last executing test programs: 3m55.92007423s ago: executing program 32 (id=658): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01030000000000000000010000000800070000000020080003009f46ad2dc6dc7d1f6acd9ceee2a38c57bd19fc49fb39091fe453d390b7027dd556e7b6efd19707f3e9e9b6c82ae42e664b55d8ab8d80ce39f4946db546fe65e1d904781906f025985d2f686e533412a39b4fb60272ba53636299b3fc570e8459113f214b54e79c89333af0412bebd80dcb8b9438bfdad4db2f857998d7782a03000000d500144e33e479e3f74fe2c648127a930f264e6081a946d525c47bdb1e428f05083748598faab5227e7657baee179b01000000000000001a26bf86b2eb26000000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x30}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) timer_create(0x6, &(0x7f00000002c0)={0x0, 0x14, 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0x0, 0xe}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffec1, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0x7}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0x0, 0x40, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}, @TCA_FLOWER_KEY_IPV4_DST={0x37, 0xc, @local}]}}]}, 0x50}}, 0x44050) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = getpid() r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4508c69824bb8b8c366f6666f1100018fe9bf7e78462b547844cc15e", @ANYRES16=r13, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0) r14 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000004c0)={0x391149b00, 0x0, 0x0, &(0x7f0000000200), {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, r11], 0x2, {r14}}, 0x58) 3m25.462702518s ago: executing program 5 (id=1318): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800082, &(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYBLOB="dbedcd4b5a53921a6a665d701bd62a96cd928a3dfe449279c01aa490ae8f3085f3779c64b95fcd0ce023ab4528a66138063c6e2a5ffc416e3046015ddd6317a14557a2382814ee0966d7bedbb88b9ff05bbe791ed170f61d9b8c21f05f99a59244b799e4dc379841c76e58202fcb4e98e5b89b239cf08594f81e3b2c71e8fbcf6756333ca4a2fe7406676a535fe38dbc50d92020188c058a4c92798c66cf1e825fd22369925b63f5bb0959169dc8269e922a2e784b8167163ac8b7ab17c3f0c34afffdb30843c15af1b076331cf372f9f090dcac9199a1b9cec24ef62cc288560471"], 0x97, 0x2a9, &(0x7f0000000ac0)="$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") chdir(0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000840)='blkio.bfq.io_queued\x00', 0x275a, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) link(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x2, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 3m25.415079117s ago: executing program 5 (id=1319): creat(0x0, 0xe5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x4, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) 3m25.395846798s ago: executing program 5 (id=1321): creat(0x0, 0xe5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x4, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) 3m25.370716817s ago: executing program 5 (id=1322): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@bh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaacf2d299df20cfe41004500001c000000000033907800000000ffffffff00000000000890780000"], 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x1c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="ff", 0xfffd}], 0x1, 0xe7b, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x44001) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r6}, 0x10) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4, 0x4, 0x7, 0x9, 0xe, r7}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xd, @mcast1}}, 0x4, 0x6, 0x6, 0x0, 0x630b5526}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r8, @in6={{0xa, 0x4e21, 0x1, @remote}}}, &(0x7f0000000180)=0x84) 3m24.950573075s ago: executing program 5 (id=1329): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000d80)={[{@dioread_lock}, {@grpquota}, {@noload}, {@abort}, {@user_xattr}, {@usrquota}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x6000) 3m24.481314073s ago: executing program 5 (id=1336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) 3m24.481072903s ago: executing program 33 (id=1336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) 1m45.595216149s ago: executing program 1 (id=3361): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000040000000574000028dd85d1cc0b943e6415f390856e51b85ffd5ca9157e701e3fd51c4bf278de00845236d00aa7acf0ab7bdcc9047617a5ed02a1a67bf435ede296ef91a551e7be1fa103008e050d49688ff1657fdfd00c3df178c098b6811ee0b2eeedf1b8626df791d3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffffff000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018170000", @ANYRES32=r4, @ANYBLOB="000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000cfb75700000000000095000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x7487a242, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r4], 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0xe2, 0x0) 1m44.716320785s ago: executing program 1 (id=3388): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1) socket(0x10, 0x803, 0x0) 1m44.699082855s ago: executing program 1 (id=3390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12a1, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x2}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000794d7af250a0c85cbb8461a088c3a09807254c67f39a0200886883c427b553307bb0fa2434f55889a73f3d8fa06424a0e15314ebc1f3213d1e2b8786fa04b365195f11fa7b2066b5cc323ad8d682ca0b9805080e7c0707978b0f7ebe2a1c52ee8e1d13ef0f88857333f972ec93dd80a803e0bfb897", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f00000005c0)={0x6, 'veth0_to_bridge\x00', {0x8}, 0x5}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000001980)={0xa, {"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", 0xfffffffffffffdcd}}, 0x1006) r12 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000080)={0x0, 0x20, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d", 0x2}], 0x1) r13 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) pipe2(&(0x7f0000001cc0), 0x800) 1m43.839205001s ago: executing program 1 (id=3415): open(0x0, 0x2a4c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) open(0x0, 0x0, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x8d0, &(0x7f0000000000), 0x1, 0x253, &(0x7f0000000680)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0xc, 0x10003, '\x00', [{}, {0xffffffff}]}) 1m43.72989996s ago: executing program 1 (id=3418): open(0x0, 0x2a4c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = open(0x0, 0x0, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x8d0, &(0x7f0000000000), 0x1, 0x253, &(0x7f0000000680)="$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") openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="100027bd7000fbdbdf250c000000080004000100000008000400a727000008000600000001000c0002800800060000000000"], 0x38}}, 0x4008000) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m43.389462279s ago: executing program 1 (id=3422): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) accept(r0, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000200)=0x80) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) 1m43.358402809s ago: executing program 34 (id=3422): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) accept(r0, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000200)=0x80) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) 1m10.901449636s ago: executing program 0 (id=3973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x8083, 0x18115, @rand_addr, 0x983a}, 0x1c) 1m10.834621836s ago: executing program 0 (id=3976): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m10.466635824s ago: executing program 0 (id=3981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1m10.447541814s ago: executing program 0 (id=3983): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2400, 0x0) 1m10.416896764s ago: executing program 0 (id=3985): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000000)=0x7, 0x4) 1m10.309632623s ago: executing program 0 (id=3990): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd}, 0x20}}, 0x0) 1m10.275465543s ago: executing program 35 (id=3990): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd}, 0x20}}, 0x0) 1m4.930208339s ago: executing program 2 (id=4088): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}}, 0x20}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) 1m4.366232267s ago: executing program 2 (id=4094): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009c00110000000000000000000000000000000001ffffffff000000000000000000000000640101010000000000000000000000000a010100"/78], 0xec}}, 0x0) 1m4.337751977s ago: executing program 2 (id=4097): iopl(0x3) poll(0x0, 0x0, 0x9) 1m4.230782166s ago: executing program 2 (id=4102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2400, 0x0) 1m4.104059266s ago: executing program 2 (id=4104): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 1m2.94628407s ago: executing program 2 (id=4119): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m2.90345466s ago: executing program 36 (id=4119): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24.736287354s ago: executing program 9 (id=5388): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$getregs(0xc, r0, 0x869, &(0x7f0000000200)=""/166) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './cgroup/../file0\x00'}, 0x6e) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x5, 0x2, {0x0, 0x1}, {0x4b, 0x6}, @cond=[{0x84, 0x402, 0x404, 0x4, 0x1, 0x29}, {0x0, 0xa0, 0x3, 0x5, 0x800, 0xff01}]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r1, 0x80404518, 0x0) 24.684216584s ago: executing program 9 (id=5391): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000", @ANYRES16, @ANYBLOB="05"], 0x80}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23.830204289s ago: executing program 9 (id=5428): write$nci(0xffffffffffffffff, &(0x7f00000000c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x4, {0x1, 0x4}}, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[], 0xa) 23.777836309s ago: executing program 9 (id=5431): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2400, 0x0) 23.776158109s ago: executing program 9 (id=5433): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) 23.588094138s ago: executing program 9 (id=5439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x2, 0x4, 0x58dc, 0x8, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 23.574939898s ago: executing program 37 (id=5439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x2, 0x4, 0x58dc, 0x8, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.741358468s ago: executing program 7 (id=6094): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) recvmsg(r0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.634585907s ago: executing program 7 (id=6098): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) 1.543050617s ago: executing program 7 (id=6100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xa8}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.245403856s ago: executing program 7 (id=6106): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x26004080) sendfile(r4, r3, 0x0, 0x100000002) 1.228017155s ago: executing program 8 (id=6108): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.200437145s ago: executing program 7 (id=6110): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3) pause() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) socket(0x0, 0x80000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) 930.554774ms ago: executing program 3 (id=6114): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 775.057774ms ago: executing program 4 (id=6119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xa8}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 756.134743ms ago: executing program 3 (id=6120): creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) pwritev2(r1, &(0x7f0000000240), 0x0, 0x7800, 0x0, 0x3) 755.646213ms ago: executing program 4 (id=6121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 717.127923ms ago: executing program 3 (id=6122): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}]}, 0x0, 0x537, &(0x7f0000000fc0)="$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") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80380, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 688.402643ms ago: executing program 3 (id=6123): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x64, 0xf31, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {0x10, 0xffff}}}, 0x24}}, 0x1000000) 663.549513ms ago: executing program 3 (id=6124): open(0x0, 0x2a4c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) open(0x0, 0x0, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x8d0, &(0x7f0000000000), 0x1, 0x253, &(0x7f0000000680)="$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") openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0xc, 0x10003, '\x00', [{}, {0xffffffff}]}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 638.848873ms ago: executing program 4 (id=6125): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) 611.769002ms ago: executing program 4 (id=6126): socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900000039000000940000fc00000000"], 0x18}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f6164636e225ae7e26173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x880) 572.892563ms ago: executing program 3 (id=6127): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) inotify_rm_watch(0xffffffffffffffff, 0x0) 561.489622ms ago: executing program 4 (id=6128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x240, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x22c, 0x1, [@m_skbmod={0x84, 0x1f, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x150, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x121, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x20000000, 0x3, 0x7}, @local, @rand_addr=0x64010100, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x240}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 517.667332ms ago: executing program 4 (id=6130): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b31, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = syz_io_uring_setup(0x1ade, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}) io_uring_enter(r5, 0x5b43, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xa804) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(0xffffffffffffffff, 0x0, 0x0) 465.640992ms ago: executing program 6 (id=6131): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) iopl(0x3) keyctl$reject(0x13, 0x0, 0x0, 0x100000201, 0xfffffffffffffffc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000080)="$eJzs3c1rE00cwPFf0rw07dMnPTw8iCgMFUSRLk3AmweLtCAGlLYRrCBs7VZDtknJhkJEbA+CV88eevAoggjevIh47cW/wLdbL71ZsDiy2U3cJkuaVvrq93PoTnd+v9mZnd02nbabtUtP54tzjvFDx8SX8Ld6yS8sy/kPK59PT77/x/tcqfHRqUxWqaiI3H74cuhdtf/mm3/fJmV18M7aevbb6qkpkZ9T9yWqCo4qaa21mimXqxE3ebbgFA2lbtiW6ViqUHKsSlWZ9XpzxrbUnF1eWKgpszQ70LdQsRxHmaWaKlo1VS2raqWmzHtmoaQMw1ADfQIRGWyWom11kU6J+RcbWsu6O0HJZdFah0QvNwpxf5v8s87iMGmZ/46xbRdHz172DPthQ8ea85/YZv5x/Hj3/5dn3dz/OH4mb01fG83lxiaU6hWZf7KYX8x7W6/+U78UxBZLViYuTG+Ke434JOJ+HL+aGxtRdYNydn7Jz19azHvfHEbn/PyMpN3XKYF8aeRnvHy1NT8ufcH8rKTlv/D8bCNfooH8hJw7E8g3JC0f70pZbJl1X9wG8h9llLpyPddy/FQ9DgAAAAAAAACAo8hQTb/X7yPNX/WmDCNZ/4uPZn3K3e3GeQHN9fURSctm+Pr8SOj6fkxOxg5w4AAAAAAA/EWc2oOiadtWZecF6SKm53mqwyHiIuIWRB4PuZ3p2OD/fo9bqtw2QrISItLeTk83ffYLqYve8V5N+B2T3Z6oPSxERSS4x/tnDXfw9utGTCrs/DjRHV0Aw4n2M2/adu++Djk4UtFahwZL7+4u7GToALspRDYbe06ExujI9u1o0457exo35nZHvxx+O3RZcGffm8HWEzX81WvX7vBF43tziQ8AAADAERL4wQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByQXT2JrfHc/q1V4r9FfPsj2VrfJ57n/gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4hH4FAAD//5t/ryo=") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) connect(r3, &(0x7f00000000c0)=@isdn={0x22, 0x6, 0x2, 0x4}, 0x80) 391.842721ms ago: executing program 6 (id=6132): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xa8}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x4c, 0x30, 0x25, 0x0, 0x0, {}, [{0x38, 0x1, [@m_pedit={0x34, 0x1, 0x0, 0x0, {{0xa}, {0x8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 391.429751ms ago: executing program 6 (id=6133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 337.626461ms ago: executing program 7 (id=6134): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 337.013801ms ago: executing program 8 (id=6135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 218.986121ms ago: executing program 6 (id=6136): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit]}, 0x0, 0x40, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x3, 0x9, 0x2}, {0x4, 0x1, 0xd}, {0x4, 0x2, 0x2, 0x8}, {0x0, 0x3, 0x6, 0x3}, {0x1, 0x2, 0x2}, {0x0, 0x5, 0x2, 0x9}, {0x4, 0x1, 0x6, 0x9}], 0x10, 0xf, @void, @value}, 0x94) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x64) 216.247941ms ago: executing program 8 (id=6137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) 176.074011ms ago: executing program 8 (id=6138): socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900000039000000940000fc00000000"], 0x18}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f6164636e225ae7e26173742d6c"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x880) 154.562481ms ago: executing program 8 (id=6139): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfc7843a8a57f02800050c45b07811a400000000000007040000f0ff", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1502"], 0x0, 0x0, 0xffffffffffffff13, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r5, 0x4010744d, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/228], 0x154}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000006e1065000000000097400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10, 0x0, 0x80000100000}, 0x18) r11 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r11, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x1) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 37.31564ms ago: executing program 6 (id=6140): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x240, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x22c, 0x1, [@m_skbmod={0x84, 0x1f, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x150, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x121, 0x6, "2d3226d2e3c57ead557080202f648bcdfe78417bc2116e51a2e0cec3ecc283dc8d7821b2facbf465d9f7be2aa1e8f71e4d6e3358561c91cc59b3e412fff5eebfc75d3f6b2f7b38f6c6ae34cb709f2cc9bcc18fdc130c26ecec8584ee187dd61ac669e1360f3594d45ae4e3bad23daf0d6783c18c59c8c9e2fcbd90d335bc50b9fe7f8bc3d0041c343f964816c387c2b856c8dc4b06bf7a3fe6e0fb860738eb6bfbd18b07588e329e421012b28551f9c1267b24f31285115c4986075bc929c62ad791236fd2c769aa297fe40da014506d861bfbd51a5e408d3a670759313c72590c4d78459ca7243d0539e14a26d7f08a6523777b2ca84a894c6e3c4b19b58ef47cd81b19f89a33061b89739b59c0e5c501f46b8e4ecf4a3423d6bd1c12"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x20000000, 0x3, 0x7}, @local, @rand_addr=0x64010100, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x240}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 19.71776ms ago: executing program 6 (id=6141): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = socket(0xa, 0x40000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 0s ago: executing program 8 (id=6142): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa00, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x26004080) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) kernel console output (not intermixed with test programs): imestamps until 2038-01-19 (0x7fffffff) [ 262.344422][T16063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.378672][T20467] netlink: 'syz.8.4990': attribute type 13 has an invalid length. [ 262.422786][T20467] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.430118][T20467] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.471695][T20467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.482895][T20467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.537664][T18039] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.574806][T20476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=20476 comm=syz.8.4994 [ 262.608219][T20481] loop8: detected capacity change from 0 to 512 [ 262.618047][T20481] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.631019][T20481] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.654013][T18039] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.715088][T20489] loop8: detected capacity change from 0 to 1024 [ 262.722064][T20489] EXT4-fs: inline encryption not supported [ 262.728346][T20489] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 262.740240][T20489] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 2: comm syz.8.4998: lblock 2 mapped to illegal pblock 2 (length 1) [ 262.754676][T20489] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 48: comm syz.8.4998: lblock 0 mapped to illegal pblock 48 (length 1) [ 262.769075][T20489] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4998: Failed to acquire dquot type 0 [ 262.771197][T20496] loop6: detected capacity change from 0 to 2048 [ 262.780676][T20489] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 262.796721][T20489] EXT4-fs error (device loop8): ext4_evict_inode:256: inode #11: comm syz.8.4998: mark_inode_dirty error [ 262.808355][T20489] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 262.809596][T20496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.818734][T20489] EXT4-fs (loop8): 1 orphan inode deleted [ 262.836814][T20489] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.837275][ T9584] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 262.863642][ T9584] EXT4-fs error (device loop8): ext4_release_dquot:6961: comm kworker/u8:29: Failed to release dquot type 0 [ 262.877713][ T9584] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 262.895333][ T9584] EXT4-fs error (device loop8): ext4_release_dquot:6961: comm kworker/u8:29: Failed to release dquot type 0 [ 262.922411][T18039] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 262.937078][T18039] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 262.949118][T18039] EXT4-fs error (device loop8): ext4_quota_off:7205: inode #3: comm syz-executor: mark_inode_dirty error [ 263.022376][T20506] sctp: [Deprecated]: syz.4.5003 (pid 20506) Use of int in max_burst socket option. [ 263.022376][T20506] Use struct sctp_assoc_value instead [ 263.052738][T20496] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 263.067993][T20496] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 263.080652][T20496] EXT4-fs (loop6): This should not happen!! Data will be lost [ 263.080652][T20496] [ 263.090345][T20496] EXT4-fs (loop6): Total free blocks count 0 [ 263.096467][T20496] EXT4-fs (loop6): Free/Dirty block details [ 263.102373][T20496] EXT4-fs (loop6): free_blocks=2415919104 [ 263.108259][T20496] EXT4-fs (loop6): dirty_blocks=8192 [ 263.113550][T20496] EXT4-fs (loop6): Block reservation details [ 263.119643][T20496] EXT4-fs (loop6): i_reserved_data_blocks=512 [ 263.147468][T20511] loop8: detected capacity change from 0 to 128 [ 263.159402][ T9584] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 263.173456][T20511] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.204357][T20511] netlink: 'syz.8.5006': attribute type 13 has an invalid length. [ 263.368972][T20536] loop8: detected capacity change from 0 to 512 [ 263.388000][T20536] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.407936][T20542] loop7: detected capacity change from 0 to 2048 [ 263.427306][T20546] loop8: detected capacity change from 0 to 1024 [ 263.433974][T20546] EXT4-fs: inline encryption not supported [ 263.441487][T20546] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 263.463888][T20546] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 2: comm syz.8.5019: lblock 2 mapped to illegal pblock 2 (length 1) [ 263.480204][T20546] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 48: comm syz.8.5019: lblock 0 mapped to illegal pblock 48 (length 1) [ 263.494751][T20546] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.5019: Failed to acquire dquot type 0 [ 263.508777][T20546] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 263.518495][T20546] EXT4-fs error (device loop8): ext4_evict_inode:256: inode #11: comm syz.8.5019: mark_inode_dirty error [ 263.530067][T20546] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 263.540480][T20546] EXT4-fs (loop8): 1 orphan inode deleted [ 263.556525][ T9631] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:54: lblock 1 mapped to illegal pblock 1 (length 1) [ 263.576144][ T9631] EXT4-fs error (device loop8): ext4_release_dquot:6961: comm kworker/u8:54: Failed to release dquot type 0 [ 263.590694][T18039] EXT4-fs error (device loop8): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 263.603859][T18039] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 263.614909][T18039] EXT4-fs error (device loop8): ext4_quota_off:7205: inode #3: comm syz-executor: mark_inode_dirty error [ 263.625277][T20542] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 263.641182][T20542] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 263.653770][T20542] EXT4-fs (loop7): This should not happen!! Data will be lost [ 263.653770][T20542] [ 263.655592][T20550] loop8: detected capacity change from 0 to 512 [ 263.663424][T20542] EXT4-fs (loop7): Total free blocks count 0 [ 263.663444][T20542] EXT4-fs (loop7): Free/Dirty block details [ 263.663459][T20542] EXT4-fs (loop7): free_blocks=2415919104 [ 263.663474][T20542] EXT4-fs (loop7): dirty_blocks=8192 [ 263.663489][T20542] EXT4-fs (loop7): Block reservation details [ 263.675187][T20550] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 263.675759][T20542] EXT4-fs (loop7): i_reserved_data_blocks=512 [ 263.693773][T20550] EXT4-fs (loop8): 1 truncate cleaned up [ 263.734193][ T11] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 263.746992][ T11] EXT4-fs (loop7): This should not happen!! Data will be lost [ 263.746992][ T11] [ 263.790342][T20553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=20553 comm=syz.8.5022 [ 263.828064][T20557] __nla_validate_parse: 12 callbacks suppressed [ 263.828081][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5023'. [ 263.848978][T20559] loop7: detected capacity change from 0 to 128 [ 263.863825][T20559] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.866023][ T5719] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 263.882290][ T5719] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 263.912542][T20566] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5027'. [ 263.928421][T20559] netlink: 'syz.7.5021': attribute type 13 has an invalid length. [ 263.937284][T20568] loop8: detected capacity change from 0 to 2048 [ 263.981582][T20576] loop4: detected capacity change from 0 to 512 [ 263.988460][T20576] EXT4-fs: Ignoring removed oldalloc option [ 263.994760][T20576] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 264.009897][T20578] loop7: detected capacity change from 0 to 512 [ 264.017343][T20576] EXT4-fs (loop4): 1 truncate cleaned up [ 264.029905][T20578] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.5032: casefold flag without casefold feature [ 264.042895][T20578] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.5032: couldn't read orphan inode 15 (err -117) [ 264.066444][T20576] loop4: detected capacity change from 512 to 64 [ 264.091389][T14194] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -12) [ 264.106470][T20587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=20587 comm=syz.9.5035 [ 264.151643][ T5719] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 264.159894][ T5719] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 264.168645][T20595] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5039'. [ 264.195678][T20597] loop9: detected capacity change from 0 to 1024 [ 264.203606][T20597] EXT4-fs: inline encryption not supported [ 264.210870][T20597] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 264.228358][T20597] EXT4-fs error (device loop9): ext4_map_blocks:671: inode #3: block 2: comm syz.9.5040: lblock 2 mapped to illegal pblock 2 (length 1) [ 264.259141][T20608] loop6: detected capacity change from 0 to 512 [ 264.261922][T20597] __quota_error: 7 callbacks suppressed [ 264.261940][T20597] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 264.279590][T20597] EXT4-fs error (device loop9): ext4_map_blocks:671: inode #3: block 48: comm syz.9.5040: lblock 0 mapped to illegal pblock 48 (length 1) [ 264.284837][T20608] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.5045: casefold flag without casefold feature [ 264.294176][T20597] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 264.307485][T20608] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.5045: couldn't read orphan inode 15 (err -117) [ 264.315236][T20597] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.5040: Failed to acquire dquot type 0 [ 264.338949][T20597] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 264.348490][T20597] EXT4-fs error (device loop9): ext4_evict_inode:256: inode #11: comm syz.9.5040: mark_inode_dirty error [ 264.360122][T20597] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 264.370750][T20597] EXT4-fs (loop9): 1 orphan inode deleted [ 264.386877][ T11] EXT4-fs error (device loop9): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 264.402626][ T11] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 264.411147][ T11] EXT4-fs error (device loop9): ext4_release_dquot:6961: comm kworker/u8:0: Failed to release dquot type 0 [ 264.424826][T18386] EXT4-fs error (device loop9): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 264.439698][T18386] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 264.449489][T18386] EXT4-fs error (device loop9): ext4_quota_off:7205: inode #3: comm syz-executor: mark_inode_dirty error [ 264.473916][T20625] can0: slcan on ttyS3. [ 264.484478][T20625] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5049'. [ 264.495418][T20625] netlink: 16410 bytes leftover after parsing attributes in process `syz.9.5049'. [ 264.535159][T20628] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5052'. [ 264.586404][T20624] can0 (unregistered): slcan off ttyS3. [ 264.608948][T20630] netlink: 692 bytes leftover after parsing attributes in process `syz.9.5053'. [ 265.147833][T20650] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5059'. [ 265.156433][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5062'. [ 265.159406][T20645] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5059'. [ 265.200860][T20656] loop4: detected capacity change from 0 to 512 [ 265.229651][T20656] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.240952][T20664] loop7: detected capacity change from 0 to 512 [ 265.247862][T20664] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 265.269688][T20664] EXT4-fs (loop7): 1 truncate cleaned up [ 265.280851][ T5702] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 265.289199][ T5702] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 265.408260][T20689] loop7: detected capacity change from 0 to 512 [ 265.430055][T20693] loop4: detected capacity change from 0 to 512 [ 265.436867][T20693] EXT4-fs: Ignoring removed oldalloc option [ 265.441153][T20689] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.443039][T20693] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 265.464447][T20693] EXT4-fs (loop4): 1 truncate cleaned up [ 265.516581][T20693] loop4: detected capacity change from 512 to 64 [ 265.536197][T14194] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -12) [ 265.645234][T20719] loop4: detected capacity change from 0 to 128 [ 265.651718][T20721] loop7: detected capacity change from 0 to 512 [ 265.655565][T20719] ext4 filesystem being mounted at /418/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.688111][T20719] netlink: 'syz.4.5090': attribute type 13 has an invalid length. [ 265.688921][T20721] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.708088][T20719] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.717127][T20719] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.726178][T20719] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.735151][T20719] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.761805][T20726] loop7: detected capacity change from 0 to 512 [ 265.777296][T20729] loop4: detected capacity change from 0 to 128 [ 265.780202][T20726] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.5092: casefold flag without casefold feature [ 265.796057][T20729] ext4 filesystem being mounted at /419/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.796533][T20726] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.5092: couldn't read orphan inode 15 (err -117) [ 265.832089][T20729] netlink: 'syz.4.5093': attribute type 13 has an invalid length. [ 265.868914][T20734] loop7: detected capacity change from 0 to 2048 [ 265.991651][ T5702] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 265.995729][T20751] loop4: detected capacity change from 0 to 512 [ 265.999924][ T5702] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 266.019772][T20751] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.035412][T20755] 9pnet_fd: Insufficient options for proto=fd [ 266.062933][T20759] loop4: detected capacity change from 0 to 512 [ 266.081095][T20759] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.5104: casefold flag without casefold feature [ 266.094073][T20759] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.5104: couldn't read orphan inode 15 (err -117) [ 266.133780][T20766] loop4: detected capacity change from 0 to 128 [ 266.142973][T20766] ext4 filesystem being mounted at /425/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 266.175954][T20766] netlink: 'syz.4.5107': attribute type 13 has an invalid length. [ 266.207379][T20775] loop6: detected capacity change from 0 to 2048 [ 266.289497][ T5728] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 266.297510][ T5728] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 266.356481][T20791] 9pnet_fd: Insufficient options for proto=fd [ 266.397844][T20795] loop4: detected capacity change from 0 to 512 [ 266.409100][T20797] can0: slcan on ttyS3. [ 266.418835][T20795] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.5117: casefold flag without casefold feature [ 266.439156][T20795] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.5117: couldn't read orphan inode 15 (err -117) [ 266.546606][T20796] can0 (unregistered): slcan off ttyS3. [ 266.607119][T20812] loop6: detected capacity change from 0 to 2048 [ 266.643011][T20812] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 266.661111][T20812] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 31 with max blocks 239 with error 28 [ 266.673685][T20812] EXT4-fs (loop6): This should not happen!! Data will be lost [ 266.673685][T20812] [ 266.683371][T20812] EXT4-fs (loop6): Total free blocks count 0 [ 266.689411][T20812] EXT4-fs (loop6): Free/Dirty block details [ 266.695490][T20812] EXT4-fs (loop6): free_blocks=2415919104 [ 266.701246][T20812] EXT4-fs (loop6): dirty_blocks=256 [ 266.706630][T20812] EXT4-fs (loop6): Block reservation details [ 266.712642][T20812] EXT4-fs (loop6): i_reserved_data_blocks=16 [ 266.911985][T20823] 9pnet_fd: Insufficient options for proto=fd [ 267.034706][T20846] loop8: detected capacity change from 0 to 2048 [ 267.323003][T20901] loop9: detected capacity change from 0 to 512 [ 267.331624][T20901] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 267.353263][T20901] EXT4-fs (loop9): 1 truncate cleaned up [ 267.714200][T20982] loop6: detected capacity change from 0 to 2048 [ 267.905679][T21024] can0: slcan on ttyS3. [ 267.959476][ T5702] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 267.967387][ T5702] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 268.026507][T21023] can0 (unregistered): slcan off ttyS3. [ 268.053372][T21041] loop6: detected capacity change from 0 to 512 [ 268.060572][T21041] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 268.085223][T21041] EXT4-fs (loop6): 1 truncate cleaned up [ 268.110758][T21045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.119392][T21045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.444161][T21063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=21063 comm=syz.4.5176 [ 268.479939][T21068] loop9: detected capacity change from 0 to 512 [ 268.508218][T21068] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.539525][T21073] loop9: detected capacity change from 0 to 128 [ 268.548054][T21073] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.577428][T21073] netlink: 'syz.9.5179': attribute type 13 has an invalid length. [ 268.625850][T21073] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.633099][T21073] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.698180][T21073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.709608][T21073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.872752][T21086] __nla_validate_parse: 24 callbacks suppressed [ 268.872767][T21086] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5183'. [ 268.888777][T21084] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5183'. [ 269.103535][T21104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.112344][T21104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.352798][T21110] can0: slcan on ttyS3. [ 269.361186][T21110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5192'. [ 269.372210][T21110] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.5192'. [ 269.466410][T21109] can0 (unregistered): slcan off ttyS3. [ 269.490022][T21112] loop4: detected capacity change from 0 to 128 [ 269.508814][T21112] ext4 filesystem being mounted at /440/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.537285][T21112] netlink: 'syz.4.5193': attribute type 13 has an invalid length. [ 269.566200][T21116] loop4: detected capacity change from 0 to 512 [ 269.573057][T21116] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 269.594494][T21116] EXT4-fs (loop4): 1 truncate cleaned up [ 269.698702][T21131] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5196'. [ 269.708265][T21121] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5196'. [ 269.801627][T21141] loop4: detected capacity change from 0 to 128 [ 269.810788][ T29] audit: type=1326 audit(2000000118.740:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb030fd5d29 code=0x7ffc0000 [ 269.834771][T21144] loop9: detected capacity change from 0 to 512 [ 269.842547][T21144] EXT4-fs: inline encryption not supported [ 269.843243][ T29] audit: type=1326 audit(2000000118.740:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fb030fd5d29 code=0x7ffc0000 [ 269.852118][T21141] ext4 filesystem being mounted at /445/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.871992][ T29] audit: type=1326 audit(2000000118.740:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb030fd5d29 code=0x7ffc0000 [ 269.884925][T21147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.905765][ T29] audit: type=1326 audit(2000000118.740:12071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb030fd5d29 code=0x7ffc0000 [ 269.905796][ T29] audit: type=1326 audit(2000000118.740:12072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb030fd5d29 code=0x7ffc0000 [ 269.914308][T21147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.937877][ T29] audit: type=1326 audit(2000000118.740:12073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb030fd5d29 code=0x7ffc0000 [ 269.968501][T21144] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 269.968968][ T29] audit: type=1326 audit(2000000118.740:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb030fd5d29 code=0x7ffc0000 [ 269.992642][T21144] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 270.004086][ T29] audit: type=1326 audit(2000000118.740:12075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb030fd5d63 code=0x7ffc0000 [ 270.027649][T21144] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.5205: Corrupt directory, running e2fsck is recommended [ 270.037734][ T29] audit: type=1326 audit(2000000118.740:12076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb030fd47df code=0x7ffc0000 [ 270.090467][T21141] netlink: 'syz.4.5204': attribute type 13 has an invalid length. [ 270.097559][ T29] audit: type=1326 audit(2000000118.740:12077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.9.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb030fd5db7 code=0x7ffc0000 [ 270.140044][T21144] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 270.149986][T21144] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.5205: corrupted in-inode xattr: invalid ea_ino [ 270.163657][T21144] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.5205: couldn't read orphan inode 15 (err -117) [ 270.182216][T21144] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.190224][T21150] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5207'. [ 270.193759][T21144] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 270.212795][T21144] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.5205: Corrupt directory, running e2fsck is recommended [ 270.234128][T21144] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.245702][T21144] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 270.255919][T21144] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.5205: Corrupt directory, running e2fsck is recommended [ 270.271271][T21154] loop6: detected capacity change from 0 to 512 [ 270.279574][T21144] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.291138][T21144] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 270.301258][T21144] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.5205: Corrupt directory, running e2fsck is recommended [ 270.304105][T21154] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 270.316914][T21144] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.337866][T21154] EXT4-fs (loop6): 1 truncate cleaned up [ 270.354704][T21160] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5211'. [ 270.369740][T21158] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5211'. [ 270.424034][ T5728] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 270.436326][ T5728] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 270.490294][T21183] loop9: detected capacity change from 0 to 164 [ 270.500081][T21183] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 270.514333][T21182] loop4: detected capacity change from 0 to 2048 [ 270.627581][T21201] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5224'. [ 270.768286][T21225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=21225 comm=syz.9.5237 [ 270.802187][T21229] loop4: detected capacity change from 0 to 2048 [ 270.819483][T21233] loop9: detected capacity change from 0 to 512 [ 270.840190][T21233] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.860236][T21243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.869621][T21243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.930578][T21253] loop7: detected capacity change from 0 to 512 [ 270.939890][T21253] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 270.951537][T21253] EXT4-fs (loop7): 1 truncate cleaned up [ 271.113574][T21267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=21267 comm=syz.7.5252 [ 271.214070][T21274] loop4: detected capacity change from 0 to 2048 [ 271.246820][T21277] loop7: detected capacity change from 0 to 512 [ 271.259575][T21277] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.457935][ T5702] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 271.467002][ T5702] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 271.514727][T21300] loop8: detected capacity change from 0 to 2048 [ 271.546924][T21307] can0: slcan on ttyS3. [ 271.626684][T21306] can0 (unregistered): slcan off ttyS3. [ 271.687085][T21322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.695818][T21322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.846660][T21329] loop9: detected capacity change from 0 to 128 [ 271.855128][T21329] ext4 filesystem being mounted at /241/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.884490][T21329] netlink: 'syz.9.5274': attribute type 13 has an invalid length. [ 272.261961][T21358] 9pnet_fd: Insufficient options for proto=fd [ 272.386469][T21374] loop4: detected capacity change from 0 to 2048 [ 272.407102][T21375] loop6: detected capacity change from 0 to 512 [ 272.423065][T21375] EXT4-fs: inline encryption not supported [ 272.453663][T21375] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 272.465272][T21375] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 272.475475][T21375] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5291: Corrupt directory, running e2fsck is recommended [ 272.561976][T21382] loop7: detected capacity change from 0 to 2048 [ 272.585682][T21375] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 272.598326][T21375] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.5291: corrupted in-inode xattr: invalid ea_ino [ 272.603905][T21386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.612046][T21375] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.5291: couldn't read orphan inode 15 (err -117) [ 272.620843][T21386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.646029][T21375] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 272.657643][T21375] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 272.667801][T21375] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5291: Corrupt directory, running e2fsck is recommended [ 272.690732][T21375] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 272.702303][T21375] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 272.712432][T21375] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5291: Corrupt directory, running e2fsck is recommended [ 272.737297][T21375] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 272.748875][T21375] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 272.759006][T21375] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5291: Corrupt directory, running e2fsck is recommended [ 272.774018][T21375] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 272.872401][T21382] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 272.875490][T21399] can0: slcan on ttyS3. [ 272.887560][T21382] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 272.903947][T21382] EXT4-fs (loop7): This should not happen!! Data will be lost [ 272.903947][T21382] [ 272.913709][T21382] EXT4-fs (loop7): Total free blocks count 0 [ 272.919740][T21382] EXT4-fs (loop7): Free/Dirty block details [ 272.925634][T21382] EXT4-fs (loop7): free_blocks=2415919104 [ 272.931401][T21382] EXT4-fs (loop7): dirty_blocks=8192 [ 272.936768][T21382] EXT4-fs (loop7): Block reservation details [ 272.942759][T21382] EXT4-fs (loop7): i_reserved_data_blocks=512 [ 273.037307][T21401] loop9: detected capacity change from 0 to 164 [ 273.045594][T21401] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 273.053268][T21398] can0 (unregistered): slcan off ttyS3. [ 273.074741][ T9581] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 273.087503][ T9581] EXT4-fs (loop7): This should not happen!! Data will be lost [ 273.087503][ T9581] [ 273.091487][T21403] loop6: detected capacity change from 0 to 128 [ 273.123947][T21403] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 273.186081][T21403] netlink: 'syz.6.5305': attribute type 13 has an invalid length. [ 273.266923][T21403] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.274297][T21403] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.332001][T21403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.342959][T21403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.504642][T21451] loop9: detected capacity change from 0 to 128 [ 273.522259][T21451] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 273.557191][T21451] netlink: 'syz.9.5325': attribute type 13 has an invalid length. [ 273.629083][T21470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=21470 comm=syz.9.5332 [ 273.785895][T21491] loop9: detected capacity change from 0 to 128 [ 273.805080][T21491] ext4 filesystem being mounted at /269/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 273.834389][T21491] netlink: 'syz.9.5341': attribute type 13 has an invalid length. [ 273.869193][T21498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=21498 comm=syz.9.5344 [ 273.901141][T21501] loop9: detected capacity change from 0 to 1024 [ 273.921072][T21501] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.9.5345: corrupted in-inode xattr: bad magic number in in-inode xattr [ 273.985194][T21508] loop9: detected capacity change from 0 to 2048 [ 274.062460][T21511] loop7: detected capacity change from 0 to 512 [ 274.078422][T21511] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.301545][T21526] loop7: detected capacity change from 0 to 128 [ 274.310288][T21526] ext4 filesystem being mounted at /393/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 274.340108][T21526] netlink: 'syz.7.5354': attribute type 13 has an invalid length. [ 274.467433][T21538] __nla_validate_parse: 22 callbacks suppressed [ 274.467455][T21538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5358'. [ 274.513350][T21543] loop8: detected capacity change from 0 to 512 [ 274.538257][T21543] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.577716][T21547] loop8: detected capacity change from 0 to 2048 [ 274.645941][T21551] loop8: detected capacity change from 0 to 128 [ 274.663065][T21554] loop6: detected capacity change from 0 to 512 [ 274.670622][T21551] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 274.690061][T21554] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.702653][T21551] netlink: 'syz.8.5364': attribute type 13 has an invalid length. [ 275.262900][T21575] loop7: detected capacity change from 0 to 512 [ 275.279588][T21575] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.298996][T21581] loop4: detected capacity change from 0 to 2048 [ 275.321320][T21583] loop7: detected capacity change from 0 to 2048 [ 275.391172][T21589] loop4: detected capacity change from 0 to 164 [ 275.399294][T21589] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 275.517636][T21583] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 275.532604][T21583] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 275.545238][T21583] EXT4-fs (loop7): This should not happen!! Data will be lost [ 275.545238][T21583] [ 275.554982][T21583] EXT4-fs (loop7): Total free blocks count 0 [ 275.561027][T21583] EXT4-fs (loop7): Free/Dirty block details [ 275.566973][T21583] EXT4-fs (loop7): free_blocks=2415919104 [ 275.572885][T21583] EXT4-fs (loop7): dirty_blocks=8192 [ 275.578247][T21583] EXT4-fs (loop7): Block reservation details [ 275.584393][T21583] EXT4-fs (loop7): i_reserved_data_blocks=512 [ 275.616697][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 275.616714][ T29] audit: type=1326 audit(2000000124.550:12332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.6.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 275.620612][T21603] loop6: detected capacity change from 0 to 512 [ 275.622994][ T29] audit: type=1326 audit(2000000124.550:12333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.6.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 275.648083][T21603] EXT4-fs: inline encryption not supported [ 275.654991][ T29] audit: type=1326 audit(2000000124.550:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.6.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 275.678276][T21601] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5382'. [ 275.682325][ T29] audit: type=1326 audit(2000000124.550:12335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.6.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 275.724856][T21603] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.738518][ T29] audit: type=1326 audit(2000000124.550:12336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.6.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 275.750007][T21603] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 275.773699][ T29] audit: type=1326 audit(2000000124.550:12337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.6.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 275.783778][T21603] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5383: Corrupt directory, running e2fsck is recommended [ 275.807334][ T29] audit: type=1326 audit(2000000124.550:12338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.6.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 275.821658][T21603] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 275.843824][ T29] audit: type=1326 audit(2000000124.550:12339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.6.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e75ea5d63 code=0x7ffc0000 [ 275.852662][T21603] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.5383: corrupted in-inode xattr: invalid ea_ino [ 275.875376][ T29] audit: type=1326 audit(2000000124.550:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.6.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e75ea47df code=0x7ffc0000 [ 275.875413][ T29] audit: type=1326 audit(2000000124.550:12341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21602 comm="syz.6.5383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4e75ea5db7 code=0x7ffc0000 [ 275.891197][T21603] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.5383: couldn't read orphan inode 15 (err -117) [ 275.954662][T21603] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.966278][T21603] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 275.976493][T21603] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5383: Corrupt directory, running e2fsck is recommended [ 275.999407][T21603] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 276.003861][T21610] loop9: detected capacity change from 0 to 512 [ 276.010999][T21603] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 276.027500][T21603] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5383: Corrupt directory, running e2fsck is recommended [ 276.046343][T21612] loop8: detected capacity change from 0 to 2048 [ 276.055857][T21603] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 276.060395][ T7679] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 276.067554][T21603] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 276.080176][ T7679] EXT4-fs (loop7): This should not happen!! Data will be lost [ 276.080176][ T7679] [ 276.100032][T21603] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5383: Corrupt directory, running e2fsck is recommended [ 276.114456][T21610] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.189139][T21616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=21616 comm=syz.7.5387 [ 276.267408][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5395'. [ 276.280716][T21634] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5396'. [ 276.326137][T21642] loop7: detected capacity change from 0 to 512 [ 276.334576][T21644] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5400'. [ 276.354187][T21642] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.388364][T21649] loop4: detected capacity change from 0 to 128 [ 276.403576][T21649] ext4 filesystem being mounted at /489/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.443630][T21649] netlink: 'syz.4.5401': attribute type 13 has an invalid length. [ 276.483511][T21664] loop8: detected capacity change from 0 to 128 [ 276.511238][T21664] ext4 filesystem being mounted at /297/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.542987][T21668] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5408'. [ 276.550017][T21664] netlink: 'syz.8.5407': attribute type 13 has an invalid length. [ 276.557018][T21670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5410'. [ 276.583907][T21672] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5411'. [ 276.595647][T21674] loop4: detected capacity change from 0 to 512 [ 276.619543][T21674] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.711734][T21694] loop4: detected capacity change from 0 to 164 [ 276.722011][T21694] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 276.743486][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5422'. [ 276.752973][T21700] loop4: detected capacity change from 0 to 128 [ 276.772531][T21700] ext4 filesystem being mounted at /497/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.806930][T21700] netlink: 'syz.4.5423': attribute type 13 has an invalid length. [ 276.841455][T21711] loop4: detected capacity change from 0 to 512 [ 276.845669][T21709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.848473][T21711] EXT4-fs: inline encryption not supported [ 276.856412][T21709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.863493][T21711] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 276.881283][T21711] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 276.881306][T21711] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.5426: Corrupt directory, running e2fsck is recommended [ 276.882447][T21711] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 276.913193][T21711] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.5426: corrupted in-inode xattr: invalid ea_ino [ 276.929981][T21711] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.5426: couldn't read orphan inode 15 (err -117) [ 276.946351][T21711] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 276.957915][T21711] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 276.968039][T21711] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.5426: Corrupt directory, running e2fsck is recommended [ 276.985635][T21711] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 276.997195][T21711] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 277.007336][T21711] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.5426: Corrupt directory, running e2fsck is recommended [ 277.021326][T21711] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 277.032859][T21711] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 277.043017][T21711] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.5426: Corrupt directory, running e2fsck is recommended [ 277.059603][T21711] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 277.175126][T21728] loop6: detected capacity change from 0 to 128 [ 277.192945][T21728] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.222169][T21728] netlink: 'syz.6.5436': attribute type 13 has an invalid length. [ 277.452717][T21746] lo speed is unknown, defaulting to 1000 [ 277.539607][T21765] loop8: detected capacity change from 0 to 128 [ 277.569159][T21746] chnl_net:caif_netlink_parms(): no params data found [ 277.585711][T21765] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.623049][T21765] netlink: 'syz.8.5448': attribute type 13 has an invalid length. [ 277.678692][T21746] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.685793][T21746] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.693135][T21746] bridge_slave_0: entered allmulticast mode [ 277.699740][T21746] bridge_slave_0: entered promiscuous mode [ 277.706764][T21746] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.713841][T21746] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.721222][T21746] bridge_slave_1: entered allmulticast mode [ 277.727852][T21746] bridge_slave_1: entered promiscuous mode [ 277.745798][T21746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.756617][T21746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.779923][T21746] team0: Port device team_slave_0 added [ 277.786964][T21746] team0: Port device team_slave_1 added [ 277.792766][T21783] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5453'. [ 277.815705][T21746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.822813][T21746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.848750][T21746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.860318][T21746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.867358][T21746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.893460][T21746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.924953][T21746] hsr_slave_0: entered promiscuous mode [ 277.931868][T21746] hsr_slave_1: entered promiscuous mode [ 277.937935][T21746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.945714][T21746] Cannot create hsr debugfs directory [ 278.021557][T21746] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.028697][T21746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.036024][T21746] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.043133][T21746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.058466][T21800] loop8: detected capacity change from 0 to 128 [ 278.067022][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.075156][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.080557][T21800] ext4 filesystem being mounted at /318/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.115943][T21800] netlink: 'syz.8.5461': attribute type 13 has an invalid length. [ 278.127948][T21746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.143523][T21746] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.156441][ T9613] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.163617][ T9613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.175206][T21805] loop6: detected capacity change from 0 to 2048 [ 278.188780][T21807] loop8: detected capacity change from 0 to 512 [ 278.195173][ T9613] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.202367][ T9613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.208182][T21807] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.318987][T21746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.352378][T21824] loop8: detected capacity change from 0 to 1024 [ 278.418113][T21824] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.8.5468: corrupted in-inode xattr: bad magic number in in-inode xattr [ 278.480069][T21846] loop8: detected capacity change from 0 to 128 [ 278.490086][T21846] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.524078][T21846] netlink: 'syz.8.5473': attribute type 13 has an invalid length. [ 278.527874][T21746] veth0_vlan: entered promiscuous mode [ 278.540530][T21746] veth1_vlan: entered promiscuous mode [ 278.559411][T21746] veth0_macvtap: entered promiscuous mode [ 278.567221][T21746] veth1_macvtap: entered promiscuous mode [ 278.578530][T21746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.589027][T21746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.600415][T21746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.612117][T21746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.622650][T21746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.633795][T21746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.710776][T21864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.721292][T21864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.732122][T21871] loop8: detected capacity change from 0 to 512 [ 278.739035][T21871] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 278.751640][T21871] EXT4-fs (loop8): 1 truncate cleaned up [ 278.812123][T21877] loop8: detected capacity change from 0 to 128 [ 278.820836][T21877] ext4 filesystem being mounted at /331/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.850782][T21877] netlink: 'syz.8.5483': attribute type 13 has an invalid length. [ 278.880227][T21881] 9pnet_fd: Insufficient options for proto=fd [ 279.266136][T21902] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 279.301963][T21906] loop7: detected capacity change from 0 to 512 [ 279.312888][T21906] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 279.328451][T21906] EXT4-fs (loop7): 1 truncate cleaned up [ 279.431443][T21924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.449672][T21924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.518835][T21941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.528374][T21948] __nla_validate_parse: 3 callbacks suppressed [ 279.528389][T21948] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5511'. [ 279.540241][T21941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.572296][T21951] loop4: detected capacity change from 0 to 512 [ 279.582335][T21951] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 279.594050][T21951] EXT4-fs (loop4): 1 truncate cleaned up [ 279.651848][T21961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5518'. [ 279.688166][T21967] loop7: detected capacity change from 0 to 512 [ 279.695052][T21967] EXT4-fs: inline encryption not supported [ 279.702433][T21967] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 279.714055][T21967] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 279.724422][T21967] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5520: Corrupt directory, running e2fsck is recommended [ 279.738422][T21967] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 279.749060][T21967] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.5520: corrupted in-inode xattr: invalid ea_ino [ 279.763035][T21967] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.5520: couldn't read orphan inode 15 (err -117) [ 279.774116][T21980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5524'. [ 279.779157][T21967] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 279.795469][T21967] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 279.805644][T21967] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5520: Corrupt directory, running e2fsck is recommended [ 279.823123][T21967] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 279.834847][T21967] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 279.845213][T21967] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5520: Corrupt directory, running e2fsck is recommended [ 279.863231][T21967] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 279.874971][T21967] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 279.885168][T21967] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5520: Corrupt directory, running e2fsck is recommended [ 279.903929][T21967] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 279.957781][T21994] can0: slcan on ttyS3. [ 279.968402][T21994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5531'. [ 279.976698][T21998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=21998 comm=syz.7.5533 [ 279.979772][T21994] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.5531'. [ 280.031915][T22003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5535'. [ 280.075931][T22010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5539'. [ 280.096560][T21993] can0 (unregistered): slcan off ttyS3. [ 280.113885][T22013] loop4: detected capacity change from 0 to 2048 [ 280.142776][T22015] 9pnet_fd: Insufficient options for proto=fd [ 280.155719][T22019] loop7: detected capacity change from 0 to 1024 [ 280.156578][T22017] loop3: detected capacity change from 0 to 512 [ 280.171095][T22017] EXT4-fs: inline encryption not supported [ 280.182251][T22017] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 280.193883][T22017] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 280.198630][T22019] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.7.5543: corrupted in-inode xattr: bad magic number in in-inode xattr [ 280.203988][T22017] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5542: Corrupt directory, running e2fsck is recommended [ 280.233996][T22017] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 280.242472][T22017] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.5542: corrupted in-inode xattr: invalid ea_ino [ 280.260258][T22017] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.5542: couldn't read orphan inode 15 (err -117) [ 280.261989][T22024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=22024 comm=syz.4.5544 [ 280.318221][T22017] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 280.329855][T22017] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 280.340007][T22017] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5542: Corrupt directory, running e2fsck is recommended [ 280.368087][T22036] loop7: detected capacity change from 0 to 512 [ 280.376366][T22017] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 280.387949][T22017] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 280.398150][T22017] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5542: Corrupt directory, running e2fsck is recommended [ 280.406645][T22039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.422739][T22036] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.425723][T22017] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 280.435329][T22043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.444886][T22017] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 280.455436][T22039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.463444][T22017] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5542: Corrupt directory, running e2fsck is recommended [ 280.484800][T22043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.487876][T22037] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 280.527538][T22047] can0: slcan on ttyS3. [ 280.536685][T22047] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5552'. [ 280.549398][T22047] netlink: 16410 bytes leftover after parsing attributes in process `syz.7.5552'. [ 280.636473][T22046] can0 (unregistered): slcan off ttyS3. [ 280.680347][T22058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=22058 comm=syz.7.5557 [ 280.737223][T22063] loop7: detected capacity change from 0 to 1024 [ 280.749926][T22063] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.7.5559: corrupted in-inode xattr: bad magic number in in-inode xattr [ 280.824425][T22071] loop7: detected capacity change from 0 to 512 [ 280.848095][T22071] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.912332][T22081] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5566'. [ 281.049211][T22098] loop4: detected capacity change from 0 to 512 [ 281.078098][T22098] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.405368][T22119] vlan0: entered promiscuous mode [ 281.410494][T22119] vlan0: entered allmulticast mode [ 281.445930][T22123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.454695][T22123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.482358][T22126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=22126 comm=syz.4.5583 [ 281.531926][T22132] loop4: detected capacity change from 0 to 512 [ 281.548054][T22132] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.820853][T22143] can0: slcan on ttyS3. [ 281.946620][T22142] can0 (unregistered): slcan off ttyS3. [ 282.053257][T22160] 9pnet_fd: Insufficient options for proto=fd [ 282.120209][T22173] vlan0: entered promiscuous mode [ 282.125314][T22173] vlan0: entered allmulticast mode [ 282.139515][T22176] loop3: detected capacity change from 0 to 164 [ 282.150335][T22176] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 282.180309][T22180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.189075][T22180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.245197][T22187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.253667][T22187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.445932][T22192] loop4: detected capacity change from 0 to 512 [ 282.452974][T22192] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.464267][T22192] EXT4-fs (loop4): 1 truncate cleaned up [ 282.470770][T22192] EXT4-fs mount: 154 callbacks suppressed [ 282.470789][T22192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.516802][T14194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.634074][T22207] loop4: detected capacity change from 0 to 164 [ 282.642058][T22207] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 282.744182][T22214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.744373][T22216] 9pnet_fd: Insufficient options for proto=fd [ 282.752729][T22214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.876005][T22223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=22223 comm=syz.3.5621 [ 282.888617][T22227] loop8: detected capacity change from 0 to 1024 [ 282.947520][T22227] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.988821][T22240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.010544][T22240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.027103][T18039] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.036128][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 283.036145][ T29] audit: type=1326 audit(2000000131.960:12511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.6.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 283.066049][ T29] audit: type=1326 audit(2000000131.960:12512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.6.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 283.089668][ T29] audit: type=1326 audit(2000000131.960:12513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.6.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 283.113419][ T29] audit: type=1326 audit(2000000131.960:12514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.6.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 283.137138][ T29] audit: type=1326 audit(2000000131.960:12515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.6.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 283.160754][ T29] audit: type=1326 audit(2000000131.960:12516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.6.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 283.210165][T22247] $Hÿ: renamed from bond0 [ 283.222743][T22247] $Hÿ: entered promiscuous mode [ 283.227955][T22247] bond_slave_0: entered promiscuous mode [ 283.233861][T22247] bond_slave_1: entered promiscuous mode [ 283.264483][T22256] loop8: detected capacity change from 0 to 164 [ 283.272400][T22256] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 283.412803][T22272] loop4: detected capacity change from 0 to 1024 [ 283.438233][T22272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.461019][T14194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.532151][T22284] loop4: detected capacity change from 0 to 512 [ 283.538859][T22284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 283.549967][T22284] EXT4-fs (loop4): 1 truncate cleaned up [ 283.556056][T22284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.594797][T14194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.809213][T22304] loop3: detected capacity change from 0 to 512 [ 283.815684][T22304] EXT4-fs: Ignoring removed oldalloc option [ 283.821967][T22304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 283.833240][T22304] EXT4-fs (loop3): 1 truncate cleaned up [ 283.839315][T22304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.870016][ T29] audit: type=1326 audit(2000000132.800:12517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.6.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 283.893825][ T29] audit: type=1326 audit(2000000132.800:12518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22244 comm="syz.6.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 283.932094][ T29] audit: type=1326 audit(2000000132.860:12519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22311 comm="syz.6.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 283.956054][T22312] loop6: detected capacity change from 0 to 512 [ 283.959057][ T29] audit: type=1326 audit(2000000132.880:12520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22311 comm="syz.6.5653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4e75ea5d29 code=0x7ffc0000 [ 283.964286][T22312] EXT4-fs: inline encryption not supported [ 283.992866][T21746] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 284.005125][T22312] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 284.018956][T22312] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 284.029100][T22312] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5653: Corrupt directory, running e2fsck is recommended [ 284.043101][T22312] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 284.054141][T21746] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.063754][T22320] loop7: detected capacity change from 0 to 164 [ 284.068730][T22312] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.5653: corrupted in-inode xattr: invalid ea_ino [ 284.085603][T22320] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 284.098097][T22312] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.5653: couldn't read orphan inode 15 (err -117) [ 284.129101][T22312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.148989][T22312] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 284.160580][T22312] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 284.170851][T22312] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5653: Corrupt directory, running e2fsck is recommended [ 284.220042][T22312] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 284.231813][T22312] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 284.242015][T22312] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5653: Corrupt directory, running e2fsck is recommended [ 284.282934][T22346] loop8: detected capacity change from 0 to 2048 [ 284.307268][T22349] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 284.318893][T22349] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 284.329064][T22349] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.5653: Corrupt directory, running e2fsck is recommended [ 284.350251][T22312] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 284.391465][T22356] loop7: detected capacity change from 0 to 164 [ 284.399834][T22356] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 284.417874][T19332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.452451][T22364] loop6: detected capacity change from 0 to 512 [ 284.459365][T22364] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 284.477332][T22365] 9pnet_fd: Insufficient options for proto=fd [ 284.500217][T22364] EXT4-fs (loop6): 1 truncate cleaned up [ 284.509481][T22368] loop8: detected capacity change from 0 to 128 [ 284.517239][T22364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.545913][T22368] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.566318][T22368] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 284.580217][T22368] netlink: 'syz.8.5678': attribute type 13 has an invalid length. [ 284.604752][T18039] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.614688][T19332] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.648596][T22383] __nla_validate_parse: 26 callbacks suppressed [ 284.648612][T22383] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5684'. [ 284.654668][T22384] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5681'. [ 284.678032][T22388] loop8: detected capacity change from 0 to 164 [ 284.684453][T22387] loop6: detected capacity change from 0 to 2048 [ 284.685106][T22377] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5681'. [ 284.701373][T22388] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 284.746193][T22393] loop8: detected capacity change from 0 to 512 [ 284.761269][T22393] EXT4-fs: Ignoring removed oldalloc option [ 284.771623][T22393] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 284.798728][T22402] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5688'. [ 284.811354][T22393] EXT4-fs (loop8): 1 truncate cleaned up [ 284.817370][T22393] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.885603][T22405] loop3: detected capacity change from 0 to 128 [ 284.893536][T22394] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5688'. [ 284.898737][T22405] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.915147][T22405] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 284.921317][T18039] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.933503][T22405] netlink: 'syz.3.5692': attribute type 13 has an invalid length. [ 284.978713][T22405] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.985993][T22405] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.023415][T22411] loop8: detected capacity change from 0 to 512 [ 285.048599][T22411] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 285.142013][T22405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.169370][T22411] EXT4-fs (loop8): 1 truncate cleaned up [ 285.180937][T22411] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.201705][T22405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.235394][T22420] loop7: detected capacity change from 0 to 164 [ 285.250708][T22421] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5698'. [ 285.252471][T22420] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 285.288701][T18039] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.386621][T22433] loop8: detected capacity change from 0 to 512 [ 285.394831][T21746] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.419267][T22443] loop3: detected capacity change from 0 to 512 [ 285.432416][T22433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.449686][T22433] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.468195][T22443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.481082][T22443] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.541110][T18039] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.567690][T22457] loop8: detected capacity change from 0 to 512 [ 285.572663][T21746] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.584016][T22458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.592829][T22457] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 285.625944][T22463] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5716'. [ 285.651986][T22458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.678070][T22457] EXT4-fs (loop8): 1 truncate cleaned up [ 285.689457][T22457] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.704436][T22474] loop4: detected capacity change from 0 to 512 [ 285.711487][T22474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 285.721881][T22475] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5718'. [ 285.732306][T22466] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5718'. [ 285.742236][T22478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5720'. [ 285.777489][T22474] EXT4-fs (loop4): 1 truncate cleaned up [ 285.786160][T22485] loop6: detected capacity change from 0 to 164 [ 285.793514][T22474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.808855][T18039] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.812423][T22485] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 285.855810][T22490] loop6: detected capacity change from 0 to 128 [ 285.867321][T22490] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.885845][T22490] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.888207][T14194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.951998][T22490] netlink: 'syz.6.5725': attribute type 13 has an invalid length. [ 285.990094][T19332] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.011166][T22497] loop8: detected capacity change from 0 to 2048 [ 286.260323][T22535] loop4: detected capacity change from 0 to 128 [ 286.286651][T22535] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.312314][T22535] ext4 filesystem being mounted at /584/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.345351][T22535] netlink: 'syz.4.5734': attribute type 13 has an invalid length. [ 286.362739][T22541] loop7: detected capacity change from 0 to 164 [ 286.390096][T22541] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 286.459954][T14194] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.526781][T22559] loop8: detected capacity change from 0 to 128 [ 286.545242][T22559] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.561519][T22559] ext4 filesystem being mounted at /371/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.600885][T22559] netlink: 'syz.8.5739': attribute type 13 has an invalid length. [ 286.630663][T18039] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.663496][T22577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.681513][T22577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.745978][T22594] loop7: detected capacity change from 0 to 128 [ 286.759333][T22594] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.772227][T22594] ext4 filesystem being mounted at /476/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.803699][T22594] netlink: 'syz.7.5748': attribute type 13 has an invalid length. [ 286.833521][T16063] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.913386][T22636] loop6: detected capacity change from 0 to 128 [ 286.984475][T22636] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.013703][T22636] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.028204][T22648] can0: slcan on ttyS3. [ 287.049566][T22650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.055666][T22636] netlink: 'syz.6.5753': attribute type 13 has an invalid length. [ 287.067635][T22650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.081628][T19332] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.156471][T22647] can0 (unregistered): slcan off ttyS3. [ 287.238806][T22673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.249021][T22673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.482217][T22709] loop8: detected capacity change from 0 to 512 [ 287.490389][T22709] EXT4-fs: Ignoring removed oldalloc option [ 287.498359][T22709] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 287.511560][T22709] EXT4-fs (loop8): 1 truncate cleaned up [ 287.518042][T22709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.679865][T22727] loop3: detected capacity change from 0 to 128 [ 287.697363][T22727] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.722219][T22727] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.761682][T22727] netlink: 'syz.3.5766': attribute type 13 has an invalid length. [ 287.786289][T22709] loop8: detected capacity change from 512 to 64 [ 287.794190][T21746] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.815353][T18039] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -12) [ 287.837402][T18039] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.995772][T22768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=22768 comm=syz.3.5772 [ 288.165576][T22786] loop3: detected capacity change from 0 to 512 [ 288.190497][T22815] loop4: detected capacity change from 0 to 512 [ 288.201129][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 288.201148][ T29] audit: type=1326 audit(2000000137.060:12696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.4.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaf205d29 code=0x7ffc0000 [ 288.219009][T22786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.231221][ T29] audit: type=1326 audit(2000000137.060:12697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.4.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaf205d29 code=0x7ffc0000 [ 288.250801][T22786] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.278480][T22815] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 288.298818][T22815] EXT4-fs (loop4): 1 truncate cleaned up [ 288.305026][T22815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.356062][T21746] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.382904][T14194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.404572][T22828] loop4: detected capacity change from 0 to 128 [ 288.419134][T22828] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.431751][T22828] ext4 filesystem being mounted at /592/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.465826][T22828] netlink: 'syz.4.5779': attribute type 13 has an invalid length. [ 288.491613][T22833] loop3: detected capacity change from 0 to 512 [ 288.501397][T14194] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.521539][T22833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.544100][T22833] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.572955][T21746] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.640171][T22855] can0: slcan on ttyS3. [ 288.746384][T22854] can0 (unregistered): slcan off ttyS3. [ 288.800649][T22873] loop4: detected capacity change from 0 to 128 [ 288.815362][T22873] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.831554][T22873] ext4 filesystem being mounted at /596/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.848756][T22868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=22868 comm=syz.6.5793 [ 288.865598][T22878] loop7: detected capacity change from 0 to 128 [ 288.891277][T22878] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.903711][T22878] ext4 filesystem being mounted at /487/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.904368][T22873] netlink: 'syz.4.5795': attribute type 13 has an invalid length. [ 288.931464][T16063] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.951684][T22887] loop7: detected capacity change from 0 to 512 [ 288.958701][T22887] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 288.959070][T14194] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.971993][T22887] EXT4-fs (loop7): 1 truncate cleaned up [ 288.983921][T22887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.044347][T16063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.068966][T22893] loop7: detected capacity change from 0 to 512 [ 289.075567][T22893] EXT4-fs: Ignoring removed oldalloc option [ 289.082064][T22893] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 289.098616][T22893] EXT4-fs (loop7): 1 truncate cleaned up [ 289.104688][T22893] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.166358][T22893] loop7: detected capacity change from 512 to 64 [ 289.184541][T16063] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -12) [ 289.197759][T16063] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.239516][T22900] can0: slcan on ttyS3. [ 289.326451][T22899] can0 (unregistered): slcan off ttyS3. [ 289.353326][T22902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.362016][T22902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.550747][T22907] loop3: detected capacity change from 0 to 164 [ 289.558707][T22907] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 289.624387][T22911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=22911 comm=syz.3.5808 [ 289.690741][T22919] loop3: detected capacity change from 0 to 128 [ 289.701304][T22919] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.708346][T22922] __nla_validate_parse: 13 callbacks suppressed [ 289.708367][T22922] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5811'. [ 289.713874][T22919] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 289.779920][T22919] validate_nla: 1 callbacks suppressed [ 289.779945][T22919] netlink: 'syz.3.5810': attribute type 13 has an invalid length. [ 289.793713][T22929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.807163][T21746] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.818153][T22929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.827584][T22933] loop6: detected capacity change from 0 to 164 [ 289.848112][T22933] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 289.915768][T22938] loop7: detected capacity change from 0 to 128 [ 289.954656][T22938] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.976928][T22938] ext4 filesystem being mounted at /493/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 289.992276][T22949] loop6: detected capacity change from 0 to 512 [ 290.028830][T22949] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 290.041250][T22938] netlink: 'syz.7.5819': attribute type 13 has an invalid length. [ 290.063085][T16063] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.073491][T22949] EXT4-fs (loop6): 1 truncate cleaned up [ 290.100037][T22962] loop7: detected capacity change from 0 to 128 [ 290.124396][T22962] ext4 filesystem being mounted at /494/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.138825][T22968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.157493][T22968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.166977][T22962] netlink: 'syz.7.5826': attribute type 13 has an invalid length. [ 290.289310][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5836'. [ 290.299808][T22986] loop6: detected capacity change from 0 to 128 [ 290.316488][T22989] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5838'. [ 290.326889][T22986] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.346430][T22991] loop7: detected capacity change from 0 to 512 [ 290.353384][T22991] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 290.360171][T22986] netlink: 'syz.6.5837': attribute type 13 has an invalid length. [ 290.364738][T22991] EXT4-fs (loop7): 1 truncate cleaned up [ 290.436105][T22996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=22996 comm=syz.8.5841 [ 290.485826][T23007] loop7: detected capacity change from 0 to 164 [ 290.503352][T23007] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 290.561230][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5848'. [ 290.579356][T23016] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5849'. [ 290.613964][T23018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.614204][T23020] loop8: detected capacity change from 0 to 128 [ 290.622615][T23018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.636125][T23023] loop6: detected capacity change from 0 to 512 [ 290.655297][T23020] ext4 filesystem being mounted at /393/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.655803][T23023] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.695995][T23020] netlink: 'syz.8.5852': attribute type 13 has an invalid length. [ 290.697603][T23028] loop3: detected capacity change from 0 to 512 [ 290.710928][T23028] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.722209][T23028] EXT4-fs (loop3): 1 truncate cleaned up [ 290.807396][T23035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=23035 comm=syz.3.5856 [ 290.866575][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5862'. [ 290.938793][T23056] loop8: detected capacity change from 0 to 512 [ 291.001675][T23055] loop3: detected capacity change from 0 to 128 [ 291.011808][T23055] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 291.047931][T23055] netlink: 'syz.3.5865': attribute type 13 has an invalid length. [ 291.077726][T23056] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.122414][T23070] loop3: detected capacity change from 0 to 512 [ 291.137015][T23070] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 291.138277][T23057] lo speed is unknown, defaulting to 1000 [ 291.175118][T23075] loop8: detected capacity change from 0 to 512 [ 291.182091][T23075] EXT4-fs: Ignoring removed oldalloc option [ 291.192737][T23070] EXT4-fs (loop3): 1 truncate cleaned up [ 291.198969][T23075] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 291.241945][T23075] EXT4-fs (loop8): 1 truncate cleaned up [ 291.294850][T23057] chnl_net:caif_netlink_parms(): no params data found [ 291.353450][T23089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=23089 comm=syz.7.5872 [ 291.396371][T23075] loop8: detected capacity change from 512 to 64 [ 291.422672][T18039] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -12) [ 291.434832][T23057] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.435520][T23101] loop6: detected capacity change from 0 to 128 [ 291.441960][T23057] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.455426][T23057] bridge_slave_0: entered allmulticast mode [ 291.462095][T23057] bridge_slave_0: entered promiscuous mode [ 291.468951][T23057] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.469199][T23101] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 291.476001][T23057] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.489572][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5874'. [ 291.493551][T23057] bridge_slave_1: entered allmulticast mode [ 291.508744][T23057] bridge_slave_1: entered promiscuous mode [ 291.527923][T23106] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5877'. [ 291.541616][T23108] loop8: detected capacity change from 0 to 512 [ 291.544864][T23101] netlink: 'syz.6.5875': attribute type 13 has an invalid length. [ 291.548361][T23103] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5877'. [ 291.573513][T23057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.589210][T23108] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.593107][T23114] loop7: detected capacity change from 0 to 512 [ 291.613121][T23057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.625215][T23114] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 291.645382][T23116] loop8: detected capacity change from 0 to 512 [ 291.653204][T23116] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 291.654495][T23114] EXT4-fs (loop7): 1 truncate cleaned up [ 291.675066][T23057] team0: Port device team_slave_0 added [ 291.682046][T23057] team0: Port device team_slave_1 added [ 291.689176][T23116] EXT4-fs (loop8): 1 truncate cleaned up [ 291.750002][T23057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.757032][T23057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.783042][T23057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.783050][T23133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=23133 comm=syz.3.5883 [ 291.809022][T23057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.816037][T23057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.842222][T23057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.884190][T23142] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5886'. [ 291.899927][T23057] hsr_slave_0: entered promiscuous mode [ 291.910842][T23057] hsr_slave_1: entered promiscuous mode [ 291.920791][T23146] loop3: detected capacity change from 0 to 512 [ 291.927821][T23057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.935695][T23057] Cannot create hsr debugfs directory [ 291.937101][T23148] loop8: detected capacity change from 0 to 512 [ 291.948523][T23148] EXT4-fs: Ignoring removed oldalloc option [ 291.954926][T23148] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 291.977771][T23148] EXT4-fs (loop8): 1 truncate cleaned up [ 291.984092][T23146] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.016722][T23057] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.023888][T23057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.031251][T23057] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.038337][T23057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.046532][T23148] loop8: detected capacity change from 512 to 64 [ 292.072527][T23057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.084590][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.095467][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.109581][T23057] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.116687][T18039] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -12) [ 292.129926][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.137258][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.145687][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.152813][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.203748][T23161] loop3: detected capacity change from 0 to 512 [ 292.210590][T23161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 292.226149][T23057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.232912][T23161] EXT4-fs (loop3): 1 truncate cleaned up [ 292.264221][T23168] loop8: detected capacity change from 0 to 512 [ 292.298986][T23168] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.319617][T23171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=23171 comm=syz.3.5896 [ 292.394291][T23187] loop3: detected capacity change from 0 to 2048 [ 292.414911][T23057] veth0_vlan: entered promiscuous mode [ 292.424029][T23057] veth1_vlan: entered promiscuous mode [ 292.446169][T23057] veth0_macvtap: entered promiscuous mode [ 292.464179][T23057] veth1_macvtap: entered promiscuous mode [ 292.481365][T23057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.491947][T23057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.503159][T23057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.511684][T23057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.522222][T23057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.536971][T23057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.608933][T23199] loop6: detected capacity change from 0 to 128 [ 292.620457][T23201] loop8: detected capacity change from 0 to 128 [ 292.628103][T23199] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.655686][T23201] ext4 filesystem being mounted at /407/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.660293][T23199] netlink: 'syz.6.5901': attribute type 13 has an invalid length. [ 292.681347][T23201] netlink: 'syz.8.5902': attribute type 13 has an invalid length. [ 292.731301][T23215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=23215 comm=syz.4.5907 [ 292.845074][T23225] loop7: detected capacity change from 0 to 512 [ 292.854323][T23225] EXT4-fs: inline encryption not supported [ 292.875739][T23225] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 292.887704][T23225] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 292.897894][T23225] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5909: Corrupt directory, running e2fsck is recommended [ 292.914035][T23225] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 292.922585][T23225] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.5909: corrupted in-inode xattr: invalid ea_ino [ 292.936499][T23225] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.5909: couldn't read orphan inode 15 (err -117) [ 292.950924][T23225] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 292.962508][T23225] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 292.972907][T23225] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5909: Corrupt directory, running e2fsck is recommended [ 292.989268][T23225] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 293.000839][T23225] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 293.010987][T23225] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5909: Corrupt directory, running e2fsck is recommended [ 293.025897][T23225] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 293.037587][T23225] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 293.047691][T23225] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5909: Corrupt directory, running e2fsck is recommended [ 293.100223][T23231] vxlan0: entered promiscuous mode [ 293.105462][T23231] vxlan0: entered allmulticast mode [ 293.119896][T23237] can0: slcan on ttyS3. [ 293.196619][T23236] can0 (unregistered): slcan off ttyS3. [ 293.324696][T23246] loop3: detected capacity change from 0 to 128 [ 293.333018][T23246] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.362407][T23246] netlink: 'syz.3.5917': attribute type 13 has an invalid length. [ 293.416356][T23249] loop7: detected capacity change from 0 to 128 [ 293.424930][T23249] ext4 filesystem being mounted at /517/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.468542][T23252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=23252 comm=syz.3.5919 [ 293.571696][T23261] can0: slcan on ttyS3. [ 293.580406][T23263] loop8: detected capacity change from 0 to 512 [ 293.614353][T23263] EXT4-fs: inline encryption not supported [ 293.634915][T23263] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 293.646515][T23263] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 293.655179][T23268] loop6: detected capacity change from 0 to 512 [ 293.657028][T23263] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.5923: Corrupt directory, running e2fsck is recommended [ 293.663458][T23268] EXT4-fs: Ignoring removed oldalloc option [ 293.683719][T23263] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 293.686428][T23268] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 293.705961][T23263] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.5923: corrupted in-inode xattr: invalid ea_ino [ 293.722465][T23263] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.5923: couldn't read orphan inode 15 (err -117) [ 293.735355][T23268] EXT4-fs (loop6): 1 truncate cleaned up [ 293.746426][T23260] can0 (unregistered): slcan off ttyS3. [ 293.770866][T23271] can0: slcan on ttyS3. [ 293.778900][T23263] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 293.790549][T23263] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 293.800682][T23263] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.5923: Corrupt directory, running e2fsck is recommended [ 293.817661][T23263] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 293.829421][T23263] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 293.829776][T23268] loop6: detected capacity change from 512 to 64 [ 293.839642][T23263] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.5923: Corrupt directory, running e2fsck is recommended [ 293.844366][T23263] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 293.870672][T23263] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 293.880860][T23263] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.5923: Corrupt directory, running e2fsck is recommended [ 293.898137][T23278] loop7: detected capacity change from 0 to 128 [ 293.904787][T19332] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -12) [ 293.922714][T23278] ext4 filesystem being mounted at /522/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.980308][T23286] loop6: detected capacity change from 0 to 2048 [ 293.989336][T23270] can0 (unregistered): slcan off ttyS3. [ 293.998639][ T29] audit: type=1326 audit(2000000142.930:12698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.4.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a22d5d29 code=0x7ffc0000 [ 294.023933][ T29] audit: type=1326 audit(2000000142.950:12699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.4.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a22d5d29 code=0x7ffc0000 [ 294.047627][ T29] audit: type=1326 audit(2000000142.950:12700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.4.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f49a22d5d29 code=0x7ffc0000 [ 294.050541][T23295] loop3: detected capacity change from 0 to 164 [ 294.071158][ T29] audit: type=1326 audit(2000000142.950:12701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.4.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a22d5d29 code=0x7ffc0000 [ 294.071222][ T29] audit: type=1326 audit(2000000142.950:12702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.4.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a22d5d29 code=0x7ffc0000 [ 294.125713][ T29] audit: type=1326 audit(2000000142.950:12703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23289 comm="syz.4.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f49a22d5d29 code=0x7ffc0000 [ 294.159615][T23295] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 294.181691][T23300] loop8: detected capacity change from 0 to 128 [ 294.194148][T23299] $Hÿ: renamed from bond0 (while UP) [ 294.204790][T23299] $Hÿ: entered promiscuous mode [ 294.209915][T23299] bond_slave_0: entered promiscuous mode [ 294.215740][T23299] bond_slave_1: entered promiscuous mode [ 294.218154][T23306] loop3: detected capacity change from 0 to 512 [ 294.229452][T23300] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.234952][T23306] EXT4-fs: Ignoring removed oldalloc option [ 294.258789][T23306] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.280934][T23306] EXT4-fs (loop3): 1 truncate cleaned up [ 294.346340][T23306] loop3: detected capacity change from 512 to 64 [ 294.374555][T21746] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -12) [ 294.402179][T23323] loop3: detected capacity change from 0 to 512 [ 294.409377][T23323] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.420820][T23323] EXT4-fs (loop3): 1 truncate cleaned up [ 294.549031][T23337] loop3: detected capacity change from 0 to 164 [ 294.557497][T23337] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 294.585243][T23339] loop3: detected capacity change from 0 to 128 [ 294.604112][T23339] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.661784][T23342] loop3: detected capacity change from 0 to 512 [ 294.677959][T23342] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.761856][T23352] loop3: detected capacity change from 0 to 512 [ 294.768617][T23352] EXT4-fs: Ignoring removed oldalloc option [ 294.775023][T23352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.786579][T23352] EXT4-fs (loop3): 1 truncate cleaned up [ 294.826371][T23352] loop3: detected capacity change from 512 to 64 [ 294.834997][T23355] __nla_validate_parse: 23 callbacks suppressed [ 294.835032][T23355] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5956'. [ 294.893645][T23358] loop4: detected capacity change from 0 to 128 [ 294.904184][T21746] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -12) [ 294.915072][T23358] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.923078][T23363] loop7: detected capacity change from 0 to 164 [ 294.933137][T23363] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 294.951466][T23358] validate_nla: 4 callbacks suppressed [ 294.951484][T23358] netlink: 'syz.4.5957': attribute type 13 has an invalid length. [ 295.017701][T23358] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.025000][T23358] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.070112][T23358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.083231][T23358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.127355][T23368] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5959'. [ 295.139246][T23366] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5959'. [ 295.190518][ T29] audit: type=1326 audit(2000000144.120:12704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.4.5963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a22d5d29 code=0x7ffc0000 [ 295.204790][T23383] loop3: detected capacity change from 0 to 512 [ 295.214203][ T29] audit: type=1326 audit(2000000144.120:12705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.4.5963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a22d5d29 code=0x7ffc0000 [ 295.245442][ T29] audit: type=1326 audit(2000000144.170:12706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.4.5963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49a22d5d29 code=0x7ffc0000 [ 295.269411][ T29] audit: type=1326 audit(2000000144.170:12707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.4.5963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a22d5d29 code=0x7ffc0000 [ 295.303906][T23383] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.506186][T23425] $Hÿ: renamed from bond0 [ 295.523438][T23425] $Hÿ: entered promiscuous mode [ 295.528601][T23425] bond_slave_0: entered promiscuous mode [ 295.534425][T23425] bond_slave_1: entered promiscuous mode [ 296.111408][T23527] loop6: detected capacity change from 0 to 512 [ 296.119838][T23528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5975'. [ 296.133603][T23529] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5976'. [ 296.144702][T23527] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.181035][T23534] loop6: detected capacity change from 0 to 128 [ 296.189670][T23534] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 296.236105][T23534] netlink: 'syz.6.5978': attribute type 13 has an invalid length. [ 296.280841][T23541] loop3: detected capacity change from 0 to 128 [ 296.294950][T23541] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 296.404650][T23558] loop3: detected capacity change from 0 to 512 [ 296.412113][T23558] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 296.433113][T23558] EXT4-fs (loop3): 1 truncate cleaned up [ 296.457247][T23563] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5990'. [ 296.514751][T23567] loop6: detected capacity change from 0 to 512 [ 296.531957][T23567] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.619617][T23574] vxlan0: entered promiscuous mode [ 296.624798][T23574] vxlan0: entered allmulticast mode [ 296.635310][T23575] $Hÿ: renamed from bond0 [ 296.642535][T23575] $Hÿ: entered promiscuous mode [ 296.642549][T23579] loop6: detected capacity change from 0 to 128 [ 296.647638][T23575] bond_slave_0: entered promiscuous mode [ 296.659750][T23575] bond_slave_1: entered promiscuous mode [ 296.670671][T23579] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 296.758110][T23590] loop3: detected capacity change from 0 to 164 [ 296.768575][T23590] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 296.781686][T23592] loop6: detected capacity change from 0 to 164 [ 296.791547][T23592] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 296.868032][T23602] loop3: detected capacity change from 0 to 512 [ 296.877807][T23602] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.943329][T23608] loop3: detected capacity change from 0 to 128 [ 296.963690][T23608] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.035816][T23620] loop4: detected capacity change from 0 to 164 [ 297.047638][T23620] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 297.062703][T23622] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6012'. [ 297.114450][T23630] loop6: detected capacity change from 0 to 512 [ 297.143927][T23634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.163691][T23634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.176771][T23630] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.199373][T23647] loop4: detected capacity change from 0 to 128 [ 297.221799][T23647] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.304201][T23654] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6027'. [ 297.369144][T23657] loop3: detected capacity change from 0 to 512 [ 297.384319][T23657] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 297.403202][T23657] EXT4-fs (loop3): 1 truncate cleaned up [ 297.412336][T23661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.422934][T23661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.467732][T23671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=23671 comm=syz.4.6034 [ 297.522645][T23678] loop4: detected capacity change from 0 to 128 [ 297.533360][T23680] loop3: detected capacity change from 0 to 1024 [ 297.541739][T23678] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.558693][T23680] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.6038: corrupted in-inode xattr: bad magic number in in-inode xattr [ 297.594157][T23686] loop4: detected capacity change from 0 to 164 [ 297.602792][T23686] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 297.779739][T23697] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6042'. [ 297.970724][T23699] loop8: detected capacity change from 0 to 164 [ 297.979262][T23699] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 298.023324][T23703] loop8: detected capacity change from 0 to 512 [ 298.030773][T23703] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 298.042563][T23703] EXT4-fs (loop8): 1 truncate cleaned up [ 298.334276][T23722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6053'. [ 298.376585][T23726] loop6: detected capacity change from 0 to 164 [ 298.386764][T23726] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 298.563108][T23745] loop4: detected capacity change from 0 to 512 [ 298.589118][T23745] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.622513][T23756] loop3: detected capacity change from 0 to 164 [ 298.636926][T23756] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 298.733202][T23777] loop7: detected capacity change from 0 to 512 [ 298.758279][T23777] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.759772][T23782] loop6: detected capacity change from 0 to 512 [ 298.789706][T23782] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.828252][T23794] loop6: detected capacity change from 0 to 512 [ 298.840343][T23794] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.844238][T23798] loop7: detected capacity change from 0 to 164 [ 298.858898][T23798] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 298.932629][T23808] loop4: detected capacity change from 0 to 128 [ 298.943204][T23808] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 298.982933][T23815] loop7: detected capacity change from 0 to 512 [ 298.988288][T23817] can0: slcan on ttyS3. [ 298.989836][T23815] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 299.007137][T23815] EXT4-fs (loop7): 1 truncate cleaned up [ 299.036847][T23820] loop4: detected capacity change from 0 to 512 [ 299.043396][T23820] EXT4-fs: Ignoring removed oldalloc option [ 299.049805][T23820] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 299.063225][T23820] EXT4-fs (loop4): 1 truncate cleaned up [ 299.082228][T23823] loop7: detected capacity change from 0 to 512 [ 299.101805][T23823] ext4 filesystem being mounted at /544/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.113741][T23816] can0 (unregistered): slcan off ttyS3. [ 299.213023][T23825] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 299.224902][T23841] loop7: detected capacity change from 0 to 512 [ 299.232045][T23841] EXT4-fs: Ignoring removed oldalloc option [ 299.240103][T23841] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 299.262984][T23841] EXT4-fs (loop7): 1 truncate cleaned up [ 299.311240][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 299.311259][ T29] audit: type=1326 audit(2000000148.240:12849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.8.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32beb05d29 code=0x7ffc0000 [ 299.317543][T23841] loop7: detected capacity change from 512 to 64 [ 299.347702][ T29] audit: type=1326 audit(2000000148.240:12850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.8.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32beb05d29 code=0x7ffc0000 [ 299.348505][T16063] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -12) [ 299.371309][ T29] audit: type=1326 audit(2000000148.240:12851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.8.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32beb05d29 code=0x7ffc0000 [ 299.403952][ T29] audit: type=1326 audit(2000000148.240:12852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.8.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32beb05d29 code=0x7ffc0000 [ 299.427709][ T29] audit: type=1326 audit(2000000148.240:12853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.8.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32beb05d29 code=0x7ffc0000 [ 299.451374][ T29] audit: type=1326 audit(2000000148.240:12854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.8.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32beb05d29 code=0x7ffc0000 [ 299.475024][ T29] audit: type=1326 audit(2000000148.240:12855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.8.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32beb05d29 code=0x7ffc0000 [ 299.498698][ T29] audit: type=1326 audit(2000000148.240:12856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.8.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32beb05d29 code=0x7ffc0000 [ 299.522319][ T29] audit: type=1326 audit(2000000148.240:12857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.8.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f32beb05d29 code=0x7ffc0000 [ 299.546092][ T29] audit: type=1326 audit(2000000148.240:12858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.8.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32beb05d29 code=0x7ffc0000 [ 299.851741][T23877] __nla_validate_parse: 7 callbacks suppressed [ 299.851797][T23877] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6111'. [ 299.867657][T23875] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6111'. [ 299.896804][T23879] loop3: detected capacity change from 0 to 128 [ 299.904803][T23879] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 299.934912][T23879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6112'. [ 300.021204][T23888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=23888 comm=syz.4.6116 [ 300.156797][T23904] loop3: detected capacity change from 0 to 512 [ 300.170678][T23904] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.232213][T23910] loop3: detected capacity change from 0 to 128 [ 300.252861][T23910] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.286970][T23910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6124'. [ 300.430538][T23927] loop6: detected capacity change from 0 to 128 [ 300.450449][T23929] syz.4.6130[23929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.450568][T23929] syz.4.6130[23929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.462290][T23929] syz.4.6130[23929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.678171][T23942] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6137'. [ 300.741527][T23948] can0: slcan on ttyS3. [ 300.752871][T23948] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6139'. [ 300.765024][T23948] netlink: 16410 bytes leftover after parsing attributes in process `syz.8.6139'. [ 300.866508][T23946] can0 (unregistered): slcan off ttyS3. [ 300.973313][T23962] loop6: detected capacity change from 0 to 1024 [ 300.984299][T23963] loop8: detected capacity change from 0 to 128 [ 301.003818][T23962] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.015793][T23963] ext4 filesystem being mounted at /441/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.041749][T23962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23962 comm=syz.6.6145 [ 301.238319][T23975] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6148'. [ 311.886414][ C1] ================================================================== [ 311.894559][ C1] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote [ 311.902730][ C1] [ 311.905048][ C1] write to 0xffff888237c205dc of 1 bytes by task 0 on cpu 0: [ 311.912423][ C1] __tmigr_cpu_activate+0x55/0x200 [ 311.917557][ C1] tmigr_cpu_activate+0x8a/0xc0 [ 311.922420][ C1] timer_clear_idle+0x28/0x100 [ 311.927200][ C1] tick_nohz_restart_sched_tick+0x22/0x110 [ 311.933022][ C1] tick_nohz_idle_exit+0xfe/0x1d0 [ 311.938069][ C1] do_idle+0x1eb/0x230 [ 311.942141][ C1] cpu_startup_entry+0x25/0x30 [ 311.946923][ C1] rest_init+0xef/0xf0 [ 311.950990][ C1] start_kernel+0x586/0x5e0 [ 311.955497][ C1] x86_64_start_reservations+0x2a/0x30 [ 311.960977][ C1] x86_64_start_kernel+0x9a/0xa0 [ 311.965934][ C1] common_startup_64+0x12c/0x137 [ 311.970889][ C1] [ 311.973221][ C1] read to 0xffff888237c205dc of 1 bytes by interrupt on cpu 1: [ 311.980777][ C1] tmigr_handle_remote+0x26e/0x940 [ 311.985890][ C1] run_timer_softirq+0x5f/0x70 [ 311.990655][ C1] handle_softirqs+0xbf/0x280 [ 311.995351][ C1] __irq_exit_rcu+0x3a/0xc0 [ 311.999869][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 312.005525][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.011510][ C1] acpi_safe_halt+0x21/0x30 [ 312.016018][ C1] acpi_idle_do_entry+0x1d/0x30 [ 312.020871][ C1] acpi_idle_enter+0x96/0xb0 [ 312.025474][ C1] cpuidle_enter_state+0xc5/0x260 [ 312.030501][ C1] cpuidle_enter+0x40/0x70 [ 312.034923][ C1] do_idle+0x192/0x230 [ 312.039002][ C1] cpu_startup_entry+0x25/0x30 [ 312.043775][ C1] start_secondary+0x96/0xa0 [ 312.048368][ C1] common_startup_64+0x12c/0x137 [ 312.053316][ C1] [ 312.055633][ C1] value changed: 0x00 -> 0x01 [ 312.060304][ C1] [ 312.062619][ C1] Reported by Kernel Concurrency Sanitizer on: [ 312.068755][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 312.079085][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 312.089139][ C1] ================================================================== [ 312.098311][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 312.098339][ T29] audit: type=1400 audit(2000000161.030:12946): avc: denied { write } for pid=3285 comm="syz-executor" path="pipe:[1426]" dev="pipefs" ino=1426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 312.197676][ T29] audit: type=1400 audit(2000000161.060:12947): avc: denied { recv } for pid=16063 comm="syz-executor" saddr=10.128.0.163 src=40734 daddr=10.128.0.146 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 312.223381][ T29] audit: type=1400 audit(2000000161.070:12948): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 312.245557][ T29] audit: type=1400 audit(2000000161.070:12949): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.267383][ T29] audit: type=1400 audit(2000000161.070:12950): avc: denied { append } for pid=2982 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 312.289791][ T29] audit: type=1400 audit(2000000161.070:12951): avc: denied { open } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 312.312584][ T29] audit: type=1400 audit(2000000161.070:12952): avc: denied { getattr } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1