last executing test programs: 14.809512276s ago: executing program 2 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xa, 0x5, "5a4e526fe751"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 14.52912186s ago: executing program 2 (id=1221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 14.392705451s ago: executing program 2 (id=1225): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r2, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 14.126785315s ago: executing program 2 (id=1229): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) 11.901932334s ago: executing program 2 (id=1242): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c91c, &(0x7f0000000400)={[{@debug}, {@noblock_validity}, {@sb={'sb', 0x3d, 0xf}}, {@jqfmt_vfsold}, {@noinit_itable}, {@nodiscard}, {@discard}, {@i_version}, {@nodelalloc, 0x32}]}, 0x1, 0x4e1, &(0x7f0000001a40)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0xb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) accept4$packet(r5, 0x0, &(0x7f0000000080), 0x80000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 10.773936369s ago: executing program 0 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xa, 0x5, "5a4e526fe751"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 10.69458128s ago: executing program 3 (id=1248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 9.94044189s ago: executing program 0 (id=1250): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001008000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 9.798504412s ago: executing program 2 (id=1251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 9.712320503s ago: executing program 3 (id=1253): unshare(0x42000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x18, 0x0, "e9255b"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 9.333337418s ago: executing program 3 (id=1256): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) accept4(r1, 0x0, 0x0, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) dup3(r4, r5, 0x0) 8.245065822s ago: executing program 3 (id=1258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 8.242489062s ago: executing program 0 (id=1269): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000078000000090a010400000000000000000700000308000a4000000000080007400000000f0900010073797a3000000000080005400000000d38001280200001800e000100636f6e6e6c696d696d0000000c0002800800014000000008140001800e000100636f6e6e6c696d69740000000800034000000070140000001000010000000000000000000084000a"], 0xc0}}, 0x24050880) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f00000004c0)={[{@abort}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@resgid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) 8.157322953s ago: executing program 3 (id=1259): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x200, 0x104, 0x16}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x3cd842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000340)=0x1000000000006) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000300000900020073857a30000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x5b4230ff, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0xfd0a) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0xd, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2a0, 0x178, 0x178, 0x2a0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x1}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 5.859825773s ago: executing program 3 (id=1261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) unshare(0x62040200) close(r4) 5.529844317s ago: executing program 0 (id=1265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xa, 0x5, "5a4e526fe751"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 5.506225498s ago: executing program 4 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc4002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf30, 0x1, 0x9, 0x1ff, 0x80, 0x7, 0x9, 0x3, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x101, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x7}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x240008c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd30, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfff}}]}, 0x38}}, 0x44080) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xf, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r11, 0xa, 0x13) fcntl$setlease(r11, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 4.222357515s ago: executing program 4 (id=1268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r1, 0x409, 0xb) 4.129600146s ago: executing program 0 (id=1270): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) accept4(r1, 0x0, 0x0, 0x800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) dup3(r4, r5, 0x0) 4.129363966s ago: executing program 1 (id=1271): unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.989136231s ago: executing program 0 (id=1272): syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x14, 0x30, 0x12f}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) 2.888713112s ago: executing program 4 (id=1273): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x200, 0x104, 0x16}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x3cd842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000340)=0x1000000000006) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000300000900020073857a30000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x5b4230ff, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0xfd0a) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0xd, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2a0, 0x178, 0x178, 0x2a0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x1}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 1.802461816s ago: executing program 1 (id=1274): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000ec0)='/proc/partitions\x00', 0x0, 0x0) pread64(r0, &(0x7f00000013c0)=""/208, 0x31, 0x401) 1.801388416s ago: executing program 4 (id=1285): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) umount2(&(0x7f0000000200)='./file0\x00', 0x9) 1.718155077s ago: executing program 1 (id=1275): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x200, 0x104, 0x16}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x3cd842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000340)=0x1000000000006) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000300000900020073857a30000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x5b4230ff, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0xfd0a) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0xd, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2a0, 0x178, 0x178, 0x2a0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x1}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 1.625789418s ago: executing program 4 (id=1276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x6c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_SYNPROXY={0x4}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008800}, 0x55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB], 0x20000600}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r8, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 263.761096ms ago: executing program 4 (id=1277): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000078000000090a010400000000000000000700000308000a4000000000080007400000000f0900010073797a3000000000080005400000000d38001280200001800e000100636f6e6e6c696d696d0000000c0002800800014000000008140001800e000100636f6e6e6c696d69740000000800034000000070140000001000010000000000000000000084000a"], 0xc0}}, 0x24050880) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f00000004c0)={[{@abort}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@resgid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) 262.199967ms ago: executing program 1 (id=1278): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x18, 0x140f, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40044}, 0x4040084) 231.948127ms ago: executing program 1 (id=1280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc4002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf30, 0x1, 0x9, 0x1ff, 0x80, 0x7, 0x9, 0x3, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x101, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x7}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x240008c4) 0s ago: executing program 1 (id=1281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xa, 0x5, "5a4e526fe751"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) kernel console output (not intermixed with test programs): 6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.408311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.419298][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.422112][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.425191][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.427973][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.432019][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.438219][ T4310] device veth0_vlan entered promiscuous mode [ 41.443031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.449547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.461354][ T4302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.465067][ T4302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.467418][ T4302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.469928][ T4302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.499969][ T4310] device veth1_vlan entered promiscuous mode [ 41.540970][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.544236][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.577257][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.579462][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.602602][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.612313][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.618596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.621196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.647120][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.650027][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.650176][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.654328][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.654553][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.657136][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.676538][ T4300] device veth0_vlan entered promiscuous mode [ 41.679576][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.682011][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.685219][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.694853][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.696987][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.702415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.709703][ T4310] device veth0_macvtap entered promiscuous mode [ 41.736538][ T4300] device veth1_vlan entered promiscuous mode [ 41.748857][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.751299][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.754854][ T4310] device veth1_macvtap entered promiscuous mode [ 41.763078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.766328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.768847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.772095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.775468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.777945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.781707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.792124][ T4300] device veth0_macvtap entered promiscuous mode [ 41.804482][ T4300] device veth1_macvtap entered promiscuous mode [ 41.840389][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.842523][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.871688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.875112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.877598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.927134][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.930719][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.942185][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.950519][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.961284][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.971145][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.980329][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.992135][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.997031][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.999580][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.002285][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.007456][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.010449][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.013045][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.016522][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.020707][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.024337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.027108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.037596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.040428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.083791][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.086574][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.089151][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.102142][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.110973][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.123705][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.132321][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.150833][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.154444][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.157123][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.170481][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.174502][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.177250][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.189258][ T4310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.192258][ T4310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.203021][ T4310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.222749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.230361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.234662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.237305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.266568][ T4300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.268932][ T4300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.271278][ T4300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.283929][ T4300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.319537][ T4377] loop0: detected capacity change from 0 to 32768 [ 42.326550][ T4310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.349147][ T4310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.351431][ T4310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.368600][ T4310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.379066][ T4288] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.609358][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.611549][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.627479][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.641356][ T4377] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 42.671327][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.680372][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.685546][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.710318][ T4377] loop0: detected capacity change from 0 to 2048 [ 42.718000][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.720136][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.729644][ T4377] ======================================================= [ 42.729644][ T4377] WARNING: The mand mount option has been deprecated and [ 42.729644][ T4377] and is ignored by this kernel. Remove the mand [ 42.729644][ T4377] option from the mount to silence this warning. [ 42.729644][ T4377] ======================================================= [ 42.743641][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.782639][ T4377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 42.787315][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.789532][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.803346][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.940702][ T4397] loop2: detected capacity change from 0 to 256 [ 43.017225][ T4391] loop1: detected capacity change from 0 to 32768 [ 43.037962][ T4391] XFS: attr2 mount option is deprecated. [ 43.094388][ T4393] loop3: detected capacity change from 0 to 32768 [ 43.106957][ T4391] XFS (loop1): Mounting V5 Filesystem [ 43.143926][ T4393] XFS (loop3): Mounting V5 Filesystem [ 43.236316][ T4301] Bluetooth: hci2: command 0x040f tx timeout [ 43.238002][ T4301] Bluetooth: hci1: command 0x040f tx timeout [ 43.239614][ T4301] Bluetooth: hci0: command 0x040f tx timeout [ 43.250839][ T4416] loop4: detected capacity change from 0 to 512 [ 43.268342][ T4393] XFS (loop3): Ending clean mount [ 43.289987][ T4391] XFS (loop1): Ending clean mount [ 43.296598][ T4391] XFS (loop1): Quotacheck needed: Please wait. [ 43.379128][ T4416] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.395105][ T4306] Bluetooth: hci3: command 0x040f tx timeout [ 43.396798][ T4306] Bluetooth: hci4: command 0x040f tx timeout [ 43.413214][ T4391] XFS (loop1): Quotacheck: Done. [ 43.464883][ T4391] vhci_hcd: invalid port number 254 [ 43.466359][ T4391] vhci_hcd: invalid port number 254 [ 43.488994][ T4440] loop0: detected capacity change from 0 to 4096 [ 43.511873][ T4440] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 43.542271][ T4440] ntfs3: loop0: Failed to load $MFT. [ 43.548070][ T4301] Bluetooth: hci0: unexpected cc 0x0c57 length: 3 < 33 [ 43.630507][ T4302] XFS (loop3): Unmounting Filesystem [ 43.668324][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 43.758056][ T4447] capability: warning: `syz.4.17' uses deprecated v2 capabilities in a way that may be insecure [ 43.775958][ T4447] overlayfs: upper fs does not support tmpfile. [ 43.789853][ T4447] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 43.831404][ T4454] loop2: detected capacity change from 0 to 512 [ 43.930534][ T4460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.31'. [ 43.933008][ T4460] netlink: 67 bytes leftover after parsing attributes in process `syz.0.31'. [ 43.966017][ T4296] XFS (loop1): Unmounting Filesystem [ 44.103457][ T4454] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 44.233309][ T4465] loop0: detected capacity change from 0 to 4096 [ 44.252596][ T4465] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 44.260229][ T4465] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 44.270360][ T4465] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 44.281504][ T4465] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 44.292984][ T4415] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.297877][ T4468] tmpfs: Unknown parameter '00000000000000000000003' [ 44.314372][ T4465] ntfs: (device loop0): load_system_files(): Failed to load $Volume. [ 44.317589][ T4465] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 44.562702][ T4459] loop4: detected capacity change from 0 to 32768 [ 44.716955][ T4486] netlink: 596 bytes leftover after parsing attributes in process `syz.2.27'. [ 44.800517][ T4459] netlink: 'syz.4.21': attribute type 1 has an invalid length. [ 44.835175][ T4459] loop4: detected capacity change from 0 to 2048 [ 44.837685][ T4492] syz.2.30 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.849289][ T4459] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.005607][ T4495] vhci_hcd: invalid port number 16 [ 45.007037][ T4495] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 45.019453][ T4499] Zero length message leads to an empty skb [ 45.186817][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.207400][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.233696][ T27] audit: type=1326 audit(45.180:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 45.239244][ T27] audit: type=1326 audit(45.190:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=235 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 45.241830][ T4509] loop3: detected capacity change from 0 to 256 [ 45.269222][ T27] audit: type=1326 audit(45.190:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 45.288563][ T27] audit: type=1326 audit(45.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 45.313752][ T4301] Bluetooth: hci1: command 0x0419 tx timeout [ 45.315545][ T4301] Bluetooth: hci2: command 0x0419 tx timeout [ 45.356682][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 45.436966][ T4523] loop1: detected capacity change from 0 to 1024 [ 45.439305][ T4523] EXT4-fs: Ignoring removed nobh option [ 45.468843][ T4523] EXT4-fs: Ignoring removed bh option [ 45.473445][ T4306] Bluetooth: hci4: command 0x0419 tx timeout [ 45.474763][ T4523] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.475122][ T4306] Bluetooth: hci3: command 0x0419 tx timeout [ 45.529336][ T4527] loop4: detected capacity change from 0 to 1024 [ 45.537875][ T4523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.548092][ T4527] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 45.646158][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 45.738334][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 45.838671][ T4539] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.48'. [ 45.909089][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 45.926519][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 46.258412][ T4560] loop2: detected capacity change from 0 to 1024 [ 46.260690][ T4560] EXT4-fs: Ignoring removed oldalloc option [ 46.300215][ T4559] hub 9-0:1.0: USB hub found [ 46.303668][ T4560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.306736][ T4559] hub 9-0:1.0: 8 ports detected [ 46.514508][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 46.571601][ T4574] loop1: detected capacity change from 0 to 1024 [ 46.582913][ T4574] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 46.608729][ T4574] hfsplus: invalid btree flag [ 46.610189][ T4574] hfsplus: failed to load extents file [ 46.648233][ T4572] loop3: detected capacity change from 0 to 4096 [ 46.712705][ T4572] ntfs: volume version 3.1. [ 46.777060][ T4562] loop4: detected capacity change from 0 to 32768 [ 46.780893][ T4572] binfmt_misc: register: failed to install interpreter file ./file2 [ 46.789966][ T4580] loop9: detected capacity change from 0 to 8 [ 46.811032][ T4580] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 46.812522][ T4580] loop9: partition table partially beyond EOD, truncated [ 46.830133][ T4580] loop9: p1 size 81768186 extends beyond EOD, truncated [ 46.868832][ T4562] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 46.933292][ T4423] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 46.945645][ T4423] loop9: partition table partially beyond EOD, truncated [ 46.995893][ T4423] loop9: p1 size 81768186 extends beyond EOD, truncated [ 47.080144][ T4584] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 47.081566][ T4584] loop9: partition table partially beyond EOD, truncated [ 47.089506][ T4584] loop9: p1 size 81768186 extends beyond EOD, truncated [ 47.130214][ T4300] ocfs2: Unmounting device (7,4) on (node local) [ 47.281400][ T4583] loop2: detected capacity change from 0 to 40427 [ 47.288396][ T4583] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 47.294739][ T4583] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 47.328629][ T4583] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 47.340330][ T4583] F2FS-fs (loop2): invalid crc value [ 47.360272][ T4583] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.402749][ T4583] F2FS-fs (loop2): Start checkpoint disabled! [ 47.424628][ T4583] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 47.426639][ T4583] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 47.452057][ T4598] mkiss: ax0: crc mode is auto. [ 47.575940][ T4360] kworker/u4:6: attempt to access beyond end of device [ 47.575940][ T4360] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 47.714137][ T4580] loop1: detected capacity change from 0 to 40427 [ 47.819836][ T4415] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.361723][ T4622] loop4: detected capacity change from 0 to 1024 [ 48.443539][ T4622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.474218][ T4632] netlink: 96 bytes leftover after parsing attributes in process `syz.1.81'. [ 48.498779][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 48.669500][ T4644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 48.808231][ T4651] batman_adv: batadv0: Adding interface: dummy0 [ 48.809936][ T4651] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.838968][ T4651] batman_adv: batadv0: Interface activated: dummy0 [ 48.884012][ T4651] batadv0: mtu less than device minimum [ 48.888640][ T4651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.894662][ T4651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.900361][ T4651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.906172][ T4651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.911839][ T4651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.917574][ T4651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.923342][ T4651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.929156][ T4651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.935094][ T4651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.168272][ T4665] loop1: detected capacity change from 0 to 512 [ 49.187495][ T4665] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.264693][ T4665] EXT4-fs (loop1): 1 orphan inode deleted [ 49.266325][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.302676][ T4672] loop0: detected capacity change from 0 to 512 [ 49.324668][ T4672] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.325571][ T519] __quota_error: 50 callbacks suppressed [ 49.325584][ T519] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 49.326494][ T4672] ext4: Unknown parameter 'seclabel' [ 49.328138][ T519] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:4: Failed to release dquot type 1 [ 49.361959][ T4675] loop4: detected capacity change from 0 to 512 [ 49.376708][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 49.398400][ T4675] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 49.402161][ T4675] EXT4-fs warning (device loop4): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.412067][ T4675] EXT4-fs (loop4): mount failed [ 49.436724][ T4679] mmap: syz.0.101 (4679) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.554465][ T4687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 49.599484][ T4689] netlink: 'syz.1.105': attribute type 13 has an invalid length. [ 49.665535][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 49.785181][ T4695] netlink: 76 bytes leftover after parsing attributes in process `syz.4.108'. [ 50.186632][ T4714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.114'. [ 50.199234][ T4715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 50.202632][ T4715] x_tables: ip_tables: udp match: only valid for protocol 17 [ 50.396825][ T4729] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 50.399024][ T4729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'. [ 50.552930][ T4728] loop3: detected capacity change from 0 to 8192 [ 50.648639][ T4728] loop3: p1 < > p2 < p5 > p3 p4 [ 50.719095][ T4728] loop3: p3 start 83890176 is beyond EOD, truncated [ 50.721158][ T4728] loop3: p4 size 16776960 extends beyond EOD, truncated [ 50.732578][ T4728] loop3: p5 size 16776960 extends beyond EOD, truncated [ 50.931326][ T4752] vhci_hcd: invalid port number 236 [ 50.932833][ T4752] vhci_hcd: invalid port number 236 [ 50.945819][ T4754] loop0: detected capacity change from 0 to 512 [ 50.982194][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 51.030334][ T4754] EXT4-fs (loop0): 1 orphan inode deleted [ 51.031916][ T4754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.099255][ T55] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 51.101904][ T55] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:3: Failed to release dquot type 1 [ 51.169165][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 51.218124][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 51.334423][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 51.395326][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 51.405634][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 51.428900][ T4424] udevd[4424]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 51.430542][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 52.082179][ T4790] loop4: detected capacity change from 0 to 512 [ 52.092523][ T4790] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 52.099237][ T4790] EXT4-fs (loop4): invalid journal inode [ 52.104574][ T4790] EXT4-fs (loop4): can't get journal size [ 52.136036][ T4790] EXT4-fs (loop4): 1 truncate cleaned up [ 52.137637][ T4790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.183868][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 54.233125][ C0] sched: RT throttling activated [ 64.153377][ T4775] netlink: 'syz.1.139': attribute type 31 has an invalid length. [ 64.226918][ T1984] cfg80211: failed to load regulatory.db [ 64.315089][ T4826] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 64.494638][ T4839] ucma_write: process 80 (syz.4.161) changed security contexts after opening file descriptor, this is not allowed. [ 64.515604][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.517484][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.601029][ T4842] netlink: 'GPL': attribute type 13 has an invalid length. [ 64.767640][ T27] audit: type=1326 audit(64.720:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 64.778815][ T27] audit: type=1326 audit(64.720:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 64.803544][ T27] audit: type=1326 audit(64.720:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=75 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 64.827547][ T27] audit: type=1326 audit(64.720:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 64.851793][ T27] audit: type=1326 audit(64.720:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 64.880323][ T4842] gretap0: refused to change device tx_queue_len [ 64.882068][ T4842] net_ratelimit: 11 callbacks suppressed [ 64.882077][ T4842] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.899750][ T4867] capability: warning: `syz.1.172' uses 32-bit capabilities (legacy support in use) [ 64.903801][ T27] audit: type=1326 audit(64.740:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 64.947291][ T27] audit: type=1326 audit(64.750:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 64.953096][ T27] audit: type=1326 audit(64.750:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 64.973050][ T27] audit: type=1326 audit(64.750:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 64.995006][ T27] audit: type=1326 audit(64.750:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4859 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 65.115218][ T4875] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 65.210855][ T4882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.179'. [ 65.436782][ T4878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.443884][ T4878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.917462][ T4922] loop1: detected capacity change from 0 to 1024 [ 65.982258][ T4922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.147894][ T4937] process 'syz.2.192' launched '/dev/fd/5' with NULL argv: empty string added [ 66.942296][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 66.970122][ T4948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.193'. [ 66.972699][ T4948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.193'. [ 67.008597][ T4946] netlink: 60 bytes leftover after parsing attributes in process `syz.0.193'. [ 67.082195][ T4955] loop3: detected capacity change from 0 to 512 [ 67.094178][ T4955] EXT4-fs: Ignoring removed orlov option [ 67.112183][ T4955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.124553][ T4955] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.133416][ T4955] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.194: bg 0: block 248: padding at end of block bitmap is not set [ 67.150716][ T4955] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.194: Failed to acquire dquot type 1 [ 67.192694][ T4955] EXT4-fs (loop3): 1 truncate cleaned up [ 67.210579][ T4955] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.264781][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 67.278967][ T4962] loop0: detected capacity change from 0 to 512 [ 67.303841][ T4962] EXT4-fs: Ignoring removed nobh option [ 67.395165][ T4962] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.197: corrupted inode contents [ 67.417308][ T4962] EXT4-fs (loop0): Remounting filesystem read-only [ 67.438429][ T4962] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #16: comm syz.0.197: mark_inode_dirty error [ 67.448594][ T4962] EXT4-fs (loop0): Remounting filesystem read-only [ 67.450844][ T4962] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.197: corrupted inode contents [ 67.466914][ T4962] EXT4-fs (loop0): Remounting filesystem read-only [ 67.468633][ T4962] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.197: mark_inode_dirty error [ 67.497883][ T4972] vhci_hcd: invalid port number 16 [ 67.499299][ T4972] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 67.514056][ T4962] EXT4-fs (loop0): Remounting filesystem read-only [ 67.515848][ T4962] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.197: corrupted inode contents [ 67.551296][ T4962] EXT4-fs (loop0): Remounting filesystem read-only [ 67.579053][ T4962] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 67.589874][ T4962] EXT4-fs (loop0): Remounting filesystem read-only [ 67.591928][ T4962] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.197: corrupted inode contents [ 67.609225][ T4962] EXT4-fs (loop0): Remounting filesystem read-only [ 67.610967][ T4962] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.197: mark_inode_dirty error [ 67.629982][ T4962] EXT4-fs (loop0): Remounting filesystem read-only [ 67.631792][ T4962] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 67.648988][ T4962] EXT4-fs (loop0): Remounting filesystem read-only [ 67.653727][ T4962] EXT4-fs (loop0): 1 truncate cleaned up [ 67.655233][ T4962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 67.678609][ T4803] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:8: Failed to release dquot type 1 [ 67.683581][ T4803] EXT4-fs (loop0): Remounting filesystem read-only [ 67.721233][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 67.817361][ T4979] syz.0.203 uses obsolete (PF_INET,SOCK_PACKET) [ 68.230109][ T4996] loop1: detected capacity change from 0 to 512 [ 68.236067][ T4998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.211'. [ 68.282776][ T5002] loop0: detected capacity change from 0 to 128 [ 68.294846][ T4996] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 68.398222][ T5002] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.519371][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 68.641930][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 69.412586][ T5021] netlink: 76 bytes leftover after parsing attributes in process `syz.2.216'. [ 69.418411][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 70.205731][ T5063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 70.226889][ T5050] infiniband syz1: set active [ 70.228436][ T5050] infiniband syz1: added veth0_to_team [ 70.382822][ T5050] RDS/IB: syz1: added [ 70.397858][ T5050] smc: adding ib device syz1 with port count 1 [ 70.409764][ T5050] smc: ib device syz1 port 1 has pnetid [ 72.366590][ T5131] loop1: detected capacity change from 0 to 1024 [ 72.453344][ T5131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.499364][ T5144] loop0: detected capacity change from 0 to 128 [ 72.503832][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 72.531103][ T5138] loop2: detected capacity change from 0 to 512 [ 72.539542][ T5138] EXT4-fs: Ignoring removed nobh option [ 72.551965][ T5144] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.631195][ T5138] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.251: corrupted inode contents [ 72.681978][ T5138] EXT4-fs (loop2): Remounting filesystem read-only [ 72.715484][ T5138] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #16: comm syz.2.251: mark_inode_dirty error [ 72.719053][ T5138] EXT4-fs (loop2): Remounting filesystem read-only [ 72.720921][ T5138] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.251: corrupted inode contents [ 72.729595][ T5138] EXT4-fs (loop2): Remounting filesystem read-only [ 72.744613][ T5138] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.251: mark_inode_dirty error [ 72.785005][ T5138] EXT4-fs (loop2): Remounting filesystem read-only [ 72.786941][ T5138] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.251: corrupted inode contents [ 72.800005][ T5138] EXT4-fs (loop2): Remounting filesystem read-only [ 72.811970][ T5138] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 72.860302][ T5138] EXT4-fs (loop2): Remounting filesystem read-only [ 72.881355][ T5138] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.251: corrupted inode contents [ 72.911163][ T5138] EXT4-fs (loop2): Remounting filesystem read-only [ 72.917542][ T5138] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.251: mark_inode_dirty error [ 72.932697][ T5138] EXT4-fs (loop2): Remounting filesystem read-only [ 72.938248][ T5138] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 72.951218][ T5169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.260'. [ 72.954935][ T5138] EXT4-fs (loop2): Remounting filesystem read-only [ 72.973637][ T5138] EXT4-fs (loop2): 1 truncate cleaned up [ 72.976482][ T5138] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.996050][ T4360] __quota_error: 19 callbacks suppressed [ 72.996063][ T4360] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 72.996234][ T5171] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 72.998417][ T4360] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:6: Failed to release dquot type 1 [ 73.031880][ T4360] EXT4-fs (loop2): Remounting filesystem read-only [ 73.058824][ T5138] EXT4-fs (loop2): unmounting filesystem. [ 73.572439][ T5205] loop1: detected capacity change from 0 to 2048 [ 73.626925][ T5205] Alternate GPT is invalid, using primary GPT. [ 73.628626][ T5205] loop1: p1 p2 p3 [ 73.767282][ T5018] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.860726][ T4899] udevd[4899]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 73.864941][ T5030] udevd[5030]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 73.872485][ T5018] udevd[5018]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 74.030799][ T27] audit: type=1326 audit(73.980:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 74.039430][ T27] audit: type=1326 audit(73.980:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 74.058732][ T27] audit: type=1326 audit(73.980:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 74.065366][ T27] audit: type=1326 audit(73.980:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 74.071337][ T27] audit: type=1326 audit(73.980:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 74.081017][ T27] audit: type=1326 audit(73.980:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 74.087424][ T27] audit: type=1326 audit(73.980:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 74.094005][ T27] audit: type=1326 audit(73.980:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 74.099878][ T27] audit: type=1326 audit(73.980:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 75.007648][ T5276] loop2: detected capacity change from 0 to 2048 [ 75.044855][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 75.060094][ T5276] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.138082][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 75.400048][ T5299] vhci_hcd: invalid port number 9 [ 75.732340][ T5314] loop2: detected capacity change from 0 to 512 [ 75.770714][ T5314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.056914][ T5324] loop4: detected capacity change from 0 to 512 [ 76.113969][ T5324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 76.376990][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 76.429953][ T5335] tipc: Started in network mode [ 76.431609][ T5335] tipc: Node identity a6932ad679ec, cluster identity 4711 [ 76.435365][ T5335] tipc: Enabled bearer , priority 0 [ 76.471440][ T5337] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 76.592479][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 76.699408][ T5345] netlink: 'syz.4.316': attribute type 11 has an invalid length. [ 76.701691][ T5345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 77.082216][ T5357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.321'. [ 77.196005][ T5357] loop1: detected capacity change from 0 to 512 [ 77.264152][ T5357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.554083][ T4346] tipc: Node number set to 3749653206 [ 77.628924][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 77.858222][ T5387] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 77.913469][ T5393] loop3: detected capacity change from 0 to 512 [ 77.971916][ T5393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 77.982322][ T5400] device syz_tun entered promiscuous mode [ 77.984277][ T5400] device macsec1 entered promiscuous mode [ 78.021469][ T5400] device syz_tun left promiscuous mode [ 78.130801][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 78.130814][ T27] audit: type=1326 audit(78.080:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 78.141978][ T5404] device veth1_to_bond entered promiscuous mode [ 78.158645][ T5404] device veth1_to_bond left promiscuous mode [ 78.193549][ T27] audit: type=1326 audit(78.080:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 78.214235][ T27] audit: type=1326 audit(78.090:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 78.236202][ T5413] x_tables: duplicate underflow at hook 1 [ 78.238579][ T27] audit: type=1326 audit(78.090:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 78.259944][ T27] audit: type=1326 audit(78.090:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 78.266428][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 78.292446][ T27] audit: type=1326 audit(78.090:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 78.322743][ T27] audit: type=1326 audit(78.090:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 78.339668][ T5418] netlink: 56 bytes leftover after parsing attributes in process `syz.1.343'. [ 78.342113][ T5418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.343'. [ 78.344493][ T27] audit: type=1326 audit(78.090:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=30 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 78.362209][ T27] audit: type=1326 audit(78.090:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 78.377562][ T27] audit: type=1326 audit(78.090:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.4.340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 80.054367][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 80.056925][ T5475] device bridge_slave_1 left promiscuous mode [ 80.060038][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.128765][ T5475] device bridge_slave_0 left promiscuous mode [ 80.130848][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.136068][ T5482] loop4: detected capacity change from 0 to 128 [ 80.138302][ T5482] EXT4-fs: Ignoring removed nobh option [ 80.142704][ T5482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.197277][ T5485] loop0: detected capacity change from 0 to 2048 [ 80.219576][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 80.228442][ T5485] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.322761][ T5485] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.347551][ T5485] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 134 with error 28 [ 80.386288][ T5485] EXT4-fs (loop0): This should not happen!! Data will be lost [ 80.386288][ T5485] [ 80.399236][ T5485] EXT4-fs (loop0): Total free blocks count 0 [ 80.406029][ T5485] EXT4-fs (loop0): Free/Dirty block details [ 80.408955][ T5485] EXT4-fs (loop0): free_blocks=2415919104 [ 80.412947][ T5485] EXT4-fs (loop0): dirty_blocks=144 [ 80.419748][ T5485] EXT4-fs (loop0): Block reservation details [ 80.426836][ T5485] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 80.568539][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 80.570092][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 81.004682][ T5528] netlink: 100 bytes leftover after parsing attributes in process `syz.4.386'. [ 81.459523][ T5554] loop4: detected capacity change from 0 to 1024 [ 81.514896][ T5554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.571711][ T5568] loop2: detected capacity change from 0 to 128 [ 81.582640][ T5568] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.650762][ T4943] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.683733][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 82.068022][ T5590] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.094458][ T5596] loop2: detected capacity change from 0 to 512 [ 82.096949][ T5596] journal_path: Lookup failure for './file0' [ 82.104538][ T5596] EXT4-fs: error: could not find journal device path [ 82.245403][ T5590] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.351535][ T5613] loop2: detected capacity change from 0 to 512 [ 82.375460][ T5590] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.399933][ T5613] EXT4-fs (loop2): 1 orphan inode deleted [ 82.401532][ T5613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.415908][ T4943] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:9: Failed to release dquot type 1 [ 82.514924][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 82.545308][ T5590] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.551422][ T5619] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 82.562016][ T5619] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 82.596817][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 82.599582][ T5623] device hsr_slave_0 left promiscuous mode [ 82.644325][ T5623] device hsr_slave_1 left promiscuous mode [ 82.844838][ T5627] loop1: detected capacity change from 0 to 512 [ 82.890909][ T5630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 82.893441][ T5630] netlink: 152 bytes leftover after parsing attributes in process `syz.3.431'. [ 83.022442][ T5590] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.049949][ T5590] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.081717][ T5590] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.099723][ T5590] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.209025][ T5643] loop4: detected capacity change from 0 to 128 [ 83.249570][ T5643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.560243][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 83.702659][ T5660] loop4: detected capacity change from 0 to 1024 [ 83.726593][ T5660] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.736391][ T5660] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.764919][ T5660] JBD2: no valid journal superblock found [ 83.773488][ T5660] EXT4-fs (loop4): error loading journal [ 83.856048][ T5662] infiniband syz!: set active [ 83.857375][ T5662] infiniband syz!: added team_slave_0 [ 83.861357][ T5018] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.906989][ T5662] RDS/IB: syz!: added [ 83.908195][ T5662] smc: adding ib device syz! with port count 1 [ 83.910025][ T5662] smc: ib device syz! port 1 has pnetid [ 84.428730][ T27] kauditd_printk_skb: 147 callbacks suppressed [ 84.428742][ T27] audit: type=1326 audit(84.380:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 84.456097][ T27] audit: type=1326 audit(84.400:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 84.473008][ T27] audit: type=1326 audit(84.410:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 84.483361][ T5692] loop2: detected capacity change from 0 to 1024 [ 84.486398][ T5692] EXT4-fs: Ignoring removed i_version option [ 84.488426][ T27] audit: type=1326 audit(84.410:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 84.507462][ T5692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.525957][ T27] audit: type=1326 audit(84.410:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 84.531618][ T27] audit: type=1326 audit(84.410:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 84.551247][ T5692] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.455: Invalid block bitmap block 0 in block_group 0 [ 84.560470][ T27] audit: type=1326 audit(84.410:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 84.569506][ T5692] Quota error (device loop2): write_blk: dquota write failed [ 84.573291][ T5692] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 84.576107][ T5692] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.455: Failed to acquire dquot type 0 [ 84.576394][ T27] audit: type=1326 audit(84.410:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb3958c94 code=0x7ffc0000 [ 84.592684][ T5698] loop1: detected capacity change from 0 to 1024 [ 84.595863][ T5698] EXT4-fs: Ignoring removed nobh option [ 84.598026][ T5698] EXT4-fs: Ignoring removed bh option [ 84.599888][ T5698] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.608734][ T5692] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.455: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.618426][ T5692] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.455: Invalid inode bitmap blk 0 in block_group 0 [ 84.627983][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:0: Failed to release dquot type 0 [ 84.648748][ T5692] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 84.653173][ T5698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.653437][ T5692] EXT4-fs (loop2): 1 orphan inode deleted [ 84.657012][ T5692] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.751590][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 84.828409][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 84.862104][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 84.904193][ T5720] loop2: detected capacity change from 0 to 512 [ 84.931550][ T5720] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.956974][ T5720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 84.959267][ T5720] System zones: 1-12 [ 84.998850][ T5720] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #11: comm syz.2.468: missing EA_INODE flag [ 85.009659][ T5720] EXT4-fs (loop2): Remounting filesystem read-only [ 85.011670][ T5720] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.468: error while reading EA inode 11 err=-117 [ 85.017976][ T5720] EXT4-fs (loop2): Remounting filesystem read-only [ 85.020128][ T5720] EXT4-fs (loop2): 1 orphan inode deleted [ 85.021790][ T5720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.034515][ T5726] loop0: detected capacity change from 0 to 1024 [ 85.037195][ T5726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.119016][ T5726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.158481][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 85.277807][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 85.609033][ T5751] tipc: Started in network mode [ 85.614246][ T5751] tipc: Node identity a65ffc2b64b3, cluster identity 4711 [ 85.616205][ T5751] tipc: Enabled bearer , priority 0 [ 85.653454][ T5747] tipc: Resetting bearer [ 85.872945][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.875461][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.088952][ T5772] loop3: detected capacity change from 0 to 512 [ 86.121550][ T5772] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.289829][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 86.427964][ T5778] netlink: 268 bytes leftover after parsing attributes in process `syz.1.493'. [ 86.562858][ T5784] loop1: detected capacity change from 0 to 2048 [ 86.569948][ T5784] ext4: Unknown parameter 'seclabel' [ 86.653458][ T7] tipc: Node number set to 3270310955 [ 86.669639][ T5788] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.498'. [ 96.701731][ T5747] tipc: Disabling bearer [ 96.751049][ T5799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.500'. [ 96.766897][ T5810] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 96.782844][ T5814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 96.794698][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.797761][ T5810] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 96.802728][ T5811] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 96.815376][ T5811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.506'. [ 96.817934][ T5811] device batadv0 entered promiscuous mode [ 96.849516][ T5811] bond0: (slave batadv0): Releasing backup interface [ 96.887223][ T5811] bridge0: port 3(batadv0) entered blocking state [ 96.889052][ T5811] bridge0: port 3(batadv0) entered disabled state [ 97.182056][ T5838] loop0: detected capacity change from 0 to 256 [ 97.185074][ T39] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 97.187718][ T39] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 97.347291][ T5842] loop2: detected capacity change from 0 to 1768 [ 97.363268][ T5831] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 97.429038][ T5846] Invalid ELF header magic: != ELF [ 97.523727][ T5851] netlink: '()': attribute type 39 has an invalid length. [ 97.538415][ T5851] device veth0_macvtap left promiscuous mode [ 97.660358][ T5844] tipc: Enabling of bearer rejected, failed to enable media [ 97.787188][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.960985][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.119882][ T27] kauditd_printk_skb: 101 callbacks suppressed [ 98.119895][ T27] audit: type=1326 audit(98.070:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 98.129853][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.136898][ T27] audit: type=1326 audit(98.090:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 98.167278][ T27] audit: type=1326 audit(98.090:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 98.173091][ T27] audit: type=1326 audit(98.090:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 98.226284][ T27] audit: type=1326 audit(98.090:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 98.242160][ T27] audit: type=1326 audit(98.090:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 98.264391][ T27] audit: type=1326 audit(98.090:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 98.270215][ T27] audit: type=1326 audit(98.090:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 98.283231][ T5890] loop3: detected capacity change from 0 to 1024 [ 98.303065][ T27] audit: type=1326 audit(98.100:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 98.312511][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.318977][ T27] audit: type=1326 audit(98.110:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=428 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 98.541129][ T5890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.653640][ T5900] loop1: detected capacity change from 0 to 512 [ 98.657438][ T5900] EXT4-fs: Ignoring removed bh option [ 98.672477][ T5863] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.683888][ T5900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.687034][ T5900] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.734886][ T5900] EXT4-fs (loop1): 1 truncate cleaned up [ 98.736460][ T5900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.755598][ T5863] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.789252][ T5863] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.815734][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 98.880061][ T5863] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.987425][ T5914] loop3: detected capacity change from 0 to 512 [ 99.016827][ T5914] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.544: casefold flag without casefold feature [ 99.052592][ T5914] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.544: couldn't read orphan inode 15 (err -117) [ 99.113287][ T5914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.263836][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 99.298847][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 99.361952][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 99.608773][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 100.830054][ T5970] tipc: Enabling of bearer rejected, failed to enable media [ 100.832263][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 100.835160][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.837295][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.847475][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.865939][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.014971][ T5980] loop1: detected capacity change from 0 to 512 [ 101.057489][ T5974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.565'. [ 101.250712][ T5985] loop3: detected capacity change from 0 to 1024 [ 101.287808][ T5987] sctp: [Deprecated]: syz.1.572 (pid 5987) Use of int in maxseg socket option. [ 101.287808][ T5987] Use struct sctp_assoc_value instead [ 101.312675][ T5991] loop4: detected capacity change from 0 to 512 [ 101.328357][ T5991] EXT4-fs: Ignoring removed oldalloc option [ 101.329020][ T5985] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.374498][ T5991] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 101.382239][ T5991] EXT4-fs (loop4): 1 truncate cleaned up [ 101.385739][ T5991] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.400728][ T5996] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 101.418606][ T5991] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.574: Directory hole found for htree leaf block 0 [ 101.453778][ T5999] loop0: detected capacity change from 0 to 1024 [ 101.480691][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 101.490515][ T5999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.568858][ T5999] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.578: Allocating blocks 385-513 which overlap fs metadata [ 101.593046][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 101.641789][ T6010] netlink: 'syz.2.582': attribute type 4 has an invalid length. [ 101.668325][ T5998] EXT4-fs (loop0): pa 000000000d76f9ae: logic 16, phys. 129, len 24 [ 101.670787][ T5998] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 101.759061][ T6014] loop1: detected capacity change from 0 to 2048 [ 101.775073][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 101.850729][ T6014] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.882822][ T6014] netlink: 96 bytes leftover after parsing attributes in process `syz.1.583'. [ 101.986345][ T6029] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 102.274321][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 102.835956][ T6082] loop3: detected capacity change from 0 to 1024 [ 102.883204][ T6082] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.922175][ T6082] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.612: bg 0: block 393: padding at end of block bitmap is not set [ 102.986937][ T6094] loop1: detected capacity change from 0 to 512 [ 102.994035][ T6082] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 117 [ 103.012481][ T6082] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.012481][ T6082] [ 103.028152][ T6094] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.098731][ T6094] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 103.119153][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 103.146797][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 103.527658][ T6113] loop3: detected capacity change from 0 to 1024 [ 103.529970][ T6113] EXT4-fs: Ignoring removed oldalloc option [ 103.546753][ T6113] EXT4-fs: Ignoring removed orlov option [ 103.551388][ T6113] EXT4-fs: Ignoring removed oldalloc option [ 103.553044][ T6113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.600944][ T6107] loop2: detected capacity change from 0 to 8192 [ 103.611207][ T6113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.975968][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 103.993905][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.630'. [ 105.237729][ T6147] loop0: detected capacity change from 0 to 1024 [ 105.322756][ T6159] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.325888][ T6156] loop1: detected capacity change from 0 to 1024 [ 105.328084][ T6156] EXT4-fs: Ignoring removed bh option [ 105.330136][ T6147] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.341607][ T6156] EXT4-fs: inline encryption not supported [ 105.368590][ T6156] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 105.378187][ T6156] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.640: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.404158][ T6156] __quota_error: 87 callbacks suppressed [ 105.404170][ T6156] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 105.420240][ T6159] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.429991][ T6156] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.640: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.460260][ T6156] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 105.472912][ T6156] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.640: Failed to acquire dquot type 0 [ 105.507164][ T6159] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.532911][ T6156] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 105.551372][ T6156] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.640: mark_inode_dirty error [ 105.563626][ T6156] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 105.569712][ T6156] EXT4-fs (loop1): 1 orphan inode deleted [ 105.573721][ T6156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.586894][ T4360] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.594631][ T6159] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.597812][ T4360] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 105.605834][ T4360] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:6: Failed to release dquot type 0 [ 105.623061][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 105.626631][ T6156] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 105.627071][ T6166] random: crng reseeded on system resumption [ 105.671341][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 105.678074][ T4296] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 105.691840][ T4296] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 105.702056][ T4296] EXT4-fs error (device loop1): ext4_quota_off:7108: inode #3: comm syz-executor: mark_inode_dirty error [ 105.782869][ T6159] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.810578][ T6159] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.831634][ T6159] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.868085][ T6159] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.060122][ T6180] netlink: 'syz.0.648': attribute type 3 has an invalid length. [ 106.063634][ T6176] Falling back ldisc for ttyS3. [ 106.280709][ T6193] loop1: detected capacity change from 0 to 764 [ 106.379228][ T27] audit: type=1326 audit(106.330:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a768 code=0x7ffc0000 [ 106.401076][ T27] audit: type=1326 audit(106.350:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a768 code=0x7ffc0000 [ 106.429544][ T27] audit: type=1326 audit(106.370:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff8fd5a768 code=0x7ffc0000 [ 106.478629][ T27] audit: type=1326 audit(106.370:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a768 code=0x7ffc0000 [ 106.513016][ T27] audit: type=1326 audit(106.370:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a768 code=0x7ffc0000 [ 106.544735][ T27] audit: type=1326 audit(106.370:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8fd5a768 code=0x7ffc0000 [ 106.562545][ T27] audit: type=1326 audit(106.370:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a768 code=0x7ffc0000 [ 107.021909][ T6238] loop3: detected capacity change from 0 to 1024 [ 107.060863][ T6238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.195402][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 107.635026][ T6276] binfmt_misc: register: failed to install interpreter file ./file2 [ 107.812340][ T6287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.681'. [ 108.032060][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 108.830888][ T6296] loop1: detected capacity change from 0 to 512 [ 108.833162][ T6296] EXT4-fs: Ignoring removed bh option [ 108.855054][ T6296] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.858101][ T6296] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.925821][ T6296] EXT4-fs (loop1): 1 truncate cleaned up [ 108.927571][ T6296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.248827][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 109.477310][ T6334] loop0: detected capacity change from 0 to 1764 [ 109.571482][ T6340] netlink: 56 bytes leftover after parsing attributes in process `syz.1.695'. [ 109.841049][ T6357] IPVS: stopping master sync thread 6358 ... [ 109.844428][ T6358] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 109.967371][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.702'. [ 110.189006][ T6359] infiniband syz2: set down [ 110.200471][ T6359] infiniband syz2: added ipvlan1 [ 110.317265][ T6359] RDS/IB: syz2: added [ 110.318470][ T6359] smc: adding ib device syz2 with port count 1 [ 110.320614][ T6359] smc: ib device syz2 port 1 has pnetid [ 110.487399][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 111.266829][ T6390] loop0: detected capacity change from 0 to 128 [ 111.305377][ T6390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.358093][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 112.444527][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 112.444539][ T27] audit: type=1326 audit(112.538:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 112.474331][ T27] audit: type=1326 audit(112.538:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 112.518327][ T27] audit: type=1326 audit(112.549:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 112.540462][ T27] audit: type=1326 audit(112.549:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 112.566121][ T27] audit: type=1326 audit(112.549:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 112.586969][ T27] audit: type=1326 audit(112.549:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 112.592567][ T27] audit: type=1326 audit(112.559:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 112.649205][ T27] audit: type=1326 audit(112.559:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 112.670459][ T27] audit: type=1326 audit(112.559:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 112.671439][ T6419] loop3: detected capacity change from 0 to 512 [ 112.681787][ T27] audit: type=1326 audit(112.559:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 112.738960][ T6419] EXT4-fs warning (device loop3): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.752434][ T6419] EXT4-fs (loop3): mount failed [ 113.003328][ T6436] loop0: detected capacity change from 0 to 512 [ 113.071323][ T6436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.079697][ T6436] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.727: corrupted inode contents [ 113.131447][ T6446] loop3: detected capacity change from 0 to 512 [ 113.133718][ T6439] ALSA: seq fatal error: cannot create timer (-19) [ 113.166886][ T6436] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.727: mark_inode_dirty error [ 113.181504][ T6436] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.727: corrupted inode contents [ 113.195317][ T6446] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 113.261297][ T6448] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.727: corrupted inode contents [ 113.269585][ T6446] EXT2-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 113.283606][ T6446] EXT2-fs (loop3): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 113.285641][ T6448] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.727: mark_inode_dirty error [ 113.303086][ T6448] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.727: corrupted inode contents [ 113.318517][ T6448] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.727: mark_inode_dirty error [ 113.332351][ T6448] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.727: corrupted inode contents [ 113.343192][ T6448] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.727: mark_inode_dirty error [ 113.445277][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 113.871851][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.747'. [ 114.031891][ T6488] loop1: detected capacity change from 0 to 8192 [ 114.035846][ T6488] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.177094][ T6494] netlink: 'syz.4.753': attribute type 2 has an invalid length. [ 114.179472][ T6494] netlink: 'syz.4.753': attribute type 1 has an invalid length. [ 114.989899][ T6502] can0: slcan on ttyS3. [ 115.115065][ T6505] can0 (unregistered): slcan off ttyS3. [ 115.294323][ T6524] loop2: detected capacity change from 0 to 512 [ 116.295061][ T6542] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 116.344438][ T6544] loop1: detected capacity change from 0 to 1024 [ 116.426517][ T6544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.485596][ T6558] loop4: detected capacity change from 0 to 512 [ 116.493471][ T6558] EXT4-fs: Ignoring removed nobh option [ 116.500143][ T6557] loop3: detected capacity change from 0 to 164 [ 116.503289][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 116.512529][ T6557] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.560686][ T6558] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.775: corrupted inode contents [ 116.565075][ T6561] device syzkaller1 entered promiscuous mode [ 116.574566][ T6558] EXT4-fs (loop4): Remounting filesystem read-only [ 116.579548][ T6558] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #16: comm syz.4.775: mark_inode_dirty error [ 116.609268][ T6558] EXT4-fs (loop4): Remounting filesystem read-only [ 116.611097][ T6558] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.775: corrupted inode contents [ 116.617303][ T6558] EXT4-fs (loop4): Remounting filesystem read-only [ 116.629487][ T6558] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.775: mark_inode_dirty error [ 116.635033][ T6558] EXT4-fs (loop4): Remounting filesystem read-only [ 116.636791][ T6558] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.775: corrupted inode contents [ 116.653253][ T6558] EXT4-fs (loop4): Remounting filesystem read-only [ 116.660538][ T6558] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 116.663195][ T6558] EXT4-fs (loop4): Remounting filesystem read-only [ 116.666144][ T6558] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.775: corrupted inode contents [ 116.669528][ T6558] EXT4-fs (loop4): Remounting filesystem read-only [ 116.671423][ T6558] EXT4-fs error (device loop4): ext4_truncate:4312: inode #16: comm syz.4.775: mark_inode_dirty error [ 116.685800][ T6558] EXT4-fs (loop4): Remounting filesystem read-only [ 116.687556][ T6558] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 116.692040][ T6568] loop3: detected capacity change from 0 to 1024 [ 116.702505][ T6568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.709647][ T6558] EXT4-fs (loop4): Remounting filesystem read-only [ 116.714928][ T6558] EXT4-fs (loop4): 1 truncate cleaned up [ 116.716528][ T6558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.733682][ T4944] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:10: Failed to release dquot type 1 [ 116.738557][ T4944] EXT4-fs (loop4): Remounting filesystem read-only [ 116.772470][ T6568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 116.942077][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 116.956568][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 117.012371][ T6585] loop0: detected capacity change from 0 to 2048 [ 117.051140][ T6585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.970562][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 118.389801][ T6648] loop1: detected capacity change from 0 to 2048 [ 118.437681][ T6648] loop1: p1 < > p3 [ 118.440982][ T6648] loop1: p3 size 134217728 extends beyond EOD, truncated [ 118.462069][ T6652] loop2: detected capacity change from 0 to 128 [ 118.476927][ T6652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 118.497099][ T6652] netlink: 'syz.2.814': attribute type 30 has an invalid length. [ 118.661146][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 118.756347][ T6658] futex_wake_op: syz.2.816 tries to shift op by -1; fix this program [ 118.774736][ T6658] Illegal XDP return value 3030615492 on prog (id 25) dev syz_tun, expect packet loss! [ 119.160230][ T5832] udevd[5832]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 119.231094][ T6402] udevd[6402]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 119.421726][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 119.421740][ T27] audit: type=1326 audit(119.645:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 119.428894][ T27] audit: type=1326 audit(119.645:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 119.434155][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 119.486550][ T27] audit: type=1326 audit(119.645:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 119.493061][ T27] audit: type=1326 audit(119.645:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 119.498938][ T27] audit: type=1326 audit(119.645:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 119.524256][ T27] audit: type=1326 audit(119.645:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 119.537053][ T27] audit: type=1326 audit(119.645:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 119.546477][ T27] audit: type=1326 audit(119.645:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 119.554166][ T6682] Cannot find set identified by id 0 to match [ 119.566191][ T27] audit: type=1326 audit(119.645:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 119.574436][ T27] audit: type=1326 audit(119.645:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6680 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 119.575751][ T6688] atomic_op 0000000095595185 conn xmit_atomic 0000000000000000 [ 120.155723][ T6681] team0 (unregistering): Port device team_slave_0 removed [ 120.168988][ T6681] team0 (unregistering): Port device team_slave_1 removed [ 120.240333][ T6688] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 120.243334][ T6688] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 120.245717][ T6688] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 120.302319][ T6711] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 120.819509][ T6729] loop2: detected capacity change from 0 to 1024 [ 120.839910][ T6729] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 120.842874][ T6729] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.847963][ T6729] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.845: Invalid inode table block 0 in block_group 0 [ 120.858263][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.860281][ T6729] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 120.865331][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.867145][ T6729] EXT4-fs error (device loop2): ext4_quota_write:7214: inode #3: comm syz.2.845: mark_inode_dirty error [ 120.870331][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.872517][ T6729] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.845: Failed to acquire dquot type 0 [ 120.875802][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.877638][ T6729] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.845: Invalid inode table block 0 in block_group 0 [ 120.882424][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.884253][ T6729] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 120.887000][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.888825][ T6729] EXT4-fs error (device loop2): ext4_ext_truncate:4453: inode #15: comm syz.2.845: mark_inode_dirty error [ 120.896671][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.898512][ T6729] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.845: Invalid inode table block 0 in block_group 0 [ 120.903639][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.905490][ T6729] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 120.908395][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.910348][ T6729] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 120.916216][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.918200][ T6729] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.845: Invalid inode table block 0 in block_group 0 [ 120.923119][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.924953][ T6729] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 120.927720][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.929536][ T6729] EXT4-fs error (device loop2): ext4_truncate:4312: inode #15: comm syz.2.845: mark_inode_dirty error [ 120.935920][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.937805][ T6729] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 120.941636][ T6729] EXT4-fs (loop2): Remounting filesystem read-only [ 120.943467][ T6729] EXT4-fs (loop2): 1 truncate cleaned up [ 120.945110][ T6729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.023901][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 125.608812][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.118751][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 132.118764][ T27] audit: type=1326 audit(132.468:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 132.166147][ T27] audit: type=1326 audit(132.488:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 132.217469][ T27] audit: type=1326 audit(132.488:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 132.223272][ T27] audit: type=1326 audit(132.488:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 132.229414][ T27] audit: type=1326 audit(132.488:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 132.235158][ T27] audit: type=1326 audit(132.498:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 132.296506][ T27] audit: type=1326 audit(132.498:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 132.302305][ T27] audit: type=1326 audit(132.498:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 132.354593][ T27] audit: type=1326 audit(132.508:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 132.385971][ T27] audit: type=1326 audit(132.508:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.851" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 132.405475][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 132.650549][ T6774] loop3: detected capacity change from 0 to 512 [ 132.657458][ T6774] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.661512][ T6774] EXT4-fs: Ignoring removed bh option [ 132.668771][ T6766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.682143][ T6774] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.687714][ T6774] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.692784][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.863'. [ 132.740133][ T6774] EXT4-fs (loop3): 1 truncate cleaned up [ 132.741816][ T6774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.841020][ T6788] loop2: detected capacity change from 0 to 512 [ 132.841856][ T4302] EXT4-fs (loop3): unmounting filesystem. [ 132.843675][ T6788] EXT4-fs: Ignoring removed nobh option [ 132.848133][ T6766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.880076][ T6786] device syzkaller1 entered promiscuous mode [ 132.902287][ T6788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.937467][ T6792] loop3: detected capacity change from 0 to 512 [ 132.941176][ T6792] EXT4-fs: Ignoring removed i_version option [ 132.946754][ T6792] ext4: Unknown parameter 'nodelalloc2' [ 132.964385][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 133.948817][ T6766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.032079][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 134.063201][ T6805] loop2: detected capacity change from 0 to 2048 [ 134.075115][ T6804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 134.081922][ T6804] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 134.099303][ T6805] Alternate GPT is invalid, using primary GPT. [ 134.101024][ T6805] loop2: p1 p2 p3 [ 134.172785][ T3913] Alternate GPT is invalid, using primary GPT. [ 134.174596][ T3913] loop2: p1 p2 p3 [ 134.241635][ T6766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.550757][ T6766] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.575366][ T6766] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.581570][ T6766] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.640047][ T6766] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.709826][ T6829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.888'. [ 134.740259][ T6833] loop1: detected capacity change from 0 to 256 [ 134.802779][ T6833] FAT-fs (loop1): Directory bread(block 64) failed [ 134.804604][ T6833] FAT-fs (loop1): Directory bread(block 65) failed [ 134.806378][ T6833] FAT-fs (loop1): Directory bread(block 66) failed [ 134.808096][ T6833] FAT-fs (loop1): Directory bread(block 67) failed [ 134.837842][ T6833] FAT-fs (loop1): Directory bread(block 68) failed [ 134.839682][ T6833] FAT-fs (loop1): Directory bread(block 69) failed [ 134.851855][ T6833] FAT-fs (loop1): Directory bread(block 70) failed [ 134.853647][ T6833] FAT-fs (loop1): Directory bread(block 71) failed [ 134.868311][ T6837] IPv6: Can't replace route, no match found [ 134.873297][ T6833] FAT-fs (loop1): Directory bread(block 72) failed [ 134.875146][ T6833] FAT-fs (loop1): Directory bread(block 73) failed [ 135.147425][ T6739] udevd[6739]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 135.179493][ T6817] udevd[6817]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 135.193551][ T6745] udevd[6745]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 135.231026][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.900'. [ 135.263794][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 135.431802][ T6817] udevd[6817]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 135.433629][ T6739] udevd[6739]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 135.439674][ T6816] udevd[6816]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 135.862966][ T6883] loop1: detected capacity change from 0 to 512 [ 135.895095][ T6883] EXT4-fs warning (device loop1): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.910746][ T6883] EXT4-fs (loop1): mount failed [ 135.999828][ T6894] netlink: 256 bytes leftover after parsing attributes in process `syz.2.916'. [ 136.239154][ T6907] loop4: detected capacity change from 0 to 512 [ 136.282140][ T6907] EXT4-fs warning (device loop4): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.289097][ T6907] EXT4-fs (loop4): mount failed [ 136.473477][ T6915] loop2: detected capacity change from 0 to 2048 [ 136.542345][ T6915] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.925'. [ 137.037989][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.936'. [ 137.101501][ T6942] atomic_op 0000000090f380ef conn xmit_atomic 0000000000000000 [ 137.146219][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 137.303929][ T6950] loop2: detected capacity change from 0 to 1024 [ 137.306266][ T6950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.321300][ T6950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 137.351475][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 137.638072][ T6966] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 137.709783][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 137.709807][ T27] audit: type=1326 audit(138.088:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 137.722377][ T27] audit: type=1326 audit(138.098:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 137.739043][ T27] audit: type=1326 audit(138.108:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=440 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 137.744952][ T27] audit: type=1326 audit(138.108:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 137.755552][ T27] audit: type=1326 audit(138.108:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 137.763382][ T27] audit: type=1326 audit(138.108:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 137.774450][ T27] audit: type=1326 audit(138.108:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 137.780600][ T27] audit: type=1326 audit(138.108:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 137.786934][ T27] audit: type=1326 audit(138.108:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 137.797265][ T27] audit: type=1326 audit(138.108:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.4.950" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 138.226614][ T6989] loop4: detected capacity change from 0 to 512 [ 138.347204][ T6989] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.398133][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 138.474106][ T6994] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.522997][ T6994] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.594455][ T6994] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.651397][ T6994] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.825802][ T6994] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.836556][ T6994] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.863513][ T6994] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.870239][ T6994] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.040864][ T7017] netlink: 'syz.1.969': attribute type 10 has an invalid length. [ 139.072141][ T7017] team0: Device veth0_macvtap failed to register rx_handler [ 139.168835][ T7022] autofs4:pid:7022:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 139.507703][ T7042] sctp: [Deprecated]: syz.1.979 (pid 7042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.507703][ T7042] Use struct sctp_sack_info instead [ 139.706381][ T7056] loop1: detected capacity change from 0 to 512 [ 139.737026][ T7056] EXT4-fs (loop1): 1 orphan inode deleted [ 139.738707][ T7056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.765043][ T6405] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:12: Failed to release dquot type 1 [ 139.789373][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 141.834492][ T7116] xt_connbytes: Forcing CT accounting to be enabled [ 142.733212][ T7138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.735352][ T7138] IPv6: NLM_F_CREATE should be set when creating new route [ 143.082188][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 143.082200][ T27] audit: type=1326 audit(143.477:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 143.093775][ T27] audit: type=1326 audit(143.487:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=194 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 143.117118][ T27] audit: type=1326 audit(143.487:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 143.137394][ T7143] loop2: detected capacity change from 0 to 512 [ 143.147479][ T27] audit: type=1326 audit(143.487:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 143.180481][ T27] audit: type=1326 audit(143.497:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 143.228068][ T27] audit: type=1326 audit(143.497:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 143.272649][ T27] audit: type=1326 audit(143.497:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 143.279085][ T27] audit: type=1326 audit(143.497:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 143.284703][ T27] audit: type=1326 audit(143.497:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 143.290470][ T27] audit: type=1326 audit(143.497:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.2.1019" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 145.337018][ T7116] set match dimension is over the limit! [ 146.482873][ T7210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 146.509250][ T7214] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 146.509250][ T7214] The task syz.0.1044 (7214) triggered the difference, watch for misbehavior. [ 146.520051][ T7213] netlink: 'syz.2.1045': attribute type 3 has an invalid length. [ 147.543285][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 147.556687][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1056'. [ 148.670970][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 148.670982][ T27] audit: type=1326 audit(149.072:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 148.684216][ T27] audit: type=1326 audit(149.082:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 148.714573][ T27] audit: type=1326 audit(149.082:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=22 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 148.737511][ T27] audit: type=1326 audit(149.082:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 148.756067][ T27] audit: type=1326 audit(149.082:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.2.1063" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 148.919635][ T7258] loop1: detected capacity change from 0 to 128 [ 148.992475][ T7262] loop0: detected capacity change from 0 to 512 [ 149.220992][ T7110] Set syz1 is full, maxelem 65536 reached [ 149.618899][ T27] audit: type=1326 audit(150.024:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 149.632051][ T27] audit: type=1326 audit(150.034:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 149.650863][ T27] audit: type=1326 audit(150.044:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 149.676676][ T27] audit: type=1326 audit(150.044:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 149.697105][ T27] audit: type=1326 audit(150.044:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb395a768 code=0x7ffc0000 [ 150.376533][ T7337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1099'. [ 150.834292][ T7324] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1090'. [ 150.878654][ T7345] Cannot find add_set index 0 as target [ 151.244545][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 151.384683][ T7364] loop0: detected capacity change from 0 to 512 [ 151.619882][ T7373] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1114'. [ 151.622629][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1114'. [ 151.769286][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1119'. [ 152.103852][ T7394] loop0: detected capacity change from 0 to 2048 [ 152.197144][ T7394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 152.316295][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 152.323578][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1127'. [ 153.021570][ T7436] lo speed is unknown, defaulting to 1000 [ 153.023672][ T7436] lo speed is unknown, defaulting to 1000 [ 153.032051][ T7436] lo speed is unknown, defaulting to 1000 [ 153.045839][ T7436] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.068096][ T7436] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 153.278404][ T7436] lo speed is unknown, defaulting to 1000 [ 153.285738][ T7436] lo speed is unknown, defaulting to 1000 [ 153.292398][ T7436] lo speed is unknown, defaulting to 1000 [ 153.296875][ T7436] lo speed is unknown, defaulting to 1000 [ 153.302947][ T7436] lo speed is unknown, defaulting to 1000 [ 153.308930][ T7436] lo speed is unknown, defaulting to 1000 [ 153.846607][ T7448] loop2: detected capacity change from 0 to 2048 [ 153.853777][ T7448] EXT4-fs: Ignoring removed i_version option [ 153.926091][ T7448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.978258][ T7448] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1146: bg 0: block 345: padding at end of block bitmap is not set [ 154.005272][ T7448] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 154.018047][ T7448] EXT4-fs (loop2): This should not happen!! Data will be lost [ 154.018047][ T7448] [ 154.035415][ T7463] vhci_hcd: invalid port number 96 [ 154.036826][ T7463] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 154.163140][ T27] kauditd_printk_skb: 142 callbacks suppressed [ 154.163153][ T27] audit: type=1326 audit(154.655:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 154.170393][ T27] audit: type=1326 audit(154.655:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=30 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 154.192703][ T27] audit: type=1326 audit(154.655:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b5a768 code=0x7ffc0000 [ 154.427257][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 154.546884][ T7493] IPv4: Oversized IP packet from 127.202.26.0 [ 154.548979][ T27] audit: type=1326 audit(155.045:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a768 code=0x7ffc0000 [ 154.561902][ T27] audit: type=1326 audit(155.066:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=236 compat=0 ip=0xffff8fd5a768 code=0x7ffc0000 [ 154.567760][ T27] audit: type=1326 audit(155.066:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a768 code=0x7ffc0000 [ 154.661166][ T27] audit: type=1326 audit(155.137:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 154.690971][ T27] audit: type=1326 audit(155.137:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 154.718476][ T27] audit: type=1326 audit(155.137:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 154.751445][ T27] audit: type=1326 audit(155.137:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 154.872803][ T7505] loop2: detected capacity change from 0 to 1024 [ 154.875170][ T7505] EXT4-fs: Ignoring removed orlov option [ 154.915669][ T7505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.966951][ T7505] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 155.035506][ T4310] EXT4-fs (loop2): unmounting filesystem. [ 155.169050][ T7528] loop4: detected capacity change from 0 to 128 [ 155.316222][ T7533] netlink: 'syz.0.1182': attribute type 10 has an invalid length. [ 155.353094][ T7533] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 155.357100][ T7533] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 155.404329][ T7533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.423250][ T7533] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 155.446155][ T7533] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.454225][ T7538] netlink: 'syz.0.1182': attribute type 10 has an invalid length. [ 155.486111][ T7538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1182'. [ 155.504508][ T7538] device batadv0 entered promiscuous mode [ 155.534359][ T7538] bond0: (slave batadv0): Releasing backup interface [ 155.581409][ T7538] bridge0: port 3(batadv0) entered blocking state [ 155.583254][ T7538] bridge0: port 3(batadv0) entered disabled state [ 155.608213][ T7538] batman_adv: batadv0: Local translation table size (124) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 155.628047][ T7439] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 155.630844][ T7439] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 155.845405][ T7558] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1192'. [ 155.959747][ T7569] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 156.288080][ T7564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1195'. [ 156.395890][ T7587] loop4: detected capacity change from 0 to 512 [ 156.467880][ T7587] EXT4-fs (loop4): 1 orphan inode deleted [ 156.469396][ T7587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.521378][ T6405] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:12: Failed to release dquot type 1 [ 156.691572][ T4300] EXT4-fs (loop4): unmounting filesystem. [ 156.965517][ T7628] loop0: detected capacity change from 0 to 512 [ 156.972877][ T7628] journal_path: Lookup failure for './cgroup.cpu/cgroup.procs' [ 156.975326][ T7629] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 156.977841][ T7628] EXT4-fs: error: could not find journal device path [ 157.355193][ T7644] loop4: detected capacity change from 0 to 512 [ 157.359517][ T7644] EXT4-fs: Ignoring removed i_version option [ 157.361566][ T7644] ext4: Unknown parameter 'nodelalloc2' [ 157.603557][ T7658] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.511144][ T7658] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.566650][ T7658] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.608496][ T7658] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.030641][ T7686] loop0: detected capacity change from 0 to 1024 [ 159.648078][ T7658] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.657941][ T7686] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 159.669978][ T7658] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.700421][ T7658] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.743163][ T7658] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.834058][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 159.908568][ T7698] loop2: detected capacity change from 0 to 512 [ 159.918614][ T7698] EXT4-fs: Ignoring removed i_version option [ 159.920237][ T7698] ext4: Unknown parameter 'nodelalloc2' [ 160.249485][ T6739] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.959010][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 160.959023][ T27] audit: type=1326 audit(161.576:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 160.982417][ T27] audit: type=1326 audit(161.576:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 161.001963][ T27] audit: type=1326 audit(161.576:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 162.014318][ T7732] device syzkaller1 entered promiscuous mode [ 162.145623][ T7727] lo speed is unknown, defaulting to 1000 [ 162.282629][ T7734] lo speed is unknown, defaulting to 1000 [ 162.468271][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'. [ 162.519878][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 163.172271][ T4301] Bluetooth: hci0: command 0x0406 tx timeout [ 163.175502][ T4301] Bluetooth: hci4: command 0x0406 tx timeout [ 163.178185][ T4301] Bluetooth: hci1: command 0x0406 tx timeout [ 163.180782][ T4301] Bluetooth: hci2: command 0x0406 tx timeout [ 163.183884][ T4301] Bluetooth: hci3: command 0x0406 tx timeout [ 163.517736][ T7749] Cannot find add_set index 0 as target [ 164.305074][ T7757] siw: device registration error -23 [ 165.293163][ T7758] loop0: detected capacity change from 0 to 512 [ 165.306121][ T7758] EXT4-fs: Ignoring removed bh option [ 165.760620][ T7758] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.763739][ T7758] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.846960][ T7758] EXT4-fs (loop0): 1 truncate cleaned up [ 165.848518][ T7758] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 166.086331][ T7756] lo speed is unknown, defaulting to 1000 [ 166.195455][ T7771] loop1: detected capacity change from 0 to 512 [ 166.226798][ T7771] EXT4-fs: Ignoring removed i_version option [ 166.229155][ T7771] ext4: Unknown parameter 'nodelalloc2' [ 166.254982][ T27] audit: type=1326 audit(166.977:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 166.270751][ T27] audit: type=1326 audit(166.998:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 166.288047][ T27] audit: type=1326 audit(166.998:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 166.305675][ T27] audit: type=1326 audit(166.998:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 166.314411][ T7774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1266'. [ 166.323081][ T27] audit: type=1326 audit(166.998:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 166.344462][ T27] audit: type=1326 audit(167.008:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=137 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 166.363568][ T27] audit: type=1326 audit(167.008:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 166.395704][ T27] audit: type=1326 audit(167.008:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 166.402222][ T27] audit: type=1326 audit(167.008:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 166.408195][ T27] audit: type=1326 audit(167.008:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb5a768 code=0x7ffc0000 [ 167.338610][ T4309] EXT4-fs (loop0): unmounting filesystem. [ 167.532894][ T7767] lo speed is unknown, defaulting to 1000 [ 167.807039][ T7791] lo speed is unknown, defaulting to 1000 [ 170.097297][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'. [ 170.275523][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 170.382549][ T7831] siw: device registration error -23 [ 171.501853][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 171.501866][ T27] audit: type=1326 audit(172.285:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 171.543151][ T27] audit: type=1326 audit(172.295:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 171.549126][ T27] audit: type=1326 audit(172.295:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 171.555554][ T27] audit: type=1326 audit(172.295:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 171.567912][ T27] audit: type=1326 audit(172.295:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 171.575312][ T27] audit: type=1326 audit(172.295:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 171.585429][ T27] audit: type=1326 audit(172.295:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=137 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 171.591718][ T27] audit: type=1326 audit(172.295:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 171.597697][ T27] audit: type=1326 audit(172.295:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 171.608244][ T27] audit: type=1326 audit(172.295:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9555a768 code=0x7ffc0000 [ 171.671084][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1280'. [ 172.417342][ T7729] unregister_netdevice: waiting for syzkaller1 to become free. Usage count = 2 [ 172.419752][ T7729] leaked reference. [ 172.421104][ T7729] fib6_nh_init+0x620/0x19cc [ 172.422322][ T7729] ip6_route_info_create+0x7b0/0xf7c [ 172.423723][ T7729] addrconf_f6i_alloc+0x188/0x330 [ 172.425037][ T7729] ipv6_add_addr+0x3b4/0xccc [ 172.426258][ T7729] addrconf_add_linklocal+0x22c/0x5d0 [ 172.427706][ T7729] addrconf_addr_gen+0x394/0x4a8 [ 172.429038][ T7729] addrconf_init_auto_addrs+0x5a8/0x994 [ 172.430554][ T7729] addrconf_notify+0x8dc/0xca8 [ 172.431821][ T7729] raw_notifier_call_chain+0xd4/0x164 [ 172.433243][ T7729] __dev_notify_flags+0x250/0x46c [ 172.434601][ T7729] dev_change_flags+0xc8/0x154 [ 172.435881][ T7729] devinet_ioctl+0x88c/0x17e0 [ 172.437123][ T7729] inet_ioctl+0x304/0x4d8 [ 172.438308][ T7729] sock_do_ioctl+0xf8/0x240 [ 172.439532][ T7729] sock_ioctl+0x5c4/0x840 [ 172.440714][ T7729] __arm64_sys_ioctl+0x14c/0x1c8 [ 172.461856][ T7844] loop4: detected capacity change from 0 to 512 [ 172.464399][ T7844] EXT4-fs: Ignoring removed bh option [ 172.467810][ T7847] lo speed is unknown, defaulting to 1000 [ 172.487577][ T7844] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.490649][ T7844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.507995][ T7844] EXT4-fs (loop4): 1 truncate cleaned up [ 172.509675][ T7844] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.773325][ T4300] EXT4-fs (loop4): unmounting filesystem.