last executing test programs: 1m36.57813647s ago: executing program 3 (id=3806): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 1m36.512616851s ago: executing program 3 (id=3808): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f00000006c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 1m36.512243711s ago: executing program 3 (id=3809): mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x28) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') getdents(r0, &(0x7f0000000780)=""/150, 0x96) 1m36.427080193s ago: executing program 3 (id=3813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)=':', 0x1, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) shutdown(r0, 0x1) 1m36.424801803s ago: executing program 32 (id=3813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)=':', 0x1, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) shutdown(r0, 0x1) 1m31.684369189s ago: executing program 1 (id=3946): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000001c0), 0x8, 0x7c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m31.509937882s ago: executing program 1 (id=3949): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x2, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 1m31.338392294s ago: executing program 1 (id=3956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m31.188182197s ago: executing program 1 (id=3965): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r0 = syz_io_uring_setup(0x49b, &(0x7f0000000000)={0x0, 0xf62c, 0x1, 0x3, 0x37d}, &(0x7f0000001e40)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m31.067264899s ago: executing program 1 (id=3970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r2, 0xffffffffffffffff, 0x0) 1m30.527786568s ago: executing program 1 (id=3984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m30.511031678s ago: executing program 33 (id=3984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 29.517022073s ago: executing program 6 (id=5486): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='#', 0x1}], 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0xaa) read(r1, &(0x7f0000000180)=""/240, 0xf0) 29.464310694s ago: executing program 6 (id=5489): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x100004}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 29.013577221s ago: executing program 6 (id=5510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x180, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x8000, 0xa, [0x3b, 0x4, 0x13, 0x38, 0x5, 0x22, 0x23, 0x26, 0xd, 0x23, 0x9, 0x3e, 0x7, 0x36, 0x0, 0xf], 0x45b7d282eb3cfcc0, 0x2, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 28.970258052s ago: executing program 6 (id=5515): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 28.951161972s ago: executing program 6 (id=5516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 28.715770896s ago: executing program 6 (id=5524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 28.714641756s ago: executing program 34 (id=5524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 15.568148168s ago: executing program 5 (id=6057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syncfs(0xffffffffffffffff) 15.526429679s ago: executing program 5 (id=6058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) 15.4882365s ago: executing program 5 (id=6060): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0x15, 0x0, r3, 0x0, 0x0, r3, 0x1400, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 15.424223031s ago: executing program 5 (id=6062): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000002c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) 15.288051363s ago: executing program 5 (id=6064): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 15.087966576s ago: executing program 5 (id=6069): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xa8}}, 0x0) 15.087707186s ago: executing program 35 (id=6069): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xa8}}, 0x0) 12.740882704s ago: executing program 8 (id=6142): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 12.227896712s ago: executing program 8 (id=6148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) 12.139883964s ago: executing program 8 (id=6152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 12.067452695s ago: executing program 8 (id=6157): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000002c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) 11.946510427s ago: executing program 8 (id=6161): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 10.676171437s ago: executing program 8 (id=6194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 10.670226697s ago: executing program 36 (id=6194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 5.507227431s ago: executing program 9 (id=6333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) flock(0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") 5.364921363s ago: executing program 9 (id=6342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000103}) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) 5.332451834s ago: executing program 9 (id=6343): creat(&(0x7f0000000300)='./file0\x00', 0x146) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5.293433734s ago: executing program 9 (id=6347): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 5.069744858s ago: executing program 9 (id=6359): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 3.860549218s ago: executing program 9 (id=6408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='console\x00', r0, 0x0, 0x3}, 0x18) openat$vcsa(0xffffffffffffff9c, 0x0, 0x204200, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 3.860212367s ago: executing program 37 (id=6408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='console\x00', r0, 0x0, 0x3}, 0x18) openat$vcsa(0xffffffffffffff9c, 0x0, 0x204200, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 1.820624951s ago: executing program 0 (id=6456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 1.799749201s ago: executing program 0 (id=6457): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801800000000000e2"], 0x178) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1.770484251s ago: executing program 0 (id=6458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1.705764732s ago: executing program 0 (id=6460): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg1\x00'}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1.623009654s ago: executing program 0 (id=6463): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 1.282055589s ago: executing program 2 (id=6475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r1, 0xffffffffffffffff, 0x0) 1.258987669s ago: executing program 2 (id=6477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semop(r1, &(0x7f0000000080)=[{0x1, 0xffff, 0x1400}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000400)=[0x8, 0x1]) 709.725058ms ago: executing program 0 (id=6483): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) 693.087429ms ago: executing program 3 (id=6409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000000)=0x1a) 669.822409ms ago: executing program 3 (id=6486): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) signalfd(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) poll(0x0, 0x0, 0xfffeffff) sched_setscheduler(0x0, 0x2, 0x0) 560.186101ms ago: executing program 7 (id=6489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 350.253644ms ago: executing program 2 (id=6490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 316.425694ms ago: executing program 2 (id=6491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x6a040000) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000640)=ANY=[], 0x0, 0x243, &(0x7f0000001ac0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 308.051365ms ago: executing program 7 (id=6492): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x182) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 268.611955ms ago: executing program 4 (id=6493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x2, 0x0, 0x0, 0x0) 217.592396ms ago: executing program 4 (id=6494): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) r3 = dup3(r1, r2, 0x0) setsockopt$inet_int(r3, 0x0, 0x5, 0x0, 0x0) 191.936927ms ago: executing program 7 (id=6495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) readahead(0xffffffffffffffff, 0x3, 0x2) 169.343167ms ago: executing program 4 (id=6496): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 142.203947ms ago: executing program 7 (id=6497): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 106.924948ms ago: executing program 4 (id=6498): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000480)={0x0}) 98.778628ms ago: executing program 7 (id=6499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r0, 0x3) 75.077818ms ago: executing program 2 (id=6500): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 53.926889ms ago: executing program 7 (id=6501): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100000000}, 0x18) r1 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) pivot_root(0x0, &(0x7f0000000180)='./file0/../file0/../file0\x00') io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) 50.694549ms ago: executing program 4 (id=6502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x2040600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000080), &(0x7f0000000680)}, 0x20) 18.264309ms ago: executing program 2 (id=6503): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = memfd_secret(0x80000) ftruncate(r1, 0x51a9497) finit_module(r1, 0x0, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) 0s ago: executing program 4 (id=6504): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0xfffffffffffffbff}, 0x18) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): 322141][T15307] netlink: 'syz.4.4887': attribute type 3 has an invalid length. [ 180.505897][T15339] netlink: 'syz.5.4905': attribute type 10 has an invalid length. [ 180.525788][T15339] team0: Device hsr_slave_0 failed to register rx_handler [ 180.619769][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.850166][T15379] netlink: 'syz.2.4924': attribute type 3 has an invalid length. [ 180.906095][T15383] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 181.196389][T15425] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 181.226883][T15430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4949'. [ 181.389239][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 181.445740][T15463] netlink: 'syz.0.4965': attribute type 4 has an invalid length. [ 181.458242][T15463] netlink: 'syz.0.4965': attribute type 4 has an invalid length. [ 181.661374][T15484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15484 comm=syz.4.4974 [ 181.673994][T15484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15484 comm=syz.4.4974 [ 181.689188][T15484] netlink: 'syz.4.4974': attribute type 29 has an invalid length. [ 181.731387][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 181.764201][T15493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4979'. [ 181.773242][T15493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4979'. [ 182.092567][T15536] netlink: 'syz.5.4999': attribute type 4 has an invalid length. [ 182.105982][T15536] netlink: 'syz.5.4999': attribute type 4 has an invalid length. [ 182.150486][T15541] loop5: detected capacity change from 0 to 512 [ 182.158675][T15541] EXT4-fs (loop5): orphan cleanup on readonly fs [ 182.166225][T15541] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5001: bg 0: block 248: padding at end of block bitmap is not set [ 182.181251][T15541] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5001: Failed to acquire dquot type 1 [ 182.193364][T15541] EXT4-fs (loop5): 1 truncate cleaned up [ 182.200796][T15541] EXT4-fs mount: 7 callbacks suppressed [ 182.200815][T15541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.222448][T15541] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 182.232158][T15541] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 0 [ 182.254823][T12797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.372499][T15558] team0: Device hsr_slave_0 failed to register rx_handler [ 182.501102][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.546613][T15576] Cannot find del_set index 0 as target [ 182.554327][T15578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5027'. [ 182.572774][T15578] dummy0: entered promiscuous mode [ 182.602867][T15584] loop5: detected capacity change from 0 to 1024 [ 182.612400][T15586] vlan0: entered allmulticast mode [ 182.625694][T15584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.626841][T15588] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15588 comm=syz.0.5021 [ 182.650087][T15584] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 3: comm syz.5.5019: lblock 3 mapped to illegal pblock 3 (length 13) [ 182.665378][T15584] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 182.678575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.687555][T15584] EXT4-fs (loop5): This should not happen!! Data will be lost [ 182.687555][T15584] [ 182.700936][T15584] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #15: block 3: comm syz.5.5019: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.715749][T15584] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #15: block 3: comm syz.5.5019: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.739242][T15584] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #15: block 3: comm syz.5.5019: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.755531][T15584] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #15: block 3: comm syz.5.5019: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.769906][T15584] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #15: block 3: comm syz.5.5019: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.790190][T15584] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #15: block 3: comm syz.5.5019: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.806450][T15583] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #15: block 3: comm syz.5.5019: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.821006][T15583] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #15: block 3: comm syz.5.5019: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.839195][T15584] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #15: block 3: comm syz.5.5019: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.853350][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.388429][T15643] ALSA: seq fatal error: cannot create timer (-19) [ 183.581513][T12797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.623602][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.671852][T15683] netlink: 268 bytes leftover after parsing attributes in process `syz.5.5058'. [ 183.716015][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5061'. [ 183.815649][T15706] SELinux: syz.2.5069 (15706) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 183.922403][T15716] vlan2: entered allmulticast mode [ 183.927638][T15716] syz_tun: entered allmulticast mode [ 183.954991][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.231644][T15749] vlan0: entered allmulticast mode [ 184.236916][T15749] syz_tun: entered allmulticast mode [ 184.254000][T15751] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 184.625261][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5101'. [ 184.680426][T15796] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 184.707878][T15800] SELinux: syz.6.5104 (15800) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 184.731085][T15802] vlan2: entered allmulticast mode [ 184.736336][T15802] syz_tun: entered allmulticast mode [ 184.782654][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.790230][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.797690][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.812643][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.820173][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.827801][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.835290][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.842791][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.850263][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.857737][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.865203][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.872732][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.880184][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.887767][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.895205][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.902665][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.910331][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.917783][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.925328][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.932783][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.940225][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.947637][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.955078][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.962559][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.969964][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.977382][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.984872][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 184.992295][ T5627] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 185.008594][T15813] loop5: detected capacity change from 0 to 2048 [ 185.016460][ T5627] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 185.028554][T15813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.108538][T15813] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 185.123663][T15813] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1214 with error 28 [ 185.136268][T15813] EXT4-fs (loop5): This should not happen!! Data will be lost [ 185.136268][T15813] [ 185.145949][T15813] EXT4-fs (loop5): Total free blocks count 0 [ 185.152094][T15813] EXT4-fs (loop5): Free/Dirty block details [ 185.158083][T15813] EXT4-fs (loop5): free_blocks=2415919104 [ 185.163942][T15813] EXT4-fs (loop5): dirty_blocks=1216 [ 185.169255][T15813] EXT4-fs (loop5): Block reservation details [ 185.171021][T15825] netlink: 268 bytes leftover after parsing attributes in process `syz.6.5115'. [ 185.175280][T15813] EXT4-fs (loop5): i_reserved_data_blocks=76 [ 185.276279][ T6287] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 185.306809][T15837] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 185.338156][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 185.338172][ T29] audit: type=1400 audit(176.432:5707): avc: denied { mount } for pid=15842 comm="syz.2.5120" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 185.408688][ T29] audit: type=1400 audit(176.497:5708): avc: denied { setopt } for pid=15852 comm="syz.2.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.440448][T15857] loop5: detected capacity change from 0 to 128 [ 185.455615][ T29] audit: type=1400 audit(176.544:5709): avc: denied { mount } for pid=15856 comm="syz.5.5123" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 185.495289][ T29] audit: type=1400 audit(176.581:5710): avc: denied { unmount } for pid=12797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 185.526272][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.533867][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.541382][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.549013][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.556448][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.563917][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.571378][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.578818][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.586303][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.593977][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.601440][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.608855][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.616309][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.623816][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.631242][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.638747][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.646358][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.653868][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.661368][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.668851][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.676337][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.683749][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.691267][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.698712][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.706178][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.713650][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.721113][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.728613][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.736084][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.743701][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.751193][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.758615][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.766129][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.773596][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.781020][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.788491][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.795960][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.803389][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.810875][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.818450][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.826000][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.833474][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.841017][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.847279][ C1] net_ratelimit: 2 callbacks suppressed [ 185.847300][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 185.848467][ T3396] hid-generic 0000:0000:0008.000A: unknown main item tag 0x0 [ 185.885883][ T29] audit: type=1400 audit(176.946:5711): avc: denied { name_bind } for pid=15895 comm="syz.4.5127" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 185.929479][ T3396] hid-generic 0000:0000:0008.000A: hidraw0: HID vc.87 Device [syz0] on syz1 [ 186.047848][T15923] loop5: detected capacity change from 0 to 512 [ 186.055394][T15923] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 186.099450][T15923] EXT4-fs (loop5): failed to open journal device unknown-block(11,131) -6 [ 186.168454][T15944] validate_nla: 3 callbacks suppressed [ 186.168472][T15944] netlink: 'syz.4.5138': attribute type 21 has an invalid length. [ 186.181999][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.336749][T15944] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5138'. [ 186.747384][T16066] SELinux: syz.5.5143 (16066) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 186.948362][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.290482][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.565821][ T29] audit: type=1400 audit(178.433:5712): avc: denied { write } for pid=16204 comm="syz.2.5145" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 188.060188][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.206700][T16372] netlink: 360 bytes leftover after parsing attributes in process `syz.4.5147'. [ 188.355253][T16422] loop5: detected capacity change from 0 to 2048 [ 188.402314][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.871166][T16517] netlink: 'syz.4.5152': attribute type 1 has an invalid length. [ 188.879000][T16517] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5152'. [ 189.172014][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.204305][ T29] audit: type=1400 audit(180.042:5713): avc: denied { write } for pid=16587 comm="syz.0.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.514115][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.070253][ T29] audit: type=1400 audit(180.837:5714): avc: denied { bind } for pid=16779 comm="syz.0.5155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.089382][ T29] audit: type=1400 audit(180.837:5715): avc: denied { name_bind } for pid=16779 comm="syz.0.5155" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 190.109905][ T29] audit: type=1400 audit(180.837:5716): avc: denied { node_bind } for pid=16779 comm="syz.0.5155" saddr=::ffff:0.0.0.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 190.294536][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.625932][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.395664][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.737751][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.518200][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.849592][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.138331][ T29] audit: type=1400 audit(180.978:5717): avc: denied { write } for pid=16779 comm="syz.0.5155" name="udplite6" dev="proc" ino=4026533591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 193.160957][ T29] audit: type=1400 audit(183.026:5718): avc: denied { compute_member } for pid=17277 comm="syz.0.5160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 193.181215][ T29] audit: type=1400 audit(183.457:5719): avc: denied { associate } for pid=17459 comm="syz.6.5162" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 193.619324][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.961418][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.358043][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5165'. [ 194.367070][T17809] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5165'. [ 194.376113][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5165'. [ 194.731133][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.073539][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.421493][T17809] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5165'. [ 195.430721][T17809] netlink: 'syz.6.5165': attribute type 6 has an invalid length. [ 195.687977][ T29] audit: type=1400 audit(186.029:5720): avc: denied { write } for pid=18014 comm="syz.0.5166" path="socket:[49179]" dev="sockfs" ino=49179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 195.842958][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.185066][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.954775][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 197.296881][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 197.764446][ T29] audit: type=1400 audit(187.282:5721): avc: denied { ioctl } for pid=18190 comm="+}[@" path="socket:[49188]" dev="sockfs" ino=49188 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.066600][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.408693][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.962969][T18729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5172'. [ 198.972003][T18729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5172'. [ 199.040343][T18867] netlink: 'syz.5.5173': attribute type 1 has an invalid length. [ 199.178419][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.296141][ T29] audit: type=1400 audit(189.284:5722): avc: granted { setsecparam } for pid=18901 comm="syz.4.5175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 199.520518][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.290291][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.379487][ T29] audit: type=1400 audit(190.472:5723): avc: denied { map } for pid=19257 comm="syz.5.5183" path="socket:[46066]" dev="sockfs" ino=46066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.402328][ T29] audit: type=1400 audit(190.472:5724): avc: denied { read } for pid=19257 comm="syz.5.5183" path="socket:[46066]" dev="sockfs" ino=46066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.425225][ T29] audit: type=1400 audit(190.472:5725): avc: denied { map } for pid=19257 comm="syz.5.5183" path="socket:[46067]" dev="sockfs" ino=46067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 200.632404][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.675032][ T29] audit: type=1400 audit(190.734:5726): avc: denied { mounton } for pid=19305 comm="syz.4.5185" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 201.402094][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.625319][ T29] audit: type=1400 audit(190.837:5727): avc: denied { setopt } for pid=19312 comm="syz.5.5186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 201.734713][T19546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5190'. [ 201.744175][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 202.179009][T19636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.513889][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 202.856011][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.263515][ T29] audit: type=1326 audit(193.203:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19907 comm="syz.0.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2437a0e9a9 code=0x7ffc0000 [ 203.625709][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.818124][ T29] audit: type=1326 audit(193.203:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19907 comm="syz.0.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2437a0e9a9 code=0x7ffc0000 [ 203.841219][ T29] audit: type=1326 audit(193.297:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19907 comm="syz.0.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2437a0e9a9 code=0x7ffc0000 [ 203.864167][ T29] audit: type=1326 audit(193.297:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19907 comm="syz.0.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2437a0e9a9 code=0x7ffc0000 [ 203.967803][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 204.057006][T20075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5200'. [ 204.065989][T20075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5200'. [ 204.341675][T20092] netlink: 'syz.6.5209': attribute type 1 has an invalid length. [ 204.442129][T20091] syzkaller0: entered promiscuous mode [ 204.447658][T20091] syzkaller0: entered allmulticast mode [ 204.664046][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 204.664066][ T29] audit: type=1400 audit(194.513:5749): avc: denied { create } for pid=20112 comm="syz.0.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 204.733987][ T29] audit: type=1400 audit(194.532:5750): avc: denied { write } for pid=20112 comm="syz.0.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 204.753654][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 204.808598][ T29] audit: type=1326 audit(194.616:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20119 comm="syz.2.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ea2ce9a9 code=0x7ffc0000 [ 204.831798][ T29] audit: type=1326 audit(194.616:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20119 comm="syz.2.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ea2ce9a9 code=0x7ffc0000 [ 204.854998][ T29] audit: type=1326 audit(194.616:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20119 comm="syz.2.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22ea2ce9a9 code=0x7ffc0000 [ 204.878119][ T29] audit: type=1326 audit(194.616:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20119 comm="syz.2.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ea2ce9a9 code=0x7ffc0000 [ 204.901190][ T29] audit: type=1326 audit(194.625:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20119 comm="syz.2.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ea2ce9a9 code=0x7ffc0000 [ 204.924215][ T29] audit: type=1326 audit(194.625:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20119 comm="syz.2.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22ea2ce9a9 code=0x7ffc0000 [ 204.947270][ T29] audit: type=1326 audit(194.625:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20119 comm="syz.2.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ea2ce9a9 code=0x7ffc0000 [ 204.970226][ T29] audit: type=1326 audit(194.625:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20119 comm="syz.2.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f22ea2ce9a9 code=0x7ffc0000 [ 204.995048][T20128] smc: net device bond0 applied user defined pnetid SYZ0 [ 205.004406][T20128] smc: net device bond0 erased user defined pnetid SYZ0 [ 205.079655][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.210107][T20166] sd 0:0:1:0: device reset [ 205.284605][T20180] xt_hashlimit: size too large, truncated to 1048576 [ 205.365850][T20178] vhci_hcd: invalid port number 96 [ 205.371087][T20178] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 205.452011][T20192] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5256'. [ 205.464628][T20192] 0ªî{X¹¦: renamed from gretap0 [ 205.472367][T20192] 0ªî{X¹¦: entered allmulticast mode [ 205.478736][T20192] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 205.860069][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.945137][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5277'. [ 206.068655][T20303] loop5: detected capacity change from 0 to 512 [ 206.079031][T20303] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.5283: corrupted in-inode xattr: invalid ea_ino [ 206.094253][T20303] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.5283: couldn't read orphan inode 15 (err -117) [ 206.109200][T20303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.121773][T20301] hub 6-0:1.0: USB hub found [ 206.126565][T20301] hub 6-0:1.0: 8 ports detected [ 206.169883][T12797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.175776][T20316] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5287'. [ 206.191475][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.223001][T20321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20321 comm=syz.6.5289 [ 206.235658][T20321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20321 comm=syz.6.5289 [ 206.290384][T20334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5291'. [ 206.302362][T20334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5291'. [ 206.349943][T20334] erspan0: entered promiscuous mode [ 206.373355][T20334] gretap0: entered promiscuous mode [ 206.387254][T20334] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 206.396202][T20334] Cannot create hsr debugfs directory [ 206.403802][T20334] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 206.415123][T20334] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 206.779503][T20401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.801339][T20401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.890710][T20418] openvswitch: netlink: Message has 6 unknown bytes. [ 207.039748][T20431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5307'. [ 207.100702][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5310'. [ 207.136933][T20443] 9pnet_fd: Insufficient options for proto=fd [ 207.346482][T20468] loop5: detected capacity change from 0 to 512 [ 207.353222][T20468] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 207.441141][T20479] netlink: 'syz.4.5329': attribute type 2 has an invalid length. [ 207.449027][T20479] netlink: 'syz.4.5329': attribute type 1 has an invalid length. [ 207.456821][T20479] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.5329'. [ 208.073092][ C1] net_ratelimit: 2 callbacks suppressed [ 208.073108][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.363391][T20533] veth3: entered promiscuous mode [ 208.415127][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.488206][T20555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5362'. [ 208.507917][T20555] netem: change failed [ 208.965253][T20616] loop5: detected capacity change from 0 to 1024 [ 208.972372][T20616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.982019][T20616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.107005][T12797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.117699][T20629] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 209.184841][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.236385][T20649] binfmt_misc: register: failed to install interpreter file ./file2 [ 209.284890][T20656] program syz.2.5410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.305783][T20656] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 209.373586][T20673] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5418'. [ 209.387329][T20668] loop9: detected capacity change from 0 to 7 [ 209.393924][T20668] buffer_io_error: 41542 callbacks suppressed [ 209.393942][T20668] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.410171][T20668] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.418153][T20668] loop9: unable to read partition table [ 209.425090][T20673] netlink: 277 bytes leftover after parsing attributes in process `syz.5.5418'. [ 209.446123][T20668] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 209.446123][T20668] ) failed (rc=-5) [ 209.526948][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.544761][T20694] loop5: detected capacity change from 0 to 128 [ 209.553667][T20694] EXT4-fs: Ignoring removed nobh option [ 209.595835][T20694] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.615434][T20705] serio: Serial port ptm0 [ 209.649635][T12797] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.234738][T20744] sg_write: data in/out 219/120 bytes for SCSI command 0x0-- guessing data in; [ 210.234738][T20744] program syz.0.5450 not setting count and/or reply_len properly [ 210.288586][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 210.288603][ T29] audit: type=1400 audit(199.779:5991): avc: denied { read write } for pid=20745 comm="syz.6.5451" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.318054][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.325178][ T29] audit: type=1400 audit(199.779:5992): avc: denied { open } for pid=20745 comm="syz.6.5451" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.411464][ T29] audit: type=1400 audit(199.835:5993): avc: denied { ioctl } for pid=20745 comm="syz.6.5451" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.435984][ T29] audit: type=1400 audit(199.835:5994): avc: denied { remount } for pid=20749 comm="syz.2.5452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 210.519998][T20762] loop5: detected capacity change from 0 to 128 [ 210.545738][T20762] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 210.553826][T20762] FAT-fs (loop5): Filesystem has been set read-only [ 210.573621][T20762] bio_check_eod: 41549 callbacks suppressed [ 210.573691][T20762] syz.5.5459: attempt to access beyond end of device [ 210.573691][T20762] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 210.617396][ T29] audit: type=1400 audit(199.966:5995): avc: denied { ioctl } for pid=20755 comm="syz.5.5456" path="socket:[50161]" dev="sockfs" ino=50161 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.642167][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.649304][ T29] audit: type=1400 audit(199.985:5996): avc: denied { shutdown } for pid=20757 comm="syz.4.5458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.668649][ T29] audit: type=1400 audit(199.985:5997): avc: denied { connect } for pid=20757 comm="syz.4.5458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.687811][ T29] audit: type=1400 audit(199.985:5998): avc: denied { name_connect } for pid=20757 comm="syz.4.5458" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 210.687879][T20766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5461'. [ 210.687904][ T29] audit: type=1400 audit(200.004:5999): avc: denied { mount } for pid=20760 comm="syz.5.5459" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 210.709555][T20766] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5461'. [ 210.749889][T20762] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 210.758059][T20762] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 210.787604][T20762] syz.5.5459: attempt to access beyond end of device [ 210.787604][T20762] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 210.830088][T20762] syz.5.5459: attempt to access beyond end of device [ 210.830088][T20762] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 210.855424][T20762] syz.5.5459: attempt to access beyond end of device [ 210.855424][T20762] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 210.883973][ T29] audit: type=1400 audit(200.322:6000): avc: denied { name_connect } for pid=20770 comm="syz.4.5464" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 210.906795][T20762] syz.5.5459: attempt to access beyond end of device [ 210.906795][T20762] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 210.929471][T20762] syz.5.5459: attempt to access beyond end of device [ 210.929471][T20762] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 210.929568][T20762] syz.5.5459: attempt to access beyond end of device [ 210.929568][T20762] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 210.929683][T20762] syz.5.5459: attempt to access beyond end of device [ 210.929683][T20762] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 210.929826][T20762] syz.5.5459: attempt to access beyond end of device [ 210.929826][T20762] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 210.929874][T20762] syz.5.5459: attempt to access beyond end of device [ 210.929874][T20762] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 211.099038][T20788] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 211.150117][T20789] lo speed is unknown, defaulting to 1000 [ 211.171917][T20789] lo speed is unknown, defaulting to 1000 [ 211.180456][T20789] lo speed is unknown, defaulting to 1000 [ 211.317405][T20789] infiniband sz1: set active [ 211.322145][T20789] infiniband sz1: added lo [ 211.326987][ T5711] lo speed is unknown, defaulting to 1000 [ 211.351286][T20789] RDS/IB: sz1: added [ 211.361477][T20789] smc: adding ib device sz1 with port count 1 [ 211.373326][T20789] smc: ib device sz1 port 1 has pnetid [ 211.379363][ T5711] lo speed is unknown, defaulting to 1000 [ 211.404995][T20789] lo speed is unknown, defaulting to 1000 [ 211.410981][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.474254][T20789] lo speed is unknown, defaulting to 1000 [ 211.509897][T20789] lo speed is unknown, defaulting to 1000 [ 211.546470][T20789] lo speed is unknown, defaulting to 1000 [ 211.582422][T20789] lo speed is unknown, defaulting to 1000 [ 211.617427][T20789] lo speed is unknown, defaulting to 1000 [ 211.653502][T20789] lo speed is unknown, defaulting to 1000 [ 211.696526][T20815] loop5: detected capacity change from 0 to 8192 [ 211.750574][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.112355][T20856] netlink: 'syz.4.5502': attribute type 13 has an invalid length. [ 212.149088][T20856] 0ªî{X¹¦: left allmulticast mode [ 212.164800][T20856] 0ªî{X¹¦: refused to change device tx_queue_len [ 212.182755][T20856] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 212.312999][T13240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.442627][T20894] lo speed is unknown, defaulting to 1000 [ 212.495567][ T31] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.505391][ T31] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.520303][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.566681][ T31] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.576593][ T31] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.640489][ T31] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.650440][ T31] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.735638][ T31] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.745569][ T31] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.779249][T20903] lo speed is unknown, defaulting to 1000 [ 212.862389][ T31] bridge_slave_1: left allmulticast mode [ 212.868101][ T31] bridge_slave_1: left promiscuous mode [ 212.874033][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.896182][ T31] bridge_slave_0: left allmulticast mode [ 212.901913][ T31] bridge_slave_0: left promiscuous mode [ 212.907774][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.058163][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.073091][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.092635][ T31] bond0 (unregistering): Released all slaves [ 213.099462][T20926] netlink: 'syz.4.5533': attribute type 13 has an invalid length. [ 213.107358][T20926] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5533'. [ 213.127098][T20926] erspan0: refused to change device tx_queue_len [ 213.213686][ T31] hsr_slave_0: left promiscuous mode [ 213.223686][ T31] hsr_slave_1: left promiscuous mode [ 213.229749][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.237240][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.245123][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.252752][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.264043][ T31] veth1_macvtap: left promiscuous mode [ 213.269702][ T31] veth0_macvtap: left promiscuous mode [ 213.275316][ T31] veth1_vlan: left promiscuous mode [ 213.280744][ T31] veth0_vlan: left promiscuous mode [ 213.383304][T20933] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 213.463366][ T3396] Process accounting resumed [ 213.474562][ T31] team0 (unregistering): Port device team_slave_1 removed [ 213.489268][ T31] team0 (unregistering): Port device team_slave_0 removed [ 213.507985][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5540'. [ 213.577654][T20903] chnl_net:caif_netlink_parms(): no params data found [ 213.589868][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.597349][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.604922][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.612452][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.619922][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.627408][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.634912][ C1] net_ratelimit: 2 callbacks suppressed [ 213.634925][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.647659][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.655375][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.662960][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.670416][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.677840][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.685332][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.692777][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.700211][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.707719][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.715294][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.722735][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.730181][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.737603][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.745067][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.752505][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.759928][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.767454][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.774953][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.782416][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.789841][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.797331][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.804764][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.812255][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.819708][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.827250][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.834663][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.842197][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.849631][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.857080][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.864504][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.872030][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.879487][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.886913][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.894414][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.901928][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.909338][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.916865][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.924341][ T5711] hid-generic 0000:0000:0008.000B: unknown main item tag 0x0 [ 213.933027][ T5711] hid-generic 0000:0000:0008.000B: hidraw0: HID vc.87 Device [syz0] on syz1 [ 213.974222][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.000986][T20903] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.008353][T20903] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.026401][T20903] bridge_slave_0: entered allmulticast mode [ 214.035028][T20903] bridge_slave_0: entered promiscuous mode [ 214.042093][T20903] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.049510][T20903] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.058809][T20903] bridge_slave_1: entered allmulticast mode [ 214.065400][T20903] bridge_slave_1: entered promiscuous mode [ 214.088520][T20903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.108643][T20903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.124288][T20963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.171510][T20903] team0: Port device team_slave_0 added [ 214.182971][T20903] team0: Port device team_slave_1 added [ 214.218102][T20973] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 214.224684][T20973] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 214.232446][T20973] vhci_hcd vhci_hcd.0: Device attached [ 214.245540][T20903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.252557][T20903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.278797][T20903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.294296][T20903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.301357][T20903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.327437][T20903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.341457][T20974] vhci_hcd: connection closed [ 214.341697][T19740] vhci_hcd: stop threads [ 214.350713][T19740] vhci_hcd: release socket [ 214.355168][T19740] vhci_hcd: disconnect device [ 214.440233][T20903] hsr_slave_0: entered promiscuous mode [ 214.446540][T20903] hsr_slave_1: entered promiscuous mode [ 214.458780][T20903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.478661][T20903] Cannot create hsr debugfs directory [ 214.581722][T20986] loop5: detected capacity change from 0 to 512 [ 214.623465][T20986] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 214.648912][T20903] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 214.674169][T20986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 214.693648][T20903] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 214.705024][T20903] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 214.725627][T20903] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 214.740399][T12797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 214.752868][T20997] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5559'. [ 214.761999][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.837321][T20903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.864346][T20903] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.874772][T17639] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.881884][T17639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.914291][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.921416][ T6268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.060757][T21032] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 215.082150][T21032] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 215.086076][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.101706][T20903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.182638][T21041] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.193174][T21041] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 215.209539][T21048] netlink: 'syz.2.5577': attribute type 1 has an invalid length. [ 215.270517][T21048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.279863][T21048] bond1: (slave bond2): making interface the new active one [ 215.291517][T21048] bond1: (slave bond2): Enslaving as an active interface with an up link [ 215.343795][T20903] veth0_vlan: entered promiscuous mode [ 215.356949][T20903] veth1_vlan: entered promiscuous mode [ 215.373574][T20903] veth0_macvtap: entered promiscuous mode [ 215.381521][T20903] veth1_macvtap: entered promiscuous mode [ 215.393311][T20903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.405286][T20903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.416426][T20903] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.425314][T20903] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.434178][T20903] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.443073][T20903] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.518240][T21082] 9pnet: Unknown protocol version 9p [ 215.566096][T21090] syzkaller1: entered promiscuous mode [ 215.571698][T21090] syzkaller1: entered allmulticast mode [ 215.671258][T21095] rdma_op ffff8881015e6d80 conn xmit_rdma 0000000000000000 [ 215.752007][T21101] netlink: 'syz.7.5596': attribute type 1 has an invalid length. [ 215.759869][T21101] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.5596'. [ 215.797574][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 215.797592][ T29] audit: type=1326 audit(204.924:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21102 comm="syz.7.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe638a3e9a9 code=0x7ffc0000 [ 215.838320][ T29] audit: type=1326 audit(204.924:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21102 comm="syz.7.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe638a3e9a9 code=0x7ffc0000 [ 215.861526][ T29] audit: type=1326 audit(204.924:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21102 comm="syz.7.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe638a3e9a9 code=0x7ffc0000 [ 215.866527][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.884850][ T29] audit: type=1326 audit(204.924:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21102 comm="syz.7.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe638a3e9a9 code=0x7ffc0000 [ 215.923356][T21109] sch_fq: defrate 0 ignored. [ 215.979529][ T29] audit: type=1326 audit(205.092:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.7.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe638a3e9a9 code=0x7ffc0000 [ 216.002649][ T29] audit: type=1326 audit(205.092:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.7.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe638a3e9a9 code=0x7ffc0000 [ 216.026984][ T29] audit: type=1326 audit(205.092:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.7.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe638a3e9a9 code=0x7ffc0000 [ 216.050147][ T29] audit: type=1326 audit(205.092:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.7.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe638a3e9a9 code=0x7ffc0000 [ 216.073158][ T29] audit: type=1326 audit(205.092:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.7.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe638a3e9a9 code=0x7ffc0000 [ 216.073221][ T29] audit: type=1326 audit(205.092:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.7.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe638a3e9a9 code=0x7ffc0000 [ 216.197894][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.228968][T21129] netlink: 'syz.7.5609': attribute type 1 has an invalid length. [ 216.864606][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5649'. [ 216.873610][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5649'. [ 216.938607][T21224] veth1_to_bond: entered allmulticast mode [ 216.951344][T21224] veth1_to_bond: left allmulticast mode [ 216.967603][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 217.025666][T21237] loop5: detected capacity change from 0 to 1024 [ 217.026150][T21237] EXT4-fs: Ignoring removed orlov option [ 217.026180][T21237] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.026886][T21237] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 217.056710][T21237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.121681][T12797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.201433][T21255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21255 comm=syz.2.5667 [ 217.262597][T21257] ------------[ cut here ]------------ [ 217.268209][T21257] WARNING: CPU: 1 PID: 21257 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 217.278494][T21257] Modules linked in: [ 217.282483][T21257] CPU: 1 UID: 0 PID: 21257 Comm: syz.4.5668 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) [ 217.295104][T21257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.305242][T21257] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 217.309759][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 217.311993][T21257] Code: 83 3d c3 55 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 52 4d 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 217.338648][T21257] RSP: 0018:ffffc9000461ba98 EFLAGS: 00010246 [ 217.344814][T21257] RAX: 0bc8a473b69cf000 RBX: 0000000000000013 RCX: 0000000000000000 [ 217.352901][T21257] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040dc0 [ 217.355267][T21261] program syz.0.5670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.360881][T21257] RBP: 0000000000000dc0 R08: ffff88810330dbd8 R09: 0000000000000000 [ 217.360899][T21257] R10: ffff8881023ad810 R11: 00018881023ad810 R12: ffffc9000461bd28 [ 217.386347][T21257] R13: 0000000008010000 R14: 0000000000040dc0 R15: 0000000000000000 [ 217.394457][T21257] FS: 00007fe413a476c0(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000 [ 217.403611][T21257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.410243][T21257] CR2: 0000200000001000 CR3: 0000000138980000 CR4: 00000000003506f0 [ 217.418289][T21257] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.426361][T21257] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 217.434457][T21257] Call Trace: [ 217.437766][T21257] [ 217.440743][T21257] ? __rcu_read_unlock+0x4f/0x70 [ 217.445717][T21257] __alloc_pages_noprof+0x9/0x20 [ 217.450771][T21257] ___kmalloc_large_node+0x73/0x140 [ 217.456103][T21257] __kmalloc_large_node_noprof+0x16/0xa0 [ 217.461822][T21257] __kmalloc_noprof+0x2ab/0x3e0 [ 217.466694][T21257] ? hashtab_init+0x9b/0xe0 [ 217.471291][T21257] hashtab_init+0x9b/0xe0 [ 217.475647][T21257] symtab_init+0x2c/0x40 [ 217.479961][T21257] policydb_read+0x516/0x1330 [ 217.484797][T21257] ? security_load_policy+0x90/0x890 [ 217.490159][T21257] security_load_policy+0xba/0x890 [ 217.495299][T21257] ? rep_movs_alternative+0x4a/0x90 [ 217.500587][T21257] sel_write_load+0x1d4/0x380 [ 217.505331][T21257] ? __pfx_sel_write_load+0x10/0x10 [ 217.510551][T21257] vfs_write+0x266/0x8e0 [ 217.514873][T21257] ? __rcu_read_unlock+0x4f/0x70 [ 217.519876][T21257] ? __fget_files+0x184/0x1c0 [ 217.524645][T21257] ? finish_task_switch+0xad/0x2b0 [ 217.529911][T21257] ksys_write+0xda/0x1a0 [ 217.534223][T21257] __x64_sys_write+0x40/0x50 [ 217.538861][T21257] x64_sys_call+0x2cdd/0x2fb0 [ 217.543572][T21257] do_syscall_64+0xd2/0x200 [ 217.548106][T21257] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 217.554188][T21257] ? clear_bhb_loop+0x40/0x90 [ 217.558900][T21257] ? clear_bhb_loop+0x40/0x90 [ 217.563672][T21257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.569748][T21257] RIP: 0033:0x7fe4153de9a9 [ 217.574185][T21257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.593900][T21257] RSP: 002b:00007fe413a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.602339][T21257] RAX: ffffffffffffffda RBX: 00007fe415605fa0 RCX: 00007fe4153de9a9 [ 217.610346][T21257] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 217.618351][T21257] RBP: 00007fe415460d69 R08: 0000000000000000 R09: 0000000000000000 [ 217.626347][T21257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.634458][T21257] R13: 0000000000000000 R14: 00007fe415605fa0 R15: 00007ffe549cac08 [ 217.642461][T21257] [ 217.645563][T21257] ---[ end trace 0000000000000000 ]--- [ 217.651036][T21257] SELinux: failed to load policy [ 217.810470][ T6268] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 217.846309][T21299] macvtap1: entered allmulticast mode [ 217.851818][T21299] bridge0: entered allmulticast mode [ 217.857670][T21299] bridge0: port 3(macvtap1) entered blocking state [ 217.864238][T21299] bridge0: port 3(macvtap1) entered disabled state [ 217.873675][T21299] bridge0: left allmulticast mode [ 217.883831][T21297] lo speed is unknown, defaulting to 1000 [ 218.049996][T21319] atomic_op ffff88811c183528 conn xmit_atomic 0000000000000000 [ 218.079501][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.421542][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.485012][T21350] syzkaller1: entered promiscuous mode [ 218.490765][T21350] syzkaller1: entered allmulticast mode [ 218.657604][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5713'. [ 218.858090][T21387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5726'. [ 218.867169][T21387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5726'. [ 218.876277][T21387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5726'. [ 218.887927][T21387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5726'. [ 218.992197][T21377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.006258][T21377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.201944][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.217567][T21427] loop7: detected capacity change from 0 to 512 [ 219.226912][T21427] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 219.246567][T21432] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 219.246567][T21432] program syz.0.5748 not setting count and/or reply_len properly [ 219.262682][T21427] EXT4-fs (loop7): 1 truncate cleaned up [ 219.270056][T21427] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.308413][T20903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.533359][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.595253][T21477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.666342][T21488] loop7: detected capacity change from 0 to 1024 [ 219.686208][T21488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.729908][T21488] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 219.742502][T21488] EXT4-fs (loop7): This should not happen!! Data will be lost [ 219.742502][T21488] [ 219.752197][T21488] EXT4-fs (loop7): Total free blocks count 0 [ 219.758350][T21488] EXT4-fs (loop7): Free/Dirty block details [ 219.764278][T21488] EXT4-fs (loop7): free_blocks=0 [ 219.769543][T21488] EXT4-fs (loop7): dirty_blocks=0 [ 219.774675][T21488] EXT4-fs (loop7): Block reservation details [ 219.780907][T21488] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 219.810860][T20903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.979597][T21541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5786'. [ 220.283120][T21576] loop7: detected capacity change from 0 to 512 [ 220.285043][T21578] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž; [ 220.301358][T21576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.313796][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.338592][T20903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.472212][T21595] loop7: detected capacity change from 0 to 8192 [ 220.622799][T21618] lo speed is unknown, defaulting to 1000 [ 220.645199][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.898004][T21656] lo speed is unknown, defaulting to 1000 [ 221.029286][T21667] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5852'. [ 221.045359][T21669] xt_hashlimit: max too large, truncated to 1048576 [ 221.087053][T21671] netlink: 'syz.5.5855': attribute type 10 has an invalid length. [ 221.095837][T21671] ipvlan0: entered allmulticast mode [ 221.101189][T21671] veth0_vlan: entered allmulticast mode [ 221.108979][T21671] team0: Device ipvlan0 failed to register rx_handler [ 221.171026][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 221.171066][ T29] audit: type=1400 audit(209.956:6330): avc: denied { write } for pid=21676 comm="syz.5.5856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 221.223451][T21682] netlink: 'syz.4.5859': attribute type 1 has an invalid length. [ 221.254991][T21682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.271083][T21686] netlink: 'syz.7.5860': attribute type 1 has an invalid length. [ 221.279036][T21686] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.5860'. [ 221.298123][T21682] bond0: (slave bridge2): making interface the new active one [ 221.307187][T21682] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 221.414906][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.447041][ T29] audit: type=1400 audit(210.209:6331): avc: denied { bind } for pid=21709 comm="syz.7.5867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.466023][ T29] audit: type=1400 audit(210.209:6332): avc: denied { listen } for pid=21709 comm="syz.7.5867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.485314][ T29] audit: type=1400 audit(210.209:6333): avc: denied { write } for pid=21709 comm="syz.7.5867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.586180][ T29] audit: type=1326 audit(210.331:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21721 comm="syz.4.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 221.609166][ T29] audit: type=1326 audit(210.331:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21721 comm="syz.4.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 221.632102][ T29] audit: type=1326 audit(210.331:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21721 comm="syz.4.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 221.655018][ T29] audit: type=1326 audit(210.331:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21721 comm="syz.4.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 221.671523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.678026][ T29] audit: type=1326 audit(210.331:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21721 comm="syz.4.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 221.757011][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.770433][T21733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5872'. [ 221.799886][T21733] netem: change failed [ 222.000206][ T29] audit: type=1400 audit(210.723:6339): avc: denied { name_bind } for pid=21754 comm="syz.7.5876" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 222.233034][T21780] sd 0:0:1:0: device reset [ 222.321056][T21792] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5886'. [ 222.344839][T21786] syzkaller0: entered promiscuous mode [ 222.350440][T21786] syzkaller0: entered allmulticast mode [ 222.466560][T21810] netlink: 'syz.7.5889': attribute type 21 has an invalid length. [ 222.482000][T21810] netlink: 'syz.7.5889': attribute type 1 has an invalid length. [ 222.526726][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.629905][T21834] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 222.813782][T21898] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž; [ 222.868844][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.189830][T21921] xt_hashlimit: max too large, truncated to 1048576 [ 223.240625][T21927] batadv1: entered promiscuous mode [ 223.246149][T21927] batadv1: entered allmulticast mode [ 223.353126][T21944] netlink: 'syz.7.5925': attribute type 13 has an invalid length. [ 223.363330][T21944] erspan0: refused to change device tx_queue_len [ 223.373257][T21944] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 223.429818][T21953] xt_hashlimit: max too large, truncated to 1048576 [ 223.577325][T21971] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 223.585479][T21971] 0ªî{X¹¦: entered allmulticast mode [ 223.596271][T21975] program syz.2.5941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.632262][T21978] loop7: detected capacity change from 0 to 128 [ 223.757999][T21999] xt_hashlimit: max too large, truncated to 1048576 [ 223.957523][T22027] loop5: detected capacity change from 0 to 128 [ 223.980815][T22027] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 223.996647][ T5711] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 224.015012][ T5711] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.047837][T12797] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.112511][T22048] SELinux: security_context_str_to_sid (_) failed with errno=-22 [ 224.166361][T22059] __nla_validate_parse: 8 callbacks suppressed [ 224.166379][T22059] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5977'. [ 224.231183][T22065] loop5: detected capacity change from 0 to 512 [ 224.297901][T22054] rdma_rxe: rxe_newlink: failed to add lo [ 224.339007][T22074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5985'. [ 224.359175][T22076] netlink: 'syz.5.5984': attribute type 13 has an invalid length. [ 224.388002][T22080] hub 9-0:1.0: USB hub found [ 224.392927][T22080] hub 9-0:1.0: 8 ports detected [ 224.395900][T22076] gretap0: refused to change device tx_queue_len [ 224.440933][T22086] loop5: detected capacity change from 0 to 128 [ 224.460570][T22086] FAT-fs (loop5): Directory bread(block 32) failed [ 224.476334][T22086] FAT-fs (loop5): Directory bread(block 33) failed [ 224.483936][T22086] FAT-fs (loop5): Directory bread(block 34) failed [ 224.490586][T22086] FAT-fs (loop5): Directory bread(block 35) failed [ 224.497524][T22086] FAT-fs (loop5): Directory bread(block 36) failed [ 224.504154][T22086] FAT-fs (loop5): Directory bread(block 37) failed [ 224.512675][T22086] FAT-fs (loop5): Directory bread(block 38) failed [ 224.519309][T22086] FAT-fs (loop5): Directory bread(block 39) failed [ 224.531161][T22086] FAT-fs (loop5): Directory bread(block 40) failed [ 224.538121][T22086] FAT-fs (loop5): Directory bread(block 41) failed [ 224.602596][T22086] bio_check_eod: 15355 callbacks suppressed [ 224.602625][T22086] syz.5.5990: attempt to access beyond end of device [ 224.602625][T22086] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 224.640772][T22086] FAT-fs (loop5): Filesystem has been set read-only [ 224.649560][T22086] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 224.697188][T22110] binfmt_misc: register: failed to install interpreter file ./file2 [ 224.735006][T22116] netlink: 'syz.4.6005': attribute type 4 has an invalid length. [ 224.761060][ C1] net_ratelimit: 4 callbacks suppressed [ 224.761080][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 224.812381][T22127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6006'. [ 224.831098][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6010'. [ 224.957450][T22156] SELinux: policydb version -1228934626 does not match my version range 15-34 [ 224.972033][T22156] SELinux: failed to load policy [ 225.024503][T22165] program syz.5.6026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.092456][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.104758][ T6256] team0: left allmulticast mode [ 225.109793][ T6256] team_slave_0: left allmulticast mode [ 225.115448][ T6256] team_slave_1: left allmulticast mode [ 225.121090][ T6256] team0: left promiscuous mode [ 225.159209][ T6256] team_slave_0: left promiscuous mode [ 225.164724][ T6256] team_slave_1: left promiscuous mode [ 225.170422][ T6256] bridge0: port 3(team0) entered disabled state [ 225.180500][ T6256] bridge_slave_1: left allmulticast mode [ 225.186257][ T6256] bridge_slave_1: left promiscuous mode [ 225.192126][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.203583][ T6256] bridge_slave_0: left allmulticast mode [ 225.209367][ T6256] bridge_slave_0: left promiscuous mode [ 225.215233][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.384625][ T6256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.404030][ T6256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.415371][T22205] netlink: 'syz.0.6044': attribute type 1 has an invalid length. [ 225.425251][ T6256] bond0 (unregistering): Released all slaves [ 225.443074][T22179] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.453022][T22179] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.518270][T22214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6048'. [ 225.598166][T22227] loop7: detected capacity change from 0 to 512 [ 225.604744][ T6256] hsr_slave_1: left promiscuous mode [ 225.613402][T22227] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 225.618069][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.630823][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.641371][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.649090][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.652588][T22227] EXT4-fs error (device loop7): ext4_find_inline_data_nolock:169: inode #17: comm syz.7.6053: inline data xattr refers to an external xattr inode [ 225.673086][T22227] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.6053: couldn't read orphan inode 17 (err -117) [ 225.685852][T22227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.699128][ T6256] veth0_macvtap: left promiscuous mode [ 225.709303][T22227] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 225.747749][T20903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.786337][ T6256] team0 (unregistering): Port device team_slave_1 removed [ 225.802637][T22248] loop5: detected capacity change from 0 to 512 [ 225.812836][ T6256] team0 (unregistering): Port device team_slave_0 removed [ 225.820362][T22248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 225.836429][T22248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.862211][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.870844][T22179] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.880850][T22179] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.905428][T22248] loop5: detected capacity change from 512 to 64 [ 225.939250][T20472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.971200][T22179] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.981116][T22179] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.996662][T22257] loop7: detected capacity change from 0 to 512 [ 226.004013][T22257] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 226.015605][T22257] EXT4-fs (loop7): 1 truncate cleaned up [ 226.022073][T22257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.047665][T20903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.059151][T22179] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.069062][T22179] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.143420][T22179] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.151745][T22179] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.167719][T22179] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.176093][T22179] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.192299][T22179] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.200667][T22179] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.209013][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.221950][T22179] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.230417][T22179] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.233342][T22267] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6071'. [ 226.273914][ T6256] ------------[ cut here ]------------ [ 226.279510][ T6256] WARNING: CPU: 0 PID: 6256 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 226.289321][ T6256] Modules linked in: [ 226.290497][T22276] SELinux: policydb version 1675088414 does not match my version range 15-34 [ 226.293309][ T6256] CPU: 0 UID: 0 PID: 6256 Comm: kworker/u8:11 Tainted: G W 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) [ 226.304854][T22276] SELinux: failed to load policy [ 226.316548][ T6256] Tainted: [W]=WARN [ 226.325535][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.335666][ T6256] Workqueue: netns cleanup_net [ 226.340528][ T6256] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 226.346193][ T6256] Code: 48 8d bb 70 0e 00 00 e8 92 5e c1 fc 48 8b bb 70 0e 00 00 e8 36 c3 cd fc 5b 41 5e 41 5f 5d e9 0b 94 b3 00 cc e8 05 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 f7 4e a7 fc 90 0f 0b 90 4c 89 f7 e8 5b [ 226.366014][ T6256] RSP: 0018:ffffc900046efc60 EFLAGS: 00010293 [ 226.372121][ T6256] RAX: ffffffff84b0551b RBX: ffff88810991a800 RCX: ffff88811bf2c100 [ 226.380214][ T6256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810991b640 [ 226.388429][ T6256] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000 [ 226.396569][ T6256] R10: ffffc900046efbe8 R11: 0001c900046efbe8 R12: ffffffff86c82480 [ 226.404703][ T6256] R13: ffff88810991a828 R14: ffff88810991b640 R15: ffff88810991a800 [ 226.412762][ T6256] FS: 0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000 [ 226.421919][ T6256] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.424807][T22268] lo speed is unknown, defaulting to 1000 [ 226.428787][ T6256] CR2: 00007f99b3fa3fe8 CR3: 0000000134d48000 CR4: 00000000003506f0 [ 226.442774][ T6256] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.450805][ T6256] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 226.458889][ T6256] Call Trace: [ 226.462294][ T6256] [ 226.465376][ T6256] xfrm_net_exit+0x2d/0x60 [ 226.469820][ T6256] ops_undo_list+0x27b/0x410 [ 226.474600][ T6256] cleanup_net+0x2de/0x4d0 [ 226.479099][ T6256] process_scheduled_works+0x4cb/0x9d0 [ 226.484633][ T6256] worker_thread+0x582/0x770 [ 226.489399][ T6256] kthread+0x486/0x510 [ 226.493532][ T6256] ? finish_task_switch+0xad/0x2b0 [ 226.498788][ T6256] ? __pfx_worker_thread+0x10/0x10 [ 226.503994][ T6256] ? __pfx_kthread+0x10/0x10 [ 226.508713][ T6256] ret_from_fork+0xda/0x150 [ 226.513387][ T6256] ? __pfx_kthread+0x10/0x10 [ 226.518073][ T6256] ret_from_fork_asm+0x1a/0x30 [ 226.522881][ T6256] [ 226.525957][ T6256] ---[ end trace 0000000000000000 ]--- [ 226.566238][T22268] chnl_net:caif_netlink_parms(): no params data found [ 226.626359][T22268] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.633514][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.636809][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 226.636828][ T29] audit: type=1400 audit(215.064:6487): avc: denied { mount } for pid=22298 comm="syz.0.6079" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 226.643207][T22268] bridge_slave_0: entered allmulticast mode [ 226.675898][T22268] bridge_slave_0: entered promiscuous mode [ 226.682920][T22268] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.690071][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.697373][T22268] bridge_slave_1: entered allmulticast mode [ 226.703983][T22268] bridge_slave_1: entered promiscuous mode [ 226.733493][T22268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.756067][T22268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.767766][ T29] audit: type=1400 audit(215.185:6488): avc: denied { unmount } for pid=12840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 226.812803][T22268] team0: Port device team_slave_0 added [ 226.847101][T22268] team0: Port device team_slave_1 added [ 226.886909][T22268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.894022][T22268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.920159][T22268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.945296][T22268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.950670][T22330] loop7: detected capacity change from 0 to 1024 [ 226.952296][T22268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.972097][T22330] EXT4-fs: Ignoring removed bh option [ 226.984743][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.984820][T22268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.022540][T22268] hsr_slave_0: entered promiscuous mode [ 227.044840][T22268] hsr_slave_1: entered promiscuous mode [ 227.049900][T22330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.069868][T22268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.078175][T22268] Cannot create hsr debugfs directory [ 227.085980][ T29] audit: type=1400 audit(215.485:6489): avc: denied { append } for pid=22342 comm="syz.4.6098" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 227.141397][T20903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.145283][ T29] audit: type=1400 audit(215.513:6490): avc: denied { append } for pid=22328 comm="syz.7.6094" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.172446][ T29] audit: type=1400 audit(215.522:6491): avc: denied { create } for pid=22345 comm="syz.0.6099" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 227.217483][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6101'. [ 227.283454][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6105'. [ 227.316165][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.360782][T22268] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 227.391238][T22268] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 227.419784][T22268] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 227.438510][T22268] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 227.528979][T22268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.544795][T22268] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.566303][T17639] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.573503][T17639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.588620][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.595747][ T6256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.606894][T22412] loop7: detected capacity change from 0 to 128 [ 227.630039][T22416] ALSA: seq fatal error: cannot create timer (-22) [ 227.632143][T22412] FAT-fs (loop7): Directory bread(block 32) failed [ 227.658061][T22412] FAT-fs (loop7): Directory bread(block 33) failed [ 227.677406][T22412] FAT-fs (loop7): Directory bread(block 34) failed [ 227.684384][T22412] FAT-fs (loop7): Directory bread(block 35) failed [ 227.702746][T22412] FAT-fs (loop7): Directory bread(block 36) failed [ 227.720554][T22412] FAT-fs (loop7): Directory bread(block 37) failed [ 227.720818][ T29] audit: type=1400 audit(216.065:6492): avc: denied { block_suspend } for pid=22423 comm="syz.2.6126" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 227.727644][T22412] FAT-fs (loop7): Directory bread(block 38) failed [ 227.758139][T22412] FAT-fs (loop7): Directory bread(block 39) failed [ 227.764981][T22412] FAT-fs (loop7): Directory bread(block 40) failed [ 227.772264][T22412] FAT-fs (loop7): Directory bread(block 41) failed [ 227.802736][T22268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.878469][T22412] syz.7.6124: attempt to access beyond end of device [ 227.878469][T22412] loop7: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 227.903691][T22412] FAT-fs (loop7): Filesystem has been set read-only [ 227.921689][T22412] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 227.990162][T22456] pim6reg1: entered promiscuous mode [ 227.995636][T22456] pim6reg1: entered allmulticast mode [ 228.018686][T22459] loop7: detected capacity change from 0 to 512 [ 228.042358][T22459] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.053490][T22459] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 228.085867][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 228.097716][T22459] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 228.112247][T22268] veth0_vlan: entered promiscuous mode [ 228.127539][T22268] veth1_vlan: entered promiscuous mode [ 228.164340][T22268] veth0_macvtap: entered promiscuous mode [ 228.181836][T22268] veth1_macvtap: entered promiscuous mode [ 228.191669][ T29] audit: type=1400 audit(216.514:6493): avc: denied { bind } for pid=22466 comm="syz.7.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.220928][T22268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.237797][T22268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.254251][T22268] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.263138][T22268] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.272082][T22268] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.280923][T22268] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.302159][T22471] netlink: 'syz.7.6140': attribute type 11 has an invalid length. [ 228.310090][T22471] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6140'. [ 228.347088][T22471] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.355985][T22471] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.364808][T22471] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.373535][T22471] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.402859][T22471] netlink: 'syz.7.6140': attribute type 11 has an invalid length. [ 228.410907][T22471] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6140'. [ 228.427959][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 228.531582][T22480] vlan1: entered allmulticast mode [ 228.541968][T22480] dummy0: entered allmulticast mode [ 228.670254][T22484] loop7: detected capacity change from 0 to 1024 [ 228.681405][T22484] EXT4-fs: inline encryption not supported [ 228.687370][T22484] EXT4-fs: Ignoring removed i_version option [ 228.695747][T22484] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.725955][T22484] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.6145: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.765582][T22484] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 228.774082][T22484] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.6145: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.789569][T22484] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 228.798539][T22484] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.6145: Failed to acquire dquot type 0 [ 228.812288][T22484] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 228.834447][T22484] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.6145: mark_inode_dirty error [ 228.856062][T22484] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 228.868425][T22484] EXT4-fs (loop7): 1 orphan inode deleted [ 228.874605][T22484] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.893233][T19740] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:208: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.910456][T19740] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 228.918939][T19740] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:208: Failed to release dquot type 0 [ 228.940847][T22484] EXT4-fs: Ignoring removed orlov option [ 228.962510][T22484] EXT4-fs (loop7): stripe (16) is not aligned with cluster size (4096), stripe is disabled [ 228.984746][T22484] EXT4-fs (loop7): can't enable nombcache during remount [ 229.039216][T20903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.042182][T22493] binfmt_misc: register: failed to install interpreter file ./file0 [ 229.057282][T20903] EXT4-fs error (device loop7): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 229.083697][T20903] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 229.114324][T20903] EXT4-fs error (device loop7): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 229.190453][T22511] loop8: detected capacity change from 0 to 512 [ 229.197737][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.207426][T22511] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 229.220734][T22511] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.284412][T22511] loop8: detected capacity change from 512 to 64 [ 229.349365][ T5730] kernel write not supported for file /2605/attr/exec (pid: 5730 comm: kworker/0:14) [ 229.539759][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.700339][T22544] IPVS: Error connecting to the multicast addr [ 230.093822][T22561] 9pnet_fd: Insufficient options for proto=fd [ 230.147073][T22570] __nla_validate_parse: 2 callbacks suppressed [ 230.147093][T22570] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6182'. [ 230.173890][T22570] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6182'. [ 230.193806][T22575] loop7: detected capacity change from 0 to 128 [ 230.203074][T22575] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 230.211006][T22575] FAT-fs (loop7): Filesystem has been set read-only [ 230.218212][T22575] syz.7.6185: attempt to access beyond end of device [ 230.218212][T22575] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 230.235188][T22575] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 230.243076][T22575] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 230.265685][T22580] syz.7.6185: attempt to access beyond end of device [ 230.265685][T22580] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 230.279206][T22580] Buffer I/O error on dev loop7, logical block 2065, async page read [ 230.287750][T22580] syz.7.6185: attempt to access beyond end of device [ 230.287750][T22580] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 230.301320][T22580] Buffer I/O error on dev loop7, logical block 2066, async page read [ 230.309582][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 230.323106][T22580] syz.7.6185: attempt to access beyond end of device [ 230.323106][T22580] loop7: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 230.336621][T22580] Buffer I/O error on dev loop7, logical block 2067, async page read [ 230.356971][T22580] syz.7.6185: attempt to access beyond end of device [ 230.356971][T22580] loop7: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 230.370368][T22580] Buffer I/O error on dev loop7, logical block 2068, async page read [ 230.380372][T22580] syz.7.6185: attempt to access beyond end of device [ 230.380372][T22580] loop7: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 230.393987][T22580] Buffer I/O error on dev loop7, logical block 2069, async page read [ 230.404078][T22580] syz.7.6185: attempt to access beyond end of device [ 230.404078][T22580] loop7: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 230.417492][T22580] Buffer I/O error on dev loop7, logical block 2070, async page read [ 230.430088][T22580] syz.7.6185: attempt to access beyond end of device [ 230.430088][T22580] loop7: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 230.443488][T22580] Buffer I/O error on dev loop7, logical block 2071, async page read [ 230.453607][T22268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.454660][T22580] syz.7.6185: attempt to access beyond end of device [ 230.454660][T22580] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 230.476094][T22580] Buffer I/O error on dev loop7, logical block 2072, async page read [ 230.484336][T22575] syz.7.6185: attempt to access beyond end of device [ 230.484336][T22575] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 230.497648][T22575] Buffer I/O error on dev loop7, logical block 2065, async page read [ 230.510081][T17639] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.522933][T22575] Buffer I/O error on dev loop7, logical block 2066, async page read [ 230.651607][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 230.730255][T22606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6200'. [ 230.739365][T22606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6200'. [ 230.748413][T22606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6200'. [ 230.758772][T22606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6200'. [ 230.767772][T22606] netlink: 'syz.0.6200': attribute type 6 has an invalid length. [ 230.931466][T22600] lo speed is unknown, defaulting to 1000 [ 231.102341][T22600] chnl_net:caif_netlink_parms(): no params data found [ 231.232870][T22654] sd 0:0:1:0: device reset [ 231.276691][T22600] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.284030][T22600] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.292449][T22600] bridge_slave_0: entered allmulticast mode [ 231.299147][T22600] bridge_slave_0: entered promiscuous mode [ 231.314453][T22600] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.321612][T22600] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.334240][T22600] bridge_slave_1: entered allmulticast mode [ 231.341083][T22600] bridge_slave_1: entered promiscuous mode [ 231.374947][T22600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.399225][T22600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.432019][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.453953][T22600] team0: Port device team_slave_0 added [ 231.470227][T22600] team0: Port device team_slave_1 added [ 231.484317][T22674] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6225'. [ 231.525912][T22600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.533092][T22600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.559193][T22600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.576174][T17639] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.627614][T22600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.634721][T22600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.660859][T22600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.702598][T17639] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.757043][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.761861][T22600] hsr_slave_0: entered promiscuous mode [ 231.764618][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.764640][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.772635][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.792183][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.799739][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.807231][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.814641][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.819228][T22600] hsr_slave_1: entered promiscuous mode [ 231.822079][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.835102][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.842820][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.849277][T22600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.850384][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.865743][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.876901][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.879124][T22600] Cannot create hsr debugfs directory [ 231.884359][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.897208][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.904676][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.912091][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.919554][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.927037][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.934622][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.942087][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.949601][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.957042][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.964462][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.971956][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.979382][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.986797][ T5627] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 231.997386][T17639] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.013890][ T5627] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 232.079886][T22697] loop7: detected capacity change from 0 to 2048 [ 232.099666][T17639] bridge_slave_1: left allmulticast mode [ 232.105367][T17639] bridge_slave_1: left promiscuous mode [ 232.111248][T17639] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.120119][T17639] bridge_slave_0: left allmulticast mode [ 232.125836][T17639] bridge_slave_0: left promiscuous mode [ 232.131527][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.146543][T22697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.185006][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 232.185023][ T29] audit: type=1400 audit(220.255:6552): avc: denied { watch watch_reads } for pid=22696 comm="syz.7.6237" path="/146/control/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.241635][ T29] audit: type=1400 audit(220.302:6553): avc: denied { execute } for pid=22696 comm="syz.7.6237" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.263721][ T29] audit: type=1400 audit(220.302:6554): avc: denied { execute_no_trans } for pid=22696 comm="syz.7.6237" path="/146/control/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.290857][ T6256] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 232.308019][T17639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.316750][ T6256] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 232.328998][ T6256] EXT4-fs (loop7): This should not happen!! Data will be lost [ 232.328998][ T6256] [ 232.338798][ T6256] EXT4-fs (loop7): Total free blocks count 0 [ 232.344850][ T6256] EXT4-fs (loop7): Free/Dirty block details [ 232.350838][ T6256] EXT4-fs (loop7): free_blocks=4096 [ 232.356128][ T6256] EXT4-fs (loop7): dirty_blocks=16 [ 232.361249][ T6256] EXT4-fs (loop7): Block reservation details [ 232.367295][ T6256] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 232.384221][T20903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.394402][T17639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.419202][T17639] bond0 (unregistering): Released all slaves [ 232.543861][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.551792][T22600] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 232.616035][T22600] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 232.674484][T17639] hsr_slave_0: left promiscuous mode [ 232.704207][T17639] hsr_slave_1: left promiscuous mode [ 232.723624][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.731196][T17639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.766194][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.773890][T17639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.800921][T17639] veth1_macvtap: left promiscuous mode [ 232.813450][T17639] veth0_macvtap: left promiscuous mode [ 232.824677][T17639] veth1_vlan: left promiscuous mode [ 232.836430][T17639] veth0_vlan: left promiscuous mode [ 232.875224][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.043764][T17639] team0 (unregistering): Port device team_slave_1 removed [ 233.055065][T17639] team0 (unregistering): Port device team_slave_0 removed [ 233.094979][T22740] loop7: detected capacity change from 0 to 2048 [ 233.134306][T22740] loop7: p1 < > p4 [ 233.139040][T22740] loop7: p4 size 8388608 extends beyond EOD, truncated [ 233.148365][T22600] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 233.170104][T22600] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 233.179669][ T29] audit: type=1400 audit(221.191:6555): avc: denied { read write } for pid=22739 comm="syz.7.6253" name="loop7p4" dev="devtmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.202481][ T29] audit: type=1400 audit(221.191:6556): avc: denied { open } for pid=22739 comm="syz.7.6253" path="/dev/loop7p4" dev="devtmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 233.259879][T22732] lo speed is unknown, defaulting to 1000 [ 233.338792][ T29] audit: type=1326 audit(221.331:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22755 comm="syz.0.6257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2437a0e9a9 code=0x0 [ 233.370921][T22600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.411010][T22600] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.436282][T17217] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.443510][T17217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.485100][T17217] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.492281][T17217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.520337][T22600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.627641][T22600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.644975][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.906439][T22600] veth0_vlan: entered promiscuous mode [ 233.919224][T22600] veth1_vlan: entered promiscuous mode [ 233.940375][T22600] veth0_macvtap: entered promiscuous mode [ 233.952036][T22600] veth1_macvtap: entered promiscuous mode [ 233.963192][T22600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.977163][T22600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.987067][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.996903][T22600] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.005806][T22600] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.014641][T22600] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.023477][T22600] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.080796][ T29] audit: type=1400 audit(222.023:6558): avc: denied { add_name } for pid=22600 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 234.135491][ T29] audit: type=1400 audit(222.023:6559): avc: denied { associate } for pid=22600 comm="syz-executor" name="syz9" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 234.240983][ T29] audit: type=1326 audit(222.173:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22856 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2437a0e9a9 code=0x7ffc0000 [ 234.264037][ T29] audit: type=1326 audit(222.173:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22856 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2437a0e9a9 code=0x7ffc0000 [ 234.276040][T22859] lo speed is unknown, defaulting to 1000 [ 234.552484][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6279'. [ 234.582077][T22901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6279'. [ 234.616736][T22908] loop9: detected capacity change from 0 to 128 [ 234.737228][T22929] netlink: 'syz.4.6286': attribute type 21 has an invalid length. [ 234.756172][T22929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6286'. [ 234.765410][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 234.869056][T22946] lo speed is unknown, defaulting to 1000 [ 235.078313][T22977] vhci_hcd: invalid port number 96 [ 235.083552][T22977] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 235.098906][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.141314][T22991] loop9: detected capacity change from 0 to 2048 [ 235.151513][T22995] netlink: 'syz.4.6302': attribute type 12 has an invalid length. [ 235.165323][T22991] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.238443][T22600] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.317971][T23014] loop9: detected capacity change from 0 to 256 [ 235.328958][T23014] FAT-fs (loop9): bogus number of FAT sectors [ 235.335241][T23014] FAT-fs (loop9): Can't find a valid FAT filesystem [ 235.422013][T23020] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 235.498487][T23035] 9pnet_fd: Insufficient options for proto=fd [ 235.755634][T23068] loop9: detected capacity change from 0 to 512 [ 235.791020][T23068] EXT4-fs (loop9): too many log groups per flexible block group [ 235.798833][T23068] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 235.832660][T23068] EXT4-fs (loop9): mount failed [ 235.868593][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.979404][T23102] loop9: detected capacity change from 0 to 512 [ 235.998357][T23102] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 236.035549][T23102] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #13: comm syz.9.6347: iget: bad i_size value: 12154757448730 [ 236.054800][T23116] SELinux: failed to load policy [ 236.057853][T23117] netlink: 620 bytes leftover after parsing attributes in process `syz.0.6352'. [ 236.081594][T23102] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.6347: couldn't read orphan inode 13 (err -117) [ 236.097928][T23119] bridge: RTM_NEWNEIGH with invalid ether address [ 236.098086][T23102] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.125792][T23121] random: crng reseeded on system resumption [ 236.210694][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 236.268103][T23143] loop7: detected capacity change from 0 to 16384 [ 236.603542][T23161] rdma_op ffff88811aae5980 conn xmit_rdma 0000000000000000 [ 236.734175][T23183] atomic_op ffff8881193c6528 conn xmit_atomic 0000000000000000 [ 236.803502][T23187] loop0: detected capacity change from 0 to 512 [ 236.843997][T23187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 236.868196][T23187] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.6384: Unimplemented hash flags: 0x0001 [ 236.879836][T23187] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.6384: Corrupt directory, running e2fsck is recommended [ 236.903861][T23187] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.6384: path /562/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 236.979103][T23197] atomic_op ffff88810380f928 conn xmit_atomic 0000000000000000 [ 236.986746][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 237.011083][T12840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.098967][T23211] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 237.168521][T23219] smc: net device bond0 applied user defined pnetid SYZ0 [ 237.184290][T23219] smc: net device bond0 erased user defined pnetid SYZ0 [ 237.198140][T23222] lo speed is unknown, defaulting to 1000 [ 237.256326][T23227] loop0: detected capacity change from 0 to 2048 [ 237.319277][T23127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.328523][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 237.338389][T23227] loop0: p1 < > p4 [ 237.346935][T23227] loop0: p4 size 8388608 extends beyond EOD, truncated [ 237.409044][T23243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6411'. [ 237.528828][T23261] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.6417'. [ 237.575441][T23267] atomic_op ffff8881181e3928 conn xmit_atomic 0000000000000000 [ 237.591466][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 237.591491][ T29] audit: type=1326 audit(225.316:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23268 comm="syz.4.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 237.620637][ T29] audit: type=1326 audit(225.316:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23268 comm="syz.4.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 237.643738][ T29] audit: type=1326 audit(225.316:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23268 comm="syz.4.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 237.658490][T23245] lo speed is unknown, defaulting to 1000 [ 237.666892][ T29] audit: type=1326 audit(225.316:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23268 comm="syz.4.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 237.706313][ T29] audit: type=1326 audit(225.316:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23268 comm="syz.4.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 237.729233][ T29] audit: type=1326 audit(225.316:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23268 comm="syz.4.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 237.752413][ T29] audit: type=1326 audit(225.316:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23268 comm="syz.4.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 237.775425][ T29] audit: type=1326 audit(225.316:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23268 comm="syz.4.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 237.798709][ T29] audit: type=1326 audit(225.344:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23268 comm="syz.4.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4153de9a9 code=0x7ffc0000 [ 237.826304][ T29] audit: type=1400 audit(225.531:6722): avc: denied { read } for pid=23276 comm="syz.7.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.857942][T23274] random: crng reseeded on system resumption [ 237.874261][T19740] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.899809][T23285] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23285 comm=syz.7.6424 [ 237.912852][T23285] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23285 comm=syz.7.6424 [ 237.965444][T23290] serio: Serial port ptm0 [ 237.995458][T23295] netlink: 264 bytes leftover after parsing attributes in process `syz.2.6428'. [ 238.004729][T23295] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6428'. [ 238.014657][T19740] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.061510][T23245] chnl_net:caif_netlink_parms(): no params data found [ 238.086101][T19740] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.096509][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.186195][T19740] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.258575][T23245] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.265852][T23245] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.280900][T23245] bridge_slave_0: entered allmulticast mode [ 238.293622][T23245] bridge_slave_0: entered promiscuous mode [ 238.307158][T23245] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.314251][T23245] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.354540][T23245] bridge_slave_1: entered allmulticast mode [ 238.377212][T23245] bridge_slave_1: entered promiscuous mode [ 238.421789][T23245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.434336][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.449294][T23245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.486643][T23245] team0: Port device team_slave_0 added [ 238.495776][T23245] team0: Port device team_slave_1 added [ 238.515568][T19740] bridge_slave_1: left allmulticast mode [ 238.524678][T19740] bridge_slave_1: left promiscuous mode [ 238.530408][T19740] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.538573][T19740] bridge_slave_0: left allmulticast mode [ 238.544421][T19740] bridge_slave_0: left promiscuous mode [ 238.550246][T19740] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.746372][T19740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.756498][T19740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.766357][T19740] bond0 (unregistering): Released all slaves [ 238.783116][T23245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.790162][T23245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.816350][T23245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.847489][T23334] syzkaller0: entered promiscuous mode [ 238.853061][T23334] syzkaller0: entered allmulticast mode [ 238.882151][T23245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.889222][T23245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.895488][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6446'. [ 238.915279][T23245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.969837][T23344] bridge0: entered promiscuous mode [ 238.976670][T23344] bridge0: port 3(macvlan2) entered blocking state [ 238.983518][T23344] bridge0: port 3(macvlan2) entered disabled state [ 238.994671][T23344] macvlan2: entered allmulticast mode [ 239.000091][T23344] bridge0: entered allmulticast mode [ 239.006954][T23344] macvlan2: left allmulticast mode [ 239.012280][T23344] bridge0: left allmulticast mode [ 239.017990][T23344] bridge0: left promiscuous mode [ 239.075273][T19740] hsr_slave_0: left promiscuous mode [ 239.095412][T19740] hsr_slave_1: left promiscuous mode [ 239.112749][T19740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.120521][T19740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.142539][T19740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.150178][T19740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.201127][T19740] veth1_macvtap: left promiscuous mode [ 239.207144][T19740] veth0_macvtap: left promiscuous mode [ 239.211109][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.212854][T19740] veth1_vlan: left promiscuous mode [ 239.283218][T19740] veth0_vlan: left promiscuous mode [ 239.382851][T19740] team0 (unregistering): Port device team_slave_1 removed [ 239.394655][T19740] team0 (unregistering): Port device team_slave_0 removed [ 239.453969][T23245] hsr_slave_0: entered promiscuous mode [ 239.460170][T23245] hsr_slave_1: entered promiscuous mode [ 239.469305][T23245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.478392][T23245] Cannot create hsr debugfs directory [ 239.490165][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6458'. [ 239.500105][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6458'. [ 239.546216][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.553793][T23381] netlink: 'syz.7.6459': attribute type 13 has an invalid length. [ 239.608291][T23383] SELinux: failed to load policy [ 239.656415][T23381] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.663754][T23381] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.709229][T23381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.720373][T23381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.751107][T23381] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.760131][T23381] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.769030][T23381] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.778238][T23381] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.792698][T23381] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.801624][T23381] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.810597][T23381] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.819552][T23381] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.833140][T23391] netlink: 'syz.4.6464': attribute type 14 has an invalid length. [ 239.841888][T23391] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 239.853704][T23391] netlink: 'syz.4.6464': attribute type 14 has an invalid length. [ 239.863785][T23391] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 240.169756][T23245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.178782][T23245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.188164][T23245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.197097][T23245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.232955][T23245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.245529][T23245] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.255185][T17639] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.262300][T17639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.273598][T17639] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.280816][T17639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.315941][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.351941][T23245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.421709][T23245] veth0_vlan: entered promiscuous mode [ 240.429799][T23245] veth1_vlan: entered promiscuous mode [ 240.446270][T23245] veth0_macvtap: entered promiscuous mode [ 240.453752][T23245] veth1_macvtap: entered promiscuous mode [ 240.465095][T23245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.476422][T23245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.486215][T23245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.495070][T23245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.503846][T23245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.512633][T23245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.657982][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.953507][T23515] lo speed is unknown, defaulting to 1000 [ 241.287705][T23560] can0: slcan on ttyS3. [ 241.298371][T13403] syz_tun (unregistering): left promiscuous mode [ 241.342998][ T4379] ================================================================== [ 241.351141][ T4379] BUG: KCSAN: data-race in free_pid / zap_pid_ns_processes [ 241.358406][ T4379] [ 241.360761][ T4379] read-write to 0xffff888113b87268 of 4 bytes by task 13403 on cpu 0: [ 241.368944][ T4379] free_pid+0x77/0x180 [ 241.373050][ T4379] free_pids+0x7a/0xb0 [ 241.377158][ T4379] release_task+0x9a9/0xb60 [ 241.381701][ T4379] do_exit+0xd81/0x1590 [ 241.385905][ T4379] do_group_exit+0xff/0x140 [ 241.390448][ T4379] get_signal+0xe59/0xf70 [ 241.394822][ T4379] arch_do_signal_or_restart+0x96/0x480 [ 241.400390][ T4379] exit_to_user_mode_loop+0x7a/0x100 [ 241.405703][ T4379] do_syscall_64+0x1d6/0x200 [ 241.410320][ T4379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.416237][ T4379] [ 241.418583][ T4379] read to 0xffff888113b87268 of 4 bytes by task 4379 on cpu 1: [ 241.426148][ T4379] zap_pid_ns_processes+0x1ff/0x2d0 [ 241.431380][ T4379] do_exit+0x13dc/0x1590 [ 241.435664][ T4379] do_group_exit+0x139/0x140 [ 241.440378][ T4379] __x64_sys_exit_group+0x1f/0x20 [ 241.445445][ T4379] x64_sys_call+0x2fa4/0x2fb0 [ 241.450185][ T4379] do_syscall_64+0xd2/0x200 [ 241.454713][ T4379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.460679][ T4379] [ 241.463012][ T4379] value changed: 0x00000002 -> 0x00000001 [ 241.468742][ T4379] [ 241.471169][ T4379] Reported by Kernel Concurrency Sanitizer on: [ 241.477336][ T4379] CPU: 1 UID: 0 PID: 4379 Comm: syz-executor Tainted: G W 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 241.491601][ T4379] Tainted: [W]=WARN [ 241.495418][ T4379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.505501][ T4379] ================================================================== [ 241.513726][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 241.577652][T23560] can0 (unregistered): slcan off ttyS3. [ 241.699153][T19321] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.709004][T19321] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.769805][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 241.816486][T19321] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.826367][T19321] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.889283][T19321] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.899139][T19321] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.953418][T19321] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.963351][T19321] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.188245][T19321] bond0 (unregistering): Released all slaves [ 242.197109][T19321] bond1 (unregistering): (slave bond2): Releasing backup interface [ 242.206039][T19321] bond1 (unregistering): Released all slaves [ 242.216254][T19321] bond2 (unregistering): Released all slaves [ 242.305662][T19321] tipc: Disabling bearer [ 242.310666][T19321] tipc: Left network mode [ 242.332872][T19321] batadv_slave_0: left promiscuous mode [ 242.339518][T19321] hsr_slave_1: left promiscuous mode [ 242.347615][T19321] veth1_macvtap: left promiscuous mode [ 242.353125][T19321] veth0_macvtap: left promiscuous mode [ 242.735071][T19321] IPVS: stop unused estimator thread 0... [ 242.744682][T19321] ------------[ cut here ]------------ [ 242.750205][T19321] WARNING: CPU: 1 PID: 19321 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 242.760002][T19321] Modules linked in: [ 242.763924][T19321] CPU: 1 UID: 0 PID: 19321 Comm: kworker/u8:186 Tainted: G W 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) [ 242.778522][T19321] Tainted: [W]=WARN [ 242.782328][T19321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.792559][T19321] Workqueue: netns cleanup_net [ 242.797467][T19321] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 242.803095][T19321] Code: 48 8d bb 70 0e 00 00 e8 92 5e c1 fc 48 8b bb 70 0e 00 00 e8 36 c3 cd fc 5b 41 5e 41 5f 5d e9 0b 94 b3 00 cc e8 05 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 f7 4e a7 fc 90 0f 0b 90 4c 89 f7 e8 5b [ 242.822851][T19321] RSP: 0018:ffffc90003157c60 EFLAGS: 00010293 [ 242.828957][T19321] RAX: ffffffff84b0551b RBX: ffff88810466d000 RCX: ffff888134cfa080 [ 242.836944][T19321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810466de40 [ 242.845017][T19321] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000 [ 242.853117][T19321] R10: ffffc90003157be8 R11: 0001c90003157be8 R12: ffffffff86c82480 [ 242.861152][T19321] R13: ffff88810466d028 R14: ffff88810466de40 R15: ffff88810466d000 [ 242.869194][T19321] FS: 0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000 [ 242.878181][T19321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.885031][T19321] CR2: 00007f34442114ac CR3: 0000000006834000 CR4: 00000000003506f0 [ 242.893156][T19321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.901220][T19321] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 242.909269][T19321] Call Trace: [ 242.912606][T19321] [ 242.915556][T19321] xfrm_net_exit+0x2d/0x60 [ 242.920034][T19321] ops_undo_list+0x27b/0x410 [ 242.924787][T19321] cleanup_net+0x2de/0x4d0 [ 242.929248][T19321] process_scheduled_works+0x4cb/0x9d0 [ 242.934802][T19321] worker_thread+0x582/0x770 [ 242.939488][T19321] kthread+0x486/0x510 [ 242.943592][T19321] ? finish_task_switch+0xad/0x2b0 [ 242.948725][T19321] ? __pfx_worker_thread+0x10/0x10 [ 242.953960][T19321] ? __pfx_kthread+0x10/0x10 [ 242.958627][T19321] ret_from_fork+0xda/0x150 [ 242.963139][T19321] ? __pfx_kthread+0x10/0x10 [ 242.967750][T19321] ret_from_fork_asm+0x1a/0x30 [ 242.972644][T19321] [ 242.975731][T19321] ---[ end trace 0000000000000000 ]--- [ 243.431039][T19321] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.495056][T19321] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.534645][T19321] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.577531][T19321] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.664938][T19321] bridge_slave_1: left allmulticast mode [ 243.670602][T19321] bridge_slave_1: left promiscuous mode [ 243.676396][T19321] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.684091][T19321] bridge_slave_0: left allmulticast mode [ 243.689751][T19321] bridge_slave_0: left promiscuous mode [ 243.695610][T19321] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.705326][T19321] bridge_slave_1: left allmulticast mode [ 243.710990][T19321] bridge_slave_1: left promiscuous mode [ 243.716723][T19321] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.724456][T19321] bridge_slave_0: left allmulticast mode [ 243.730254][T19321] bridge_slave_0: left promiscuous mode [ 243.735909][T19321] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.782725][T19321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.792074][T19321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.801174][T19321] bond0 (unregistering): Released all slaves [ 243.898613][T19321] bond0 (unregistering): (slave bridge2): Releasing active interface [ 243.984181][T19321]  (unregistering): Released all slaves [ 243.992309][T19321] bond0 (unregistering): Released all slaves [ 244.000741][T19321] bond1 (unregistering): Released all slaves [ 244.016756][T19321] erspan0 (unregistering): left promiscuous mode [ 244.024508][T19321] gretap0 (unregistering): left promiscuous mode [ 244.092120][T19321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.101268][T19321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.110334][T19321] bond0 (unregistering): Released all slaves [ 244.167706][T19321] tipc: Disabling bearer [ 244.172977][T19321] tipc: Disabling bearer [ 244.177993][T19321] tipc: Left network mode [ 244.230436][T19321] hsr_slave_0: left promiscuous mode [ 244.236159][T19321] hsr_slave_1: left promiscuous mode [ 244.241882][T19321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.249324][T19321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.257850][T19321] hsr_slave_1: left promiscuous mode [ 244.265294][T19321] hsr_slave_0: left promiscuous mode [ 244.270888][T19321] hsr_slave_1: left promiscuous mode [ 244.276637][T19321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.284348][T19321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.319999][T19321] team0 (unregistering): Port device team_slave_1 removed [ 244.329950][T19321] team0 (unregistering): Port device team_slave_0 removed [ 244.424652][T19321] team0 (unregistering): Port device team_slave_1 removed [ 244.433976][T19321] team0 (unregistering): Port device team_slave_0 removed [ 244.465826][T19740] smc: removing ib device sz1 [ 244.471858][ T9] lo speed is unknown, defaulting to 1000 [ 244.477668][ T9] sz1: Port: 1 Link DOWN [ 245.133069][T19321] IPVS: stop unused estimator thread 0... [ 245.143214][T19321] ------------[ cut here ]------------ [ 245.148731][T19321] WARNING: CPU: 1 PID: 19321 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 245.158443][T19321] Modules linked in: [ 245.162379][T19321] CPU: 1 UID: 0 PID: 19321 Comm: kworker/u8:186 Tainted: G W 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) [ 245.176906][T19321] Tainted: [W]=WARN [ 245.180780][T19321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.190984][T19321] Workqueue: netns cleanup_net [ 245.195869][T19321] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 245.201517][T19321] Code: 48 8d bb 70 0e 00 00 e8 92 5e c1 fc 48 8b bb 70 0e 00 00 e8 36 c3 cd fc 5b 41 5e 41 5f 5d e9 0b 94 b3 00 cc e8 05 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 f7 4e a7 fc 90 0f 0b 90 4c 89 f7 e8 5b [ 245.221299][T19321] RSP: 0018:ffffc90003157c60 EFLAGS: 00010293 [ 245.227450][T19321] RAX: ffffffff84b0551b RBX: ffff888104668000 RCX: ffff888134cfa080 [ 245.235451][T19321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888104668e40 [ 245.243437][T19321] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000 [ 245.251539][T19321] R10: ffffc90003157be8 R11: 0001c90003157be8 R12: ffffffff86c82480 [ 245.259607][T19321] R13: ffff888104668028 R14: ffff888104668e40 R15: ffff888104668000 [ 245.267628][T19321] FS: 0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000 [ 245.276636][T19321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.283287][T19321] CR2: 00007f34442114ac CR3: 0000000006834000 CR4: 00000000003506f0 [ 245.291317][T19321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.299421][T19321] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 245.307416][T19321] Call Trace: [ 245.310785][T19321] [ 245.313821][T19321] xfrm_net_exit+0x2d/0x60 [ 245.318338][T19321] ops_undo_list+0x27b/0x410 [ 245.323005][T19321] cleanup_net+0x2de/0x4d0 [ 245.327445][T19321] process_scheduled_works+0x4cb/0x9d0 [ 245.333036][T19321] worker_thread+0x582/0x770 [ 245.337658][T19321] kthread+0x486/0x510 [ 245.341779][T19321] ? finish_task_switch+0xad/0x2b0 [ 245.346974][T19321] ? __pfx_worker_thread+0x10/0x10 [ 245.352142][T19321] ? __pfx_kthread+0x10/0x10 [ 245.356809][T19321] ret_from_fork+0xda/0x150 [ 245.361333][T19321] ? __pfx_kthread+0x10/0x10 [ 245.366075][T19321] ret_from_fork_asm+0x1a/0x30 [ 245.370864][T19321] [ 245.373967][T19321] ---[ end trace 0000000000000000 ]--- [ 245.409690][T19321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.460725][T19321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.514205][T19321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.578055][T19321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.642551][T19321] bridge_slave_1: left allmulticast mode [ 245.648221][T19321] bridge_slave_1: left promiscuous mode [ 245.653962][T19321] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.661759][T19321] bridge_slave_0: left allmulticast mode [ 245.667403][T19321] bridge_slave_0: left promiscuous mode [ 245.673153][T19321] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.791798][T19321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.801480][T19321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.811057][T19321] bond0 (unregistering): Released all slaves [ 245.867527][T19321] hsr_slave_0: left promiscuous mode [ 245.873147][T19321] hsr_slave_1: left promiscuous mode [ 245.878918][T19321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.886377][T19321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.893988][T19321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.901449][T19321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.911292][T19321] veth1_macvtap: left promiscuous mode [ 245.916997][T19321] veth0_macvtap: left promiscuous mode [ 245.922575][T19321] veth1_vlan: left promiscuous mode [ 245.927807][T19321] veth0_vlan: left promiscuous mode [ 245.987864][T19321] team0 (unregistering): Port device team_slave_1 removed [ 245.997520][T19321] team0 (unregistering): Port device team_slave_0 removed