last executing test programs: 50.77536019s ago: executing program 4 (id=1789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 40.182903755s ago: executing program 4 (id=1793): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 40.13749124s ago: executing program 4 (id=1797): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd25, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) 40.03669586s ago: executing program 4 (id=1800): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000340)=ANY=[], 0xfdef) 39.895343524s ago: executing program 4 (id=1803): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2000000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1}}, 0x8, 0xb, 0x38a7, 0xfffffff7, 0x44, 0x9, 0x1}, &(0x7f0000000200)=0x9c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x200000000000013a, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400b00000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x820b, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 39.787800155s ago: executing program 4 (id=1805): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 24.711336137s ago: executing program 32 (id=1805): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 5.270686545s ago: executing program 0 (id=1932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x89) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x41015500, &(0x7f0000000440)=0xfffffffd) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa00aaaaaa0180c2a200eedd6c09000028000000000006906564010101ac1414c500004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000000)) 3.667239995s ago: executing program 2 (id=1945): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x0, 0xe1, 0x8, @local, @loopback, 0x80, 0x20, 0x8, 0x10001}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@type_tag={0x7fff, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x41]}}, &(0x7f0000000480)=""/71, 0x27, 0x47, 0x0, 0x800}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x810, '\x00', r2, r3, 0x4, 0x5}, 0x50) prlimit64(r1, 0x9, &(0x7f0000000080)={0x3, 0x5}, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000c00)='coredump_filter\x00') fchdir(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getaddr={0x18, 0x16, 0xa99bee2eb6d2d7db, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x72, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) unshare(0x24000200) unshare(0x22020400) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 3.617878729s ago: executing program 2 (id=1947): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000980)='2', 0x51, 0xe7c) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) socket$xdp(0x2c, 0x3, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x11) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.491482382s ago: executing program 2 (id=1950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c045}, 0x4) 2.593922852s ago: executing program 2 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xb}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}]}}}]}, 0x44}}, 0x0) 2.489094862s ago: executing program 2 (id=1956): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000300)={0x5, 0x400, 0xe2, 0x4, 0xf, "a0d221bf9a34cdcf"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535cb215a2d2a09b69fb69788202a6511", 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001d80)="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", 0x281}], 0x2}}], 0x4, 0x8008800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000380)) 2.249201226s ago: executing program 0 (id=1966): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100), 0x10) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 2.194315601s ago: executing program 0 (id=1967): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000240)={0xa, 0x4e20, 0x40, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x30}, 0x41) 2.193347111s ago: executing program 0 (id=1969): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) clock_gettime(0xffffffc3, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x4b63, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) flistxattr(r2, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796100000000000700007e00000008000300", @ANYRES32=0x0, @ANYBLOB="8c0011d19a620e52957715db6929190e55a0bf5b9ba581052249913ea55c3ef09e4f0e26ca3c5681af50f315a88b608014ba7b5808f40460ff9b90e74711c183c269744d86d38950bf76f108e0042f62039f0f805f4ce85229c6e75c2630f7969deacbaafe3d9575813795022890525401507222d6365cee99b3b1d327eff6d80790302105b4042ff1cfde67c731dfe645ff60f8303e73e51e856e70f396608b656d7cb878373a6b6233d6ac6646a3982d7099fa70f7a77942c3b524ff0fa6328f99f9d4ecd1e5f2adfb7f9ff7c24ccb6765c23030"], 0x1c}}, 0x0) 1.227327977s ago: executing program 0 (id=1978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {0x0, 0x1, 0x40000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@broadcast, 0x34ff, 0x1, 0x0, 0x5, 0x80000001, 0xfffffffc, 0xf6b}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000cc0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x8, 0x3a, 0x1, @remote, @mcast2, {[], @ndisc_rs}}}}}, 0x0) 592.896411ms ago: executing program 1 (id=1979): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 491.410241ms ago: executing program 0 (id=1981): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x5d6aff9e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) 491.065711ms ago: executing program 1 (id=1982): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000f40)={0x8, {"ef6cb2eeb00df1a0d620d6e2c227f96113298e98bb088efbb8c686917b4af349b2a78fab9d53c96bb0372e7a278572e34dc459cedad854b4a2f967f04dd7f343643f222f5b4892b02751b04848a4e90bae596df98ef3f761908131d6b70d9d7f9e8c6bc23cf4f0f14bb09e85f543dc7cad0a4b766cae0d372265ea45df4221ed22464576f9e4bf727a2e74f63c57ac215bb6b8bf92f8d4b69bed829c438c6e408a18d0ffa4748b6d900e3d87b93ac5da9e3acf946e8fac04a6a66cc289262889160df25160a25d5c681055b75c85fc496046dbbf93123760b959174c597760149c0b4703eb8fb7dcf7966a3a546cd31dbf4b46d7f6de42e8d64d38d612cf25edd1a820c54f7092b961b0d9c8079a85430e74788b0102c783c9e1979978428fb5656e47a99a2dd69e1850741064a5388f1526f0d2d944e3ef6ff2002171456aea2ca89e25c113cce45a876edc92ff8b0e8f5132f4b9f0ec442ca00f53f1a1fd3777bc0eb13653ee2c3ca1ec329f0e714d6ff24f759d494dcfe9e99eeee4291b97cc47e93c1492c60521bee7f396588406f4c817f68fd417eb233d67bdf1df845d3307d3b001c00d8e3fb0128b9718b8d81061ae0920ef1ac9b8e171e68e9eb76432efb748dec974fc753debf31c077ed87d6c78ffa7a590970ae1c55047551b43bc67068149d5e31a2c3831985f1623bc4b3bda4dd23c0201b17d5f5b46169feada676b852ea9b170928076224463e72638f5d7804ca92165a4291ae83ce5356e98f8d284e55eb485abe9dc720339a571385d8d31b884b6d5308e0f5d259caaba81df92c1cad07557acc10bd8b1e4049a68f036d03c3beb5bd48f7a0f9190577a7b4240e301aa91c3640383d17bea0310610554cab9c54ea7f3c232677d925824f4fe9decc866b4fd071863c573560d695c2515c415694769fe88af35ca8a9be94616f8723e22843f3dd386b061dbea32b7a00061a3f8219d0f7086c998359856657b23eafe10e0667a566767296a1a646e7d6523f6ec0196625f82cb363df5a01fc2e271e367180bc57ed802a7f47677fa742798791e8c7e07aed47424cd57add51c3a7fc25daa920fee0519950cf13d24a9fbd915dbad5816ff42ff486dedfd332b473723a9058975f9e1766e382f95b573b765971cbf6edec33536e9634d417c806178c16f60ae6b9ac964c9f8b96a05c8b689a00cb94ba5e4981da7d6d1d64289b68541cff54d0bad5881a917d366eff3cd42e6c92e5aa5fb9cfb140a9f687ea8aeeff78f6467f768d3960cb6226d4ae5d17631ab5523ef0739d50bde403a11fa4bd6d7e14ea1f06d65413455982b3a790bb1622a66b1df4c2677515e1361efc55137b592255e3efba325d80a830749b4f0c0334be0ca4f18454c914402e7ab57ba7ab6bdf1235449521823ba44e96936b87145fb523b492c3bc9e12b52aa7ecd24285986accb2f1a3a6c8ddda6680f83255b6edd27627481d593b74c70232ddbf2daa389d7239502f25e07c7456b69ab2aeeddb4400f6a3b4a29cc897cebfdbbf4013b7a36eba6105b954d0d20987c56ce33b5c371122bcbf60f7b69e294d1714de532527c4bcc1c07dd808ffc0acc1a0a022e6234997626969467df866c5ec177b3a09a4eda43816e9f35b97bd8c60cda6773ae6494f607c5f833b770a44ddda79b47a60302e5fbe0ebb91078a92a47cb8711c33d22306b7cf7d18cd0146d7a5c0c5cf4eecbb4631da162546f746743900afc04391821716320b8302e7805e6a1b926e849e8e2b3deb8a29fae5e0dc01ccfe3fd26f0ac037f1da2bfa38b0062a8f693ca3b8f0fcfdc9da5cb5e094a7f2fc8217a24bc3cb5e3d2a226340be3326e246c4f43a1b8dbe9fffed2b0dfa193ffe8c7a420398218cd299cfc68652e4c1d0e55f5bf068e423df21d4300766025546e20c7f93e9a7b858063a4bbf6b4b7d590915f56810031e48b1b6ca6063ecd4a62c0e0aa934b0e1b504a6e8c303513522eac34ecaa93589d04cc96753bdf16270ecf60092d9e79b7580382faf85827849bd7d45cd02ebf6b8ff0ed21766c046648a800f2a8e67e1888c18be6bb32e0cc0d56061048d088ed260fa5f2bf073bbc43d68a4e93c7505f31ac02bcee1d16328899606c3181f4076fd6db9e795dd75dd2647c0c39ef1c89ea97e3d9bf595897f3b1329e175d1245b3733bebde040b140b21fa7c1bdb36472efcb92d4ecf9bb6e45a46d963b8dfdbbcdd252d7dbfd4f3a2704d1992bafe287a4300b95c375b0db6a6b8c77483d431f1e3e0e6d29be6bd630aa8300832ca0c1f1e6fed7f44844dadf5cd932858d4e7125d090cca79da12446db8c1ca03d6c49cd88c90d4e230a8edec97033f963e6d231890d9f6dc5f022fe2ed4356e6dd816a8e498172f7d4186289064caf3df90e0465241b774f275b395e48e6889c25cfe6f8d381f3e7bae9999a244cbec5ee5b9917be95b2d53de3fb708ba0866f661d5405951151807fee5dde2565921535f094ea28da83faf87da636fef4623846ed3a26477feb570472a479677ef234cf0742fa108c040625dfa9b6ef55cf82da091640434f5858611870ff10c5307ef9d8a9826b2e95915fa6b3e9935ffad41bff93ed0c9e3364618e198ab935fb4698b7ca19f25fc61c532bf1b3cda8737802f2d4b1876ce73444dd512d453840d80f67b2ea7d7938fe744d6e281989cfdd3ca78a399214f0fde8ff7f93b0597aa6ecd5c36e896b3167e2196f920cd1865863670a1f80f50742f96e5824a2f3d29924d09fae8fbfe1974b43382a8244e62ac37a71a9211ad02e24b7ec99b4c9e7b980b0ea539fdabfc0321caa7a44b897cde03fa607a3efcac6276b8f2f5c3634de0c6aeaeb7ad0f068a88dbebde753030bcc8df417e52133aa7f93547a92cf2321a4d6de2848bdecefbe4c1aa46c1065704c57c8cee1cbbfe4d33236b0c6372658700018bb3303579415a4effb4ea48c81de2a84ab3f5a4babc4e73f1455c5e0efdc8bd56f8b86fb0ac133f29596f22417cf834eaef3b1b91eb447dd2452e40686bdb6650f9c6570f24950ff4ba96013761f3d636b18cb48d4b458a7b5017d42aeb8f884b0660fd4c5f08a70ccad431378ce6619c428e5a28d7598bf275a81545b89554beb065290ee005c780055aa269ca643ee0f9c0e0466e5f93805bdaa9cba12d6d87ab5ec94aa416924a45a7fccbd7e1d8976e373bdf0682008417e844ed53b035736e19acb2ac8564d7c73b31c126076f9336cecc8c5800a16c5099691fc1ad1f318325c705a05b8f29d601a6b48f18aceb1a93ba5a6d857e63ff12bd553cce56e876494a0fcc7cea3c2514da68c76c505aecc8484d68272821460e0b9c1717214ad86c35443296b1d3e09b7fd27dc17b11def76dd007d66ad5a148927f41e127d5f3af7b8defe5dfdcc792267e08fd4f7a85ff5bed10bb94f1010dadf0c4ec9c0cf99ad5da87a68413b14fc515dad4ce5904e997335530a152901a889ac2f99800b23ee02f6b8664c8cd0cefa574d5d06d257ed87d5cc528abe3895833504582e6b88d40c78b35421528e8c87d8619d0f6a8fa6e97caac0fdd5fdd525b992418b12e214db9f09d7b2151304dcb23c4523d72be8dcc598207bef70454d40e2ff2488f34e841308b8349909f0c154778b7b1432028b9511f251a76647d3ecf9dbde6d8c69fcd7c382d22bf888f8b69372ed12762e5ac86857fefff9852cb3f760b07f7fbdec2c644130696763ec864e6589faceb96dd4d77de5af0d2cd9a1fdba3ffadadb669b4d980b196b79f9734ce7e05e2afadc8b10350ec4049f7ad7e0a88f2aacb789d376fab59eb49d5bbd37d374ff29e559218fba7c9700f5eb2de883bc70164aa3356946a0ac1c26c0592f7e4774bcdc0db73d968b9e71d654b70eb26da338c7e0d025cb9d341e4c0ca37368c34637d1a8c1d15b0923cfd03a40d1e54d7579646cda061a8caa18114ef420ab05b3f884a25038c9ff0c96685f66088730292abcd7dd221121d19a96e2f384d00ec096f7b46a0c40bdf143a6aad42a4f063000c6adcdfe3696ac26330551098352c1e1495965f7cbc450af475d34baeaa9ceac4259221fb5d371b315978c29f0931c6c47836d367b063a00f8600658417dbc573e14738cc91a46ca7875ca2ccc6ce83580823ff334d8fc4541cdc659bb6f44f2cbf7a45ab3f85f12aa2cf19ce5575caf308d0b46f80f167e6e5ecd304c80fbc27e28828dacf8854efe1dc8449aa0abe7f44a219b17a1b435431ade6baddd826b74ba0c143b6204c0d8b7e48c055bcc98f699eb8a75dcae0efe595a6c33375df49479232a12971e20212ee88db7769b0eed99bfe51c448e52a2bd7e8da0b628a2fb7b5ab78456cfdb90bfacc30e5a8716b192a32faccf59671ecce64bb23c9795a36f68be2e934c7ecb7f0c7239ba96d7ea43578dfb0b94824ced9792959634d6bce8633daae1d8558cf99a79dec1d5b78907f2439ba544b70156798b4e79876bf15a8b256b140f2ac24cd892d356b0bee2d32665de70818e9e656fa60a3af951325745c1c55fd0843ef8603947cde5734d935ffb58b3f1e53e5d23514d65d6199c5df24c7762777a6af4ad33ba464fb53052ffff725c05b227a01b8383947b874d8f97b9a6310d2e2eb766c64c0c087d4700cb4223ff66a43bb0978c1b2f078421c90fe63f13914b6abc912de13361424db608dda6a998130b4e176c49278ce5b222030685c861b413fcedfcd5147305b0b2b8f04222c7a62f48ce5e30b1924ff681b86fcde1eea673c1404e0ff973693d6540c4c851631db80c50f1bfae34fa43c54a721aa524a5d0400d4298488eb9780c202c3db77740b5f20222aa07ec928e662903646c40da99f4da4a9a0e107e205b67cce25d58b6d5977727990457776bafd25cfc8b97b593f06ef2f8cc1b42aa984f1186160f17e272b34ae2157a27cd6fb314cfca67077cca8714e56ad21e9d09936d53b2636fdb714defb1769d8ec9a4dfc91ab9277e27f2cde7f06ccafb098c83cb91a3764efbf511213591ffd374eb5a7f3b821111d02c4d7de477df38112d1008f55692ffaa37ecddaedcf6e06ad043b5d52cf89631d493b10df50f8130d4be1ba73afda5cef1679ada5880e7c0bdc7f35346e3a05e13d4d3bafd4a88e8e20b2d4b7cf0ec00ce2d74866cee08e2618f535be771844ba19908685bbd219403aa66b6a8f8c7634eceaef9c0eb8a34d3c3a5830d92080061b6107c311e9d243195d5d3bed45ea780408d8732a4b3ed881a955f2edb2336e109b0e12fdb41bac33dce68900de3a22a8303882da2d82b0ed5faf25f6c9b117cec910cb8cd032fbfb24eba1381685ef656d58e6cd5c379282eff8263dc26bcb303204561348062ef0abe3a9c47c5e39698d822e9bdfc534f4e492b6228b4475b2e58ef1b044c67d3e7b3332d674f6ff47e9ae3bb917b95047a876a6cd0fdf4576aa723fe9127326ad0b612dbde20374c571746887c5d10c78d654cb4692c5d35b8b4a6e2d5c8e78c00eaf3b9eb1f51f6a0f003c1816b52f8c94b41dcc75aa991fc0ea8e7ae3cbeeb3e36fdf4fb7dd3620ee330f54170449809302e185c0bc3504aa4c36cc69c3cedc405c74bb3c250cec0e7c20e81151edca062b7c164481fe7cf5086fb9be1192e4de3e6c34b942f87d3c95e162a1f06053558748d36dd24b06d1b4c17e71be44c3b12b16a9f218e139e9698f84a5b6958c316bafaee1b5d3841f1e49eeaf51fe0f4115cda19b2bd34db9c249cd9a030344c0649d152dbb6528990a43d2b6894a3", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2000000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1}}, 0x8, 0xb, 0x38a7, 0xfffffff7, 0x44, 0x9, 0x1}, &(0x7f0000000200)=0x9c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x200000000000013a, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400b00000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x820b, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 483.651782ms ago: executing program 1 (id=1983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c045}, 0x4) 464.789284ms ago: executing program 1 (id=1984): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000980)='2', 0x51, 0xe7c) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 438.666996ms ago: executing program 3 (id=1985): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)={0x14, r0, 0x10ada85e65c25359, 0x70bd26, 0x25dfdbfd, {{0x6b}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 367.317143ms ago: executing program 1 (id=1986): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc1ea35512) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f0707ce204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 366.826613ms ago: executing program 3 (id=1987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x30000, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7040010000000f00000008000300", @ANYRES32=r6, @ANYBLOB="05002f"], 0x24}}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000340)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) ioprio_get$uid(0x3, 0xffffffffffffffff) sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) write$tun(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="000008000100000000003d0000004800004000000000008490783fffffffac1414aa860c000000030506f0d416b30000fffe740a750def01fe656a316f38ee637d8f2cb3bc0a22492498e36cd5fccdb1f892680005d17d19c039310eb48e48488180067bfbd1cf90ac41f60b5874df9c3bf798df6e24781847645497326a847ec027e3028c752e7736c806f03a7f3af2a44dd582000000000000009b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="840000049078001c050a00"/20], 0x4e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) r9 = socket(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0x0, 0x0, 0x0, 0x6, 0x2c, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x890b, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44203810}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000d40)=ANY=[@ANYRES8=r8, @ANYRES8=r0, @ANYBLOB="000229bd7000fbdbdf2506000000060002000000000014002000fc02000000000000000000000000000106001c000400000008000c00040000000500040008000000050004000400000008000a0001000000"], 0x58}, 0x1, 0x0, 0x0, 0x85}, 0x4000) 355.842115ms ago: executing program 1 (id=1988): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) clock_gettime(0xffffffc3, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x4b63, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) flistxattr(r2, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796100000000000700007e00000008000300", @ANYRES32=0x0, @ANYBLOB="8c0011d19a620e52957715db6929190e55a0bf5b9ba581052249913ea55c3ef09e4f0e26ca3c5681af50f315a88b608014ba7b5808f40460ff9b90e74711c183c269744d86d38950bf76f108e0042f62039f0f805f4ce85229c6e75c2630f7969deacbaafe3d9575813795022890525401507222d6365cee99b3b1d327eff6d80790302105b4042ff1cfde67c731dfe645ff60f8303e73e51e856e70f396608b656d7cb878373a6b6233d6ac6646a3982d7099fa70f7a77942c3b524ff0fa6328f99f9d4ecd1e5f2adfb7f9ff7c24ccb6765c23030"], 0x1c}}, 0x0) 326.104747ms ago: executing program 2 (id=1989): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 238.972326ms ago: executing program 5 (id=1991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 197.63602ms ago: executing program 5 (id=1992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2c41, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 160.526254ms ago: executing program 5 (id=1993): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000f40)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2000000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1}}, 0x8, 0xb, 0x38a7, 0xfffffff7, 0x44, 0x9, 0x1}, &(0x7f0000000200)=0x9c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x200000000000013a, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400b00000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x820b, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 159.491244ms ago: executing program 3 (id=1994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c045}, 0x4) 131.475237ms ago: executing program 5 (id=1995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 115.106128ms ago: executing program 3 (id=1996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x480, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x454, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0xb, 0x6, 0xbe2, 0x7, 0x5, 0x7, 0x1, 0x4, 0x5796, 0x101, 0x3, 0x1, 0x8001, 0x1, 0x8, 0x8, 0xb, 0x7, 0x7, 0x7, 0x1, 0x9, 0x2, 0xc9, 0x4ac6, 0x0, 0x34ea, 0x8, 0x3236, 0x100, 0x9, 0x0, 0x9, 0x7, 0xe67, 0x1, 0x6, 0x1, 0x5, 0x4bb, 0x6, 0x0, 0x8, 0xe, 0x9, 0x2, 0x6, 0x80, 0x425, 0x8, 0x3, 0x62, 0x8, 0x2, 0xff, 0x4, 0x1, 0x2, 0x9, 0x8, 0x5, 0x4, 0x8b7, 0x7, 0x9, 0x1, 0xfffffffa, 0x24ba, 0x5, 0x7ff, 0x10, 0x10000, 0x4, 0x4bf52928, 0x3, 0xb5b, 0x6, 0x0, 0x7f, 0x5f, 0x8, 0x87, 0xfffffffd, 0x44245273, 0x6cf2, 0x8, 0x2, 0x9, 0x1, 0xed19, 0x40, 0x9, 0x2, 0x7, 0x0, 0x5, 0xfff, 0x9, 0x1, 0x87b, 0x2, 0xdd, 0xc3c4, 0x5, 0x9, 0x0, 0x6, 0x4263, 0x6, 0x1, 0xa5, 0x921, 0xb13b, 0x300, 0x9d4, 0x8aeb, 0x9, 0xffffffff, 0x9, 0xb, 0x5, 0x0, 0x1, 0x7, 0x3, 0x2, 0x9, 0xfff, 0x40, 0x2, 0x80000001, 0x80000001, 0x74, 0x6, 0x8001, 0x9, 0x53c5, 0x8, 0x5c, 0x5, 0x9, 0x5591, 0x8, 0x7, 0x3, 0x7, 0x3ff, 0x81, 0x1, 0x8a, 0x5, 0x9, 0x559, 0x4, 0xa0000000, 0x9, 0xbe, 0x3ff, 0x4, 0x8000, 0x1, 0x0, 0x1c000, 0x0, 0x7fff, 0xe9, 0x5, 0x2, 0x9, 0xf, 0x6, 0x101, 0x3, 0x1d, 0xfda6, 0x7ff, 0x1, 0x0, 0x2d65, 0x40, 0x7, 0xecb, 0x7, 0xdc5, 0x800, 0x4, 0x6388, 0x50, 0x6, 0x5, 0x30b, 0x954, 0x2, 0x7b1, 0xfffffff8, 0x6, 0x10, 0x2, 0x1, 0x5, 0x7cb, 0x4, 0x2, 0x5, 0xb8, 0x8, 0x0, 0x6, 0xfffffe01, 0x7ff, 0x400, 0x80, 0x4, 0x8, 0x1, 0x30ed, 0x6, 0xffff, 0x0, 0x4, 0x7, 0x7, 0x4, 0x5, 0x9, 0x4, 0x20000004, 0x3, 0x3, 0x2, 0xfffffffd, 0xb11, 0x64d4, 0x8, 0x9, 0xb, 0xa2, 0x10001, 0x5, 0x3, 0x9, 0x8, 0x9, 0x7, 0x259, 0x0, 0x1, 0x80000000, 0x2, 0xd4, 0x8146, 0x6, 0x3, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000002, 0x6, 0x7, 0x2, {0x4, 0x3, 0x9, 0x8001, 0x0, 0x3}, {0x2, 0x2, 0xe4, 0x7, 0x2, 0x5f}, 0x8001, 0x101, 0x3}}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x20004015}, 0x200c4004) 67.170044ms ago: executing program 5 (id=1997): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000980)='2', 0x51, 0xe7c) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 32.018477ms ago: executing program 3 (id=1998): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc1ea35512) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f0707ce204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 11.019149ms ago: executing program 5 (id=1999): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIKIo6KEeY7ItodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJttNrFmk4nd3w82+74z7+48T+br3ffdDaBrDWV/kogdEfFbRAw0qksbDDWerl05N3n9yrnJJBYWXv8zydtdvXJusmxavm57URlOI9KPkmIjS82eOXtiol6vnS7qo3Mn3x6dPXP2iXdPThyvHa+dGj9y5PChsaefGn+yI3lmeV3d98HM/r0vvnnxlcmjF9/66Zss3h3F+uY8OmUoS/yvhVzrukc7vbGK7WwqJ70VBsIt6YmIbHf15ef/QPTEjZ03EC98WGlwwLrK7k1b2q+eXwBuY0lUHQFQjfJGn33+LR8b1PXYFC4/2/gAlOV9rXg01vRGWrTpa/l820lDEXF0/u8vskes0zgEAECzTyY/fzl7fv/61y9lfY+BxTVp3JM//57/3VXMoQxGxJ0RsTsi7oqIPRFxd0Te9t6IuG+N8dzc/0kvrfEtV5T1/54p5raW9v/K3l8M9hS1nXn+fcmx6XrtYPE/GY6+LVl9bIVtfPf8r5+2W9fc/8se2fbLvmARx6XelgG6qYm5ibxT2gGXL0Ts610u/2RxJiCJiL0Rse/W3npXWZh+7Kv97Rqtnv8KOjDPtPBllt58lv98tORfSprnJ6dvmp8c3Rr12sHR8qi42c+/fPxau+2vKf8OuFxrPDft/9Ymg0nzfO1sZ7f/H4//tD95I59n7i+WvTcxN3d6LKI/yS9nS5eP33htWS/bZ8f/8IHlz//dxWuy/O+PiOwgfiAiHoyIh4rYH46IRyLiwAo5/vjc6vlHWtH+vxAxtez1b/H4b9n/t17oOfHDt+22/+/2/+G8NFwsya9/q1gunOxy0RrgWv53AAAA8H+R5t+BT9KRxXKajow0vsO/J+5I6zOzc48fm3nn1FTju/KD0ZeWI10DxXhofbpeG0vmi3dsjI+OF2PF5XjpoWLc+LOebXl9ZHKmPlVx7tDttrc5/zN/9FQdHbDOti27dLx/wwMBKtA6j54urZ5/NVwM4Hbl99rQvVY5/9ONigPYeO7/0L2WO//Pt9TNBcDtyf0fupfzH7pU+n3VEQAVcv+HrrSW3/WvY2Hr5gijmsJm3Sl5IaIspJsiHoV1KlR9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwIAAP//2wzmew==") statfs(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)=""/141) 0s ago: executing program 3 (id=2000): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x0, 0x451, &(0x7f0000000f80)="$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") ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x4030582b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r0, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4be7, 0x4c3, 0x43, 0x0, 0x20) kernel console output (not intermixed with test programs): ] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 113.911382][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 114.293704][ T6994] wg1 speed is unknown, defaulting to 1000 [ 114.437594][ T7001] device syzkaller1 entered promiscuous mode [ 115.125740][ T7021] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.127190][ T7021] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.166559][ T7021] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.168208][ T7021] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.269145][ T7021] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.270647][ T7021] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.285595][ T7029] __nla_validate_parse: 3 callbacks suppressed [ 115.285605][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 115.288052][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.991'. [ 115.327265][ T7021] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.329018][ T7021] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.400110][ T7037] loop1: detected capacity change from 0 to 1024 [ 115.406647][ T7037] EXT4-fs: Ignoring removed orlov option [ 115.445020][ T7037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.469210][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 115.498179][ T7021] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.499599][ T7021] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.502552][ T7021] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.503991][ T7021] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.506972][ T7021] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.508249][ T7021] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.511999][ T7021] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.513421][ T7021] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.609667][ T7042] wg1 speed is unknown, defaulting to 1000 [ 115.638126][ T7044] wg1 speed is unknown, defaulting to 1000 [ 116.972954][ C0] sched: RT throttling activated [ 117.029794][ T7051] loop1: detected capacity change from 0 to 1024 [ 117.043991][ T7051] EXT4-fs: Ignoring removed orlov option [ 117.058221][ T7051] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 117.080184][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 117.081819][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1002'. [ 117.085329][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 117.520358][ T7076] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.521911][ T7076] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.606974][ T7076] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.608554][ T7076] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.672759][ T7082] loop0: detected capacity change from 0 to 128 [ 117.689427][ T7076] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.690960][ T7076] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.707367][ T7084] loop1: detected capacity change from 0 to 1764 [ 117.755853][ T7076] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.757473][ T7076] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.763104][ T7088] netlink: 'syz.1.1014': attribute type 5 has an invalid length. [ 117.818347][ T7092] loop1: detected capacity change from 0 to 1764 [ 117.972351][ T6728] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.188865][ T7094] wg1 speed is unknown, defaulting to 1000 [ 118.431966][ T27] kauditd_printk_skb: 557 callbacks suppressed [ 118.431975][ T27] audit: type=1326 audit(118.414:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 118.437584][ T27] audit: type=1326 audit(118.424:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 118.440950][ T27] audit: type=1326 audit(118.424:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 118.445290][ T27] audit: type=1326 audit(118.424:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 118.448870][ T27] audit: type=1326 audit(118.424:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 118.451986][ T27] audit: type=1326 audit(118.424:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 118.455716][ T27] audit: type=1326 audit(118.424:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 118.459147][ T27] audit: type=1326 audit(118.424:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 118.472517][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 118.609439][ T4443] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.613853][ T4443] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.730995][ T7123] netlink: 'syz.2.1028': attribute type 5 has an invalid length. [ 118.834054][ T7133] loop2: detected capacity change from 0 to 512 [ 118.837694][ T7133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.842740][ T7133] EXT4-fs (loop2): 1 truncate cleaned up [ 118.844967][ T7133] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.889088][ T7133] mmap: syz.2.1031 (7133) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.006168][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 119.008637][ T7137] loop3: detected capacity change from 0 to 1024 [ 119.027474][ T7137] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.064427][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 119.157874][ T7153] netlink: 'syz.2.1039': attribute type 5 has an invalid length. [ 119.205852][ T7155] loop2: detected capacity change from 0 to 1024 [ 119.226689][ T7155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.265855][ T1656] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 119.269779][ T1656] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 119.272136][ T1656] EXT4-fs (loop2): This should not happen!! Data will be lost [ 119.272136][ T1656] [ 119.290297][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 119.595694][ T7181] netlink: 'syz.1.1051': attribute type 5 has an invalid length. [ 119.755176][ T27] audit: type=1326 audit(119.744:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 119.758771][ T27] audit: type=1326 audit(119.744:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 120.025246][ T7206] netlink: 'syz.1.1062': attribute type 5 has an invalid length. [ 120.073915][ T7210] vhci_hcd: invalid port number 255 [ 120.205035][ T7220] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1067'. [ 120.206639][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 120.269360][ T7224] loop2: detected capacity change from 0 to 512 [ 120.297465][ T7224] EXT4-fs warning (device loop2): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.300527][ T7224] EXT4-fs (loop2): mount failed [ 120.350218][ T7234] loop2: detected capacity change from 0 to 164 [ 120.405581][ T7235] netlink: 'syz.3.1073': attribute type 5 has an invalid length. [ 120.408078][ T7235] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.409440][ T7235] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.410759][ T7235] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.412051][ T7235] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.415405][ T7235] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.416691][ T7235] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.417905][ T7235] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.419098][ T7235] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.489010][ T4398] Bluetooth: hci5: Frame reassembly failed (-84) [ 120.494794][ T7239] Bluetooth: hci5: Frame reassembly failed (-90) [ 120.515338][ T7237] netlink: 'syz.2.1074': attribute type 6 has an invalid length. [ 120.697404][ T7259] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1084'. [ 120.701061][ T7257] serio: Serial port ptm1 [ 120.786312][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1087'. [ 122.493028][ T4335] Bluetooth: hci5: command 0x1003 tx timeout [ 122.493050][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 122.663706][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 125.933966][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935139][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.944706][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 131.946183][ T7292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1096'. [ 131.947601][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 131.948939][ T7292] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1096'. [ 131.950736][ T7292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1096'. [ 131.956524][ T7076] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.957898][ T7076] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.967315][ T7076] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.968561][ T7076] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.972456][ T7076] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.973892][ T7076] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.977315][ T7076] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.978415][ T7076] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.094171][ T7313] wg1 speed is unknown, defaulting to 1000 [ 132.162516][ T7325] loop3: detected capacity change from 0 to 1024 [ 132.210638][ T7325] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.218600][ T7325] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1109'. [ 132.282126][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 132.286052][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 132.606706][ T7352] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.667431][ T7352] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.706180][ T7352] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.795492][ T7352] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.920790][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1128'. [ 132.937375][ T7352] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.939836][ T7352] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.944438][ T7352] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.947036][ T7352] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.964787][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1129'. [ 132.990293][ T7379] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 133.214976][ T7399] IPv6: Can't replace route, no match found [ 133.219312][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'. [ 133.331551][ T27] kauditd_printk_skb: 155 callbacks suppressed [ 133.331560][ T27] audit: type=1326 audit(133.314:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.3.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 133.347464][ T27] audit: type=1326 audit(133.334:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.3.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 133.450880][ T7426] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.654968][ T7426] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.697043][ T7426] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.786551][ T7426] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.049646][ T7447] netlink: 'syz.3.1158': attribute type 39 has an invalid length. [ 134.085373][ T7449] netlink: 'syz.3.1159': attribute type 5 has an invalid length. [ 134.088623][ T7449] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.089877][ T7449] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.091294][ T7449] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.092536][ T7449] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.101209][ T7449] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.102656][ T7449] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.104230][ T7449] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.105553][ T7449] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.178119][ T27] audit: type=1326 audit(134.164:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 134.181831][ T27] audit: type=1326 audit(134.164:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 134.187267][ T27] audit: type=1326 audit(134.164:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 134.190911][ T27] audit: type=1326 audit(134.164:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 134.194848][ T27] audit: type=1326 audit(134.164:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 134.198491][ T27] audit: type=1326 audit(134.164:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 134.202059][ T27] audit: type=1326 audit(134.164:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 134.211844][ T27] audit: type=1326 audit(134.164:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7450 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 134.592312][ T7473] netlink: 'syz.1.1169': attribute type 39 has an invalid length. [ 134.635510][ T7434] net_ratelimit: 10 callbacks suppressed [ 134.635522][ T7434] Set syz1 is full, maxelem 65536 reached [ 134.815985][ T7490] netlink: 'syz.3.1175': attribute type 5 has an invalid length. [ 134.818522][ T7490] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.819810][ T7490] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.820990][ T7490] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.822122][ T7490] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.826063][ T7490] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.827408][ T7490] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.828786][ T7490] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.829988][ T7490] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.897049][ T7496] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 135.312604][ T7517] device syz_tun entered promiscuous mode [ 135.313149][ T7516] loop1: detected capacity change from 0 to 1024 [ 135.314173][ T7517] device macvtap1 entered promiscuous mode [ 135.317079][ T7517] device syz_tun left promiscuous mode [ 135.322477][ T7516] EXT4-fs: Ignoring removed bh option [ 135.325554][ T7516] EXT4-fs: inline encryption not supported [ 135.327996][ T7516] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 135.337818][ T7516] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.1185: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.340694][ T7516] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.1185: lblock 0 mapped to illegal pblock 48 (length 1) [ 135.343549][ T7516] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.1185: Failed to acquire dquot type 0 [ 135.345658][ T7516] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 135.347758][ T7516] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.1185: mark_inode_dirty error [ 135.349570][ T7516] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 135.351164][ T7516] EXT4-fs (loop1): 1 orphan inode deleted [ 135.352042][ T7516] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 135.356570][ T1656] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.361531][ T1656] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:5: Failed to release dquot type 0 [ 135.367274][ T7516] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 135.377435][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 135.465393][ T7529] netlink: 'syz.4.1189': attribute type 5 has an invalid length. [ 135.517431][ T7536] netlink: 'syz.4.1193': attribute type 39 has an invalid length. [ 135.749276][ T7562] netlink: 'syz.1.1202': attribute type 5 has an invalid length. [ 135.768126][ T7426] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.771196][ T7426] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.774138][ T7426] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.777603][ T7426] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.916686][ T7577] vhci_hcd: invalid port number 96 [ 135.920348][ T7577] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 136.025365][ T7598] netlink: 'syz.4.1214': attribute type 5 has an invalid length. [ 136.451804][ T7616] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.453991][ T7616] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.515693][ T7616] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.517206][ T7616] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.529226][ T7628] atomic_op 00000000c79b3659 conn xmit_atomic 0000000000000000 [ 136.549510][ T7616] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.551080][ T7616] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.557935][ T7631] netlink: 'syz.0.1226': attribute type 5 has an invalid length. [ 136.561156][ T7631] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.562488][ T7631] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.563976][ T7631] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.565179][ T7631] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.568652][ T7631] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.570020][ T7631] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.571399][ T7631] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.572636][ T7631] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.659624][ T7616] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.661217][ T7616] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.702090][ T7636] loop3: detected capacity change from 0 to 1024 [ 136.706263][ T7636] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.735439][ T7636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.740511][ T7636] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.1228: missing EA_INODE flag [ 136.744743][ T7636] EXT4-fs (loop3): Remounting filesystem read-only [ 136.745967][ T7636] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1228: error while reading EA inode 11 err=-117 [ 136.748100][ T7636] EXT4-fs (loop3): Remounting filesystem read-only [ 136.759688][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 136.915078][ T7656] binfmt_misc: register: failed to install interpreter file ./file0 [ 136.944055][ T7658] ALSA: seq fatal error: cannot create timer (-22) [ 137.005642][ T7666] device pim6reg1 entered promiscuous mode [ 137.055800][ T7668] netlink: 'syz.2.1240': attribute type 5 has an invalid length. [ 137.080980][ T7672] loop1: detected capacity change from 0 to 764 [ 137.084577][ T7672] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 137.088683][ T7672] Symlink component flag not implemented [ 137.090638][ T7672] Symlink component flag not implemented (7) [ 137.330175][ T7694] loop3: detected capacity change from 0 to 512 [ 137.349345][ T7694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 137.368159][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 137.622909][ T7616] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.624253][ T7616] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.627263][ T7616] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.628646][ T7616] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.631568][ T7616] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.632911][ T7616] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.635871][ T7616] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.637065][ T7616] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.676537][ T7718] loop3: detected capacity change from 0 to 128 [ 137.695194][ T7718] tipc: Cannot configure node identity twice [ 137.756921][ T4376] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.816138][ T7733] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.817497][ T7733] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.818743][ T7733] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.819985][ T7733] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.822928][ T7733] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.824541][ T7733] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.825779][ T7733] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.826997][ T7733] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.836917][ T7738] loop1: detected capacity change from 0 to 512 [ 137.852445][ T7738] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.876350][ T7738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.905867][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 138.003404][ T7754] __nla_validate_parse: 4 callbacks suppressed [ 138.003416][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 138.056213][ T7760] loop2: detected capacity change from 0 to 764 [ 138.059428][ T7760] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 138.064743][ T7760] Symlink component flag not implemented [ 138.065700][ T7760] Symlink component flag not implemented (7) [ 138.364976][ T7766] device ipvlan2 entered promiscuous mode [ 138.429314][ T7768] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.506494][ T7791] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.507862][ T7791] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.509046][ T7791] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.510199][ T7791] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.527690][ T7791] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.529051][ T7791] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.530548][ T7791] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.531799][ T7791] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.536916][ T27] kauditd_printk_skb: 257 callbacks suppressed [ 138.536927][ T27] audit: type=1326 audit(138.524:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.4.1283" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 138.542274][ T27] audit: type=1326 audit(138.524:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.4.1283" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=31 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 138.545806][ T27] audit: type=1326 audit(138.524:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.4.1283" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 138.548965][ T27] audit: type=1326 audit(138.524:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.4.1283" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 138.552242][ T27] audit: type=1326 audit(138.524:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.4.1283" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 138.555803][ T27] audit: type=1326 audit(138.524:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.4.1283" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 138.559041][ T27] audit: type=1326 audit(138.524:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.4.1283" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 138.563971][ T27] audit: type=1326 audit(138.524:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.4.1283" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 138.569126][ T27] audit: type=1326 audit(138.524:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.4.1283" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 138.580046][ T27] audit: type=1326 audit(138.524:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.4.1283" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8535df8c code=0x7ffc0000 [ 138.636985][ T7768] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.735997][ T7768] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.755585][ T7768] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.778833][ T7808] wg1 speed is unknown, defaulting to 1000 [ 139.568652][ T7768] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.571729][ T7768] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.574763][ T7768] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.578543][ T7768] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.618140][ T7835] validate_nla: 7 callbacks suppressed [ 139.618154][ T7835] netlink: 'syz.1.1299': attribute type 5 has an invalid length. [ 139.629889][ T7837] sch_fq: defrate 0 ignored. [ 139.683558][ T7842] netlink: 'syz.2.1300': attribute type 39 has an invalid length. [ 139.683742][ T7845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1305'. [ 139.768838][ T7846] loop3: detected capacity change from 0 to 2048 [ 139.772637][ T7856] netlink: 'syz.4.1308': attribute type 10 has an invalid length. [ 139.782768][ T7856] team0: Port device dummy0 added [ 139.815048][ T7846] loop3: p1 < > p4 [ 139.816659][ T7846] loop3: p4 size 8388608 extends beyond EOD, truncated [ 140.283076][ T7867] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.285511][ T7867] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.323339][ T7867] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.324811][ T7867] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.386654][ T7867] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.388133][ T7867] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.391518][ T7875] netlink: 'syz.3.1315': attribute type 5 has an invalid length. [ 140.394242][ T7875] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.395533][ T7875] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.396744][ T7875] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.397926][ T7875] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.400863][ T7875] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.402065][ T7875] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.403541][ T7875] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.404727][ T7875] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.495205][ T7867] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.496772][ T7867] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.522194][ T7884] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 140.595913][ T7882] loop1: detected capacity change from 0 to 32768 [ 140.598040][ T7884] serio: Serial port ptm0 [ 140.625747][ T7882] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 140.626674][ T7882] loop1: p1 start 460800 is beyond EOD, truncated [ 140.627607][ T7882] loop1: p2 size 83886080 extends beyond EOD, truncated [ 140.630621][ T7882] loop1: p5 start 460800 is beyond EOD, truncated [ 140.631650][ T7882] loop1: p6 size 83886080 extends beyond EOD, truncated [ 140.663695][ T7878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.700631][ T7893] loop3: detected capacity change from 0 to 128 [ 140.703350][ T7878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.706247][ T7893] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 140.727209][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1321'. [ 140.806812][ T7901] loop1: detected capacity change from 0 to 512 [ 140.816944][ T7901] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 140.845995][ T7299] udevd[7299]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 140.855068][ T7763] udevd[7763]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 140.866470][ T7907] netlink: 'syz.0.1328': attribute type 39 has an invalid length. [ 140.868381][ T7337] udevd[7337]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 140.874909][ T7906] udevd[7906]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 141.016414][ T7915] netlink: 'syz.1.1331': attribute type 5 has an invalid length. [ 141.045316][ T7918] loop1: detected capacity change from 0 to 512 [ 141.048891][ T7918] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 141.051746][ T7918] EXT2-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 141.063166][ T7918] EXT2-fs (loop1): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 141.075388][ T7918] syz.1.1332: attempt to access beyond end of device [ 141.075388][ T7918] loop1: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 141.152228][ T7922] loop1: detected capacity change from 0 to 8192 [ 141.180651][ T7925] netlink: 'syz.1.1335': attribute type 12 has an invalid length. [ 141.638862][ T7931] loop3: detected capacity change from 0 to 1024 [ 141.650641][ T7931] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.1338: Failed to acquire dquot type 0 [ 141.654217][ T7931] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 141.657648][ T7931] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.1338: corrupted inode contents [ 141.659790][ T7931] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #13: comm syz.3.1338: mark_inode_dirty error [ 141.661899][ T7931] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.1338: corrupted inode contents [ 141.664397][ T7931] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.1338: mark_inode_dirty error [ 141.667183][ T7931] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.1338: corrupted inode contents [ 141.669487][ T7931] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 141.671218][ T7931] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.1338: corrupted inode contents [ 141.673545][ T7931] EXT4-fs error (device loop3): ext4_truncate:4318: inode #13: comm syz.3.1338: mark_inode_dirty error [ 141.675634][ T7931] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 141.678355][ T7931] EXT4-fs (loop3): 1 truncate cleaned up [ 141.679463][ T7931] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.686455][ T7931] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 141.699311][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 141.882900][ T7937] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 141.884369][ T7937] netlink: 'syz.3.1340': attribute type 4 has an invalid length. [ 141.885643][ T7937] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1340'. [ 141.887729][ T7937] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 141.889114][ T7937] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1340'. [ 141.933326][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.091847][ T7950] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 142.127786][ T7958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1349'. [ 142.192324][ T7966] loop2: detected capacity change from 0 to 128 [ 143.394524][ T8018] can0: slcan on ptm0. [ 143.413615][ T8021] loop2: detected capacity change from 0 to 512 [ 143.417351][ T8021] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.420101][ T8021] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #17: comm syz.2.1376: inline data xattr refers to an external xattr inode [ 143.425135][ T8021] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1376: couldn't read orphan inode 17 (err -117) [ 143.427513][ T8021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.443954][ T8024] random: crng reseeded on system resumption [ 143.445108][ T8019] can0 (unregistered): slcan off ptm0. [ 143.445416][ T8019] Falling back ldisc for ptm0. [ 143.493625][ T8027] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.494985][ T8027] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.496138][ T8027] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.497312][ T8027] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.499625][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 143.509176][ T8027] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.510575][ T8027] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.511997][ T8027] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.513476][ T8027] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.529181][ T8031] loop2: detected capacity change from 0 to 512 [ 143.550540][ T8031] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.553620][ T8036] loop1: detected capacity change from 0 to 1024 [ 143.561784][ T8036] __quota_error: 265 callbacks suppressed [ 143.561794][ T8036] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 143.573064][ T8036] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 143.574693][ T8036] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.1382: Failed to acquire dquot type 0 [ 143.576795][ T8036] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 143.584202][ T8036] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #13: comm syz.1.1382: corrupted inode contents [ 143.588933][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 143.590493][ T8036] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #13: comm syz.1.1382: mark_inode_dirty error [ 143.603226][ T8036] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #13: comm syz.1.1382: corrupted inode contents [ 143.606550][ T8036] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.1382: mark_inode_dirty error [ 143.608666][ T8036] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #13: comm syz.1.1382: corrupted inode contents [ 143.608829][ T27] audit: type=1326 audit(143.594:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 143.610693][ T8036] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 143.614725][ T27] audit: type=1326 audit(143.604:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 143.618657][ T27] audit: type=1326 audit(143.604:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 143.619465][ T8036] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #13: comm syz.1.1382: corrupted inode contents [ 143.621719][ T27] audit: type=1326 audit(143.604:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 143.632310][ T7867] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.634305][ T7867] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.637180][ T7867] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.638314][ T7867] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.641716][ T7867] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.643070][ T7867] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.645952][ T7867] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.646734][ T27] audit: type=1326 audit(143.604:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 143.647099][ T7867] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.655127][ T27] audit: type=1326 audit(143.604:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 143.663228][ T27] audit: type=1326 audit(143.604:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 143.667651][ T27] audit: type=1326 audit(143.604:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8038 comm="syz.2.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 143.679959][ T8036] EXT4-fs error (device loop1): ext4_truncate:4318: inode #13: comm syz.1.1382: mark_inode_dirty error [ 143.682776][ T8036] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 143.684599][ T8036] EXT4-fs (loop1): 1 truncate cleaned up [ 143.685468][ T8036] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 143.715389][ T8036] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 143.761595][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 144.028705][ T8064] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1392'. [ 144.104980][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 144.106544][ T8067] device bridge_slave_1 left promiscuous mode [ 144.108012][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.145672][ T8067] device bridge_slave_0 left promiscuous mode [ 144.147032][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.579582][ T8073] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.581158][ T8073] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.709967][ T8075] validate_nla: 5 callbacks suppressed [ 144.709978][ T8075] netlink: 'syz.3.1396': attribute type 5 has an invalid length. [ 144.720162][ T8075] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.721548][ T8075] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.722815][ T8075] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.724235][ T8075] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.736637][ T8075] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.738096][ T8075] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.739433][ T8075] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.740689][ T8075] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.809107][ T8073] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.810706][ T8073] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.846199][ T8073] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.847756][ T8073] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.897132][ T8073] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.898650][ T8073] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.967475][ T8088] loop2: detected capacity change from 0 to 1024 [ 144.969222][ T8088] EXT4-fs: Ignoring removed orlov option [ 144.997256][ T8088] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 145.012488][ T8088] device syz_tun entered promiscuous mode [ 145.027991][ T8073] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.029446][ T8073] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.033112][ T8073] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.034419][ T8073] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.037375][ T8073] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.039694][ T8073] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.040421][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 145.042488][ T8073] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.043770][ T8073] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.049410][ T8097] netlink: 'syz.3.1403': attribute type 7 has an invalid length. [ 145.050667][ T8097] netlink: 'syz.3.1403': attribute type 8 has an invalid length. [ 145.051896][ T8097] netlink: 'syz.3.1403': attribute type 6 has an invalid length. [ 145.129940][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1408'. [ 145.145588][ T8105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.149907][ T8105] bond1: Unable to set up delay as MII monitoring is disabled [ 145.790513][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790541][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790549][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790557][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790564][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790571][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790578][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790585][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790591][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790598][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790605][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790612][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790619][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790626][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790633][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790640][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790646][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790653][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790660][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790666][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790673][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790680][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790686][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790693][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790700][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790706][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790713][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790720][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790726][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790733][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790740][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.790747][ T112] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.792870][ T112] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 145.851604][ T8127] fido_id[8127]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.982035][ T8135] netlink: 'syz.0.1419': attribute type 10 has an invalid length. [ 145.982054][ T8135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1419'. [ 145.982070][ T8135] device dummy0 entered promiscuous mode [ 145.985825][ T8135] bond0: (slave dummy0): Releasing backup interface [ 146.066882][ T8135] bridge0: port 3(dummy0) entered blocking state [ 146.066965][ T8135] bridge0: port 3(dummy0) entered disabled state [ 146.183429][ T8141] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.447680][ T8141] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.495734][ T8141] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.518182][ T8152] netlink: 'syz.0.1425': attribute type 39 has an invalid length. [ 146.556315][ T8141] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.636153][ T8164] loop2: detected capacity change from 0 to 8192 [ 146.639335][ T8164] FAT-fs (loop2): Unrecognized mount option "GPL" or missing value [ 146.728504][ T8141] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.731544][ T8141] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.734667][ T8141] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.737592][ T8141] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.755992][ T8175] netlink: 'syz.2.1436': attribute type 39 has an invalid length. [ 147.455225][ T8201] netlink: 'syz.0.1447': attribute type 39 has an invalid length. [ 147.553109][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1449'. [ 147.857696][ T8215] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.974890][ T8215] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.029004][ T8215] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.076056][ T8215] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.146803][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.148280][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.207896][ T8215] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.210802][ T8215] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.213741][ T8215] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.216537][ T8215] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.504635][ T4327] Bluetooth: hci1: command 0x0406 tx timeout [ 148.505708][ T4327] Bluetooth: hci4: command 0x0406 tx timeout [ 148.506623][ T4327] Bluetooth: hci0: command 0x0406 tx timeout [ 148.507514][ T4327] Bluetooth: hci3: command 0x0406 tx timeout [ 148.508475][ T4327] Bluetooth: hci2: command 0x0406 tx timeout [ 148.565576][ T8234] netlink: 'syz.0.1459': attribute type 39 has an invalid length. [ 148.830775][ T27] kauditd_printk_skb: 898 callbacks suppressed [ 148.830790][ T27] audit: type=1326 audit(148.814:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 148.836198][ T27] audit: type=1326 audit(148.814:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=31 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 148.839465][ T27] audit: type=1326 audit(148.814:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 148.842495][ T27] audit: type=1326 audit(148.814:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 148.845746][ T27] audit: type=1326 audit(148.814:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 148.848817][ T27] audit: type=1326 audit(148.814:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 148.851824][ T27] audit: type=1326 audit(148.814:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 148.855065][ T27] audit: type=1326 audit(148.814:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 148.858291][ T27] audit: type=1326 audit(148.824:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 148.861352][ T27] audit: type=1326 audit(148.824:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa535df8c code=0x7ffc0000 [ 149.085469][ T8253] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.087021][ T8253] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 149.424169][ T8263] netlink: 'syz.3.1470': attribute type 39 has an invalid length. [ 149.511681][ T8265] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.718381][ T8265] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.792837][ T8268] serio: Serial port ptm0 [ 149.835367][ T8265] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.876372][ T8265] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.933147][ T8275] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.977174][ T8275] wg1 speed is unknown, defaulting to 1000 [ 150.169220][ T8265] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.172150][ T8265] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.175144][ T8265] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.178019][ T8265] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.253053][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.333172][ T8301] netlink: 'syz.2.1482': attribute type 39 has an invalid length. [ 151.536997][ T8308] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.587204][ T8308] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.666144][ T8308] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.716016][ T8308] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.923663][ T8314] xt_hashlimit: max too large, truncated to 1048576 [ 152.017502][ T8321] loop3: detected capacity change from 0 to 1024 [ 152.021318][ T8321] EXT4-fs: Ignoring removed i_version option [ 152.022379][ T8321] EXT4-fs: quotafile must be on filesystem root [ 152.137529][ T8327] netlink: 'syz.4.1493': attribute type 39 has an invalid length. [ 152.243820][ T8339] loop3: detected capacity change from 0 to 8192 [ 152.249963][ T8339] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.260933][ T8339] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 152.262327][ T8339] FAT-fs (loop3): Filesystem has been set read-only [ 152.902837][ T8357] netlink: 'syz.1.1506': attribute type 39 has an invalid length. [ 153.107042][ T8374] loop3: detected capacity change from 0 to 164 [ 153.132630][ T8374] wg1 speed is unknown, defaulting to 1000 [ 153.161057][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.162465][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.319848][ T8308] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.322824][ T8308] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.325887][ T8308] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.328732][ T8308] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.378237][ T8388] netlink: 'syz.2.1517': attribute type 39 has an invalid length. [ 153.531669][ T8401] loop2: detected capacity change from 0 to 2048 [ 153.866466][ T27] kauditd_printk_skb: 217 callbacks suppressed [ 153.866476][ T27] audit: type=1326 audit(153.854:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 153.870816][ T27] audit: type=1326 audit(153.854:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 153.874425][ T27] audit: type=1326 audit(153.854:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 153.877863][ T27] audit: type=1326 audit(153.854:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 153.881313][ T27] audit: type=1326 audit(153.854:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 153.884745][ T27] audit: type=1326 audit(153.854:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 153.888112][ T27] audit: type=1326 audit(153.854:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 153.891448][ T27] audit: type=1326 audit(153.854:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 153.894899][ T27] audit: type=1326 audit(153.854:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 153.898487][ T27] audit: type=1326 audit(153.854:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1526" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8535b9e8 code=0x7ffc0000 [ 153.953784][ T8418] netlink: 'syz.1.1529': attribute type 39 has an invalid length. [ 153.991080][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 153.992820][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 154.029521][ T8419] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.031018][ T8419] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.075438][ T8419] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.077031][ T8419] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.128931][ T8419] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.130514][ T8419] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.165458][ T8419] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.166894][ T8419] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.307909][ T8419] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.309298][ T8419] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.312218][ T8419] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.313562][ T8419] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.316461][ T8419] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.317748][ T8419] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.320634][ T8419] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.321856][ T8419] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.530210][ T8445] netlink: 'syz.1.1541': attribute type 39 has an invalid length. [ 154.841050][ T8480] netlink: 'syz.4.1555': attribute type 39 has an invalid length. [ 155.236215][ T8505] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.503605][ T8505] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.582680][ T8509] netlink: 'syz.2.1567': attribute type 39 has an invalid length. [ 155.605806][ T8505] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.655603][ T8505] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.933696][ T8518] wg1 speed is unknown, defaulting to 1000 [ 156.134925][ T8505] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.137932][ T8505] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.140842][ T8505] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.144020][ T8505] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.384500][ T8546] team0: Port device dummy0 removed [ 156.385848][ T8546] batman_adv: batadv0: Adding interface: dummy0 [ 156.386893][ T8546] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.390750][ T8546] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 156.400010][ T8550] netlink: 'syz.0.1580': attribute type 39 has an invalid length. [ 156.445877][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 156.542619][ T8564] vhci_hcd: invalid port number 255 [ 156.593754][ T8563] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.595281][ T8563] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.629624][ T8563] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.631108][ T8563] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.666651][ T8563] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.668189][ T8563] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.690410][ T8582] netlink: 'syz.3.1595': attribute type 39 has an invalid length. [ 156.719255][ T8563] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.720844][ T8563] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.760209][ T8584] bond0: (slave dummy0): Releasing backup interface [ 156.788482][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'. [ 157.095778][ T8596] wg1 speed is unknown, defaulting to 1000 [ 157.515271][ T8605] IPv6: Can't replace route, no match found [ 157.535568][ T8607] IPv6: Can't replace route, no match found [ 157.578428][ T8611] netlink: 'syz.0.1608': attribute type 39 has an invalid length. [ 158.017007][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 158.332495][ T8645] netlink: 'syz.3.1620': attribute type 39 has an invalid length. [ 158.356344][ T8647] loop3: detected capacity change from 0 to 1024 [ 158.357988][ T8647] journal_path: Lookup failure for './file0' [ 158.359057][ T8647] EXT4-fs: error: could not find journal device path [ 158.500174][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1624'. [ 158.832807][ T8669] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 158.834407][ T8669] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 159.011500][ T8674] netlink: 'syz.2.1632': attribute type 39 has an invalid length. [ 159.048012][ T27] kauditd_printk_skb: 265 callbacks suppressed [ 159.048022][ T27] audit: type=1326 audit(159.034:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 159.052596][ T27] audit: type=1326 audit(159.034:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 159.058883][ T27] audit: type=1326 audit(159.044:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=31 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 159.066720][ T27] audit: type=1326 audit(159.044:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 159.074167][ T27] audit: type=1326 audit(159.044:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 159.078862][ T27] audit: type=1326 audit(159.044:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 159.082207][ T27] audit: type=1326 audit(159.044:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 159.085607][ T27] audit: type=1326 audit(159.054:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 159.089220][ T27] audit: type=1326 audit(159.054:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 159.092554][ T27] audit: type=1326 audit(159.054:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 159.280310][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 159.361126][ T8698] netlink: 'syz.0.1644': attribute type 39 has an invalid length. [ 159.497127][ T8704] loop1: detected capacity change from 0 to 512 [ 159.511252][ T8704] EXT4-fs warning (device loop1): ext4_xattr_inode_get:509: inode #11: comm syz.1.1646: EA inode hash validation failed [ 159.567521][ T8712] loop2: detected capacity change from 0 to 512 [ 159.570466][ T8712] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.817164][ T8712] EXT4-fs (loop2): 1 truncate cleaned up [ 159.818204][ T8712] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.314763][ T8704] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.1646: corrupted inode contents [ 160.325831][ T8704] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #15: comm syz.1.1646: mark_inode_dirty error [ 160.331318][ T8704] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.1646: corrupted inode contents [ 160.338361][ T8704] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2964: inode #15: comm syz.1.1646: mark_inode_dirty error [ 160.347737][ T8704] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #15: comm syz.1.1646: mark inode dirty (error -117) [ 160.354206][ T8704] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 160.357880][ T8704] EXT4-fs (loop1): 1 orphan inode deleted [ 160.360008][ T8704] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.527682][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 160.571326][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 160.705982][ T8727] netlink: 'syz.3.1655': attribute type 39 has an invalid length. [ 160.736363][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1654'. [ 160.830921][ T8738] netlink: 'syz.1.1667': attribute type 39 has an invalid length. [ 161.474972][ T8741] wg1 speed is unknown, defaulting to 1000 [ 161.485695][ T8740] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 161.487160][ T8740] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 163.027875][ T8563] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.029183][ T8563] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.032160][ T8563] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.033542][ T8563] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.036526][ T8563] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.037769][ T8563] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.040700][ T8563] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.041883][ T8563] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.193830][ T8755] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.195572][ T8755] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.225489][ T8755] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.226948][ T8755] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.307116][ T8755] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.308683][ T8755] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.367168][ T8755] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.368757][ T8755] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.385402][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1668'. [ 163.429993][ T8772] netlink: 'syz.4.1669': attribute type 39 has an invalid length. [ 163.509753][ T8777] netlink: 660 bytes leftover after parsing attributes in process `syz.2.1670'. [ 163.537651][ T8755] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.539005][ T8755] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.541953][ T8755] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.543217][ T8755] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.546986][ T8755] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.548330][ T8755] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.551299][ T8755] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.552545][ T8755] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.677034][ T8779] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 163.678477][ T8779] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 163.968231][ T8782] loop1: detected capacity change from 0 to 512 [ 163.982225][ T8782] journal_path: Lookup failure for './bus' [ 163.983449][ T8782] EXT4-fs: error: could not find journal device path [ 164.025260][ T7337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.061652][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 164.101638][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 164.133876][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 164.184091][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 164.223216][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 164.322696][ T8807] netlink: 'syz.2.1682': attribute type 39 has an invalid length. [ 164.331199][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 164.338381][ T8809] netlink: 'syz.4.1683': attribute type 13 has an invalid length. [ 164.346547][ T8809] gretap0: refused to change device tx_queue_len [ 164.348165][ T8809] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.477793][ T8818] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.780218][ T8818] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.834221][ T8820] wg1 speed is unknown, defaulting to 1000 [ 165.010060][ T8818] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.090487][ T8818] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.257059][ T8818] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.259862][ T8818] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.262616][ T8818] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.265571][ T8818] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.829951][ T8827] loop3: detected capacity change from 0 to 512 [ 165.864911][ T8827] EXT2-fs (loop3): error: ext2_check_page: size of directory #12 is not a multiple of chunk size [ 165.868078][ T8827] EXT2-fs (loop3): error: ext2_readdir: bad page in #12 [ 165.880238][ T8829] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.928520][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 165.928530][ T27] audit: type=1326 audit(165.914:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 165.933310][ T27] audit: type=1326 audit(165.914:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 165.937030][ T27] audit: type=1326 audit(165.924:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 165.943586][ T27] audit: type=1326 audit(165.924:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 165.946760][ T27] audit: type=1326 audit(165.924:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 165.958106][ T27] audit: type=1326 audit(165.924:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 165.961486][ T27] audit: type=1326 audit(165.924:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 165.978601][ T8837] netlink: 'syz.3.1694': attribute type 39 has an invalid length. [ 165.981458][ T8829] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.042845][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1699'. [ 166.120515][ T8829] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.222700][ T8857] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.248133][ T8829] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.327135][ T8857] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.366624][ T8857] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.435218][ T8857] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.444353][ T8829] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.447419][ T8829] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.450339][ T8829] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.454471][ T8829] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.555227][ T27] audit: type=1326 audit(166.544:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 166.558696][ T27] audit: type=1326 audit(166.544:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 166.561757][ T27] audit: type=1326 audit(166.544:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa535b9e8 code=0x7ffc0000 [ 166.571676][ T8857] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.574618][ T8857] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.577879][ T8857] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.580765][ T8857] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.589198][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 166.894253][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.947666][ T8865] loop3: detected capacity change from 0 to 512 [ 166.948960][ T8865] EXT4-fs: Ignoring removed nobh option [ 166.957832][ T8865] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #3: comm syz.3.1705: corrupted inode contents [ 166.961748][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 166.963559][ T8865] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #3: comm syz.3.1705: mark_inode_dirty error [ 166.965708][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 166.968664][ T8865] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #3: comm syz.3.1705: corrupted inode contents [ 166.971072][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 166.972230][ T8865] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1705: mark_inode_dirty error [ 166.975308][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 166.978621][ T8865] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.1705: Failed to acquire dquot type 0 [ 166.980807][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 166.984870][ T8865] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.1705: corrupted inode contents [ 166.987539][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 166.988718][ T8865] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #16: comm syz.3.1705: mark_inode_dirty error [ 166.990764][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 166.991872][ T8865] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.1705: corrupted inode contents [ 166.995038][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 166.996125][ T8865] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1705: mark_inode_dirty error [ 166.998039][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 166.999024][ T8865] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.1705: corrupted inode contents [ 167.001014][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 167.001964][ T8865] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 167.003691][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 167.004909][ T8865] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.1705: corrupted inode contents [ 167.007086][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 167.008244][ T8865] EXT4-fs error (device loop3): ext4_truncate:4318: inode #16: comm syz.3.1705: mark_inode_dirty error [ 167.010247][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 167.011408][ T8865] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 167.015303][ T8865] EXT4-fs (loop3): Remounting filesystem read-only [ 167.016610][ T8865] EXT4-fs (loop3): 1 truncate cleaned up [ 167.017534][ T8865] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.020905][ T8865] EXT4-fs (loop3): unmounting filesystem. [ 167.104926][ T8872] netlink: 'syz.3.1707': attribute type 39 has an invalid length. [ 167.637523][ T8899] netlink: 'syz.4.1718': attribute type 39 has an invalid length. [ 167.667993][ T8902] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.727662][ T8902] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.805988][ T8902] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.856668][ T8902] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.175537][ T8924] netlink: 'syz.3.1729': attribute type 39 has an invalid length. [ 168.434159][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 168.436138][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 168.682519][ T8943] tipc: New replicast peer: 255.255.255.255 [ 168.685042][ T8943] tipc: Enabled bearer , priority 10 [ 168.704571][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 168.770224][ T8949] netlink: 'syz.4.1740': attribute type 39 has an invalid length. [ 169.076198][ T8972] infiniband syz!: set down [ 169.077066][ T8972] infiniband syz!: added team_slave_0 [ 169.091971][ T8972] RDS/IB: syz!: added [ 169.094782][ T8972] smc: adding ib device syz! with port count 1 [ 169.095785][ T8972] smc: ib device syz! port 1 has pnetid [ 169.215193][ T8976] netlink: 'syz.2.1751': attribute type 39 has an invalid length. [ 169.369042][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'. [ 169.418881][ T8993] device veth2 entered promiscuous mode [ 169.472705][ T8995] loop3: detected capacity change from 0 to 1024 [ 169.476808][ T8995] EXT4-fs: inline encryption not supported [ 169.480009][ T8995] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.505860][ T8995] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.541482][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 169.565403][ T9001] loop2: detected capacity change from 0 to 1024 [ 169.570728][ T9003] netlink: 'syz.3.1762': attribute type 39 has an invalid length. [ 169.581619][ T9001] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 169.585920][ T9001] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 169.589633][ T9001] JBD2: no valid journal superblock found [ 169.591738][ T9001] EXT4-fs (loop2): error loading journal [ 169.623962][ T9005] netlink: 'syz.3.1763': attribute type 10 has an invalid length. [ 169.625193][ T9005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1763'. [ 169.647043][ T9005] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 169.804565][ T4486] tipc: Node number set to 1546440480 [ 169.832850][ T9027] xt_CT: No such helper "pptp" [ 169.837099][ T9025] netlink: 'syz.4.1773': attribute type 39 has an invalid length. [ 169.865371][ T9030] wg1 speed is unknown, defaulting to 1000 [ 169.939742][ T9041] loop2: detected capacity change from 0 to 2048 [ 169.954814][ T9041] EXT4-fs (loop2): failed to initialize system zone (-117) [ 169.956165][ T9041] EXT4-fs (loop2): mount failed [ 170.025466][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 170.026788][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 170.027906][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 170.030895][ T14] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 170.091992][ T9054] device syzkaller0 entered promiscuous mode [ 170.101727][ T9056] netlink: 'syz.3.1786': attribute type 5 has an invalid length. [ 170.105663][ T9052] fido_id[9052]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.109697][ T9056] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.110985][ T9056] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.112301][ T9056] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.113781][ T9056] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.121662][ T9056] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.123201][ T9056] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.124452][ T9056] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.125634][ T9056] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.285254][ T9058] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 181.286877][ T9058] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 181.286936][ T9060] netlink: 'syz.3.1787': attribute type 39 has an invalid length. [ 181.289448][ T9064] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 181.290662][ T9064] netlink: 'syz.4.1789': attribute type 4 has an invalid length. [ 181.291822][ T9064] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1789'. [ 181.299860][ T9065] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 181.301011][ T9065] netlink: 'syz.4.1789': attribute type 4 has an invalid length. [ 181.302133][ T9065] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1789'. [ 181.354829][ T8902] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.357851][ T8902] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.360898][ T8902] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.365310][ T8902] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.525049][ T9070] device syzkaller0 entered promiscuous mode [ 181.573472][ T9087] netlink: 'syz.1.1799': attribute type 5 has an invalid length. [ 181.611572][ T9095] device syzkaller0 entered promiscuous mode [ 181.734441][ T9097] netlink: 'syz.4.1803': attribute type 39 has an invalid length. [ 187.373564][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.374624][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.974997][ T9099] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 192.976457][ T9099] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 192.978896][ T9105] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.980456][ T9105] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.985547][ T9106] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 192.986678][ T9106] netlink: 'syz.2.1804': attribute type 4 has an invalid length. [ 192.987796][ T9106] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1804'. [ 192.989192][ T9104] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 192.990281][ T9104] netlink: 'syz.2.1804': attribute type 4 has an invalid length. [ 192.991418][ T9104] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1804'. [ 193.046762][ T9105] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.048376][ T9105] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.096078][ T9116] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1809'. [ 193.096733][ T9105] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.099080][ T9105] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.111495][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 193.808916][ T9125] netlink: 'syz.3.1812': attribute type 5 has an invalid length. [ 193.811613][ T9125] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.813061][ T9125] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.814393][ T9125] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.815639][ T9125] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.818378][ T9125] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.819614][ T9125] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.820868][ T9125] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.822154][ T9125] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.906533][ T9105] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.908108][ T9105] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.950327][ T9131] netlink: 'syz.0.1814': attribute type 39 has an invalid length. [ 194.052330][ T9141] device syzkaller0 entered promiscuous mode [ 194.065029][ T9105] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.066412][ T9105] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.069776][ T9105] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.071092][ T9105] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.072563][ T9143] netlink: 'syz.1.1819': attribute type 1 has an invalid length. [ 194.074308][ T9143] netlink: 'syz.1.1819': attribute type 4 has an invalid length. [ 194.075510][ T9143] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1819'. [ 194.078743][ T9105] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.080032][ T9105] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.081373][ T9143] netlink: 'syz.1.1819': attribute type 1 has an invalid length. [ 194.082649][ T9143] netlink: 'syz.1.1819': attribute type 4 has an invalid length. [ 194.084233][ T9143] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1819'. [ 196.909182][ T4327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.911137][ T4327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.912707][ T4327] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.919165][ T4327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.920666][ T4327] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 196.921923][ T4327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.893042][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.973135][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 201.053044][ T4327] Bluetooth: hci5: command 0x041b tx timeout [ 203.133170][ T4327] Bluetooth: hci5: command 0x040f tx timeout [ 205.175992][ T9105] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.177313][ T9105] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.180116][ T9145] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 205.181527][ T9145] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 205.187112][ T9162] netlink: 'syz.3.1827': attribute type 5 has an invalid length. [ 205.197834][ T9162] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.199059][ T9162] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.200376][ T9162] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.201620][ T9162] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.213073][ T4327] Bluetooth: hci5: command 0x0419 tx timeout [ 205.230646][ T9162] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.232031][ T9162] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.233604][ T9162] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.234949][ T9162] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.420788][ T9197] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1835'. [ 205.422530][ T9197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1835'. [ 205.516679][ T9164] wg1 speed is unknown, defaulting to 1000 [ 205.591260][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1838'. [ 205.592859][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1838'. [ 205.778750][ T9210] loop3: detected capacity change from 0 to 1024 [ 205.813322][ T9210] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.815137][ T9210] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.823386][ T9210] JBD2: no valid journal superblock found [ 205.824327][ T9210] EXT4-fs (loop3): error loading journal [ 205.954673][ T9164] chnl_net:caif_netlink_parms(): no params data found [ 206.000390][ T9164] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.001707][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.003541][ T9164] device bridge_slave_0 entered promiscuous mode [ 206.005842][ T9164] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.007081][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.008848][ T9164] device bridge_slave_1 entered promiscuous mode [ 206.020980][ T9164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.024258][ T9174] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.039026][ T9164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.050223][ T9207] loop3: detected capacity change from 0 to 512 [ 206.094597][ T9207] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 206.096334][ T9207] EXT4-fs (loop3): orphan cleanup on readonly fs [ 206.098832][ T9207] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.1839: corrupted inode contents [ 206.100873][ T9207] EXT4-fs (loop3): Remounting filesystem read-only [ 206.101882][ T9207] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #16: comm syz.3.1839: mark_inode_dirty error [ 206.106951][ T9207] EXT4-fs (loop3): Remounting filesystem read-only [ 206.108052][ T9207] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.1839: corrupted inode contents [ 206.110204][ T9207] EXT4-fs (loop3): Remounting filesystem read-only [ 206.111226][ T9207] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1839: mark_inode_dirty error [ 206.114881][ T9207] EXT4-fs (loop3): Remounting filesystem read-only [ 206.115994][ T9207] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.1839: corrupted inode contents [ 206.118102][ T9207] EXT4-fs (loop3): Remounting filesystem read-only [ 206.119183][ T9207] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 206.120773][ T9207] EXT4-fs (loop3): Remounting filesystem read-only [ 206.121816][ T9207] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.1839: corrupted inode contents [ 206.125865][ T9207] EXT4-fs (loop3): Remounting filesystem read-only [ 206.126900][ T9207] EXT4-fs error (device loop3): ext4_truncate:4318: inode #16: comm syz.3.1839: mark_inode_dirty error [ 206.129314][ T9207] EXT4-fs (loop3): Remounting filesystem read-only [ 206.130331][ T9207] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 206.136331][ T9207] EXT4-fs (loop3): Remounting filesystem read-only [ 206.137655][ T9207] EXT4-fs (loop3): 1 truncate cleaned up [ 206.139090][ T5664] __quota_error: 191 callbacks suppressed [ 206.139097][ T5664] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 206.150850][ T5664] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:13: Failed to release dquot type 1 [ 206.160906][ T5664] EXT4-fs (loop3): Remounting filesystem read-only [ 206.162146][ T9207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 206.259920][ T9164] team0: Port device team_slave_0 added [ 206.265745][ T9164] team0: Port device team_slave_1 added [ 206.280686][ T9207] wg1 speed is unknown, defaulting to 1000 [ 206.281214][ T9229] netlink: 'syz.2.1844': attribute type 5 has an invalid length. [ 206.285269][ T9227] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 206.287370][ T9227] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 206.287935][ T9164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.292077][ T9164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.305582][ T9164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.311080][ T9164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.319187][ T9164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.349915][ T9164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.360492][ T1613] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.362098][ T1613] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.448234][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 206.464327][ T9164] device hsr_slave_0 entered promiscuous mode [ 206.485428][ T27] audit: type=1326 audit(206.474:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 206.488669][ T27] audit: type=1326 audit(206.474:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 206.490465][ T9240] loop3: detected capacity change from 0 to 256 [ 206.493106][ T27] audit: type=1326 audit(206.474:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 206.500582][ T27] audit: type=1326 audit(206.474:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 206.509832][ T27] audit: type=1326 audit(206.474:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 206.513483][ T9164] device hsr_slave_1 entered promiscuous mode [ 206.518433][ T27] audit: type=1326 audit(206.494:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=182 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 206.522040][ T27] audit: type=1326 audit(206.494:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 206.534159][ T27] audit: type=1326 audit(206.494:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 206.543348][ T9164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.544663][ T9164] Cannot create hsr debugfs directory [ 206.544886][ T27] audit: type=1326 audit(206.494:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ef5b9e8 code=0x7ffc0000 [ 206.550322][ T1613] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.551846][ T1613] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.619429][ T1613] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.620937][ T1613] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.644938][ T9249] tls_set_device_offload_rx: netdev not found [ 206.688088][ T1613] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.689607][ T1613] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.707737][ T9164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.728969][ T9164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.775291][ T9164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.814432][ T9253] netlink: 'syz.3.1855': attribute type 5 has an invalid length. [ 206.817234][ T9253] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.818523][ T9253] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.819743][ T9253] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.820939][ T9253] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.825839][ T9253] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.827229][ T9253] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.828446][ T9253] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.829732][ T9253] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.861502][ T9255] loop2: detected capacity change from 0 to 1024 [ 206.866746][ T9255] ext3: Unknown parameter 'rootcontext' [ 206.909663][ T9164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.088372][ T9164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.094007][ T1613] tipc: Disabling bearer [ 207.096252][ T1613] tipc: Left network mode [ 207.099535][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.101231][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.105377][ T9164] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.108537][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.110273][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.115124][ T5425] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.116286][ T5425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.120521][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.128185][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.130962][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.143324][ T5425] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.144583][ T5425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.147166][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.153336][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.159076][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.162792][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.169387][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.174109][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.175805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.180599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.188605][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.197446][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.208083][ T9278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1859'. [ 207.326079][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 207.330593][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.359459][ T9164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.397456][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.398793][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.666189][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 207.677040][ T9321] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 207.678485][ T9321] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 207.689972][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.691686][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.707893][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.709563][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.712491][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.715403][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.758450][ T9164] device veth0_vlan entered promiscuous mode [ 207.764073][ T9164] device veth1_vlan entered promiscuous mode [ 207.783952][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.785535][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.786825][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.788270][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.790924][ T9164] device veth0_macvtap entered promiscuous mode [ 207.794918][ T9164] device veth1_macvtap entered promiscuous mode [ 207.798328][ T9339] atomic_op 0000000097edf5ee conn xmit_atomic 0000000000000000 [ 207.856007][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.857704][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.859904][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.862713][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.864504][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.866008][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.867600][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.871498][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.875734][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.882570][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.889364][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.891118][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.938862][ T9164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.940359][ T9164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.941770][ T9164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.943741][ T9164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.068184][ T8278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.069591][ T8278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.072347][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.137125][ T8278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.139536][ T8278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.143481][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.169983][ T9360] wg1 speed is unknown, defaulting to 1000 [ 208.464340][ T9375] loop1: detected capacity change from 0 to 1024 [ 208.467154][ T9375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.474372][ T9364] netlink: 'syz.5.1828': attribute type 39 has an invalid length. [ 208.491154][ T9375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 208.527561][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 208.898688][ T9408] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1889'. [ 208.900555][ T9408] netlink: zone id is out of range [ 208.913792][ T9408] netlink: zone id is out of range [ 208.921067][ T9408] netlink: zone id is out of range [ 208.930459][ T9408] netlink: zone id is out of range [ 208.931326][ T9408] netlink: zone id is out of range [ 208.932603][ T9408] netlink: zone id is out of range [ 208.964857][ T9408] netlink: zone id is out of range [ 208.966539][ T9408] netlink: zone id is out of range [ 208.967655][ T9408] netlink: zone id is out of range [ 208.968485][ T9408] netlink: zone id is out of range [ 209.085754][ T9413] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 209.087414][ T9413] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 209.179306][ T1613] device hsr_slave_0 left promiscuous mode [ 209.225701][ T1613] device hsr_slave_1 left promiscuous mode [ 209.323176][ T1613] batman_adv: batadv0: Removing interface: dummy0 [ 209.324896][ T1613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.326287][ T1613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.327832][ T1613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.332297][ T1613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.335678][ T1613] batman_adv: batadv0: Interface deactivated: vxlan0 [ 209.337872][ T1613] batman_adv: batadv0: Removing interface: vxlan0 [ 209.493584][ T1613] device veth1_macvtap left promiscuous mode [ 209.494875][ T1613] device veth0_macvtap left promiscuous mode [ 209.495899][ T1613] device veth1_vlan left promiscuous mode [ 209.496882][ T1613] device veth0_vlan left promiscuous mode [ 210.017255][ T9451] loop2: detected capacity change from 0 to 512 [ 210.022878][ T9451] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 210.226175][ T9451] EXT4-fs (loop2): 1 truncate cleaned up [ 210.227209][ T9451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 210.912827][ T9457] loop3: detected capacity change from 0 to 512 [ 210.919951][ T9457] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1905: inode has both inline data and extents flags [ 210.922333][ T9457] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1905: couldn't read orphan inode 15 (err -117) [ 210.935936][ T9457] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 210.941881][ T9457] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 210.990295][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 211.001050][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 211.026885][ T9465] loop3: detected capacity change from 0 to 512 [ 211.046109][ T9465] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 211.067651][ T9465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 211.136682][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 212.177980][ T1613] team0 (unregistering): Port device team_slave_1 removed [ 212.374247][ T1613] team0 (unregistering): Port device team_slave_0 removed [ 212.543489][ T1613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.743473][ T1613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.074728][ T1613] bond0 (unregistering): Released all slaves [ 215.175004][ T9467] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 215.176538][ T9467] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 215.330943][ T9494] No such timeout policy "syz1" [ 215.407849][ T9503] loop2: detected capacity change from 0 to 512 [ 215.420437][ T9503] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 215.442554][ T9503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.462176][ T9512] netlink: 'syz.1.1922': attribute type 10 has an invalid length. [ 215.475839][ T9512] netlink: 'syz.1.1922': attribute type 10 has an invalid length. [ 215.499408][ T9512] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 215.501078][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 215.575173][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 215.575186][ T27] audit: type=1326 audit(215.564:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 215.580252][ T27] audit: type=1326 audit(215.564:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 215.587962][ T27] audit: type=1326 audit(215.564:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 215.650981][ T27] audit: type=1326 audit(215.564:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 215.654603][ T27] audit: type=1326 audit(215.564:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 215.662270][ T27] audit: type=1326 audit(215.564:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 215.665908][ T27] audit: type=1326 audit(215.564:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 215.669299][ T27] audit: type=1326 audit(215.564:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 215.672442][ T27] audit: type=1326 audit(215.564:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 215.672461][ T9527] loop2: detected capacity change from 0 to 128 [ 215.675777][ T27] audit: type=1326 audit(215.564:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1925" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=176 compat=0 ip=0xffff9f15b9e8 code=0x7ffc0000 [ 215.681348][ T9527] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.685499][ T9527] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.732316][ T8823] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.758580][ T9531] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 215.760168][ T9531] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 217.220743][ T9562] loop5: detected capacity change from 0 to 512 [ 217.280942][ T9562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.300319][ T9565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.315788][ T9562] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 217.321656][ T9565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.369104][ T9164] EXT4-fs (loop5): unmounting filesystem. [ 217.736061][ T9617] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 217.737548][ T9617] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 217.956176][ T9631] netlink: 'syz.1.1946': attribute type 39 has an invalid length. [ 217.980880][ T9633] loop2: detected capacity change from 0 to 512 [ 217.997520][ T9633] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 218.012078][ T9633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 218.175331][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 218.947977][ T9647] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1951'. [ 219.122329][ T9664] netlink: 'syz.5.1958': attribute type 39 has an invalid length. [ 219.160322][ T11] Bluetooth: hci4: Frame reassembly failed (-90) [ 219.169826][ T9665] Bluetooth: hci4: Frame reassembly failed (-84) [ 219.548000][ T9699] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 219.549771][ T9699] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 219.886860][ T9702] netlink: 'syz.3.1971': attribute type 39 has an invalid length. [ 219.930037][ T9706] loop3: detected capacity change from 0 to 512 [ 219.935685][ T9706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 219.947798][ T9706] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 220.004614][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 221.077566][ T9733] netlink: 'syz.1.1982': attribute type 39 has an invalid length. [ 221.213574][ T47] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 221.349079][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 221.349089][ T27] audit: type=1326 audit(221.334:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.5.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 221.354629][ T27] audit: type=1326 audit(221.344:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.5.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 221.364639][ T27] audit: type=1326 audit(221.344:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.5.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=239 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 221.367945][ T27] audit: type=1326 audit(221.344:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.5.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 221.371657][ T27] audit: type=1326 audit(221.344:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.5.1991" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 221.375815][ T27] audit: type=1326 audit(221.344:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.3.1987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 221.379686][ T27] audit: type=1326 audit(221.344:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.3.1987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 221.384438][ T27] audit: type=1326 audit(221.344:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.3.1987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=31 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 221.387809][ T9754] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 221.389257][ T9754] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 221.392119][ T27] audit: type=1326 audit(221.344:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.3.1987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 221.396016][ T27] audit: type=1326 audit(221.344:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.3.1987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8735b9e8 code=0x7ffc0000 [ 221.427686][ T9762] netlink: 'syz.5.1993': attribute type 39 has an invalid length. [ 221.477981][ T9768] loop5: detected capacity change from 0 to 512 [ 221.480150][ T9768] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 221.497329][ T9768] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 221.564217][ T9164] EXT4-fs (loop5): unmounting filesystem. [ 221.597479][ T9778] loop5: detected capacity change from 0 to 512 [ 221.602436][ T9778] EXT4-fs warning (device loop5): ext4_xattr_inode_get:495: inode #11: comm syz.5.1999: ea_inode file size=0 entry size=6 [ 221.605622][ T9778] ------------[ cut here ]------------ [ 221.606871][ T9778] EA inode 11 i_nlink=2 [ 221.607208][ T9778] WARNING: CPU: 0 PID: 9778 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 221.609361][ T9778] Modules linked in: [ 221.609954][ T9778] CPU: 0 PID: 9778 Comm: syz.5.1999 Not tainted syzkaller #0 [ 221.611140][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 221.612636][ T9778] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 221.613715][ T9778] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 221.614588][ T9778] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 221.615495][ T9778] sp : ffff800020c36f60 [ 221.616087][ T9778] x29: ffff800020c37000 x28: 0000000000000000 x27: dfff800000000000 [ 221.617311][ T9778] x26: 1fffe0001ed9781b x25: ffff700004186df0 x24: 0000000000000000 [ 221.618500][ T9778] x23: ffff800017a8a000 x22: ffff0000f6cbbf20 x21: 0000000000000002 [ 221.619694][ T9778] x20: 0000000000000001 x19: ffff0000f6cbbee0 x18: ffff800011abbcc0 [ 221.621028][ T9778] x17: 1fffe00033ed797e x16: ffff8000082d25ac x15: ffff8000150bd000 [ 221.622288][ T9778] x14: 0000000000000100 x13: 1ffff00002a180b1 x12: 0000000000000001 [ 221.623531][ T9778] x11: 1fffe0001ab3a3d0 x10: 0000000000000000 x9 : e9ee4db62ae31700 [ 221.624732][ T9778] x8 : e9ee4db62ae31700 x7 : ffff800008251e80 x6 : 0000000000000000 [ 221.625958][ T9778] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff800008240ddc [ 221.627188][ T9778] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 221.628397][ T9778] Call trace: [ 221.628878][ T9778] ext4_xattr_inode_update_ref+0x42c/0x470 [ 221.629738][ T9778] ext4_xattr_inode_dec_ref_all+0x8b4/0xd48 [ 221.630596][ T9778] ext4_xattr_delete_inode+0x870/0xa00 [ 221.631353][ T9778] ext4_evict_inode+0xcd0/0x1270 [ 221.632058][ T9778] evict+0x3c8/0x810 [ 221.632668][ T9778] iput+0x764/0x7f4 [ 221.633218][ T9778] ext4_process_orphan+0x240/0x2b4 [ 221.633945][ T9778] ext4_orphan_cleanup+0x908/0x104c [ 221.634772][ T9778] ext4_fill_super+0x6440/0x68a8 [ 221.635487][ T9778] get_tree_bdev+0x358/0x544 [ 221.636234][ T9778] ext4_get_tree+0x28/0x38 [ 221.636860][ T9778] vfs_get_tree+0x90/0x274 [ 221.637507][ T9778] do_new_mount+0x228/0x810 [ 221.638152][ T9778] path_mount+0x5b4/0xe78 [ 221.638797][ T9778] __arm64_sys_mount+0x49c/0x584 [ 221.639567][ T9778] invoke_syscall+0x98/0x2bc [ 221.640372][ T9778] el0_svc_common+0x138/0x258 [ 221.640999][ T9778] do_el0_svc+0x58/0x13c [ 221.641615][ T9778] el0_svc+0x58/0x138 [ 221.642239][ T9778] el0t_64_sync_handler+0x84/0xf0 [ 221.642984][ T9778] el0t_64_sync+0x18c/0x190 [ 221.643717][ T9778] irq event stamp: 3062 [ 221.644349][ T9778] hardirqs last enabled at (3061): [] finish_lock_switch+0xb0/0x1c4 [ 221.645759][ T9778] hardirqs last disabled at (3062): [] el1_dbg+0x24/0x80 [ 221.647038][ T9778] softirqs last enabled at (3048): [] handle_softirqs+0xaf8/0xc6c [ 221.648347][ T9778] softirqs last disabled at (2959): [] __do_softirq+0x14/0x20 [ 221.649627][ T9778] ---[ end trace 0000000000000000 ]--- [ 221.689636][ T9778] EXT4-fs (loop5): 1 orphan inode deleted [ 221.693744][ T9781] loop3: detected capacity change from 0 to 512 [ 221.746572][ T9781] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 221.897243][ T9781] EXT4-fs (loop3): 1 truncate cleaned up [ 221.898250][ T9781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.085197][ T9778] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 222.499873][ T9164] EXT4-fs (loop5): unmounting filesystem. [ 222.736187][ T4320] EXT4-fs (loop3): unmounting filesystem.