0c05a5f32edda3e1a6b95a5403e6084478513925524d9c1adf91775b0da622df8216391108dbe235db60a4ff1eb0d80c1d428587c2ffff6b957768833e471987e9a15f2d144db6a0a973f711689fcf5bc207d619ea944439a1ce8cbf7ee1a04655646966239eeb389166294a1a"], 0xa0, 0x1) bind$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='f2fs_shutdown\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffe}, 0x5b) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200000000000000001200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x507002, 0x0) 5m51.04520486s ago: executing program 0 (id=1198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 5m50.954947042s ago: executing program 0 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x1}]}}}], 0x18}}], 0x1, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000010900020073797a310000000008000440040002000900010073797a30000000000800034000000004"], 0x64}}, 0x0) 5m50.954816532s ago: executing program 33 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x1}]}}}], 0x18}}], 0x1, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000010900020073797a310000000008000440040002000900010073797a30000000000800034000000004"], 0x64}}, 0x0) 3.689956199s ago: executing program 5 (id=6008): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000600000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = io_uring_setup(0x6e5f, &(0x7f00000002c0)={0x0, 0x9330, 0x80, 0x1, 0x320}) syz_io_uring_setup(0x88c, &(0x7f0000000240)={0x0, 0xe099, 0x1000, 0x1, 0xb5, 0x0, r0}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x33}, @in=@private=0xa010100, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @tfcpad={0x8, 0x16, 0x2000000}]}, 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x24000058) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r4 = fcntl$dupfd(r3, 0x406, r3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x4, 0xc7d, 0x9, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) write$sndseq(r4, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @raw32={[0x3, 0x7]}}, {0x0, 0x0, 0xfd, 0x4, @tick=0xf1f, {0x6, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.353957865s ago: executing program 6 (id=6017): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.187232179s ago: executing program 6 (id=6023): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x400000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'veth1_virt_wifi\x00', &(0x7f0000000340)=@ethtool_channels={0x4a, 0x7, 0xffffffff, 0xb, 0xe4, 0xfffffff8, 0x7ff, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 3.147820889s ago: executing program 4 (id=6024): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000010000000006c0000006c000000050000000800000001000093060000000e0000000e000000070000000c0000000000000905000000060000000000000a030000000200000000000010020000000b0000000000000a020000000900000003000006040000000d00000000040000100000000000000005000000000000000000306100"], 0x0, 0x89, 0x0, 0x1, 0x80000000, 0x10000}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = msgget$private(0x0, 0x722) msgsnd(0x0, 0x0, 0x2000, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(r5, 0xd, &(0x7f0000000380)=""/114) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x6, 0x364, &(0x7f0000000900)="$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") syz_usbip_server_init(0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0xb50, 0x920, 0xc8, 0x8, 0x0, 0x5803, 0xa80, 0x2e8, 0x2e8, 0xa80, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x8b0, 0x920, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x3}, {0x10}, {0x6f0e7d3d, 0x1}, {0x1, 0x3}, {0x9}, {0xb, 0x1}, {0x7fffffff, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x51495059c89c080}, {0x8}], [{0x60, 0x5}, {0x9, 0x3}, {0x800, 0x9d78}, {0x6, 0x81}, {0x5, 0x7}, {0x80000, 0x10001}, {0x2, 0x5}, {0xd, 0xfffffffd}, {0x6, 0x800}, {0x4, 0xf}, {0x80, 0xffff}], 0x2, 0x7}, {[{0x7ec5}, {0x6, 0x2}, {0xe0000, 0x2}, {0x1, 0x2}, {0xfffffffd, 0x1}, {0x8000, 0x2}, {0x200, 0x1}, {0x7, 0x2}, {0x7}, {0x4, 0x3}, {0x8, 0x3}], [{0x7, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x7fbb, 0x1ff}, {0x2, 0x7}, {0x5, 0x100}, {0x2a, 0x101}, {0x8, 0x6}, {0x4, 0xfffffd46}, {0x91f, 0x3ff}, {0xc, 0x3}], 0xb, 0xa}, {[{0x7, 0x2}, {0x7}, {0x80000001, 0x1}, {0xafa, 0x1}, {0x3}, {0xfffffff8, 0x3}, {0x85, 0x2}, {0xa4b, 0x2}, {0x3, 0x2}, {0xfffff7f0, 0x1}, {0x100}], [{0xb866, 0x42}, {0x200, 0xffffffff}, {0x5, 0x3}, {0x5, 0x400}, {0xf062, 0x2}, {0x80e8, 0x100}, {0xe, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x9, 0x80000000}, {0xe1a, 0x3}], 0x2, 0x8}, {[{0x5, 0x1}, {0xcfd, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0xfffff000}, {0x100, 0x3}, {0x9dc, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x2}], [{0x9, 0x5}, {0x0, 0x36}, {0x5, 0x3}, {0xfffffff9, 0x7}, {0x7, 0x200}, {0xf91, 0x2}, {0x3ff, 0x8}, {0x9, 0xe}, {0x8, 0x8000006}, {0xf, 0x442b}, {0x9, 0xe1f3}], 0x4, 0xb}, {[{0xe0, 0x2}, {0x1, 0x3}, {0x200, 0x1}, {0xb7b, 0x24ad23d8db3ef6a8}, {0x1, 0x2}, {0x1, 0x1}, {0x2a4a}, {0x101}, {0x3, 0x3}, {0x9, 0x1}, {0x9, 0x1}], [{0x8001, 0x10000}, {0x3, 0xb}, {0x2, 0x1}, {0x5, 0xc}, {0x4, 0xd23c}, {0x7, 0x1}, {0xeb9, 0xa3d0}, {0x6}, {0xfffffffc, 0x2}, {0x9, 0xb6}, {0x7, 0x80000001}], 0x5, 0xb}, {[{0x8, 0x1}, {0x5, 0x3}, {0x100}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {}, {0x1, 0x2}, {0x101, 0x2}, {0x4, 0x3}, {0x81, 0x1}], [{0xfffffffd, 0x6}, {0x9, 0x7}, {0x3e8a2173, 0x6}, {0x5, 0x6}, {0x1, 0x8}, {0x8, 0x5}, {0x9, 0x2}, {0x50bf}, {0x6, 0x3}, {0x1, 0xfffffff7}, {0x2, 0x80000001}], 0x7, 0x1}, {[{0x4, 0x2}, {0x401, 0x3}, {0x5, 0x3}, {0x8, 0x2}, {0x934, 0x1}, {0x3}, {0x531, 0x2}, {0x9, 0x1}, {0x3}, {0x75ae, 0x3}, {0x1}], [{0x10, 0x1a}, {0x5}, {0x20000, 0x8001}, {0xfffffff7, 0x8}, {0x80000001, 0x2}, {0xb30d, 0x2}, {0x0, 0x7fffffff}, {0x80, 0x5}, {0xa, 0x8}, {0xee, 0xa}, {0x24c3, 0x437}], 0xb, 0x1}, {[{0x2, 0x1}, {0x9, 0x1}, {}, {0x5, 0x2}, {0xc00}, {0x10001, 0x3}, {0x7f, 0x1}, {0x9, 0x3}, {0x30, 0x1}, {0x5, 0x3}, {0xd}], [{0x7, 0x80000000}, {0x400, 0x3}, {0x9, 0x4}, {0x1, 0x9}, {0x4}, {0x1ff, 0xfc}, {0xfd}, {0x5, 0x3}, {0x10001, 0x77}, {0x8, 0xb80}, {0x8, 0x1ff}], 0xa, 0x1}, {[{0x8}, {0xfffffbff}, {0x401}, {0xff, 0x2}, {0xe, 0x2}, {0x9, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x509}, {0x9, 0x3}], [{0x8, 0x4}, {0x9, 0x87}, {0x8, 0x4ade}, {0xfff, 0x4}, {0xa2c, 0x4}, {0x6, 0x6b}, {0x5, 0x5}, {0x7, 0xd76}, {0x2, 0x8}, {0x2ea, 0x9}, {0x5, 0x5}], 0x6, 0x3}, {[{0x8001, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x8}, {0xc}, {0x2, 0x2}, {0xffff0001, 0x2}, {0x6, 0x3}, {0xe91}, {0x80000001, 0x3}], [{0x1, 0x81}, {0x9, 0x7}, {0x3, 0x7}, {0x401, 0xec}, {0x10001}, {0x0, 0x2}, {0x70, 0x9}, {0xc6, 0x1000}, {0x7ff, 0x708}, {0x7, 0x5}, {0x2, 0x10000}], 0xb, 0x1}, {[{0x8}, {0x4, 0x1}, {0x7}, {0x6, 0x3}, {0x4}, {0xcc, 0x2}, {0xb, 0x2}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x1, 0x3}, {0x6, 0x2}], [{0x63e2df8a, 0x6}, {0x5, 0x2}, {0x2, 0x401}, {0xff, 0x8}, {0x889c, 0x5f}, {0x7d, 0xa14}, {0x0, 0x5}, {0x3, 0x372}, {0xb, 0x6}, {0x0, 0xcaf}, {0x5, 0x4}], 0x4, 0xa}], 0x8}}, @common=@inet=@dscp={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x401, 0xfff7, 0x8, 0x1, 0x0, "f4f373d196b068477bf1c55ee0269727152a61d42288bffba02c5f4813ee70966ec57a6905fc9dfc91200cc4815d73bc49557566701e806a1b11633df8e77785"}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbb0) 3.10104996s ago: executing program 6 (id=6025): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x5}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r4 = msgget$private(0x0, 0x722) msgsnd(0x0, 0x0, 0x2000, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000380)=""/114) syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x6, 0x364, &(0x7f0000000900)="$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") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0xb50, 0x920, 0xc8, 0x8, 0x0, 0x5803, 0xa80, 0x2e8, 0x2e8, 0xa80, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x8b0, 0x920, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x3}, {0x10}, {0x6f0e7d3d, 0x1}, {0x1, 0x3}, {0x9}, {0xb, 0x1}, {0x7fffffff, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x51495059c89c080}, {0x8}], [{0x60, 0x5}, {0x9, 0x3}, {0x800, 0x9d78}, {0x6, 0x81}, {0x5, 0x7}, {0x80000, 0x10001}, {0x2, 0x5}, {0xd, 0xfffffffd}, {0x6, 0x800}, {0x4, 0xf}, {0x80, 0xffff}], 0x2, 0x7}, {[{0x7ec5}, {0x6, 0x2}, {0xe0000, 0x2}, {0x1, 0x2}, {0xfffffffd, 0x1}, {0x8000, 0x2}, {0x200, 0x1}, {0x7, 0x2}, {0x7}, {0x4, 0x3}, {0x8, 0x3}], [{0x7, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x7fbb, 0x1ff}, {0x2, 0x7}, {0x5, 0x100}, {0x2a, 0x101}, {0x8, 0x6}, {0x4, 0xfffffd46}, {0x91f, 0x3ff}, {0xc, 0x3}], 0xb, 0xa}, {[{0x7, 0x2}, {0x7}, {0x80000001, 0x1}, {0xafa, 0x1}, {0x3}, {0xfffffff8, 0x3}, {0x85, 0x2}, {0xa4b, 0x2}, {0x3, 0x2}, {0xfffff7f0, 0x1}, {0x100}], [{0xb866, 0x42}, {0x200, 0xffffffff}, {0x5, 0x3}, {0x5, 0x400}, {0xf062, 0x2}, {0x80e8, 0x100}, {0xe, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x9, 0x80000000}, {0xe1a, 0x3}], 0x2, 0x8}, {[{0x5, 0x1}, {0xcfd, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0xfffff000}, {0x100, 0x3}, {0x9dc, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x2}], [{0x9, 0x5}, {0x0, 0x36}, {0x5, 0x3}, {0xfffffff9, 0x7}, {0x7, 0x200}, {0xf91, 0x2}, {0x3ff, 0x8}, {0x9, 0xe}, {0x8, 0x8000006}, {0xf, 0x442b}, {0x9, 0xe1f3}], 0x4, 0xb}, {[{0xe0, 0x2}, {0x1, 0x3}, {0x200, 0x1}, {0xb7b, 0x24ad23d8db3ef6a8}, {0x1, 0x2}, {0x1, 0x1}, {0x2a4a}, {0x101}, {0x3, 0x3}, {0x9, 0x1}, {0x9, 0x1}], [{0x8001, 0x10000}, {0x3, 0xb}, {0x2, 0x1}, {0x5, 0xc}, {0x4, 0xd23c}, {0x7, 0x1}, {0xeb9, 0xa3d0}, {0x6}, {0xfffffffc, 0x2}, {0x9, 0xb6}, {0x7, 0x80000001}], 0x5, 0xb}, {[{0x8, 0x1}, {0x5, 0x3}, {0x100}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {}, {0x1, 0x2}, {0x101, 0x2}, {0x4, 0x3}, {0x81, 0x1}], [{0xfffffffd, 0x6}, {0x9, 0x7}, {0x3e8a2173, 0x6}, {0x5, 0x6}, {0x1, 0x8}, {0x8, 0x5}, {0x9, 0x2}, {0x50bf}, {0x6, 0x3}, {0x1, 0xfffffff7}, {0x2, 0x80000001}], 0x7, 0x1}, {[{0x4, 0x2}, {0x401, 0x3}, {0x5, 0x3}, {0x8, 0x2}, {0x934, 0x1}, {0x3}, {0x531, 0x2}, {0x9, 0x1}, {0x3}, {0x75ae, 0x3}, {0x1}], [{0x10, 0x1a}, {0x5}, {0x20000, 0x8001}, {0xfffffff7, 0x8}, {0x80000001, 0x2}, {0xb30d, 0x2}, {0x0, 0x7fffffff}, {0x80, 0x5}, {0xa, 0x8}, {0xee, 0xa}, {0x24c3, 0x437}], 0xb, 0x1}, {[{0x2, 0x1}, {0x9, 0x1}, {}, {0x5, 0x2}, {0xc00}, {0x10001, 0x3}, {0x7f, 0x1}, {0x9, 0x3}, {0x30, 0x1}, {0x5, 0x3}, {0xd}], [{0x7, 0x80000000}, {0x400, 0x3}, {0x9, 0x4}, {0x1, 0x9}, {0x4}, {0x1ff, 0xfc}, {0xfd}, {0x5, 0x3}, {0x10001, 0x77}, {0x8, 0xb80}, {0x8, 0x1ff}], 0xa, 0x1}, {[{0x8}, {0xfffffbff}, {0x401}, {0xff, 0x2}, {0xe, 0x2}, {0x9, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x509}, {0x9, 0x3}], [{0x8, 0x4}, {0x9, 0x87}, {0x8, 0x4ade}, {0xfff, 0x4}, {0xa2c, 0x4}, {0x6, 0x6b}, {0x5, 0x5}, {0x7, 0xd76}, {0x2, 0x8}, {0x2ea, 0x9}, {0x5, 0x5}], 0x6, 0x3}, {[{0x8001, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x8}, {0xc}, {0x2, 0x2}, {0xffff0001, 0x2}, {0x6, 0x3}, {0xe91}, {0x80000001, 0x3}], [{0x1, 0x81}, {0x9, 0x7}, {0x3, 0x7}, {0x401, 0xec}, {0x10001}, {0x0, 0x2}, {0x70, 0x9}, {0xc6, 0x1000}, {0x7ff, 0x708}, {0x7, 0x5}, {0x2, 0x10000}], 0xb, 0x1}, {[{0x8}, {0x4, 0x1}, {0x7}, {0x6, 0x3}, {0x4}, {0xcc, 0x2}, {0xb, 0x2}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x1, 0x3}, {0x6, 0x2}], [{0x63e2df8a, 0x6}, {0x5, 0x2}, {0x2, 0x401}, {0xff, 0x8}, {0x889c, 0x5f}, {0x7d, 0xa14}, {0x0, 0x5}, {0x3, 0x372}, {0xb, 0x6}, {0x0, 0xcaf}, {0x5, 0x4}], 0x4, 0xa}], 0x8}}, @common=@inet=@dscp={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x401, 0xfff7, 0x8, 0x1, 0x0, "f4f373d196b068477bf1c55ee0269727152a61d42288bffba02c5f4813ee70966ec57a6905fc9dfc91200cc4815d73bc49557566701e806a1b11633df8e77785"}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbb0) 1.538079401s ago: executing program 4 (id=6042): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newtaction={0x78, 0x30, 0x1, 0x70bd27, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x10, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x5, 0xfa, 0xb, 0x81}, {0x0, 0x74, 0x81, 0x783f}, {0x1, 0x1, 0x0, 0x2756}, {0x7, 0x0, 0x0, 0x3}, {0x8, 0x9, 0x1f, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000200)) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.505877211s ago: executing program 4 (id=6045): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x5}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='kmem_cache_free\x00', r4, 0x0, 0x2e38}, 0x18) sendto$packet(r1, &(0x7f00000003c0)='\v', 0x1, 0x48010, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.483437721s ago: executing program 2 (id=6047): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x5}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$eJzs3U9sXdWdB/DvfbYTj4lCgAyTQUBewgQMZBzbGcJEbCaxnxMz/jOyHYloNCIMSaooVqmgSIAqNZWqroraRdUF3SF10xUSG9hU2bXbbrqoVLHuDnUVddFX3fueYzv283MSxzbh87Ge3/3zu+f8zrv33SNfv3dP+CZrNpvV4x7nL/xmO5Nl9zk7/tWnn31cPn50I3vSk1eKL5L+JPWkN8mhJGPjc7PTXQq6nlxKcjMpkuxN63lTLqX4WfYtz99M8auq3tKFe2wYm9LkW22njz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiNirHx4eGRIlOTMxfeqHdWDQHeaWVtubwvq1G/iy+71psU5SP9/UtDfR86uLz6yfLX0Tzdmnu6GpA8/fnokScPvPZEb21p+w0Svht/bw+GfNcbvvfhR9ffWly88m6H9T3t5tx3hrvUucbM5Pzs5PSZc4365Pxs/fSpU8Mnzk/M1ycmpxrzF+cXGtP1sbnGmYXZufrg2Iv1kdOnT9YbQxdnL8ycGx+aaiwtfPXfR4eHT9VfH/qfxpm5+dmZE68PzY+dn5yampw5V8WUq8uYV8sD8b8nF+oLjTPT9frVa4tXTq7KaJ2Xugwa6daSMmi0W9Do8OjoyMjo6MipV06/8urwcO/ygp5UC4bvkDWb3D5os+/hPS6+hT6pbSKoPDnWt/DsDfen1u7/M5XJzORC3kh93Z+xjGcus5nusL5tqf8/dqKxYb0r+/+lXv7Q8uqnUvX/z7bmnu3U/3fIZft+3suH+SjX81YWs5greXfV2r33UGKzuX6rfv2H1mux0y1e/XMujcxkMvOZzWSmc6ZaUm8vqed0TuVUhvNmzmci86lnIpOZSiPzuZj5LKRRHVFjmUsjZ7LQ22rjYMbyYuoZyemczsnU08hQLmY2FzKTcxnPmaqUq7lWve4nN8jxdtDIZoJGNwjaoP9vL7iL/p9vqa0+hcM9a7b7/z13LK+tDR0c266kAAAAgC31r7/P/oOP/+7PSV+eqa6xAwAAAA+b6uN6T5dPfeXUMykmJqcaw2sD39/+3AAAAICtUVTfsSuSDORwa2rpm1DrXAQAAAAAvomq//8/Wz4NlFOHU/j7HwAAAB423e+x3zWiOJ56bpSr6pdbkZfbEe37/A5MTE41hsZmp14byfPVXQaqbxqsKa0nB5Lq6wcv5Ugr6shA63lgdYn9ZdTI0Gsj6c/RdkMGnyufnhtcJ3K0jHwpL7QiX1iK7M+ayJNlJAA87I5u0B9vtv9/KcdbEcefqm7f3vvUOn3wcKtn/eEOtRMAWNZ9jJ2uEcV/LA3/0+Hv/55cPdz6SMFQ3s47WczlHK++bVB94qBdam4WWS51YMXHEI53uRowsGKEl+NL1wMO71v3esDAioFejq+5ItAp9uS6r12x5XsDALbH0TX98Ab9f7PZmlpz/X/jv/8HfKQQAHaV2yPYP8CJO+vs25mmAgBtnXvpDfQ8wIQAAAAAAAAAAAAAAAAAAAAAAAAAAADgIfAg7/9fS/JgRxa4j4kbSXZBGts88Zf2bl+zqr38xo5nuGJib+6/nP5tGeHiw//bs4sP9Xub2MGTEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANumSHrWW15L9ia9w0lObH9WD86NnU5ghxW3cisfZP9O5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8LBp3/+/ltbzI61F6a0lx5JcSvK/O53jVrq10wnssBX3/y/3eZpFelu7PUXf2Pjc7HS5+7O3XP/Vp599XD7upZ6ygLKGVYNLtGvovNVj1VYD41feu/79d75XHz9bJXl2YWJqfPrc3H8tBz5ZfJ7U03osWcr3B0X7KF7d8s/Llnavt6xloqp3fG29/7Le1rfrPfbbn3du27LlNK4tXhkta1povLHw/nevfbAi6PEcSZ4bTAZX1/Sd8tGhpiPp26je4uviJ8X+/DKXqv1fplE0i3IXPZrsSe2frl5bvDL09juLlzvkdCCHk1xO+jef0+G1e2JJddTV+spah6ug8tfBLuVt6JGe/c1mq8SRDm14rDpkBu6qDfXObah0ed3bbTzZIaMn8vxd7+nnu9TY9rdmS2uu+Lr4U3E+f8yPV4z/USv3/7Fs5t1ZxlSRK46Uzm0+ttzy0ZUr3rwzsuO7kgfgp/n//Oft/V9bcf5v76vtOR+tqPGBvS+KVi/UVk0fvKNHap99OmXZzvNgK6pDnv+cl9du1yXPl7ucUbbo/b9a8XXxSTGYv+aG8X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdr0h61lteS44lOZDk0XK+njS3or7aQLEVxWzSnjVLbmxj7btH7fZUcSu38kH272g6AAAAAAAAAGyZs+NfffrZx+Wj+n98T/6t+CLpb/2nvzfJgeIXfWPjc7PTXQrqSy4luVlO999dDuV22bc8f7OcO3T3bQEANucfAQAA//+INm5i") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = msgget$private(0x0, 0x722) msgsnd(0x0, 0x0, 0x2000, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(r5, 0xd, &(0x7f0000000380)=""/114) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x6, 0x364, &(0x7f0000000900)="$eJzs3c1rO0UYwPEnabJNU9rkIIqCdLAXvSxt9CwGaUEIWNpGbAVh2240ZE1KNlQjYtuTV/HuSfBQerPgoaD9B3rxphcRvPUieLAHdWXfkm1e+hKT5vdrvx8omczMszubmZRn02724t0vP6qUbL1kaBJPKYmJiFyKZCUuoVjwGPfKmkQdyCvTf/784tpGMeVXqOX8+qs5pdTsXKLd7XRSzrPvX/yR+/382fPnL/5d/7Bsq7KtqrWGMtRW7deGsWWZaqdsV3SlVizTsE1Vrtpm3W//LtiOVdvdbSqjujOT3q2btq2MalNVzKZq1FSj3lTGB0a5qnRdVzNpwU2KR6urRn7A4O0hDwYjUq/njQkRmepqKR6NZUAAAGCs2vl/w8v/425KP0j+vymzhcLSqnI7B/n/Dx9/dvzSWWP6nZPZIP8/1Xrl/6/94m/rSv7vnk608/+af35Qujn//1rukP93Z0SPy8D5f3YEg8Fg5rSuqtiVZ27+nw7ev57D944XvAL5PwAAAAAAAAAAAAAAAAAAAAAAT4NLx8k4jpMJH8Of9iUEwXM8SP3mf1JEUu7sO8z/Q7a2sSkp78I9d46tL/aKe0X/MehwJiKWmP84ndy1EV55pFxZ+dHaD+L394oTXku+JGU3XhYlI1lvPUXiHWf5rcLSovIF8a3LlNLR+Jxk5Jlo/Pfe6nTjc1fjg/1r8vJ8JF6XjPy0LTWxZMeLbO//80Wl3ny70BE/5fUTkd/ufVIAAAAAABgyXbX0PH/XtX7t/reM5Evex0SmLEhG/u59fr/Q8/w8kXkhMe6jBwAAAADgcbCbn1YMiZt1r2BZvQpT0rdpCIVEq2bSMetJEenZWeuoSV635YnIEd52PJr4dzD5v8f1Tfiq3iUq/EcKd+CtpuCOKjLYeMLj92piicGnKXYg3gI4iDbF5Rbhic7Bz7kVqmfn+b7bOQwOpFUTfmyk9XmdZaV7O/FrVkKyq8aJDbYAnvvq27+G9wZ5/SRYAZ/c3PnQMp19uc2kdBTcXXQ3JUf+iwcAAADAvWsn/WHNG9Hm6I1EojfL4S/3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM0Ui+0q+jMO5jBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4U/wUAAP//nVbxdQ==") syz_usbip_server_init(0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0xb50, 0x920, 0xc8, 0x8, 0x0, 0x5803, 0xa80, 0x2e8, 0x2e8, 0xa80, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x8b0, 0x920, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x3}, {0x10}, {0x6f0e7d3d, 0x1}, {0x1, 0x3}, {0x9}, {0xb, 0x1}, {0x7fffffff, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x51495059c89c080}, {0x8}], [{0x60, 0x5}, {0x9, 0x3}, {0x800, 0x9d78}, {0x6, 0x81}, {0x5, 0x7}, {0x80000, 0x10001}, {0x2, 0x5}, {0xd, 0xfffffffd}, {0x6, 0x800}, {0x4, 0xf}, {0x80, 0xffff}], 0x2, 0x7}, {[{0x7ec5}, {0x6, 0x2}, {0xe0000, 0x2}, {0x1, 0x2}, {0xfffffffd, 0x1}, {0x8000, 0x2}, {0x200, 0x1}, {0x7, 0x2}, {0x7}, {0x4, 0x3}, {0x8, 0x3}], [{0x7, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x7fbb, 0x1ff}, {0x2, 0x7}, {0x5, 0x100}, {0x2a, 0x101}, {0x8, 0x6}, {0x4, 0xfffffd46}, {0x91f, 0x3ff}, {0xc, 0x3}], 0xb, 0xa}, {[{0x7, 0x2}, {0x7}, {0x80000001, 0x1}, {0xafa, 0x1}, {0x3}, {0xfffffff8, 0x3}, {0x85, 0x2}, {0xa4b, 0x2}, {0x3, 0x2}, {0xfffff7f0, 0x1}, {0x100}], [{0xb866, 0x42}, {0x200, 0xffffffff}, {0x5, 0x3}, {0x5, 0x400}, {0xf062, 0x2}, {0x80e8, 0x100}, {0xe, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x9, 0x80000000}, {0xe1a, 0x3}], 0x2, 0x8}, {[{0x5, 0x1}, {0xcfd, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0xfffff000}, {0x100, 0x3}, {0x9dc, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x2}], [{0x9, 0x5}, {0x0, 0x36}, {0x5, 0x3}, {0xfffffff9, 0x7}, {0x7, 0x200}, {0xf91, 0x2}, {0x3ff, 0x8}, {0x9, 0xe}, {0x8, 0x8000006}, {0xf, 0x442b}, {0x9, 0xe1f3}], 0x4, 0xb}, {[{0xe0, 0x2}, {0x1, 0x3}, {0x200, 0x1}, {0xb7b, 0x24ad23d8db3ef6a8}, {0x1, 0x2}, {0x1, 0x1}, {0x2a4a}, {0x101}, {0x3, 0x3}, {0x9, 0x1}, {0x9, 0x1}], [{0x8001, 0x10000}, {0x3, 0xb}, {0x2, 0x1}, {0x5, 0xc}, {0x4, 0xd23c}, {0x7, 0x1}, {0xeb9, 0xa3d0}, {0x6}, {0xfffffffc, 0x2}, {0x9, 0xb6}, {0x7, 0x80000001}], 0x5, 0xb}, {[{0x8, 0x1}, {0x5, 0x3}, {0x100}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {}, {0x1, 0x2}, {0x101, 0x2}, {0x4, 0x3}, {0x81, 0x1}], [{0xfffffffd, 0x6}, {0x9, 0x7}, {0x3e8a2173, 0x6}, {0x5, 0x6}, {0x1, 0x8}, {0x8, 0x5}, {0x9, 0x2}, {0x50bf}, {0x6, 0x3}, {0x1, 0xfffffff7}, {0x2, 0x80000001}], 0x7, 0x1}, {[{0x4, 0x2}, {0x401, 0x3}, {0x5, 0x3}, {0x8, 0x2}, {0x934, 0x1}, {0x3}, {0x531, 0x2}, {0x9, 0x1}, {0x3}, {0x75ae, 0x3}, {0x1}], [{0x10, 0x1a}, {0x5}, {0x20000, 0x8001}, {0xfffffff7, 0x8}, {0x80000001, 0x2}, {0xb30d, 0x2}, {0x0, 0x7fffffff}, {0x80, 0x5}, {0xa, 0x8}, {0xee, 0xa}, {0x24c3, 0x437}], 0xb, 0x1}, {[{0x2, 0x1}, {0x9, 0x1}, {}, {0x5, 0x2}, {0xc00}, {0x10001, 0x3}, {0x7f, 0x1}, {0x9, 0x3}, {0x30, 0x1}, {0x5, 0x3}, {0xd}], [{0x7, 0x80000000}, {0x400, 0x3}, {0x9, 0x4}, {0x1, 0x9}, {0x4}, {0x1ff, 0xfc}, {0xfd}, {0x5, 0x3}, {0x10001, 0x77}, {0x8, 0xb80}, {0x8, 0x1ff}], 0xa, 0x1}, {[{0x8}, {0xfffffbff}, {0x401}, {0xff, 0x2}, {0xe, 0x2}, {0x9, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x509}, {0x9, 0x3}], [{0x8, 0x4}, {0x9, 0x87}, {0x8, 0x4ade}, {0xfff, 0x4}, {0xa2c, 0x4}, {0x6, 0x6b}, {0x5, 0x5}, {0x7, 0xd76}, {0x2, 0x8}, {0x2ea, 0x9}, {0x5, 0x5}], 0x6, 0x3}, {[{0x8001, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x8}, {0xc}, {0x2, 0x2}, {0xffff0001, 0x2}, {0x6, 0x3}, {0xe91}, {0x80000001, 0x3}], [{0x1, 0x81}, {0x9, 0x7}, {0x3, 0x7}, {0x401, 0xec}, {0x10001}, {0x0, 0x2}, {0x70, 0x9}, {0xc6, 0x1000}, {0x7ff, 0x708}, {0x7, 0x5}, {0x2, 0x10000}], 0xb, 0x1}, {[{0x8}, {0x4, 0x1}, {0x7}, {0x6, 0x3}, {0x4}, {0xcc, 0x2}, {0xb, 0x2}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x1, 0x3}, {0x6, 0x2}], [{0x63e2df8a, 0x6}, {0x5, 0x2}, {0x2, 0x401}, {0xff, 0x8}, {0x889c, 0x5f}, {0x7d, 0xa14}, {0x0, 0x5}, {0x3, 0x372}, {0xb, 0x6}, {0x0, 0xcaf}, {0x5, 0x4}], 0x4, 0xa}], 0x8}}, @common=@inet=@dscp={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x401, 0xfff7, 0x8, 0x1, 0x0, "f4f373d196b068477bf1c55ee0269727152a61d42288bffba02c5f4813ee70966ec57a6905fc9dfc91200cc4815d73bc49557566701e806a1b11633df8e77785"}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbb0) 1.103607289s ago: executing program 3 (id=6054): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newtaction={0xfc, 0x30, 0x1, 0x70bd27, 0x0, {}, [{0xe8, 0x1, [@m_bpf={0xe4, 0x10, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x5, 0xfa, 0xb, 0x81}, {0x0, 0x74, 0x81, 0x783f}, {0x1, 0x1, 0x0, 0x2756}, {0x7, 0x0, 0x0, 0x3}, {0x8, 0x9, 0x1f, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x87, 0x6, "8176dad48c6355964a28d860029d31d424dd8130311f5c9d3c024c2a6ce20a08f113a6b2055b68d5896ef4373cd823beb714a55ef099a2ebbbd0e957b04c9457131cb9521a6c1b3f33538895b00d18971e96c827bb4c530b3df2dc7ac460282d04cc403d4db961eebf2234fce4188cdf8910aa66537a9b54dd4589acaee175ae1e4523"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000200)) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.077112959s ago: executing program 2 (id=6055): bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7f) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x4000000, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.04362991s ago: executing program 3 (id=6056): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newtaction={0x78, 0x30, 0x1, 0x70bd27, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x10, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x5, 0xfa, 0xb, 0x81}, {0x0, 0x74, 0x81, 0x783f}, {0x1, 0x1, 0x0, 0x2756}, {0x7, 0x0, 0x0, 0x3}, {0x8, 0x9, 0x1f, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000200)) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 809.360795ms ago: executing program 3 (id=6057): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='kmem_cache_free\x00', r4, 0x0, 0x2e38}, 0x18) sendto$packet(r1, &(0x7f00000003c0)='\v', 0x1, 0x48010, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 686.100177ms ago: executing program 3 (id=6058): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x28) 671.161297ms ago: executing program 2 (id=6059): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$can_raw(0x1d, 0x3, 0x1) setrlimit(0xd, &(0x7f0000000200)={0xbdc00, 0x8}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040), 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 592.322008ms ago: executing program 5 (id=6060): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback, 0x4, 0x0, 0x2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xa80d, 0x1, 0x3}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='svc_xprt_enqueue\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) r8 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r8, 0x1, 0x3c, &(0x7f0000000780), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0xe3, 0xd9, &(0x7f0000000680)="f38557e825db8d7e1ff75c16a06ee436689cef4fa7d1e8f45db086f3ace61fe82049919be527fa8fd7519a80ae3db3ee5daaa4309fba08354d1f5bcffffe0e9208f42312ce0cda083a851694b9b5ffd3d8da68e6de89b5b42c3801bac89e3cbd0c9ebb2cf06f7b84cc9947ffa005a87a14d08c963220db93347ebe5921f11d406fdd42551814b803bb103a036fdbc177205bca4e5bd78b2a7252c31f4b44f0fc00c97634082f0e50294b1249f83627468692bb121cbaae09610aeac59336b161fafb7a7d2c94d8ebc11becc820ef29f684b3241a993dd3000f3e970cb567ac6f5bfe82", &(0x7f0000000780)=""/217, 0x6, 0x0, 0x8d, 0x0, &(0x7f0000000880)="56becf556e3d9d5901f1976bc0604cfa0b7dfcdc4161cf6743804f8d84e7744b009ba8d17db2df5db13007f01e01bb45b5019cb2ce1fe9ba36614aab3a7fd6abf2ccf072a35e2c46836ae7b6285a60c1d07834b0eaa4b234fce6bbc14150e91bb9522c2e4f9f4fab032f4e345320d14dccb78a0c114da094cf2564dd0f626cc83884954e8b350a359f9eca5590", &(0x7f00000001c0), 0x5, 0x0, 0xff}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5, 0x0, 0xffffffff}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x48) 580.521159ms ago: executing program 3 (id=6061): creat(&(0x7f00000000c0)='./file0\x00', 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x1, @perf_config_ext={0x2, 0x7}, 0x200, 0x10000, 0xb, 0x8, 0x6, 0xb, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") 558.769839ms ago: executing program 2 (id=6062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r4 = msgget$private(0x0, 0x722) msgsnd(0x0, 0x0, 0x2000, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000380)=""/114) syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x6, 0x364, &(0x7f0000000900)="$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") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0xb50, 0x920, 0xc8, 0x8, 0x0, 0x5803, 0xa80, 0x2e8, 0x2e8, 0xa80, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x8b0, 0x920, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x3}, {0x10}, {0x6f0e7d3d, 0x1}, {0x1, 0x3}, {0x9}, {0xb, 0x1}, {0x7fffffff, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x51495059c89c080}, {0x8}], [{0x60, 0x5}, {0x9, 0x3}, {0x800, 0x9d78}, {0x6, 0x81}, {0x5, 0x7}, {0x80000, 0x10001}, {0x2, 0x5}, {0xd, 0xfffffffd}, {0x6, 0x800}, {0x4, 0xf}, {0x80, 0xffff}], 0x2, 0x7}, {[{0x7ec5}, {0x6, 0x2}, {0xe0000, 0x2}, {0x1, 0x2}, {0xfffffffd, 0x1}, {0x8000, 0x2}, {0x200, 0x1}, {0x7, 0x2}, {0x7}, {0x4, 0x3}, {0x8, 0x3}], [{0x7, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x7fbb, 0x1ff}, {0x2, 0x7}, {0x5, 0x100}, {0x2a, 0x101}, {0x8, 0x6}, {0x4, 0xfffffd46}, {0x91f, 0x3ff}, {0xc, 0x3}], 0xb, 0xa}, {[{0x7, 0x2}, {0x7}, {0x80000001, 0x1}, {0xafa, 0x1}, {0x3}, {0xfffffff8, 0x3}, {0x85, 0x2}, {0xa4b, 0x2}, {0x3, 0x2}, {0xfffff7f0, 0x1}, {0x100}], [{0xb866, 0x42}, {0x200, 0xffffffff}, {0x5, 0x3}, {0x5, 0x400}, {0xf062, 0x2}, {0x80e8, 0x100}, {0xe, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x9, 0x80000000}, {0xe1a, 0x3}], 0x2, 0x8}, {[{0x5, 0x1}, {0xcfd, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0xfffff000}, {0x100, 0x3}, {0x9dc, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x2}], [{0x9, 0x5}, {0x0, 0x36}, {0x5, 0x3}, {0xfffffff9, 0x7}, {0x7, 0x200}, {0xf91, 0x2}, {0x3ff, 0x8}, {0x9, 0xe}, {0x8, 0x8000006}, {0xf, 0x442b}, {0x9, 0xe1f3}], 0x4, 0xb}, {[{0xe0, 0x2}, {0x1, 0x3}, {0x200, 0x1}, {0xb7b, 0x24ad23d8db3ef6a8}, {0x1, 0x2}, {0x1, 0x1}, {0x2a4a}, {0x101}, {0x3, 0x3}, {0x9, 0x1}, {0x9, 0x1}], [{0x8001, 0x10000}, {0x3, 0xb}, {0x2, 0x1}, {0x5, 0xc}, {0x4, 0xd23c}, {0x7, 0x1}, {0xeb9, 0xa3d0}, {0x6}, {0xfffffffc, 0x2}, {0x9, 0xb6}, {0x7, 0x80000001}], 0x5, 0xb}, {[{0x8, 0x1}, {0x5, 0x3}, {0x100}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {}, {0x1, 0x2}, {0x101, 0x2}, {0x4, 0x3}, {0x81, 0x1}], [{0xfffffffd, 0x6}, {0x9, 0x7}, {0x3e8a2173, 0x6}, {0x5, 0x6}, {0x1, 0x8}, {0x8, 0x5}, {0x9, 0x2}, {0x50bf}, {0x6, 0x3}, {0x1, 0xfffffff7}, {0x2, 0x80000001}], 0x7, 0x1}, {[{0x4, 0x2}, {0x401, 0x3}, {0x5, 0x3}, {0x8, 0x2}, {0x934, 0x1}, {0x3}, {0x531, 0x2}, {0x9, 0x1}, {0x3}, {0x75ae, 0x3}, {0x1}], [{0x10, 0x1a}, {0x5}, {0x20000, 0x8001}, {0xfffffff7, 0x8}, {0x80000001, 0x2}, {0xb30d, 0x2}, {0x0, 0x7fffffff}, {0x80, 0x5}, {0xa, 0x8}, {0xee, 0xa}, {0x24c3, 0x437}], 0xb, 0x1}, {[{0x2, 0x1}, {0x9, 0x1}, {}, {0x5, 0x2}, {0xc00}, {0x10001, 0x3}, {0x7f, 0x1}, {0x9, 0x3}, {0x30, 0x1}, {0x5, 0x3}, {0xd}], [{0x7, 0x80000000}, {0x400, 0x3}, {0x9, 0x4}, {0x1, 0x9}, {0x4}, {0x1ff, 0xfc}, {0xfd}, {0x5, 0x3}, {0x10001, 0x77}, {0x8, 0xb80}, {0x8, 0x1ff}], 0xa, 0x1}, {[{0x8}, {0xfffffbff}, {0x401}, {0xff, 0x2}, {0xe, 0x2}, {0x9, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x509}, {0x9, 0x3}], [{0x8, 0x4}, {0x9, 0x87}, {0x8, 0x4ade}, {0xfff, 0x4}, {0xa2c, 0x4}, {0x6, 0x6b}, {0x5, 0x5}, {0x7, 0xd76}, {0x2, 0x8}, {0x2ea, 0x9}, {0x5, 0x5}], 0x6, 0x3}, {[{0x8001, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x8}, {0xc}, {0x2, 0x2}, {0xffff0001, 0x2}, {0x6, 0x3}, {0xe91}, {0x80000001, 0x3}], [{0x1, 0x81}, {0x9, 0x7}, {0x3, 0x7}, {0x401, 0xec}, {0x10001}, {0x0, 0x2}, {0x70, 0x9}, {0xc6, 0x1000}, {0x7ff, 0x708}, {0x7, 0x5}, {0x2, 0x10000}], 0xb, 0x1}, {[{0x8}, {0x4, 0x1}, {0x7}, {0x6, 0x3}, {0x4}, {0xcc, 0x2}, {0xb, 0x2}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x1, 0x3}, {0x6, 0x2}], [{0x63e2df8a, 0x6}, {0x5, 0x2}, {0x2, 0x401}, {0xff, 0x8}, {0x889c, 0x5f}, {0x7d, 0xa14}, {0x0, 0x5}, {0x3, 0x372}, {0xb, 0x6}, {0x0, 0xcaf}, {0x5, 0x4}], 0x4, 0xa}], 0x8}}, @common=@inet=@dscp={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x401, 0xfff7, 0x8, 0x1, 0x0, "f4f373d196b068477bf1c55ee0269727152a61d42288bffba02c5f4813ee70966ec57a6905fc9dfc91200cc4815d73bc49557566701e806a1b11633df8e77785"}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbb0) 524.38377ms ago: executing program 4 (id=6063): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) msgctl$IPC_RMID(0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) 492.00897ms ago: executing program 4 (id=6064): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) 433.388931ms ago: executing program 5 (id=6065): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x400000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'veth1_virt_wifi\x00', &(0x7f0000000340)=@ethtool_channels={0x4a, 0x7, 0xffffffff, 0xb, 0xe4, 0xfffffff8, 0x7ff, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 225.562015ms ago: executing program 4 (id=6066): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r0, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$SG_BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) close_range(r4, r5, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000141, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r2, 0x0, 0x3ffff) sendfile(r7, r2, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r8, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) 175.561216ms ago: executing program 5 (id=6067): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 38.464079ms ago: executing program 5 (id=6068): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x1, @perf_config_ext={0x2, 0x7}, 0x200, 0x10000, 0xb, 0x8, 0x6, 0xb, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=6069): bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7f) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x4000000, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): 4294967295 subj=root:sysadm_r:sysadm_t pid=21155 comm="syz.4.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 455.113708][ T10] usb usb10-port1: attempt power cycle [ 455.120324][T21163] netlink: 'syz.3.5424': attribute type 1 has an invalid length. [ 455.136208][T21163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.148435][T21163] vlan2: entered allmulticast mode [ 455.153638][T21163] bond2: entered allmulticast mode [ 455.225052][T21178] vlan2: entered allmulticast mode [ 455.311684][T21185] netlink: 'syz.4.5434': attribute type 10 has an invalid length. [ 455.319735][T21185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5434'. [ 455.458724][T21190] loop3: detected capacity change from 0 to 128 [ 455.522373][T21199] loop2: detected capacity change from 0 to 1024 [ 455.549331][T21200] loop4: detected capacity change from 0 to 1764 [ 455.565175][T21200] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 455.571775][T21200] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 455.579538][T21200] vhci_hcd vhci_hcd.0: Device attached [ 455.625172][T21205] netlink: 'syz.6.5441': attribute type 1 has an invalid length. [ 455.668826][ T10] usb 10-1: SetAddress Request (40) to port 0 [ 455.679051][ T10] usb 10-1: new SuperSpeed USB device number 40 using vhci_hcd [ 455.691471][T21199] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5440: Failed to acquire dquot type 0 [ 455.714431][T21205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.770434][T21199] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 455.853055][T21214] vlan2: entered allmulticast mode [ 455.888245][T21199] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5440: corrupted inode contents [ 455.900567][T21199] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.5440: mark_inode_dirty error [ 455.917712][T21199] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5440: corrupted inode contents [ 455.934408][T21217] loop5: detected capacity change from 0 to 128 [ 455.956272][T21199] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.5440: mark_inode_dirty error [ 455.972753][T21199] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5440: corrupted inode contents [ 456.001697][T21199] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 456.011848][T21199] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5440: corrupted inode contents [ 456.024097][T21199] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.5440: mark_inode_dirty error [ 456.038644][T21199] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 456.048343][T21199] EXT4-fs (loop2): 1 truncate cleaned up [ 456.054505][T21199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.056622][T21222] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5447'. [ 456.076446][T21222] batman_adv: batadv0: Adding interface: veth1_vlan [ 456.083120][T21222] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.089145][T21199] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.112289][T21222] batman_adv: batadv0: Interface activated: veth1_vlan [ 456.155443][T21224] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 456.162562][T21224] batman_adv: batadv0: Removing interface: veth1_vlan [ 456.182798][T21201] vhci_hcd: connection reset by peer [ 456.191188][T14231] vhci_hcd: stop threads [ 456.195463][T14231] vhci_hcd: release socket [ 456.199919][T14231] vhci_hcd: disconnect device [ 456.225969][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5451'. [ 456.249745][T21236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.264486][T21237] loop3: detected capacity change from 0 to 164 [ 456.265933][T21236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.287688][T21237] bio_check_eod: 118 callbacks suppressed [ 456.287704][T21237] syz.3.5448: attempt to access beyond end of device [ 456.287704][T21237] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 456.307700][T21237] syz.3.5448: attempt to access beyond end of device [ 456.307700][T21237] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 456.378123][T21247] vlan2: entered allmulticast mode [ 456.523155][T21254] loop6: detected capacity change from 0 to 128 [ 456.641012][T21260] loop6: detected capacity change from 0 to 1024 [ 456.651938][T21260] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.5462: Failed to acquire dquot type 0 [ 456.664711][T21260] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 456.680794][T21260] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.5462: corrupted inode contents [ 456.693246][T21260] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.5462: mark_inode_dirty error [ 456.705848][T21260] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.5462: corrupted inode contents [ 456.718897][T21260] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.5462: mark_inode_dirty error [ 456.730357][T21260] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.5462: corrupted inode contents [ 456.743391][T21260] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 456.755038][T21260] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.5462: corrupted inode contents [ 456.771540][T21260] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.5462: mark_inode_dirty error [ 456.790567][T21263] loop4: detected capacity change from 0 to 1024 [ 456.798158][T21260] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 456.808113][T21260] EXT4-fs (loop6): 1 truncate cleaned up [ 456.809392][T21263] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5463: Failed to acquire dquot type 0 [ 456.814218][T21260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.826186][T21263] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 456.853179][T21263] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5463: corrupted inode contents [ 456.865807][T21260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.876851][T21263] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.5463: mark_inode_dirty error [ 456.915954][T21263] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5463: corrupted inode contents [ 456.944885][T21263] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.5463: mark_inode_dirty error [ 456.977494][T21263] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5463: corrupted inode contents [ 457.002018][T21263] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 457.022356][T21263] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5463: corrupted inode contents [ 457.035949][T21272] 9pnet_fd: Insufficient options for proto=fd [ 457.075884][T21276] vlan2: entered allmulticast mode [ 457.084693][T21263] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.5463: mark_inode_dirty error [ 457.096245][T21263] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 457.106754][T21263] EXT4-fs (loop4): 1 truncate cleaned up [ 457.117546][T21263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.132220][T21263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.156397][T21280] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5471'. [ 457.249161][T21287] loop5: detected capacity change from 0 to 164 [ 457.252487][T21288] validate_nla: 1 callbacks suppressed [ 457.252502][T21288] netlink: 'syz.6.5474': attribute type 10 has an invalid length. [ 457.268780][T21288] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5474'. [ 457.348478][T21287] syz.5.5470: attempt to access beyond end of device [ 457.348478][T21287] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 457.385488][T21296] 9pnet_fd: Insufficient options for proto=fd [ 457.394977][T21287] syz.5.5470: attempt to access beyond end of device [ 457.394977][T21287] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 457.494012][T21302] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 457.501117][T21302] batman_adv: batadv0: Removing interface: veth1_vlan [ 457.530233][T21307] wireguard0: entered promiscuous mode [ 457.535735][T21307] wireguard0: entered allmulticast mode [ 457.539930][T21311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21311 comm=syz.5.5483 [ 457.585238][T21302] loop6: detected capacity change from 0 to 164 [ 457.602785][T21302] syz.6.5482: attempt to access beyond end of device [ 457.602785][T21302] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 457.634076][T21302] syz.6.5482: attempt to access beyond end of device [ 457.634076][T21302] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 457.705340][T21325] netlink: 'syz.5.5489': attribute type 10 has an invalid length. [ 457.713227][T21325] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5489'. [ 457.722860][T21325] batman_adv: batadv0: Adding interface: veth1_vlan [ 457.729629][T21325] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.729916][T21318] loop3: detected capacity change from 0 to 1024 [ 457.756237][T21325] batman_adv: batadv0: Interface activated: veth1_vlan [ 457.774871][T21318] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5486: Failed to acquire dquot type 0 [ 457.786868][T21318] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 457.816161][T21318] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5486: corrupted inode contents [ 457.844583][T21318] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.5486: mark_inode_dirty error [ 457.870353][T21318] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5486: corrupted inode contents [ 457.884681][T21318] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.5486: mark_inode_dirty error [ 457.923982][T21332] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 457.931191][T21332] batman_adv: batadv0: Removing interface: veth1_vlan [ 457.940154][T21318] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5486: corrupted inode contents [ 457.953413][T21318] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 457.968125][T21318] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5486: corrupted inode contents [ 457.986706][T21318] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.5486: mark_inode_dirty error [ 458.000597][T21318] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 458.011308][T21332] loop5: detected capacity change from 0 to 164 [ 458.021063][T21318] EXT4-fs (loop3): 1 truncate cleaned up [ 458.027190][T21332] syz.5.5492: attempt to access beyond end of device [ 458.027190][T21332] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 458.044945][T21318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.058284][T21332] syz.5.5492: attempt to access beyond end of device [ 458.058284][T21332] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 458.072702][T21318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.155234][T21339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5495'. [ 458.193754][T21335] loop5: detected capacity change from 0 to 164 [ 458.400140][T21350] loop5: detected capacity change from 0 to 164 [ 458.416688][T21350] syz.5.5500: attempt to access beyond end of device [ 458.416688][T21350] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 458.447756][T21350] syz.5.5500: attempt to access beyond end of device [ 458.447756][T21350] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 458.522787][T21356] netlink: 'syz.5.5502': attribute type 1 has an invalid length. [ 458.643995][T21363] loop5: detected capacity change from 0 to 164 [ 458.650356][T21364] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 458.656909][T21364] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 458.664618][T21364] vhci_hcd vhci_hcd.0: Device attached [ 458.899327][T21369] loop3: detected capacity change from 0 to 164 [ 458.974263][T21372] loop6: detected capacity change from 0 to 1764 [ 459.165382][T21365] vhci_hcd: connection closed [ 459.218115][T14230] vhci_hcd: stop threads [ 459.227087][T14230] vhci_hcd: release socket [ 459.231574][T14230] vhci_hcd: disconnect device [ 459.369231][T21384] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 459.376301][T21384] batman_adv: batadv0: Removing interface: veth1_vlan [ 459.399715][T21380] loop3: detected capacity change from 0 to 164 [ 459.413082][T21384] loop2: detected capacity change from 0 to 164 [ 459.472746][ T3412] usb 14-1: device descriptor read/8, error -110 [ 459.515987][T21392] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5515'. [ 459.543683][T21386] wireguard0: entered promiscuous mode [ 459.549232][T21386] wireguard0: entered allmulticast mode [ 459.566667][T21394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21394 comm=syz.2.5512 [ 459.600220][ T3412] usb 14-1: new SuperSpeed USB device number 42 using vhci_hcd [ 459.633220][T21396] loop3: detected capacity change from 0 to 164 [ 459.635648][ T3412] usb 14-1: enqueue for inactive port 0 [ 459.667647][ T3412] usb 14-1: enqueue for inactive port 0 [ 459.673231][ T3412] usb 14-1: enqueue for inactive port 0 [ 459.757149][T21399] netlink: 'syz.2.5516': attribute type 10 has an invalid length. [ 459.765133][T21399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5516'. [ 459.817537][T21401] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 459.824684][T21401] batman_adv: batadv0: Removing interface: veth1_vlan [ 459.872472][T21399] batman_adv: batadv0: Adding interface: veth1_vlan [ 459.879192][T21399] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.912891][T21399] batman_adv: batadv0: Interface activated: veth1_vlan [ 459.953212][T21401] loop4: detected capacity change from 0 to 164 [ 459.971219][T21410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21410 comm=syz.6.5520 [ 460.048874][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 460.048888][ T29] audit: type=1326 audit(1758543656.936:14794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 460.078960][ T29] audit: type=1326 audit(1758543656.936:14795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 460.102655][ T29] audit: type=1326 audit(1758543656.936:14796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 460.126233][ T29] audit: type=1326 audit(1758543656.936:14797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 460.149860][ T29] audit: type=1326 audit(1758543656.936:14798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 460.191779][T21412] loop5: detected capacity change from 0 to 164 [ 460.193836][ T29] audit: type=1326 audit(1758543656.936:14799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 460.221894][ T29] audit: type=1326 audit(1758543656.936:14800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 460.245665][ T29] audit: type=1326 audit(1758543656.936:14801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 460.269314][ T29] audit: type=1326 audit(1758543656.936:14802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 460.292910][ T29] audit: type=1326 audit(1758543656.936:14803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21414 comm="syz.4.5523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaa979eec9 code=0x7ffc0000 [ 460.380026][T21421] loop4: detected capacity change from 0 to 164 [ 460.381313][T21423] 9pnet_fd: Insufficient options for proto=fd [ 460.515785][T21435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5532'. [ 460.614292][T21430] loop5: detected capacity change from 0 to 128 [ 460.642347][T21430] buffer_io_error: 44 callbacks suppressed [ 460.642360][T21430] Buffer I/O error on dev loop5, logical block 75, lost async page write [ 460.689048][T21430] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 460.771132][T21439] loop3: detected capacity change from 0 to 164 [ 460.807952][ T3412] usb usb14-port1: attempt power cycle [ 460.828750][ T10] usb 10-1: device descriptor read/8, error -110 [ 460.838344][T21430] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 460.847308][T21430] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 460.876907][T21430] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 460.896835][T21430] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 460.923866][T21430] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 460.953439][ T10] usb 10-1: new SuperSpeed USB device number 40 using vhci_hcd [ 460.970581][T21430] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 460.979891][ T10] usb 10-1: enqueue for inactive port 0 [ 460.986807][T21442] loop6: detected capacity change from 0 to 164 [ 460.997770][ T10] usb 10-1: enqueue for inactive port 0 [ 461.006151][T21430] Buffer I/O error on dev loop5, logical block 107, lost async page write [ 461.016052][ T10] usb 10-1: enqueue for inactive port 0 [ 461.037489][T21430] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 461.038176][T21444] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 461.052497][T21444] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 461.060248][T21444] vhci_hcd vhci_hcd.0: Device attached [ 461.139861][T21459] loop3: detected capacity change from 0 to 128 [ 461.232207][T21461] wireguard1: entered promiscuous mode [ 461.237787][T21461] wireguard1: entered allmulticast mode [ 461.260009][T21445] vhci_hcd: connection closed [ 461.265195][T14234] vhci_hcd: stop threads [ 461.274134][T14234] vhci_hcd: release socket [ 461.278594][T14234] vhci_hcd: disconnect device [ 461.283925][T21465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21465 comm=syz.3.5540 [ 461.304624][T21466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21466 comm=syz.4.5539 [ 461.620216][T21477] loop5: detected capacity change from 0 to 1764 [ 461.664772][T21480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.703777][T21480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.717603][T21477] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 461.724163][T21477] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 461.731863][T21477] vhci_hcd vhci_hcd.0: Device attached [ 461.754095][T21486] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5545'. [ 461.849333][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5545'. [ 461.994014][T21496] loop2: detected capacity change from 0 to 1024 [ 462.013747][T21496] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5551: Failed to acquire dquot type 0 [ 462.032947][ T3361] usb 12-1: SetAddress Request (27) to port 0 [ 462.033862][T21496] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 462.048690][ T3361] usb 12-1: new SuperSpeed USB device number 27 using vhci_hcd [ 462.054355][T21496] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5551: corrupted inode contents [ 462.073684][T21496] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.5551: mark_inode_dirty error [ 462.085414][T21496] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5551: corrupted inode contents [ 462.107710][T21496] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.5551: mark_inode_dirty error [ 462.119240][T21496] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5551: corrupted inode contents [ 462.131286][T21496] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 462.140946][T21496] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5551: corrupted inode contents [ 462.156309][T21496] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.5551: mark_inode_dirty error [ 462.168843][T21496] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 462.178001][T21504] wireguard2: entered promiscuous mode [ 462.178518][T21496] EXT4-fs (loop2): 1 truncate cleaned up [ 462.183473][T21504] wireguard2: entered allmulticast mode [ 462.195196][T21496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.209439][T21496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.211317][T21508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21508 comm=syz.3.5554 [ 462.247648][T21482] vhci_hcd: connection reset by peer [ 462.258135][T14230] vhci_hcd: stop threads [ 462.262433][T14230] vhci_hcd: release socket [ 462.266854][T14230] vhci_hcd: disconnect device [ 462.312021][T21506] loop6: detected capacity change from 0 to 164 [ 462.347835][ T10] usb usb10-port1: unable to enumerate USB device [ 462.391474][T21519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5558'. [ 462.406255][T21519] loop3: detected capacity change from 0 to 164 [ 462.420925][T21519] bio_check_eod: 52 callbacks suppressed [ 462.420941][T21519] syz.3.5558: attempt to access beyond end of device [ 462.420941][T21519] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 462.454381][T21519] syz.3.5558: attempt to access beyond end of device [ 462.454381][T21519] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 462.471667][T21521] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 462.478838][T21521] batman_adv: batadv0: Removing interface: veth1_vlan [ 462.510872][T21521] loop2: detected capacity change from 0 to 164 [ 462.526651][T21521] syz.2.5559: attempt to access beyond end of device [ 462.526651][T21521] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 462.542941][T21521] syz.2.5559: attempt to access beyond end of device [ 462.542941][T21521] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 462.582182][T21527] netlink: 'syz.2.5561': attribute type 10 has an invalid length. [ 462.590099][T21527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5561'. [ 462.618405][T21527] batman_adv: batadv0: Adding interface: veth1_vlan [ 462.625041][T21527] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.657808][T21527] batman_adv: batadv0: Interface activated: veth1_vlan [ 462.868030][ T3412] usb usb14-port1: unable to enumerate USB device [ 462.887708][T21533] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 462.894244][T21533] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 462.901908][T21533] vhci_hcd vhci_hcd.0: Device attached [ 463.005165][T21540] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 463.012421][T21540] batman_adv: batadv0: Removing interface: veth1_vlan [ 463.059333][T21542] loop2: detected capacity change from 0 to 164 [ 463.262007][T21551] loop2: detected capacity change from 0 to 1024 [ 463.271515][T21551] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5569: Failed to acquire dquot type 0 [ 463.283459][T21551] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 463.298923][T21551] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5569: corrupted inode contents [ 463.312000][T21551] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.5569: mark_inode_dirty error [ 463.323838][T21551] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5569: corrupted inode contents [ 463.336912][T21551] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.5569: mark_inode_dirty error [ 463.352198][T21551] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5569: corrupted inode contents [ 463.364465][T21551] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 463.373975][T21551] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5569: corrupted inode contents [ 463.395888][T21551] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.5569: mark_inode_dirty error [ 463.408286][T21551] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 463.418157][T21551] EXT4-fs (loop2): 1 truncate cleaned up [ 463.424287][T21551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.438409][T21551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.486615][T21534] vhci_hcd: connection closed [ 463.486775][T14234] vhci_hcd: stop threads [ 463.495838][T14234] vhci_hcd: release socket [ 463.500276][T14234] vhci_hcd: disconnect device [ 463.507058][T21555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21555 comm=syz.2.5570 [ 463.519849][T21549] loop6: detected capacity change from 0 to 128 [ 463.529284][T21549] syz.6.5568: attempt to access beyond end of device [ 463.529284][T21549] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 463.543709][T21549] syz.6.5568: attempt to access beyond end of device [ 463.543709][T21549] loop6: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 463.559940][T21549] syz.6.5568: attempt to access beyond end of device [ 463.559940][T21549] loop6: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 463.573481][T21549] syz.6.5568: attempt to access beyond end of device [ 463.573481][T21549] loop6: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 463.590840][T21549] syz.6.5568: attempt to access beyond end of device [ 463.590840][T21549] loop6: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 463.605020][T21549] syz.6.5568: attempt to access beyond end of device [ 463.605020][T21549] loop6: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 463.707029][T21560] loop2: detected capacity change from 0 to 164 [ 463.717356][T21560] cgroup: Need name or subsystem set [ 463.722817][T21561] loop5: detected capacity change from 0 to 164 [ 464.018010][T21571] loop6: detected capacity change from 0 to 1764 [ 464.097740][T21573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.106688][T21573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.347707][T21569] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 464.354312][T21569] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 464.362005][T21569] vhci_hcd vhci_hcd.0: Device attached [ 464.410565][T21577] loop2: detected capacity change from 0 to 164 [ 464.486845][T21579] loop2: detected capacity change from 0 to 164 [ 464.550758][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5580'. [ 464.574487][T21587] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5582'. [ 464.654752][T21574] vhci_hcd: connection closed [ 464.655079][T14224] vhci_hcd: stop threads [ 464.664053][T14224] vhci_hcd: release socket [ 464.668533][T14224] vhci_hcd: disconnect device [ 464.673295][ T3519] usb 14-1: enqueue for inactive port 0 [ 464.681448][T21589] loop3: detected capacity change from 0 to 1024 [ 464.709604][T21589] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5583: Failed to acquire dquot type 0 [ 464.746944][T21589] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 464.787456][T21589] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5583: corrupted inode contents [ 464.808563][T21589] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.5583: mark_inode_dirty error [ 464.822347][T21596] loop5: detected capacity change from 0 to 164 [ 464.832340][T21597] loop4: detected capacity change from 0 to 164 [ 464.839001][T21596] cgroup: Need name or subsystem set [ 464.847279][T21589] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5583: corrupted inode contents [ 464.861474][T21589] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.5583: mark_inode_dirty error [ 464.872967][T21599] netlink: 'syz.2.5586': attribute type 10 has an invalid length. [ 464.880905][T21599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5586'. [ 464.894464][T21589] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5583: corrupted inode contents [ 464.894751][T21599] batman_adv: batadv0: Adding interface: veth1_vlan [ 464.906639][ T3519] usb 14-1: enqueue for inactive port 0 [ 464.913071][T21599] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.945467][T21589] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 464.945672][T21599] batman_adv: batadv0: Interface activated: veth1_vlan [ 464.964133][T21589] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5583: corrupted inode contents [ 465.005680][T21589] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.5583: mark_inode_dirty error [ 465.020654][T21589] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 465.035514][T21589] EXT4-fs (loop3): 1 truncate cleaned up [ 465.041723][T21589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.061559][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 465.061573][ T29] audit: type=1326 audit(1758543661.946:15036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2905eec9 code=0x7ffc0000 [ 465.093795][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.121334][ T29] audit: type=1326 audit(1758543661.946:15037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2905eec9 code=0x7ffc0000 [ 465.145207][ T29] audit: type=1326 audit(1758543661.946:15038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7faa2905eec9 code=0x7ffc0000 [ 465.168958][ T29] audit: type=1326 audit(1758543661.946:15039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2905eec9 code=0x7ffc0000 [ 465.192838][ T29] audit: type=1326 audit(1758543661.946:15040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2905eec9 code=0x7ffc0000 [ 465.216613][ T29] audit: type=1326 audit(1758543661.946:15041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7faa2905eec9 code=0x7ffc0000 [ 465.223790][T21606] loop5: detected capacity change from 0 to 164 [ 465.240463][ T29] audit: type=1326 audit(1758543661.946:15042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2905eec9 code=0x7ffc0000 [ 465.270086][ T29] audit: type=1326 audit(1758543661.946:15043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa2905eec9 code=0x7ffc0000 [ 465.293603][ T29] audit: type=1326 audit(1758543661.946:15044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2905eec9 code=0x7ffc0000 [ 465.317213][ T29] audit: type=1326 audit(1758543661.946:15045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.5587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faa2905eec9 code=0x7ffc0000 [ 465.478501][T21619] netlink: 'syz.3.5593': attribute type 1 has an invalid length. [ 465.490847][T21617] loop2: detected capacity change from 0 to 1024 [ 465.518133][T21619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.529180][T21616] loop6: detected capacity change from 0 to 164 [ 465.530117][T21617] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5592: Failed to acquire dquot type 0 [ 465.541019][T21619] vlan2: entered allmulticast mode [ 465.551813][T21619] bond3: entered allmulticast mode [ 465.579020][T21614] loop5: detected capacity change from 0 to 164 [ 465.590107][T21617] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 465.628683][T21617] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5592: corrupted inode contents [ 465.645580][T21625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5594'. [ 465.657107][T21617] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.5592: mark_inode_dirty error [ 465.684074][T21617] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5592: corrupted inode contents [ 465.696920][T21629] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5595'. [ 465.698410][T21617] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.5592: mark_inode_dirty error [ 465.721457][T21617] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5592: corrupted inode contents [ 465.737025][T21634] loop3: detected capacity change from 0 to 164 [ 465.746017][T21634] cgroup: Need name or subsystem set [ 465.758817][T21617] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 465.767847][T21617] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.5592: corrupted inode contents [ 465.782568][T21617] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.5592: mark_inode_dirty error [ 465.799646][T21637] loop4: detected capacity change from 0 to 1024 [ 465.806220][T21617] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 465.815573][T21637] EXT4-fs: Ignoring removed orlov option [ 465.824327][T21637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.840609][T21617] EXT4-fs (loop2): 1 truncate cleaned up [ 465.848189][T21617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.867884][T21617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.031641][T21654] loop6: detected capacity change from 0 to 128 [ 466.039519][T21655] loop3: detected capacity change from 0 to 164 [ 466.272249][T21671] loop6: detected capacity change from 0 to 164 [ 466.288125][ T3519] usb usb14-port1: attempt power cycle [ 466.305333][T13523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.318225][T21673] loop2: detected capacity change from 0 to 164 [ 466.347311][T21673] cgroup: Need name or subsystem set [ 466.357435][T21677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5612'. [ 466.599811][T21689] loop5: detected capacity change from 0 to 128 [ 466.846518][T21707] loop3: detected capacity change from 0 to 164 [ 466.859884][T21710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.880410][T21707] cgroup: Need name or subsystem set [ 466.887102][T21710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.976050][T21721] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5628'. [ 466.995321][T21705] loop6: detected capacity change from 0 to 164 [ 467.052337][T14224] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.147649][ T3361] usb 12-1: device descriptor read/8, error -110 [ 467.241255][T14224] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.257812][ T3361] usb 12-1: new SuperSpeed USB device number 27 using vhci_hcd [ 467.272931][T21701] chnl_net:caif_netlink_parms(): no params data found [ 467.281526][ T3361] usb 12-1: enqueue for inactive port 0 [ 467.287124][ T3361] usb 12-1: enqueue for inactive port 0 [ 467.293227][ T3361] usb 12-1: enqueue for inactive port 0 [ 467.305152][T14224] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.379076][T14224] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.403653][T21739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5632'. [ 467.445045][T21701] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.452231][T21701] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.459583][T21701] bridge_slave_0: entered allmulticast mode [ 467.466050][T21701] bridge_slave_0: entered promiscuous mode [ 467.530588][T21701] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.537693][T21701] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.544846][T21701] bridge_slave_1: entered allmulticast mode [ 467.551329][T21701] bridge_slave_1: entered promiscuous mode [ 467.577738][T21741] loop4: detected capacity change from 0 to 164 [ 467.589497][T21741] bio_check_eod: 38 callbacks suppressed [ 467.589509][T21741] syz.4.5633: attempt to access beyond end of device [ 467.589509][T21741] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 467.618519][T21741] syz.4.5633: attempt to access beyond end of device [ 467.618519][T21741] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 467.642874][T21746] loop3: detected capacity change from 0 to 164 [ 467.824629][T21754] loop3: detected capacity change from 0 to 164 [ 467.834441][T21754] cgroup: Need name or subsystem set [ 467.844933][T21756] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5639'. [ 467.870236][T14224] bond0 (unregistering): Released all slaves [ 467.878851][T14224] bond1 (unregistering): Released all slaves [ 467.886800][T14224] bond2 (unregistering): Released all slaves [ 467.895559][T14224] bond3 (unregistering): Released all slaves [ 467.914974][T14224] bond4 (unregistering): Released all slaves [ 467.929648][T14224] bond5 (unregistering): Released all slaves [ 467.939950][T21701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.963447][T21701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.992087][T14224] hsr_slave_0: left promiscuous mode [ 468.056263][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5643'. [ 468.088753][T14224] hsr_slave_1: left promiscuous mode [ 468.094729][T14224] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 468.101845][T14224] batman_adv: batadv0: Removing interface: veth1_vlan [ 468.112712][T14224] veth1_vlan: left promiscuous mode [ 468.118425][T14224] veth0_vlan: left promiscuous mode [ 468.132273][T21775] loop6: detected capacity change from 0 to 1024 [ 468.210462][T21777] loop5: detected capacity change from 0 to 1764 [ 468.223546][T21777] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 468.230076][T21777] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 468.237848][T21777] vhci_hcd vhci_hcd.0: Device attached [ 468.309777][T21701] team0: Port device team_slave_0 added [ 468.360519][T21701] team0: Port device team_slave_1 added [ 468.449758][T21701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.456763][T21701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.478822][ T3519] usb usb14-port1: unable to enumerate USB device [ 468.482952][T21701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.504772][T21775] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.5644: Failed to acquire dquot type 0 [ 468.516831][T21701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.523838][T21701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.526561][T21775] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, [ 468.549744][T21701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.549820][ T3361] usb 12-1: SetAddress Request (28) to port 0 [ 468.549847][ T3361] usb 12-1: new SuperSpeed USB device number 28 using vhci_hcd [ 468.581649][T21775] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 468.595795][T21775] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.5644: corrupted inode contents [ 468.615766][T21775] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.5644: mark_inode_dirty error [ 468.634081][T21785] loop4: detected capacity change from 0 to 128 [ 468.643002][T21701] hsr_slave_0: entered promiscuous mode [ 468.650520][T21701] hsr_slave_1: entered promiscuous mode [ 468.658008][T21785] syz.4.5646: attempt to access beyond end of device [ 468.658008][T21785] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 468.672584][T21775] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.5644: corrupted inode contents [ 468.678302][T21701] debugfs: 'hsr0' already exists in 'hsr' [ 468.690145][T21701] Cannot create hsr debugfs directory [ 468.702453][T21785] syz.4.5646: attempt to access beyond end of device [ 468.702453][T21785] loop4: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 468.716754][T21775] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.5644: mark_inode_dirty error [ 468.729811][T21785] syz.4.5646: attempt to access beyond end of device [ 468.729811][T21785] loop4: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 468.743256][T21785] buffer_io_error: 42 callbacks suppressed [ 468.743271][T21785] Buffer I/O error on dev loop4, logical block 75, lost async page write [ 468.759258][T21775] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.5644: corrupted inode contents [ 468.772452][T21785] syz.4.5646: attempt to access beyond end of device [ 468.772452][T21785] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 468.785918][T21785] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 468.794692][T21775] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 468.799107][T21785] syz.4.5646: attempt to access beyond end of device [ 468.799107][T21785] loop4: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 468.817332][T21778] vhci_hcd: connection reset by peer [ 468.833022][T21775] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.5644: corrupted inode contents [ 468.836097][T14234] vhci_hcd: stop threads [ 468.846204][T21785] syz.4.5646: attempt to access beyond end of device [ 468.846204][T21785] loop4: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 468.849287][T14234] vhci_hcd: release socket [ 468.862595][T21785] Buffer I/O error on dev loop4, logical block 87, lost async page write [ 468.873931][T21785] syz.4.5646: attempt to access beyond end of device [ 468.873931][T21785] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 468.875460][T14234] vhci_hcd: disconnect device [ 468.888858][T21785] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 468.895195][T21775] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.5644: mark_inode_dirty error [ 468.914285][T21775] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 468.923647][T21775] EXT4-fs (loop6): 1 truncate cleaned up [ 468.930831][T21785] syz.4.5646: attempt to access beyond end of device [ 468.930831][T21785] loop4: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 468.931566][T21775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.958645][T21775] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.968030][T21789] loop3: detected capacity change from 0 to 164 [ 468.974963][T21785] Buffer I/O error on dev loop4, logical block 91, lost async page write [ 468.984098][T21785] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 468.994513][T21785] Buffer I/O error on dev loop4, logical block 103, lost async page write [ 469.003086][T21785] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 469.013976][T21785] Buffer I/O error on dev loop4, logical block 107, lost async page write [ 469.031118][T21785] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 469.102972][T21792] loop6: detected capacity change from 0 to 164 [ 469.159027][T21701] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 469.168282][T21701] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 469.177375][T21701] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 469.188431][T21701] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 469.200147][T21794] wireguard0: entered promiscuous mode [ 469.205632][T21794] wireguard0: entered allmulticast mode [ 469.245889][T21701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.253817][T21802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21802 comm=syz.6.5649 [ 469.259804][T21701] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.285590][T21701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.296006][T21701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.356106][T14231] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.363230][T14231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.374700][T14231] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.381807][T14231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.447912][T21701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.500088][T21820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.506986][T21821] netlink: 'syz.4.5655': attribute type 10 has an invalid length. [ 469.516409][T21821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5655'. [ 469.517368][T21820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.551653][T21821] batman_adv: batadv0: Adding interface: veth1_vlan [ 469.558305][T21821] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.602711][T21821] batman_adv: batadv0: Interface activated: veth1_vlan [ 469.652422][T21701] veth0_vlan: entered promiscuous mode [ 469.664168][T21701] veth1_vlan: entered promiscuous mode [ 469.678300][T21701] veth0_macvtap: entered promiscuous mode [ 469.686073][T21701] veth1_macvtap: entered promiscuous mode [ 469.728969][T21701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.743487][T21831] loop4: detected capacity change from 0 to 1024 [ 469.752857][T21701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.764489][T14230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.773419][T21831] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5657: Failed to acquire dquot type 0 [ 469.788819][T14230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.797554][T14234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.806557][T21831] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 469.821413][T21831] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5657: corrupted inode contents [ 469.834591][T21831] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.5657: mark_inode_dirty error [ 469.835203][T14234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.859025][T21833] loop3: detected capacity change from 0 to 164 [ 469.866577][T21831] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5657: corrupted inode contents [ 469.887953][T21831] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.5657: mark_inode_dirty error [ 469.919659][T21831] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5657: corrupted inode contents [ 469.932172][T21831] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 469.942403][T21831] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5657: corrupted inode contents [ 469.955375][T21831] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.5657: mark_inode_dirty error [ 469.970380][T21831] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 469.985918][T21831] EXT4-fs (loop4): 1 truncate cleaned up [ 469.992886][T21840] netlink: 'syz.6.5660': attribute type 1 has an invalid length. [ 469.993229][T21831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.020687][T21840] 8021q: adding VLAN 0 to HW filter on device bond4 [ 470.046409][T21840] vlan2: entered allmulticast mode [ 470.051621][T21840] bond4: entered allmulticast mode [ 470.070705][T13523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.244893][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 470.244908][ T29] audit: type=1326 audit(1758543667.126:15346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.6.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333ddeec9 code=0x7ffc0000 [ 470.278437][ T29] audit: type=1326 audit(1758543667.146:15347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.6.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333ddeec9 code=0x7ffc0000 [ 470.343131][T21856] loop2: detected capacity change from 0 to 1764 [ 470.383087][ T29] audit: type=1326 audit(1758543667.256:15348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.6.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd333ddeec9 code=0x7ffc0000 [ 470.406720][ T29] audit: type=1326 audit(1758543667.256:15349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.6.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333ddeec9 code=0x7ffc0000 [ 470.430403][ T29] audit: type=1326 audit(1758543667.256:15350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.6.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333ddeec9 code=0x7ffc0000 [ 470.553815][T21852] loop4: detected capacity change from 0 to 128 [ 470.617070][ T29] audit: type=1326 audit(1758543667.356:15351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.6.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd333ddeec9 code=0x7ffc0000 [ 470.640718][ T29] audit: type=1326 audit(1758543667.356:15352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333ddeec9 code=0x7ffc0000 [ 470.663845][ T29] audit: type=1326 audit(1758543667.356:15353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333ddeec9 code=0x7ffc0000 [ 470.686988][ T29] audit: type=1326 audit(1758543667.356:15354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd333ddeec9 code=0x7ffc0000 [ 470.709972][ T29] audit: type=1326 audit(1758543667.356:15355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333ddeec9 code=0x7ffc0000 [ 470.751769][T21864] loop6: detected capacity change from 0 to 164 [ 470.789930][T21860] loop5: detected capacity change from 0 to 164 [ 470.812862][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5669'. [ 470.873571][T21876] loop3: detected capacity change from 0 to 1024 [ 470.882791][T21876] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5673: Failed to acquire dquot type 0 [ 470.895431][T21876] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 470.911435][T21876] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5673: corrupted inode contents [ 470.927502][T21876] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.5673: mark_inode_dirty error [ 470.939240][T21876] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5673: corrupted inode contents [ 470.951413][T21876] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.5673: mark_inode_dirty error [ 470.974406][T21886] loop6: detected capacity change from 0 to 1024 [ 470.981335][T21886] EXT4-fs: Ignoring removed orlov option [ 470.987480][T21884] vlan3: entered allmulticast mode [ 470.994876][T21876] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5673: corrupted inode contents [ 471.009741][T21876] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 471.018751][T21886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.018877][T21876] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5673: corrupted inode contents [ 471.049386][T21876] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.5673: mark_inode_dirty error [ 471.061196][T21876] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 471.072085][T21876] EXT4-fs (loop3): 1 truncate cleaned up [ 471.078203][T21876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.094300][T16946] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.112648][T21876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.222647][T21904] loop6: detected capacity change from 0 to 164 [ 471.232487][T21900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5682'. [ 471.293824][T21908] wireguard2: entered promiscuous mode [ 471.299479][T21908] wireguard2: entered allmulticast mode [ 471.322724][T21913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21913 comm=syz.3.5685 [ 471.369535][T21916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.385910][T21916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.468428][T21921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5690'. [ 471.503705][T21921] loop2: detected capacity change from 0 to 164 [ 471.622074][T21928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.632872][T21928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.701259][T21929] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 471.707823][T21929] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 471.715533][T21929] vhci_hcd vhci_hcd.0: Device attached [ 472.025595][T21933] loop5: detected capacity change from 0 to 1024 [ 472.049097][T21933] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5693: Failed to acquire dquot type 0 [ 472.061375][T21933] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 472.079451][T21933] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5693: corrupted inode contents [ 472.091694][T21933] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.5693: mark_inode_dirty error [ 472.104406][T21933] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5693: corrupted inode contents [ 472.117261][T21933] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.5693: mark_inode_dirty error [ 472.130118][T21933] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5693: corrupted inode contents [ 472.142575][T21933] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 472.152730][T21933] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5693: corrupted inode contents [ 472.165009][T21933] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.5693: mark_inode_dirty error [ 472.182861][T21933] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 472.194794][T21933] EXT4-fs (loop5): 1 truncate cleaned up [ 472.201090][T21933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.216009][T21933] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.229588][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5695'. [ 472.258783][T21944] netlink: 'syz.6.5698': attribute type 1 has an invalid length. [ 472.279166][T21944] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.295967][T21944] vlan2: entered allmulticast mode [ 472.301238][T21944] bond5: entered allmulticast mode [ 472.339309][T21930] vhci_hcd: connection closed [ 472.340356][T14230] vhci_hcd: stop threads [ 472.343090][T21954] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5702'. [ 472.345048][T14230] vhci_hcd: release socket [ 472.345063][T14230] vhci_hcd: disconnect device [ 472.476570][T21957] loop5: detected capacity change from 0 to 164 [ 472.488550][T21963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.497912][T21963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.588636][T21964] loop6: detected capacity change from 0 to 1764 [ 472.904736][T21960] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 472.911289][T21960] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 472.919105][T21960] vhci_hcd vhci_hcd.0: Device attached [ 472.934697][T21966] loop3: detected capacity change from 0 to 164 [ 473.005481][T21974] loop3: detected capacity change from 0 to 1024 [ 473.025608][T21974] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5708: Failed to acquire dquot type 0 [ 473.039767][T21974] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 473.061639][T21974] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5708: corrupted inode contents [ 473.074440][T21974] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.5708: mark_inode_dirty error [ 473.080044][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 473.096057][T21974] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5708: corrupted inode contents [ 473.116399][T21974] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.5708: mark_inode_dirty error [ 473.130133][T21974] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5708: corrupted inode contents [ 473.144036][T21974] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 473.157241][T21974] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5708: corrupted inode contents [ 473.169661][T21974] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.5708: mark_inode_dirty error [ 473.186788][T21974] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 473.188958][ T9] usb 14-1: SetAddress Request (50) to port 0 [ 473.202021][ T9] usb 14-1: new SuperSpeed USB device number 50 using vhci_hcd [ 473.234432][T21984] loop2: detected capacity change from 0 to 128 [ 473.248881][T21974] EXT4-fs (loop3): 1 truncate cleaned up [ 473.255001][T21974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.273830][T21974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.320351][T21967] vhci_hcd: connection reset by peer [ 473.325805][T14227] vhci_hcd: stop threads [ 473.330188][T14227] vhci_hcd: release socket [ 473.334643][T14227] vhci_hcd: disconnect device [ 473.471636][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5718'. [ 473.483828][T21999] vlan3: entered allmulticast mode [ 473.500281][T22000] loop3: detected capacity change from 0 to 164 [ 473.622272][T22003] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 473.628816][T22003] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 473.636537][T22003] vhci_hcd vhci_hcd.0: Device attached [ 473.642211][ T3361] usb 12-1: device descriptor read/8, error -110 [ 473.688407][T22002] loop5: detected capacity change from 0 to 128 [ 473.721741][T22002] bio_check_eod: 76 callbacks suppressed [ 473.721760][T22002] syz.5.5719: attempt to access beyond end of device [ 473.721760][T22002] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 473.768882][ T3361] usb 12-1: new SuperSpeed USB device number 28 using vhci_hcd [ 473.789538][ T3361] usb 12-1: enqueue for inactive port 0 [ 473.804722][ T3361] usb 12-1: enqueue for inactive port 0 [ 473.815802][T22002] syz.5.5719: attempt to access beyond end of device [ 473.815802][T22002] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 473.875707][ T3361] usb 12-1: enqueue for inactive port 0 [ 473.887561][T22002] syz.5.5719: attempt to access beyond end of device [ 473.887561][T22002] loop5: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 473.901155][T22002] buffer_io_error: 42 callbacks suppressed [ 473.901169][T22002] Buffer I/O error on dev loop5, logical block 75, lost async page write [ 473.916857][T22002] syz.5.5719: attempt to access beyond end of device [ 473.916857][T22002] loop5: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 473.930411][T22002] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 473.940090][ T36] usb 6-1: SetAddress Request (15) to port 0 [ 473.942496][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5720'. [ 473.946081][ T36] usb 6-1: new SuperSpeed USB device number 15 using vhci_hcd [ 473.964508][T22002] syz.5.5719: attempt to access beyond end of device [ 473.964508][T22002] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 473.978627][T22002] syz.5.5719: attempt to access beyond end of device [ 473.978627][T22002] loop5: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 473.992072][T22002] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 474.001433][ T3361] usb usb12-port1: attempt power cycle [ 474.007244][T22002] syz.5.5719: attempt to access beyond end of device [ 474.007244][T22002] loop5: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 474.020698][T22002] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 474.030963][T22002] syz.5.5719: attempt to access beyond end of device [ 474.030963][T22002] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 474.044920][T22002] syz.5.5719: attempt to access beyond end of device [ 474.044920][T22002] loop5: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 474.058419][T22002] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 474.069362][T22002] syz.5.5719: attempt to access beyond end of device [ 474.069362][T22002] loop5: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 474.082919][T22002] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 474.094092][T22002] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 474.104350][T22002] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 474.113847][T22002] Buffer I/O error on dev loop5, logical block 107, lost async page write [ 474.122483][T22002] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 474.199838][T22006] vhci_hcd: connection reset by peer [ 474.205433][T14224] vhci_hcd: stop threads [ 474.209721][T14224] vhci_hcd: release socket [ 474.214136][T14224] vhci_hcd: disconnect device [ 474.299189][T22023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5725'. [ 474.358218][T22025] loop5: detected capacity change from 0 to 128 [ 474.377573][T22026] loop3: detected capacity change from 0 to 164 [ 474.429295][T22032] wireguard1: entered promiscuous mode [ 474.434825][T22032] wireguard1: entered allmulticast mode [ 474.478003][T22038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22038 comm=syz.4.5729 [ 474.513981][T22037] loop5: detected capacity change from 0 to 164 [ 474.665232][T22044] netlink: 'syz.4.5734': attribute type 10 has an invalid length. [ 474.673465][T22044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5734'. [ 474.745357][T22046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.755154][T22046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.786966][T22048] bridge_slave_0: left allmulticast mode [ 474.792794][T22048] bridge_slave_0: left promiscuous mode [ 474.798685][T22048] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.808599][T22048] bridge_slave_1: left allmulticast mode [ 474.814265][T22048] bridge_slave_1: left promiscuous mode [ 474.820188][T22048] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.831204][T22048] bond0: (slave bond_slave_0): Releasing backup interface [ 474.850319][T22048] bond0: (slave bond_slave_1): Releasing backup interface [ 474.862809][T22048] team0: Port device team_slave_0 removed [ 474.873534][T22048] team0: Port device team_slave_1 removed [ 474.881766][T22052] loop2: detected capacity change from 0 to 164 [ 474.882856][T22048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.895509][T22048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.905436][T22048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.912990][T22048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.965666][T22054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.976434][T22054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.054937][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5743'. [ 475.087547][T22062] loop2: detected capacity change from 0 to 164 [ 475.389880][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 475.389896][ T29] audit: type=1326 audit(1758543672.276:15712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.3.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 475.396302][T22083] loop5: detected capacity change from 0 to 164 [ 475.419957][ T29] audit: type=1326 audit(1758543672.276:15713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.3.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 475.449866][ T29] audit: type=1326 audit(1758543672.276:15714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.3.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 475.473492][ T29] audit: type=1326 audit(1758543672.276:15715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.3.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 475.497399][ T29] audit: type=1326 audit(1758543672.276:15716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.3.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 475.522018][ T29] audit: type=1326 audit(1758543672.316:15717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.3.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 475.522039][T22086] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 475.522081][T22086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 475.522131][T22086] vhci_hcd vhci_hcd.0: Device attached [ 475.545793][ T29] audit: type=1326 audit(1758543672.316:15718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.3.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 475.589255][ T29] audit: type=1326 audit(1758543672.316:15719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.3.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 475.612903][ T29] audit: type=1326 audit(1758543672.316:15720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.3.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 475.636486][ T29] audit: type=1326 audit(1758543672.316:15721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 475.706071][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5752'. [ 475.827935][ T3519] usb 10-1: SetAddress Request (42) to port 0 [ 475.836785][ T3519] usb 10-1: new SuperSpeed USB device number 42 using vhci_hcd [ 475.968200][ T3361] usb usb12-port1: unable to enumerate USB device [ 475.976205][T22087] vhci_hcd: connection reset by peer [ 475.982248][T14224] vhci_hcd: stop threads [ 475.986514][T14224] vhci_hcd: release socket [ 475.990955][T14224] vhci_hcd: disconnect device [ 476.122086][T22100] vlan2: entered allmulticast mode [ 476.211212][T22102] loop2: detected capacity change from 0 to 164 [ 476.300029][T22108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.308548][T22108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.390834][T22118] netlink: 'syz.5.5764': attribute type 10 has an invalid length. [ 476.398730][T22118] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5764'. [ 476.409342][T22118] batman_adv: batadv0: Adding interface: veth1_vlan [ 476.415933][T22118] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.443161][T22118] batman_adv: batadv0: Interface activated: veth1_vlan [ 476.556769][T22128] loop5: detected capacity change from 0 to 128 [ 476.618799][T22131] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 476.625913][T22131] batman_adv: batadv0: Removing interface: veth1_vlan [ 476.698901][T22133] loop4: detected capacity change from 0 to 164 [ 476.767320][T22135] loop5: detected capacity change from 0 to 128 [ 477.188684][T22155] netlink: 'syz.2.5778': attribute type 10 has an invalid length. [ 477.196584][T22155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5778'. [ 477.237917][T22152] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 477.244554][T22152] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 477.252255][T22152] vhci_hcd vhci_hcd.0: Device attached [ 477.262344][T22155] batman_adv: batadv0: Adding interface: veth1_vlan [ 477.269069][T22155] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.420217][T22155] batman_adv: batadv0: Interface activated: veth1_vlan [ 477.492895][T22159] loop3: detected capacity change from 0 to 164 [ 477.527878][ T3412] usb 12-1: SetAddress Request (31) to port 0 [ 477.534162][ T3412] usb 12-1: new SuperSpeed USB device number 31 using vhci_hcd [ 477.611519][T22170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.629564][T22171] loop4: detected capacity change from 0 to 128 [ 477.635597][T22170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.760433][T22176] loop2: detected capacity change from 0 to 1764 [ 477.771691][T22176] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 477.778372][T22176] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 477.786137][T22176] vhci_hcd vhci_hcd.0: Device attached [ 477.795514][T22153] vhci_hcd: connection reset by peer [ 477.801990][T14230] vhci_hcd: stop threads [ 477.806240][T14230] vhci_hcd: release socket [ 477.810747][T14230] vhci_hcd: disconnect device [ 478.084606][T22186] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5789'. [ 478.142146][T22188] netlink: 'syz.4.5790': attribute type 10 has an invalid length. [ 478.150028][T22188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5790'. [ 478.159527][T22188] batman_adv: batadv0: Adding interface: veth1_vlan [ 478.166120][T22188] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.193450][T22188] batman_adv: batadv0: Interface activated: veth1_vlan [ 478.230323][T22191] wireguard1: entered promiscuous mode [ 478.235806][T22191] wireguard1: entered allmulticast mode [ 478.267945][ T9] usb 14-1: device descriptor read/8, error -110 [ 478.277116][T22198] 9pnet_fd: Insufficient options for proto=fd [ 478.299915][T22199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22199 comm=syz.4.5791 [ 478.345806][T22177] vhci_hcd: connection closed [ 478.359325][T14230] vhci_hcd: stop threads [ 478.368378][T14230] vhci_hcd: release socket [ 478.372791][T14230] vhci_hcd: disconnect device [ 478.379075][ T9] usb 14-1: new SuperSpeed USB device number 50 using vhci_hcd [ 478.456521][T22206] loop3: detected capacity change from 0 to 1764 [ 478.476144][T22207] loop6: detected capacity change from 0 to 128 [ 478.711551][T22216] netlink: 'syz.5.5800': attribute type 1 has an invalid length. [ 478.743330][ T9] usb 14-1: enqueue for inactive port 0 [ 478.749325][ T9] usb 14-1: enqueue for inactive port 0 [ 478.754886][ T9] usb 14-1: enqueue for inactive port 0 [ 478.770127][T22216] 8021q: adding VLAN 0 to HW filter on device bond4 [ 478.784176][T22216] vlan4: entered allmulticast mode [ 478.789461][T22216] bond4: entered allmulticast mode [ 478.803269][T22219] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5801'. [ 478.819247][T22221] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5802'. [ 478.891384][T22227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.934676][T22227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.972222][T22236] wireguard0: entered promiscuous mode [ 478.977809][T22236] wireguard0: entered allmulticast mode [ 478.997654][ T36] usb 6-1: device descriptor read/8, error -110 [ 479.021289][T22244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22244 comm=syz.5.5809 [ 479.126553][ T36] usb 6-1: new SuperSpeed USB device number 15 using vhci_hcd [ 479.146463][T22250] loop4: detected capacity change from 0 to 128 [ 479.157692][ T36] usb 6-1: enqueue for inactive port 0 [ 479.161551][T22250] bio_check_eod: 74 callbacks suppressed [ 479.161564][T22250] syz.4.5814: attempt to access beyond end of device [ 479.161564][T22250] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 479.173318][ T36] usb 6-1: enqueue for inactive port 0 [ 479.183660][T22250] syz.4.5814: attempt to access beyond end of device [ 479.183660][T22250] loop4: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 479.197777][ T36] usb 6-1: enqueue for inactive port 0 [ 479.204371][T22250] syz.4.5814: attempt to access beyond end of device [ 479.204371][T22250] loop4: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 479.220078][T22250] buffer_io_error: 42 callbacks suppressed [ 479.220094][T22250] Buffer I/O error on dev loop4, logical block 75, lost async page write [ 479.234683][T22255] netlink: 'syz.5.5817': attribute type 1 has an invalid length. [ 479.248243][T22255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 479.255002][T22250] syz.4.5814: attempt to access beyond end of device [ 479.255002][T22250] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 479.268497][T22250] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 479.284714][T22254] vlan4: entered allmulticast mode [ 479.289882][T22254] bond5: entered allmulticast mode [ 479.295435][T22250] syz.4.5814: attempt to access beyond end of device [ 479.295435][T22250] loop4: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 479.309884][T22250] syz.4.5814: attempt to access beyond end of device [ 479.309884][T22250] loop4: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 479.323381][T22250] Buffer I/O error on dev loop4, logical block 87, lost async page write [ 479.331944][T22250] syz.4.5814: attempt to access beyond end of device [ 479.331944][T22250] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 479.345403][T22250] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 479.354111][T22250] syz.4.5814: attempt to access beyond end of device [ 479.354111][T22250] loop4: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 479.375265][T22262] vlan3: entered allmulticast mode [ 479.377999][T22250] syz.4.5814: attempt to access beyond end of device [ 479.377999][T22250] loop4: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 479.393956][T22250] Buffer I/O error on dev loop4, logical block 91, lost async page write [ 479.404360][T22250] syz.4.5814: attempt to access beyond end of device [ 479.404360][T22250] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 479.417856][T22250] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 479.427106][T22250] Buffer I/O error on dev loop4, logical block 103, lost async page write [ 479.435694][T22250] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 479.444882][T22250] Buffer I/O error on dev loop4, logical block 107, lost async page write [ 479.453594][T22250] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 479.464047][T22265] loop3: detected capacity change from 0 to 1764 [ 479.494197][T22265] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 479.500853][T22265] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 479.508689][T22265] vhci_hcd vhci_hcd.0: Device attached [ 479.516422][T22269] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5821'. [ 479.817852][ T9] usb usb14-port1: attempt power cycle [ 479.827700][T22280] wireguard0: entered promiscuous mode [ 479.833258][T22280] wireguard0: entered allmulticast mode [ 479.858039][T22283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22283 comm=syz.5.5826 [ 479.995662][T22266] vhci_hcd: connection closed [ 480.005088][T14235] vhci_hcd: stop threads [ 480.014280][T14235] vhci_hcd: release socket [ 480.018739][T14235] vhci_hcd: disconnect device [ 480.057571][T22295] loop5: detected capacity change from 0 to 1024 [ 480.084589][T22295] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5829: Failed to acquire dquot type 0 [ 480.096633][T22295] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 480.119091][T22295] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5829: corrupted inode contents [ 480.131670][T22295] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.5829: mark_inode_dirty error [ 480.143528][T22295] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5829: corrupted inode contents [ 480.155908][T22295] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.5829: mark_inode_dirty error [ 480.168700][T22295] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5829: corrupted inode contents [ 480.179962][T22303] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 480.183953][T22295] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 480.187673][T22303] batman_adv: batadv0: Removing interface: veth1_vlan [ 480.204416][T22295] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5829: corrupted inode contents [ 480.216809][T22295] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.5829: mark_inode_dirty error [ 480.229466][T22295] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 480.252934][T22304] loop2: detected capacity change from 0 to 1764 [ 480.266951][T22295] EXT4-fs (loop5): 1 truncate cleaned up [ 480.273629][T22295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.462358][T22303] loop4: detected capacity change from 0 to 164 [ 480.603149][ T36] usb usb6-port1: attempt power cycle [ 480.621556][T22295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.668954][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 480.669017][ T29] audit: type=1326 audit(1758543677.556:16211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.5.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 480.749094][T22320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5837'. [ 480.914230][ T29] audit: type=1326 audit(1758543677.586:16212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.5.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 480.937937][ T29] audit: type=1326 audit(1758543677.586:16213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.5.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 480.961537][ T29] audit: type=1326 audit(1758543677.586:16214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.5.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 480.985124][ T29] audit: type=1326 audit(1758543677.586:16215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.5.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 481.008834][ T29] audit: type=1326 audit(1758543677.586:16216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.5.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 481.032463][ T29] audit: type=1326 audit(1758543677.586:16217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.5.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 481.056172][ T29] audit: type=1326 audit(1758543677.586:16218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 481.079316][ T29] audit: type=1326 audit(1758543677.586:16219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 481.088559][ T3519] usb 10-1: device descriptor read/8, error -110 [ 481.102289][ T29] audit: type=1326 audit(1758543677.586:16220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 481.117237][T22326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22326 comm=syz.5.5840 [ 481.173866][T22322] wireguard0: entered promiscuous mode [ 481.179397][T22322] wireguard0: entered allmulticast mode [ 481.217735][ T3519] usb 10-1: new SuperSpeed USB device number 42 using vhci_hcd [ 481.246166][ T3519] usb 10-1: enqueue for inactive port 0 [ 481.261146][ T3519] usb 10-1: enqueue for inactive port 0 [ 481.284807][ T3519] usb 10-1: enqueue for inactive port 0 [ 481.297681][T22334] netlink: 'syz.6.5843': attribute type 10 has an invalid length. [ 481.305568][T22334] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5843'. [ 481.337622][T22334] batman_adv: batadv0: Adding interface: veth1_vlan [ 481.344254][T22334] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.385697][T22334] batman_adv: batadv0: Interface activated: veth1_vlan [ 481.482943][T22345] loop5: detected capacity change from 0 to 1024 [ 481.506849][T22345] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5847: Failed to acquire dquot type 0 [ 481.528747][T22345] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 481.544764][T22345] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5847: corrupted inode contents [ 481.558719][T22345] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.5847: mark_inode_dirty error [ 481.572842][T22345] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5847: corrupted inode contents [ 481.595135][T22345] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.5847: mark_inode_dirty error [ 481.642307][T22360] netlink: 'syz.3.5852': attribute type 39 has an invalid length. [ 481.694049][T22355] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 481.700646][T22355] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 481.708446][T22355] vhci_hcd vhci_hcd.0: Device attached [ 481.774514][T22345] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5847: corrupted inode contents [ 481.913654][T22345] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 481.932072][T22345] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5847: corrupted inode contents [ 481.944564][T22345] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.5847: mark_inode_dirty error [ 481.955828][ T3519] usb 10-1: SetAddress Request (43) to port 0 [ 481.964378][T22345] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 481.966239][ T3519] usb 10-1: new SuperSpeed USB device number 43 using vhci_hcd [ 481.973995][T22345] EXT4-fs (loop5): 1 truncate cleaned up [ 482.002071][T22345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.014655][T22376] wireguard0: entered promiscuous mode [ 482.015665][T22345] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.020174][T22376] wireguard0: entered allmulticast mode [ 482.041490][T22374] wireguard2: entered promiscuous mode [ 482.047006][T22374] wireguard2: entered allmulticast mode [ 482.058221][T22379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22379 comm=syz.6.5857 [ 482.076054][T22382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22382 comm=syz.3.5858 [ 482.130510][ T9] usb usb14-port1: unable to enumerate USB device [ 482.186507][T22357] vhci_hcd: connection reset by peer [ 482.192384][T14235] vhci_hcd: stop threads [ 482.196676][T14235] vhci_hcd: release socket [ 482.201138][T14235] vhci_hcd: disconnect device [ 482.308163][T22389] netlink: 'syz.6.5861': attribute type 10 has an invalid length. [ 482.316049][T22389] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5861'. [ 482.387420][T22398] 9pnet_fd: Insufficient options for proto=fd [ 482.421437][T22404] netlink: 'syz.5.5870': attribute type 1 has an invalid length. [ 482.455052][T22404] 8021q: adding VLAN 0 to HW filter on device bond6 [ 482.468807][T22404] vlan4: entered allmulticast mode [ 482.473963][T22404] bond6: entered allmulticast mode [ 482.587887][ T3412] usb 12-1: device descriptor read/8, error -110 [ 482.593623][T22421] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5876'. [ 482.605691][T22423] loop3: detected capacity change from 0 to 164 [ 482.634240][T22421] loop5: detected capacity change from 0 to 164 [ 482.640868][ T36] usb usb6-port1: unable to enumerate USB device [ 482.713291][ T3412] usb 12-1: new SuperSpeed USB device number 31 using vhci_hcd [ 482.737643][ T3412] usb 12-1: enqueue for inactive port 0 [ 482.743322][ T3412] usb 12-1: enqueue for inactive port 0 [ 482.767629][ T3412] usb 12-1: enqueue for inactive port 0 [ 482.810418][T22434] netlink: 'syz.4.5879': attribute type 10 has an invalid length. [ 482.818330][T22434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5879'. [ 482.828785][T22434] batman_adv: batadv0: Adding interface: veth1_vlan [ 482.835417][T22434] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.874259][T22434] batman_adv: batadv0: Interface activated: veth1_vlan [ 483.054445][T22449] loop6: detected capacity change from 0 to 1024 [ 483.072781][T22449] EXT4-fs: Ignoring removed orlov option [ 483.082119][T22452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22452 comm=syz.5.5887 [ 483.095450][T22449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.331361][T22455] loop4: detected capacity change from 0 to 1764 [ 483.495816][T22455] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 483.502448][T22455] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 483.510233][T22455] vhci_hcd vhci_hcd.0: Device attached [ 483.556940][T16946] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.765849][T22460] vhci_hcd: connection closed [ 483.766278][T14225] vhci_hcd: stop threads [ 483.775286][T14225] vhci_hcd: release socket [ 483.779770][T14225] vhci_hcd: disconnect device [ 483.788970][ T3412] usb usb12-port1: attempt power cycle [ 483.807800][T22471] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5890'. [ 483.838988][T22475] netlink: 'syz.5.5895': attribute type 10 has an invalid length. [ 483.846890][T22475] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5895'. [ 483.884147][T22480] loop6: detected capacity change from 0 to 164 [ 483.956017][T22487] wireguard0: entered promiscuous mode [ 483.961847][T22487] wireguard0: entered allmulticast mode [ 484.112851][T22489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22489 comm=syz.2.5899 [ 484.228860][T22496] loop3: detected capacity change from 0 to 1764 [ 484.306405][T22498] loop5: detected capacity change from 0 to 1024 [ 484.353666][T22498] EXT4-fs: Ignoring removed orlov option [ 484.431097][T22498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.519392][T22501] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 484.526484][T22501] batman_adv: batadv0: Removing interface: veth1_vlan [ 484.656624][T22506] loop4: detected capacity change from 0 to 164 [ 484.678879][T22501] bio_check_eod: 38 callbacks suppressed [ 484.678892][T22501] syz.4.5902: attempt to access beyond end of device [ 484.678892][T22501] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 484.702652][T22501] syz.4.5902: attempt to access beyond end of device [ 484.702652][T22501] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 484.749138][T17646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.774463][T22515] netlink: 'syz.5.5905': attribute type 1 has an invalid length. [ 484.791010][T22515] 8021q: adding VLAN 0 to HW filter on device bond7 [ 484.805924][T22515] vlan4: entered allmulticast mode [ 484.811171][T22515] bond7: entered allmulticast mode [ 484.845634][T22520] netlink: 'syz.6.5908': attribute type 10 has an invalid length. [ 484.853527][T22520] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5908'. [ 484.919458][T22529] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5912'. [ 484.991252][T22533] IPv6: NLM_F_CREATE should be specified when creating new route [ 485.072984][T22535] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 485.080451][T22535] batman_adv: batadv0: Removing interface: veth1_vlan [ 485.112559][T22537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5916'. [ 485.156432][T22537] loop4: detected capacity change from 0 to 164 [ 485.164407][T22537] syz.4.5916: attempt to access beyond end of device [ 485.164407][T22537] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 485.180591][T22537] syz.4.5916: attempt to access beyond end of device [ 485.180591][T22537] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 485.211763][T22535] loop5: detected capacity change from 0 to 164 [ 485.253597][T22535] syz.5.5915: attempt to access beyond end of device [ 485.253597][T22535] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 485.281681][T22535] syz.5.5915: attempt to access beyond end of device [ 485.281681][T22535] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 485.347238][T22555] netlink: 'syz.2.5922': attribute type 10 has an invalid length. [ 485.355133][T22555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5922'. [ 485.522879][T22561] loop6: detected capacity change from 0 to 1764 [ 485.767741][T22563] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 485.774281][T22563] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 485.782042][T22563] vhci_hcd vhci_hcd.0: Device attached [ 485.879625][T22570] netlink: 'syz.3.5927': attribute type 1 has an invalid length. [ 485.954200][T22570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.969520][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 485.969535][ T29] audit: type=1326 audit(1758543682.856:16770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.5.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 486.000501][ T29] audit: type=1326 audit(1758543682.856:16771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.5.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 486.024175][ T29] audit: type=1326 audit(1758543682.856:16772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.5.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 486.027358][T22571] vlan3: entered allmulticast mode [ 486.047917][ T29] audit: type=1326 audit(1758543682.856:16773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.5.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc7b2a5ef03 code=0x7ffc0000 [ 486.048015][ T29] audit: type=1326 audit(1758543682.856:16774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.5.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc7b2a5ef03 code=0x7ffc0000 [ 486.053081][T22571] bond4: entered allmulticast mode [ 486.076476][ T29] audit: type=1326 audit(1758543682.856:16775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.5.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 486.104509][ T3412] usb usb12-port1: unable to enumerate USB device [ 486.105015][ T29] audit: type=1326 audit(1758543682.866:16776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.5.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 486.158557][ T29] audit: type=1326 audit(1758543682.866:16777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.5.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 486.182289][ T29] audit: type=1326 audit(1758543682.866:16778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.5.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 486.205915][ T29] audit: type=1326 audit(1758543682.866:16779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22574 comm="syz.5.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b2a5eec9 code=0x7ffc0000 [ 486.219903][T22578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22578 comm=syz.2.5929 [ 486.285180][T22564] vhci_hcd: connection closed [ 486.289261][T14234] vhci_hcd: stop threads [ 486.298365][T14234] vhci_hcd: release socket [ 486.302811][T14234] vhci_hcd: disconnect device [ 486.319646][T22577] wireguard0: entered promiscuous mode [ 486.325191][T22577] wireguard0: entered allmulticast mode [ 486.369498][T22587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5932'. [ 486.440852][T22588] loop3: detected capacity change from 0 to 164 [ 486.489561][T22588] syz.3.5932: attempt to access beyond end of device [ 486.489561][T22588] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 486.489609][T22596] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5936'. [ 486.503622][T22588] syz.3.5932: attempt to access beyond end of device [ 486.503622][T22588] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 486.593830][T22601] loop6: detected capacity change from 0 to 1024 [ 486.612065][T22601] EXT4-fs: Ignoring removed orlov option [ 486.635203][T22601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.716217][T22608] vlan2: entered allmulticast mode [ 486.721482][T22608] bridge_slave_0: entered allmulticast mode [ 486.798778][T22614] netlink: 'syz.4.5942': attribute type 1 has an invalid length. [ 486.901252][T16946] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.943994][T22621] loop5: detected capacity change from 0 to 1024 [ 486.961211][T22614] 8021q: adding VLAN 0 to HW filter on device bond4 [ 486.975166][T22621] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5943: Failed to acquire dquot type 0 [ 487.002233][T22616] vlan4: entered allmulticast mode [ 487.003404][T22621] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, [ 487.007367][T22616] bond4: entered allmulticast mode [ 487.020274][T22621] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 487.031382][T22629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22629 comm=syz.2.5945 [ 487.072856][ T3519] usb 10-1: device descriptor read/8, error -110 [ 487.089850][T22621] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5943: corrupted inode contents [ 487.144589][T22623] wireguard0: entered promiscuous mode [ 487.150342][T22623] wireguard0: entered allmulticast mode [ 487.167124][T22621] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.5943: mark_inode_dirty error [ 487.201534][T22621] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5943: corrupted inode contents [ 487.223456][ T3519] usb 10-1: new SuperSpeed USB device number 43 using vhci_hcd [ 487.233730][T22621] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.5943: mark_inode_dirty error [ 487.246798][T22621] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5943: corrupted inode contents [ 487.261556][ T3519] usb 10-1: enqueue for inactive port 0 [ 487.267117][ T3519] usb 10-1: enqueue for inactive port 0 [ 487.273079][T22621] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 487.282823][ T3519] usb 10-1: enqueue for inactive port 0 [ 487.289283][T22621] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5943: corrupted inode contents [ 487.304135][T22621] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.5943: mark_inode_dirty error [ 487.316420][T22621] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 487.329185][T22621] EXT4-fs (loop5): 1 truncate cleaned up [ 487.335319][T22621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.349939][T22621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.392943][T22642] netlink: 'syz.6.5953': attribute type 10 has an invalid length. [ 487.400813][T22642] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5953'. [ 487.409326][T22646] loop2: detected capacity change from 0 to 1024 [ 487.409999][ T3519] usb usb10-port1: attempt power cycle [ 487.416583][T22646] EXT4-fs: Ignoring removed orlov option [ 487.459187][T22653] cgroup: Unexpected value for 'nofavordynmods' [ 487.489994][T22646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.556753][T22658] netlink: 'syz.5.5959': attribute type 1 has an invalid length. [ 487.572060][T22658] 8021q: adding VLAN 0 to HW filter on device bond8 [ 487.663595][T22668] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 487.670151][T22668] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 487.677910][T22668] vhci_hcd vhci_hcd.0: Device attached [ 487.803521][T22658] vlan4: entered allmulticast mode [ 487.808763][T22658] bond8: entered allmulticast mode [ 487.984639][T21701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.997703][ T3519] usb 10-1: SetAddress Request (44) to port 0 [ 488.005842][ T3519] usb 10-1: new SuperSpeed USB device number 44 using vhci_hcd [ 488.023938][T22679] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5965'. [ 488.049938][T22680] loop3: detected capacity change from 0 to 164 [ 488.063619][T22680] syz.3.5963: attempt to access beyond end of device [ 488.063619][T22680] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 488.087966][T22683] loop5: detected capacity change from 0 to 1024 [ 488.094426][T22680] syz.3.5963: attempt to access beyond end of device [ 488.094426][T22680] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 488.112698][T22679] loop6: detected capacity change from 0 to 164 [ 488.119516][T22683] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5968: Failed to acquire dquot type 0 [ 488.131312][T22684] netlink: 'syz.2.5967': attribute type 10 has an invalid length. [ 488.139660][T22683] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 488.181279][T22683] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5968: corrupted inode contents [ 488.212228][T22689] cgroup: Unexpected value for 'nofavordynmods' [ 488.249869][T22683] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.5968: mark_inode_dirty error [ 488.262073][T22693] vlan2: entered allmulticast mode [ 488.272473][T22669] vhci_hcd: connection reset by peer [ 488.278486][T14234] vhci_hcd: stop threads [ 488.282754][T14234] vhci_hcd: release socket [ 488.287272][T14234] vhci_hcd: disconnect device [ 488.293072][T22683] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5968: corrupted inode contents [ 488.319855][T22683] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.5968: mark_inode_dirty error [ 488.331520][T22683] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5968: corrupted inode contents [ 488.346094][T22683] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 488.355053][T22683] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.5968: corrupted inode contents [ 488.369641][T22683] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.5968: mark_inode_dirty error [ 488.384291][T22683] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 488.394461][T22683] EXT4-fs (loop5): 1 truncate cleaned up [ 488.400594][T22683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.429143][T22683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.519865][T22707] wireguard0: entered promiscuous mode [ 488.525437][T22707] wireguard0: entered allmulticast mode [ 488.559794][T22710] loop2: detected capacity change from 0 to 164 [ 488.567061][T22715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22715 comm=syz.5.5979 [ 488.583395][T22714] netlink: 'syz.6.5981': attribute type 10 has an invalid length. [ 488.863665][T22729] loop2: detected capacity change from 0 to 1764 [ 488.877242][T22729] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 488.883860][T22729] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 488.891588][T22729] vhci_hcd vhci_hcd.0: Device attached [ 488.921923][T22733] loop3: detected capacity change from 0 to 1024 [ 488.931942][T22733] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.5990: Failed to acquire dquot type 0 [ 488.943885][T22733] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 488.959808][T22733] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5990: corrupted inode contents [ 488.972187][T22733] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.5990: mark_inode_dirty error [ 488.984282][T22733] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5990: corrupted inode contents [ 489.002011][T22733] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.5990: mark_inode_dirty error [ 489.015680][T22739] netlink: 'syz.5.5988': attribute type 39 has an invalid length. [ 489.028811][T22745] __nla_validate_parse: 3 callbacks suppressed [ 489.028826][T22745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5993'. [ 489.057175][T22747] netlink: 'syz.5.5994': attribute type 10 has an invalid length. [ 489.065189][T22747] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5994'. [ 489.081040][T22733] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5990: corrupted inode contents [ 489.094533][T22747] batman_adv: batadv0: Adding interface: veth1_vlan [ 489.101360][T22747] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.128582][T22733] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 489.137397][T22747] batman_adv: batadv0: Interface activated: veth1_vlan [ 489.144769][T22733] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.5990: corrupted inode contents [ 489.157522][T22733] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.5990: mark_inode_dirty error [ 489.168919][T22733] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 489.183548][T22750] loop4: detected capacity change from 0 to 164 [ 489.203808][ T3385] usb 6-1: SetAddress Request (19) to port 0 [ 489.210068][ T3385] usb 6-1: new SuperSpeed USB device number 19 using vhci_hcd [ 489.217691][T22733] EXT4-fs (loop3): 1 truncate cleaned up [ 489.224606][T22733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.239211][T22733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.251673][T22754] wireguard0: entered promiscuous mode [ 489.257241][T22754] wireguard0: entered allmulticast mode [ 489.272045][T22757] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5997'. [ 489.292721][T22758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22758 comm=syz.5.5998 [ 489.488545][T22730] vhci_hcd: connection reset by peer [ 489.496779][T14225] vhci_hcd: stop threads [ 489.501074][T14225] vhci_hcd: release socket [ 489.505531][T14225] vhci_hcd: disconnect device [ 489.511422][T22769] netlink: 'syz.5.6002': attribute type 1 has an invalid length. [ 489.524838][T22767] loop3: detected capacity change from 0 to 1024 [ 489.532591][T22769] 8021q: adding VLAN 0 to HW filter on device bond9 [ 489.538198][T22767] EXT4-fs: Ignoring removed orlov option [ 489.551677][T22769] vlan4: entered allmulticast mode [ 489.556839][T22769] bond9: entered allmulticast mode [ 489.568777][T22767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.688771][T22776] cgroup: Unexpected value for 'nofavordynmods' [ 489.711095][T22779] loop6: detected capacity change from 0 to 164 [ 489.719105][T22779] cgroup: Need name or subsystem set [ 489.797530][T22785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.807984][T22785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.816809][T14387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.870621][T22792] netlink: 'syz.6.6011': attribute type 39 has an invalid length. [ 489.902612][T22795] wireguard0: entered promiscuous mode [ 489.908204][T22795] wireguard0: entered allmulticast mode [ 489.951870][T22797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22797 comm=syz.6.6012 [ 490.058438][T22804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6015'. [ 490.131846][T22808] netlink: 'syz.6.6017': attribute type 1 has an invalid length. [ 490.148536][T22808] 8021q: adding VLAN 0 to HW filter on device bond6 [ 490.162243][T22808] vlan4: entered allmulticast mode [ 490.167395][T22808] bond6: entered allmulticast mode [ 490.174216][T22814] loop3: detected capacity change from 0 to 1024 [ 490.174559][T22815] cgroup: Unexpected value for 'nofavordynmods' [ 490.181024][T22814] EXT4-fs: Ignoring removed orlov option [ 490.200285][T22814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.237217][T22819] loop2: detected capacity change from 0 to 164 [ 490.293033][T22819] cgroup: Need name or subsystem set [ 490.348407][T22831] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6025'. [ 490.414697][T22834] loop6: detected capacity change from 0 to 164 [ 490.488728][T22834] bio_check_eod: 6 callbacks suppressed [ 490.488744][T22834] syz.6.6025: attempt to access beyond end of device [ 490.488744][T22834] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 490.510051][T14387] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.520468][T22834] syz.6.6025: attempt to access beyond end of device [ 490.520468][T22834] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 490.603685][T22842] loop4: detected capacity change from 0 to 1764 [ 490.691495][T22839] wireguard0: entered promiscuous mode [ 490.697058][T22839] wireguard0: entered allmulticast mode [ 490.747053][T22847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22847 comm=syz.2.6028 [ 490.762165][T22846] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.047682][T22837] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 491.054314][T22837] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 491.062078][T22837] vhci_hcd vhci_hcd.0: Device attached [ 491.108749][T22857] cgroup: Unexpected value for 'nofavordynmods' [ 491.151724][T22859] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6033'. [ 491.176218][T22852] vhci_hcd: connection closed [ 491.179617][T14231] vhci_hcd: stop threads [ 491.183047][T22861] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 491.184337][T14231] vhci_hcd: release socket [ 491.188635][T22861] batman_adv: batadv0: Removing interface: veth1_vlan [ 491.195612][T14231] vhci_hcd: disconnect device [ 491.253742][T22862] loop2: detected capacity change from 0 to 164 [ 491.267427][T22861] syz.2.6034: attempt to access beyond end of device [ 491.267427][T22861] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 491.282416][T22861] syz.2.6034: attempt to access beyond end of device [ 491.282416][T22861] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 491.429976][T22867] loop2: detected capacity change from 0 to 164 [ 491.438432][T22867] cgroup: Need name or subsystem set [ 491.439189][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 491.439201][ T29] audit: type=1326 audit(1758543688.326:17094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz.3.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 491.541423][T22873] loop6: detected capacity change from 0 to 1764 [ 491.665932][ T29] audit: type=1326 audit(1758543688.396:17095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz.3.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 491.689612][ T29] audit: type=1326 audit(1758543688.396:17096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz.3.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 491.713191][ T29] audit: type=1326 audit(1758543688.396:17097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz.3.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff83f4def03 code=0x7ffc0000 [ 491.736782][ T29] audit: type=1326 audit(1758543688.396:17098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz.3.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff83f4def03 code=0x7ffc0000 [ 491.760229][ T29] audit: type=1326 audit(1758543688.396:17099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz.3.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 491.783814][ T29] audit: type=1326 audit(1758543688.396:17100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz.3.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 491.807379][ T29] audit: type=1326 audit(1758543688.396:17101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz.3.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 491.831029][ T29] audit: type=1326 audit(1758543688.396:17102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz.3.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 491.839289][T22880] validate_nla: 1 callbacks suppressed [ 491.839304][T22880] netlink: 'syz.3.6039': attribute type 39 has an invalid length. [ 491.854686][ T29] audit: type=1326 audit(1758543688.396:17103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22871 comm="syz.3.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83f4deec9 code=0x7ffc0000 [ 491.959334][T22888] cgroup: Unexpected value for 'nofavordynmods' [ 492.029163][T22898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6045'. [ 492.053383][T22894] loop2: detected capacity change from 0 to 164 [ 492.061803][T22894] syz.2.6047: attempt to access beyond end of device [ 492.061803][T22894] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 492.076444][T22894] syz.2.6047: attempt to access beyond end of device [ 492.076444][T22894] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 492.096535][T22899] loop4: detected capacity change from 0 to 164 [ 492.116677][T22901] loop2: detected capacity change from 0 to 1024 [ 492.123535][T22901] EXT4-fs: Ignoring removed orlov option [ 492.131455][T22901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.208716][T22908] netlink: 'syz.3.6052': attribute type 39 has an invalid length. [ 492.306346][T22899] syz.4.6045: attempt to access beyond end of device [ 492.306346][T22899] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 492.354911][T22899] syz.4.6045: attempt to access beyond end of device [ 492.354911][T22899] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 492.419283][T21701] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.439088][T22919] loop2: detected capacity change from 0 to 164 [ 492.447284][T22919] cgroup: Need name or subsystem set [ 492.536066][T22921] loop6: detected capacity change from 0 to 1764 [ 492.615810][T22921] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 492.622456][T22921] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 492.630165][T22921] vhci_hcd vhci_hcd.0: Device attached [ 492.897673][ T3568] usb 14-1: SetAddress Request (54) to port 0 [ 492.903852][ T3568] usb 14-1: new SuperSpeed USB device number 54 using vhci_hcd [ 492.930175][T22938] loop3: detected capacity change from 0 to 1024 [ 493.040028][T22938] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.6061: Failed to acquire dquot type 0 [ 493.046150][T22949] netlink: 'syz.5.6065': attribute type 39 has an invalid length. [ 493.060997][T22938] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 493.075525][ T3519] usb 10-1: device descriptor read/8, error -110 [ 493.088310][T22938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6061: corrupted inode contents [ 493.151133][T22951] loop2: detected capacity change from 0 to 1764 [ 493.192558][ T3519] usb 10-1: new SuperSpeed USB device number 44 using vhci_hcd [ 493.204471][T22938] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.6061: mark_inode_dirty error [ 493.236367][ T3519] usb 10-1: enqueue for inactive port 0 [ 493.251187][T22923] vhci_hcd: connection reset by peer [ 493.277869][T14234] vhci_hcd: stop threads [ 493.282155][T14234] vhci_hcd: release socket [ 493.286594][T14234] vhci_hcd: disconnect device [ 493.299466][T22953] loop4: detected capacity change from 0 to 1024 [ 493.306383][T22938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6061: corrupted inode contents [ 493.322476][ T3519] usb 10-1: enqueue for inactive port 0 [ 493.338082][T22955] netlink: 'syz.5.6067': attribute type 10 has an invalid length. [ 493.345928][T22955] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6067'. [ 493.356295][T22953] EXT4-fs: Ignoring removed orlov option [ 493.362121][ T3519] usb 10-1: enqueue for inactive port 0 [ 493.369990][T22938] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.6061: mark_inode_dirty error [ 493.384183][T22953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.404903][T22938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6061: corrupted inode contents [ 493.436379][T22938] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 493.457186][T22938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6061: corrupted inode contents [ 493.474546][T22938] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.6061: mark_inode_dirty error [ 493.486018][T22938] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 493.499424][T22938] EXT4-fs (loop3): 1 truncate cleaned up [ 493.506533][T22938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.520026][T22961] loop5: detected capacity change from 0 to 164 [ 493.527914][T22961] cgroup: Need name or subsystem set [ 493.537973][T22938] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.556230][T22953] ================================================================== [ 493.564339][T22953] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 493.573552][T22953] [ 493.575872][T22953] write to 0xffff888107222460 of 4 bytes by task 22959 on cpu 0: [ 493.583584][T22953] writeback_single_inode+0x14a/0x3e0 [ 493.588956][T22953] sync_inode_metadata+0x5b/0x90 [ 493.593889][T22953] generic_buffers_fsync_noflush+0xd9/0x120 [ 493.599781][T22953] ext4_sync_file+0x1ab/0x690 [ 493.604455][T22953] vfs_fsync_range+0x10a/0x130 [ 493.609215][T22953] ext4_buffered_write_iter+0x34f/0x3c0 [ 493.614776][T22953] ext4_file_write_iter+0x383/0xf00 [ 493.620072][T22953] iter_file_splice_write+0x666/0xa60 [ 493.625442][T22953] direct_splice_actor+0x156/0x2a0 [ 493.630553][T22953] splice_direct_to_actor+0x312/0x680 [ 493.635930][T22953] do_splice_direct+0xda/0x150 [ 493.640701][T22953] do_sendfile+0x380/0x650 [ 493.645119][T22953] __x64_sys_sendfile64+0x105/0x150 [ 493.650318][T22953] x64_sys_call+0x2bb0/0x2ff0 [ 493.654991][T22953] do_syscall_64+0xd2/0x200 [ 493.659499][T22953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.665392][T22953] [ 493.667708][T22953] read to 0xffff888107222460 of 4 bytes by task 22953 on cpu 1: [ 493.675326][T22953] generic_buffers_fsync_noflush+0x80/0x120 [ 493.681222][T22953] ext4_sync_file+0x1ab/0x690 [ 493.685893][T22953] vfs_fsync_range+0x10a/0x130 [ 493.690651][T22953] ext4_buffered_write_iter+0x34f/0x3c0 [ 493.696211][T22953] ext4_file_write_iter+0x383/0xf00 [ 493.701414][T22953] iter_file_splice_write+0x666/0xa60 [ 493.706777][T22953] direct_splice_actor+0x156/0x2a0 [ 493.711884][T22953] splice_direct_to_actor+0x312/0x680 [ 493.717253][T22953] do_splice_direct+0xda/0x150 [ 493.722013][T22953] do_sendfile+0x380/0x650 [ 493.726436][T22953] __x64_sys_sendfile64+0x105/0x150 [ 493.731635][T22953] x64_sys_call+0x2bb0/0x2ff0 [ 493.736308][T22953] do_syscall_64+0xd2/0x200 [ 493.740821][T22953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.746707][T22953] [ 493.749017][T22953] value changed: 0x00000038 -> 0x00000002 [ 493.754725][T22953] [ 493.757036][T22953] Reported by Kernel Concurrency Sanitizer on: [ 493.763174][T22953] CPU: 1 UID: 0 PID: 22953 Comm: syz.4.6066 Not tainted syzkaller #0 PREEMPT(voluntary) [ 493.772976][T22953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.783026][T22953] ================================================================== [ 493.827283][T13523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.267702][ T3385] usb 6-1: device descriptor read/8, error -110 [ 494.377679][ T3385] usb 6-1: new SuperSpeed USB device number 19 using vhci_hcd [ 494.397646][ T3385] usb 6-1: enqueue for inactive port 0 [ 494.403213][ T3385] usb 6-1: enqueue for inactive port 0 [ 494.408672][ T3385] usb 6-1: enqueue for inactive port 0 [ 494.447898][ T3519] usb usb10-port1: unable to enumerate USB device [ 495.437841][ T3385] usb usb6-port1: attempt power cycle [ 497.277779][ T3385] usb usb6-port1: unable to enumerate USB device [ 497.947752][ T3568] usb 14-1: device descriptor read/8, error -110 [ 498.057625][ T3568] usb 14-1: new SuperSpeed USB device number 54 using vhci_hcd [ 498.077689][ T3568] usb 14-1: enqueue for inactive port 0 [ 498.083302][ T3568] usb 14-1: enqueue for inactive port 0 [ 498.088869][ T3568] usb 14-1: enqueue for inactive port 0 [ 499.118093][ T3568] usb usb14-port1: attempt power cycle [ 500.937874][ T3568] usb usb14-port1: unable to enumerate USB device