last executing test programs: 54.793595804s ago: executing program 32 (id=217): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x58, 0x0, @fd_index}) io_uring_enter(r0, 0x47f6, 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0xfe, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) 43.267899091s ago: executing program 33 (id=665): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000045b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x7fffffff) 43.202939188s ago: executing program 34 (id=668): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7f}, 0x8000, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r1, 0x3) 43.091887761s ago: executing program 35 (id=669): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x7, @remote, 'bridge_slave_1\x00'}}) 42.558305353s ago: executing program 36 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) alarm(0x8000000000000001) 34.358027795s ago: executing program 37 (id=795): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0xc) 23.976849599s ago: executing program 4 (id=1221): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r1, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 23.944791953s ago: executing program 4 (id=1222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x14, r2, 0x309}, 0x14}}, 0x0) 23.928847675s ago: executing program 4 (id=1224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 23.904530497s ago: executing program 4 (id=1225): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000340)={0x0}) 23.821465457s ago: executing program 4 (id=1227): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x20801, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x32}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 23.504130264s ago: executing program 4 (id=1240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) 23.472560747s ago: executing program 38 (id=1240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003a0c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) 14.39759901s ago: executing program 7 (id=1643): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002d00)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x2}]}}}], 0x18}}], 0x2, 0x44004) 14.183560145s ago: executing program 7 (id=1648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f0000000040)='./file1\x00', 0x0) 14.14429468s ago: executing program 7 (id=1651): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x8fb}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 14.109679634s ago: executing program 6 (id=1652): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 14.106494834s ago: executing program 7 (id=1654): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x0, 0x0) 14.072767738s ago: executing program 6 (id=1655): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xfd, 0x120c, &(0x7f0000004500)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) 13.950675052s ago: executing program 6 (id=1659): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 13.926663995s ago: executing program 1 (id=1661): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) 13.897489628s ago: executing program 1 (id=1662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x10) sigaltstack(0x0, 0x0) 13.88044424s ago: executing program 1 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 13.848177244s ago: executing program 6 (id=1666): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlockall(0x3) 13.836537566s ago: executing program 1 (id=1667): mlockall(0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) 13.416973084s ago: executing program 6 (id=1671): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x2) close(r0) 13.358007721s ago: executing program 1 (id=1672): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000080)=""/172) 13.256630023s ago: executing program 7 (id=1673): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setresuid(0x0, 0xee00, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone3(&(0x7f00000005c0)={0x11120000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13.153781335s ago: executing program 6 (id=1674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) 13.153554985s ago: executing program 1 (id=1675): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [], 0xa, "4f262d5e8485dbe5f9f9223927ea390000becf1fdddfc6a44b4382f478a183c8e94a75178929ef2e4000c59abd25d5623dff8dec15091f042b6b47266ab6bddb"}, 0x44) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r1, 0x10e, 0xc, 0x0, &(0x7f0000000040)) 13.153449114s ago: executing program 39 (id=1675): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [], 0xa, "4f262d5e8485dbe5f9f9223927ea390000becf1fdddfc6a44b4382f478a183c8e94a75178929ef2e4000c59abd25d5623dff8dec15091f042b6b47266ab6bddb"}, 0x44) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r1, 0x10e, 0xc, 0x0, &(0x7f0000000040)) 13.152972595s ago: executing program 40 (id=1674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) 13.051385136s ago: executing program 7 (id=1678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 13.051228007s ago: executing program 41 (id=1678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 4.548397693s ago: executing program 2 (id=1897): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.528976025s ago: executing program 2 (id=1899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, 0x0, &(0x7f0000000040)=""/73}, 0x20) 4.494213489s ago: executing program 2 (id=1901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x17ba, &(0x7f00000004c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x11, &(0x7f00000002c0), 0x2) 4.447340214s ago: executing program 2 (id=1904): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) 4.433000266s ago: executing program 2 (id=1906): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 773.058921ms ago: executing program 3 (id=2000): io_setup(0x5, &(0x7f0000001140)) io_setup(0x7, &(0x7f0000000000)) io_setup(0x253, &(0x7f00000000c0)) io_setup(0x7bba, &(0x7f0000000080)) io_setup(0x2, &(0x7f0000001180)) 518.10431ms ago: executing program 3 (id=2005): syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 468.422226ms ago: executing program 8 (id=2008): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = memfd_secret(0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x2284, &(0x7f0000000000)) 448.990238ms ago: executing program 3 (id=2010): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000001c0)=0xffe, 0x4) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x1c}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 388.707906ms ago: executing program 8 (id=2011): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) personality(0x0) 305.163435ms ago: executing program 9 (id=2014): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x2000c12, &(0x7f0000000200)=ANY=[], 0x12, 0x9fa, &(0x7f0000000b40)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) 304.514325ms ago: executing program 8 (id=2024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="796100180000000000007e"], 0x1c}}, 0x0) 222.510765ms ago: executing program 9 (id=2016): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb2321, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0x2000000c) 219.547815ms ago: executing program 8 (id=2017): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 166.959191ms ago: executing program 9 (id=2019): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000900)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000140)='./file0/../file0\x00') fchdir(r0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) 138.299104ms ago: executing program 9 (id=2020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "a29005d8a541e19d9a6c4d819c40fd3ca7a7c4c9bae26794c7153071d199a096", "b55d79a0122be6d7f56ab5825b66da22148668447deb46bb2c84be446ea718b84aa47137db8eb8f51f7e41798c9ed8b3", "ce106cdae276ddbda043c14291721ef618b37801664f6275afef0920", {"d78a9b76ba2951251d315ecd8b0745bf", "79d7cd7d28d6cd867ff10bee8aa70950"}}}}}}}}, 0xc6) 127.474066ms ago: executing program 5 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r1, 0x0, 0x0) 101.026459ms ago: executing program 5 (id=2022): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000eaffffe8aaa26a8b8b8e3f8ffaffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000100"], 0x48) 78.039881ms ago: executing program 5 (id=2023): r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 51.343515ms ago: executing program 5 (id=2025): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000003c0)="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", 0x130) 44.257925ms ago: executing program 9 (id=2026): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x419a054f6755dee0}, 0x80) 22.439788ms ago: executing program 5 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 12.867509ms ago: executing program 9 (id=2028): timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 12.185489ms ago: executing program 8 (id=2038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "a29005d8a541e19d9a6c4d819c40fd3ca7a7c4c9bae26794c7153071d199a096", "b55d79a0122be6d7f56ab5825b66da22148668447deb46bb2c84be446ea718b84aa47137db8eb8f51f7e41798c9ed8b3", "ce106cdae276ddbda043c14291721ef618b37801664f6275afef0920", {"d78a9b76ba2951251d315ecd8b0745bf", "79d7cd7d28d6cd867ff10bee8aa70950"}}}}}}}}, 0xc6) 0s ago: executing program 5 (id=2029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xacd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x1, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) kernel console output (not intermixed with test programs): The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.325899][ T5161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.335756][ T5161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.346210][ T5161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.361849][ T5161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.387787][ T5164] veth1_macvtap: entered promiscuous mode [ 56.408953][ T5161] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.417810][ T5161] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.426627][ T5161] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.435488][ T5161] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.483073][ T5164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.493719][ T5164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.503594][ T5164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.514052][ T5164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.523918][ T5164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.534386][ T5164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.544254][ T5164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.554815][ T5164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.569151][ T5164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.583720][ T5164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.594262][ T5164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.604103][ T5164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.614647][ T5164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.624601][ T5164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.635253][ T5164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.645113][ T5164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.655626][ T5164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.667010][ T5164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.709494][ T5164] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.718377][ T5164] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.727203][ T5164] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.735933][ T5164] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.949936][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 56.979012][ T5356] netlink: 'syz.9.716': attribute type 3 has an invalid length. [ 57.025222][ T5358] batadv0: entered promiscuous mode [ 57.054007][ T5358] batadv_slave_0: entered promiscuous mode [ 57.060132][ T5358] batadv_slave_0: left promiscuous mode [ 57.120637][ T5358] batadv0: left promiscuous mode [ 57.154115][ T5370] loop4: detected capacity change from 0 to 764 [ 57.182133][ T5370] Symlink component flag not implemented [ 57.189341][ T5370] Symlink component flag not implemented (129) [ 57.233683][ T5370] rock: directory entry would overflow storage [ 57.239963][ T5370] rock: sig=0x4f50, size=4, remaining=3 [ 57.245548][ T5370] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 57.353089][ T5387] loop8: detected capacity change from 0 to 1024 [ 57.390165][ T5387] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.419628][ T5389] SELinux: syz.4.730 (5389) set checkreqprot to 1. This is no longer supported. [ 57.432197][ T5387] JBD2: no valid journal superblock found [ 57.437958][ T5387] EXT4-fs (loop8): Could not load journal inode [ 57.478578][ T5397] netlink: 'syz.9.733': attribute type 153 has an invalid length. [ 57.574915][ T5405] loop4: detected capacity change from 0 to 512 [ 57.622881][ T5405] EXT4-fs (loop4): too many log groups per flexible block group [ 57.630670][ T5405] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 57.640002][ T5421] syz.8.744[5421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.640085][ T5421] syz.8.744[5421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.657656][ T5413] netlink: 256 bytes leftover after parsing attributes in process `syz.7.741'. [ 57.681115][ T5405] EXT4-fs (loop4): mount failed [ 57.687215][ T5421] syz.8.744[5421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.762363][ T5430] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 57.887748][ T5441] tap0: tun_chr_ioctl cmd 1074025675 [ 57.893186][ T5441] tap0: persist enabled [ 57.910702][ T5441] tap0: tun_chr_ioctl cmd 1074025675 [ 57.916040][ T5441] tap0: persist enabled [ 57.989923][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 58.026774][ T5460] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.095561][ T5468] loop8: detected capacity change from 0 to 512 [ 58.117894][ T5468] EXT4-fs (loop8): orphan cleanup on readonly fs [ 58.126247][ T5468] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 58.141348][ T5468] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.763: invalid indirect mapped block 2683928664 (level 1) [ 58.184315][ T5468] EXT4-fs (loop8): Remounting filesystem read-only [ 58.204542][ T5468] EXT4-fs (loop8): 1 truncate cleaned up [ 58.228795][ T5468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.248414][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 58.248431][ T29] audit: type=1400 audit(1998753137.675:954): avc: denied { getopt } for pid=5476 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.296459][ T5468] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 58.306910][ T5468] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.340326][ T29] audit: type=1400 audit(1998753137.775:955): avc: denied { setopt } for pid=5484 comm="syz.4.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.362971][ T29] audit: type=1400 audit(1998753137.775:956): avc: denied { create } for pid=5484 comm="syz.4.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 58.383427][ T29] audit: type=1400 audit(1998753137.785:957): avc: denied { write } for pid=5484 comm="syz.4.773" path="socket:[12646]" dev="sockfs" ino=12646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 58.407999][ T29] audit: type=1400 audit(1998753137.785:958): avc: denied { nlmsg_read } for pid=5484 comm="syz.4.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 58.452766][ T29] audit: type=1400 audit(1998753137.885:959): avc: denied { ioctl } for pid=5494 comm="syz.4.778" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.457464][ T5489] SELinux: policydb version 0 does not match my version range 15-33 [ 58.478829][ T29] audit: type=1400 audit(1998753137.885:960): avc: denied { load_policy } for pid=5488 comm="syz.6.775" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.511650][ T5489] SELinux: failed to load policy [ 58.522103][ T29] audit: type=1400 audit(1998753137.935:961): avc: denied { create } for pid=5492 comm="syz.7.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.541427][ T29] audit: type=1400 audit(1998753137.945:962): avc: denied { write } for pid=5492 comm="syz.7.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.575987][ T5498] loop8: detected capacity change from 0 to 512 [ 58.636580][ T5498] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 58.644635][ T5498] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 58.656463][ T5498] System zones: 0-1, 15-15, 18-18, 34-34 [ 58.676683][ T5498] EXT4-fs (loop8): orphan cleanup on readonly fs [ 58.683168][ T5498] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 58.692908][ T5498] EXT4-fs warning (device loop8): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 58.707802][ T5498] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 58.725321][ T5498] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.779: bg 0: block 40: padding at end of block bitmap is not set [ 58.749966][ T5498] EXT4-fs (loop8): Remounting filesystem read-only [ 58.756571][ T5498] EXT4-fs (loop8): 1 truncate cleaned up [ 58.766727][ T5498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.781413][ T5498] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 58.788269][ T5498] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.803583][ T52] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.920322][ T5547] capability: warning: `syz.8.799' uses deprecated v2 capabilities in a way that may be insecure [ 59.029986][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 59.046179][ T52] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.046296][ T5562] loop8: detected capacity change from 0 to 128 [ 59.072687][ T5562] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.099598][ T5535] chnl_net:caif_netlink_parms(): no params data found [ 59.107290][ T5562] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.155253][ T5128] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.163278][ T52] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.217870][ T5572] lo speed is unknown, defaulting to 1000 [ 59.227839][ T52] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.244555][ T5572] lo speed is unknown, defaulting to 1000 [ 59.244888][ T5535] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.257400][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.264709][ T5535] bridge_slave_0: entered allmulticast mode [ 59.271571][ T5535] bridge_slave_0: entered promiscuous mode [ 59.291196][ T5535] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.298418][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.320032][ T5535] bridge_slave_1: entered allmulticast mode [ 59.341125][ T5535] bridge_slave_1: entered promiscuous mode [ 59.350973][ T5572] lo speed is unknown, defaulting to 1000 [ 59.357306][ T5572] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.367274][ T5572] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 59.389391][ T5572] lo speed is unknown, defaulting to 1000 [ 59.392120][ T5581] loop8: detected capacity change from 0 to 1024 [ 59.410393][ T5535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.419589][ T5572] lo speed is unknown, defaulting to 1000 [ 59.421702][ T5535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.436345][ T5581] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 59.442480][ T5572] lo speed is unknown, defaulting to 1000 [ 59.466430][ T52] bridge_slave_1: left allmulticast mode [ 59.472244][ T52] bridge_slave_1: left promiscuous mode [ 59.477894][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.488823][ T52] bridge_slave_0: left allmulticast mode [ 59.494559][ T52] bridge_slave_0: left promiscuous mode [ 59.500302][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.605892][ T5594] loop7: detected capacity change from 0 to 512 [ 59.675257][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.686311][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.700745][ T52] bond0 (unregistering): Released all slaves [ 59.711438][ T5572] lo speed is unknown, defaulting to 1000 [ 59.712263][ T5535] team0: Port device team_slave_0 added [ 59.729615][ T5598] netlink: 'syz.8.819': attribute type 21 has an invalid length. [ 59.753213][ T5572] lo speed is unknown, defaulting to 1000 [ 59.753899][ T5535] team0: Port device team_slave_1 added [ 59.779780][ T5572] lo speed is unknown, defaulting to 1000 [ 59.814091][ T52] hsr_slave_0: left promiscuous mode [ 59.840973][ T52] hsr_slave_1: left promiscuous mode [ 59.847774][ T5617] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.856949][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.864460][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.873216][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.880704][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.918511][ T52] veth1_macvtap: left promiscuous mode [ 59.924128][ T52] veth0_macvtap: left promiscuous mode [ 59.929692][ T52] veth1_vlan: left promiscuous mode [ 59.935003][ T52] veth0_vlan: left promiscuous mode [ 59.939061][ T5623] loop8: detected capacity change from 0 to 512 [ 60.028184][ T5628] syz.4.832[5628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.028370][ T5628] syz.4.832[5628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.044791][ T5628] syz.4.832[5628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.069909][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 60.172099][ T52] team0 (unregistering): Port device team_slave_1 removed [ 60.187964][ T52] team0 (unregistering): Port device team_slave_0 removed [ 60.284276][ T5535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.291408][ T5535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.317341][ T5535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.356145][ T5535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.363183][ T5535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.389384][ T5535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.431926][ T5535] hsr_slave_0: entered promiscuous mode [ 60.446592][ T5535] hsr_slave_1: entered promiscuous mode [ 60.452939][ T5535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.466567][ T5535] Cannot create hsr debugfs directory [ 60.611313][ T5676] Invalid ELF header magic: != ELF [ 60.834191][ T5535] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.842876][ T5535] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.851826][ T5535] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.860773][ T5535] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.897909][ T5535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.911624][ T5535] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.921770][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.928859][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.940424][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.947571][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.012662][ T5535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.080001][ T5535] veth0_vlan: entered promiscuous mode [ 61.088095][ T5535] veth1_vlan: entered promiscuous mode [ 61.109326][ T5535] veth0_macvtap: entered promiscuous mode [ 61.110167][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 61.117430][ T5535] veth1_macvtap: entered promiscuous mode [ 61.135100][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.145681][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.155631][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.166134][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.175972][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.186604][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.196558][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.207012][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.220827][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.232643][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.243256][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.253225][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.263919][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.273813][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.284580][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.294437][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.304962][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.318634][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.335698][ T5535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.344516][ T5535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.353456][ T5535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.362355][ T5535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.457236][ T5713] netlink: 132 bytes leftover after parsing attributes in process `syz.6.861'. [ 61.608778][ T5730] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.866'. [ 61.699167][ T5743] loop4: detected capacity change from 0 to 1024 [ 61.729245][ T5743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.802329][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.002740][ T5789] openvswitch: netlink: Message has 8 unknown bytes. [ 62.149941][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 62.212130][ T5825] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 62.417392][ T5858] netlink: 'syz.6.927': attribute type 9 has an invalid length. [ 62.425175][ T5858] netlink: 61951 bytes leftover after parsing attributes in process `syz.6.927'. [ 62.438342][ T5864] loop8: detected capacity change from 0 to 128 [ 62.471203][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.6.932'. [ 62.482991][ T5864] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 62.490921][ T5864] FAT-fs (loop8): Filesystem has been set read-only [ 62.496676][ T5867] vlan2: entered promiscuous mode [ 62.546769][ T5875] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 62.583053][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.940'. [ 62.598609][ T5880] loop8: detected capacity change from 0 to 128 [ 62.610407][ T5880] EXT4-fs: Ignoring removed nobh option [ 62.634630][ T5882] team1: entered promiscuous mode [ 62.639704][ T5882] team1: entered allmulticast mode [ 62.639700][ T5880] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.679184][ T5880] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.790545][ T5128] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.869491][ T5911] loop8: detected capacity change from 0 to 512 [ 62.889147][ T5915] netlink: 'syz.7.955': attribute type 27 has an invalid length. [ 62.951574][ T5911] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.976708][ T5917] netlink: 'syz.6.957': attribute type 2 has an invalid length. [ 62.984509][ T5917] netlink: 'syz.6.957': attribute type 1 has an invalid length. [ 63.020828][ T5911] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.065967][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.080143][ T5924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.110797][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.963'. [ 63.162838][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.963'. [ 63.189928][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 63.231545][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.963'. [ 63.251251][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 63.251268][ T29] audit: type=1400 audit(1998753142.685:1109): avc: denied { setopt } for pid=5944 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.293201][ T5953] tipc: Started in network mode [ 63.298108][ T5953] tipc: Node identity -, cluster identity 4711 [ 63.304333][ T5953] tipc: Enabling of bearer rejected, failed to enable media [ 63.346533][ T5960] netlink: 'syz.6.973': attribute type 1 has an invalid length. [ 63.378481][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.385959][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.393423][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.400855][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.408272][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.415758][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.423192][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.430740][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.438292][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.445395][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.445761][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.461529][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.468934][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.476386][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.483929][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.491358][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.498771][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.506242][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.513680][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.521116][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.528527][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.535993][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.543497][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.550921][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.558385][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.565887][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.573384][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.580852][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.588340][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.595836][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.603295][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.605337][ T5964] loop8: detected capacity change from 0 to 1024 [ 63.610722][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.624494][ T3394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.632811][ T3394] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 63.644760][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.671858][ T29] audit: type=1326 audit(1998753143.085:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 63.695333][ T29] audit: type=1326 audit(1998753143.085:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 63.712605][ T5964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.718803][ T29] audit: type=1326 audit(1998753143.095:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 63.750549][ T29] audit: type=1326 audit(1998753143.095:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 63.774055][ T29] audit: type=1326 audit(1998753143.095:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 63.796223][ T5964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.797376][ T29] audit: type=1326 audit(1998753143.095:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 63.797403][ T29] audit: type=1326 audit(1998753143.095:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 63.856837][ T29] audit: type=1326 audit(1998753143.095:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 63.880358][ T29] audit: type=1326 audit(1998753143.095:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 63.906100][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.944594][ T5981] ebt_among: dst integrity fail: 101 [ 63.947135][ T5982] netlink: 165 bytes leftover after parsing attributes in process `syz.7.983'. [ 63.978321][ T5985] loop8: detected capacity change from 0 to 512 [ 63.991458][ T5985] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.984: bg 0: block 5: invalid block bitmap [ 64.008258][ T5985] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 64.017675][ T5985] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.984: invalid indirect mapped block 3 (level 2) [ 64.037464][ T5985] EXT4-fs (loop8): 1 orphan inode deleted [ 64.043351][ T5985] EXT4-fs (loop8): 1 truncate cleaned up [ 64.054551][ T5985] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.071346][ T5994] loop4: detected capacity change from 0 to 128 [ 64.077983][ T5994] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.092483][ T5994] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.122940][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.192142][ T6011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.997'. [ 64.212553][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.6.999'. [ 64.230095][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 64.239411][ T6019] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 64.310802][ T6027] loop6: detected capacity change from 0 to 512 [ 64.323296][ T6031] loop8: detected capacity change from 0 to 128 [ 64.327001][ T6027] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1004: bg 0: block 5: invalid block bitmap [ 64.342993][ T6027] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 64.343988][ T6031] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.365966][ T6027] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1004: invalid indirect mapped block 3 (level 2) [ 64.384544][ T6027] EXT4-fs (loop6): 1 orphan inode deleted [ 64.387406][ T6031] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.390458][ T6027] EXT4-fs (loop6): 1 truncate cleaned up [ 64.410522][ T6027] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.440960][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.457552][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.468662][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.476293][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.483751][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.491215][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.498615][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.506111][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.513642][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.521092][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.528505][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.536386][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.543890][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.551454][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.558915][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.566359][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.573888][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.581329][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.588731][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.592716][ T6053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1015'. [ 64.596188][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.607482][ T6054] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 64.612568][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.630018][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.637424][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.644919][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.652400][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.659929][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.667338][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.674790][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.682225][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.689607][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.697032][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.704650][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.712199][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.719594][ T3394] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 64.727991][ T3394] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 64.728186][ T5130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.756688][ T6051] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1012'. [ 64.958588][ T6093] loop4: detected capacity change from 0 to 512 [ 64.974233][ T6095] vlan2: entered promiscuous mode [ 64.979324][ T6095] veth1: entered promiscuous mode [ 64.984457][ T6095] vlan2: entered allmulticast mode [ 64.989649][ T6095] veth1: entered allmulticast mode [ 65.002792][ T6093] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1033: bg 0: block 5: invalid block bitmap [ 65.015575][ T6093] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 65.025266][ T6098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1035'. [ 65.030954][ T6093] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1033: invalid indirect mapped block 3 (level 2) [ 65.049472][ T6093] EXT4-fs (loop4): 1 orphan inode deleted [ 65.055440][ T6093] EXT4-fs (loop4): 1 truncate cleaned up [ 65.066335][ T6093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.097524][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.108324][ T6106] loop6: detected capacity change from 0 to 128 [ 65.115389][ T6106] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.140124][ T6106] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.269921][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 65.300481][ T6123] loop6: detected capacity change from 0 to 512 [ 65.391183][ T6123] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.391260][ T6127] loop7: detected capacity change from 0 to 512 [ 65.412994][ T6123] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 65.442835][ T6127] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.493112][ T6139] atomic_op ffff888116a31128 conn xmit_atomic 0000000000000000 [ 65.645699][ T6150] syzkaller1: entered promiscuous mode [ 65.651320][ T6150] syzkaller1: entered allmulticast mode [ 65.745233][ T6165] loop8: detected capacity change from 0 to 512 [ 65.784300][ T6165] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 65.826609][ T6165] EXT4-fs (loop8): 1 truncate cleaned up [ 65.863602][ T6182] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 66.193849][ T6220] loop4: detected capacity change from 0 to 2048 [ 66.309954][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 66.427367][ T6237] netlink: 268 bytes leftover after parsing attributes in process `syz.7.1097'. [ 66.513232][ T6243] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 66.565987][ T6247] Cannot find del_set index 0 as target [ 66.625046][ T3017] udevd[3017]: worker [3308] terminated by signal 33 (Unknown signal 33) [ 66.712971][ T6261] loop6: detected capacity change from 0 to 512 [ 66.713354][ T6257] syzkaller1: entered promiscuous mode [ 66.724780][ T6257] syzkaller1: entered allmulticast mode [ 66.763875][ T6261] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.806858][ T6261] EXT4-fs error (device loop6): ext4_acquire_dquot:6879: comm syz.6.1110: Failed to acquire dquot type 0 [ 66.946935][ T6310] sd 0:0:1:0: device reset [ 67.010853][ T6325] netlink: 'syz.7.1136': attribute type 8 has an invalid length. [ 67.056673][ T6331] lo speed is unknown, defaulting to 1000 [ 67.180807][ T6342] Cannot find set identified by id 0 to match [ 67.349937][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 67.799357][ T6425] syz.4.1184[6425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.799420][ T6425] syz.4.1184[6425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.810973][ T6425] syz.4.1184[6425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.873940][ T6434] loop4: detected capacity change from 0 to 512 [ 67.904378][ T6434] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 67.914063][ T6434] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.920882][ T6434] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1189: Failed to acquire dquot type 1 [ 67.932849][ T6434] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1189: bg 0: block 40: padding at end of block bitmap is not set [ 67.947572][ T6434] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 67.956712][ T6434] EXT4-fs (loop4): 1 truncate cleaned up [ 67.963025][ T6434] EXT4-fs mount: 10 callbacks suppressed [ 67.963041][ T6434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.991526][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.010511][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.019155][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.389954][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 68.493138][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 68.493233][ T29] audit: type=1400 audit(2132970875.924:1416): avc: denied { create } for pid=6443 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.519382][ T29] audit: type=1400 audit(2132970875.934:1417): avc: denied { setopt } for pid=6443 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.558244][ T6446] __nla_validate_parse: 2 callbacks suppressed [ 68.558263][ T6446] netlink: 199796 bytes leftover after parsing attributes in process `syz.7.1193'. [ 68.559886][ T29] audit: type=1400 audit(2132970875.954:1418): avc: denied { map } for pid=6443 comm="syz.0.1192" path="socket:[16473]" dev="sockfs" ino=16473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.597196][ T29] audit: type=1400 audit(2132970875.954:1419): avc: denied { read } for pid=6443 comm="syz.0.1192" path="socket:[16473]" dev="sockfs" ino=16473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.626330][ T29] audit: type=1400 audit(2132970876.054:1420): avc: denied { create } for pid=6450 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.658981][ T29] audit: type=1400 audit(2132970876.084:1421): avc: denied { write } for pid=6450 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.702407][ T29] audit: type=1400 audit(2132970876.114:1422): avc: denied { execmem } for pid=6453 comm="syz.8.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.900170][ T29] audit: type=1400 audit(2132970876.314:1423): avc: denied { create } for pid=6470 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.919794][ T29] audit: type=1400 audit(2132970876.324:1424): avc: denied { ioctl } for pid=6470 comm="syz.0.1204" path="socket:[16271]" dev="sockfs" ino=16271 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.987579][ T6478] tipc: Enabled bearer , priority 10 [ 69.005219][ T29] audit: type=1400 audit(2132970876.434:1425): avc: denied { module_request } for pid=6477 comm="syz.6.1207" kmod="crypto-gcm(" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 69.062624][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1208'. [ 69.071720][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1208'. [ 69.195118][ T6508] loop6: detected capacity change from 0 to 2048 [ 69.251336][ T6520] loop4: detected capacity change from 0 to 128 [ 69.267282][ T6508] Alternate GPT is invalid, using primary GPT. [ 69.273751][ T6508] loop6: p1 p2 p3 [ 69.278229][ T6520] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.299989][ T6520] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.430690][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 69.495929][ T1035] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 69.503813][ T1035] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 69.519916][ T1035] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 69.530062][ T1035] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 69.591419][ T6523] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.608729][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.653213][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.716988][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.785514][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.897014][ T6557] lo speed is unknown, defaulting to 1000 [ 69.912241][ T36] bridge_slave_1: left allmulticast mode [ 69.917957][ T36] bridge_slave_1: left promiscuous mode [ 69.923800][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.936940][ T36] bridge_slave_0: left allmulticast mode [ 69.942739][ T36] bridge_slave_0: left promiscuous mode [ 69.948422][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.033253][ T36] gretap0 (unregistering): left promiscuous mode [ 70.125661][ T1035] tipc: Node number set to 1828732973 [ 70.134593][ T36] tipc: Disabling bearer [ 70.139588][ T36] tipc: Left network mode [ 70.165474][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 70.196109][ T36] IPVS: stopping master sync thread 6054 ... [ 70.239814][ T36] batadv_slave_1: left promiscuous mode [ 70.270812][ T36] hsr_slave_0: left promiscuous mode [ 70.279739][ T36] hsr_slave_1: left promiscuous mode [ 70.295372][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.302890][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.316901][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.324436][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.347830][ T36] veth1_macvtap: left promiscuous mode [ 70.353545][ T36] veth0_macvtap: left promiscuous mode [ 70.359080][ T36] veth1_vlan: left promiscuous mode [ 70.364363][ T36] veth0_vlan: left promiscuous mode [ 70.486529][ T6573] loop8: detected capacity change from 0 to 1024 [ 70.521395][ T36] team0 (unregistering): Port device team_slave_1 removed [ 70.521836][ T6573] EXT4-fs: Ignoring removed oldalloc option [ 70.551804][ T36] team0 (unregistering): Port device team_slave_0 removed [ 70.582073][ T6573] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 70.622005][ T6573] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.670600][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.677676][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.688341][ T6557] bridge_slave_0: entered allmulticast mode [ 70.690177][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.695015][ T6557] bridge_slave_0: entered promiscuous mode [ 70.721551][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.728733][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.738747][ T6557] bridge_slave_1: entered allmulticast mode [ 70.745417][ T6557] bridge_slave_1: entered promiscuous mode [ 70.780632][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.786925][ T6594] syz.0.1251[6594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.791210][ T6594] syz.0.1251[6594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.793259][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.804815][ T6594] syz.0.1251[6594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.833886][ T6557] team0: Port device team_slave_0 added [ 70.854854][ T6557] team0: Port device team_slave_1 added [ 70.874265][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.881349][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.907501][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.920514][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.927486][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.937804][ T6606] loop7: detected capacity change from 0 to 1024 [ 70.953515][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.975241][ T6606] EXT4-fs: Ignoring removed orlov option [ 70.981007][ T6606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.990906][ T6557] hsr_slave_0: entered promiscuous mode [ 70.997171][ T6557] hsr_slave_1: entered promiscuous mode [ 71.003437][ T6557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.007739][ T6606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.011134][ T6557] Cannot create hsr debugfs directory [ 71.052653][ T36] IPVS: stop unused estimator thread 0... [ 71.076763][ T5161] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.104753][ T6614] Invalid ELF header magic: != ELF [ 71.123057][ T6612] 9pnet: Could not find request transport: 0xffffffffffffffff [ 71.198121][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1266'. [ 71.207221][ T6630] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.293667][ T6557] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.302456][ T6557] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.311255][ T6557] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.320145][ T6557] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.334985][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.342141][ T6557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.349424][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.356533][ T6557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.401130][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.422002][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.430546][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.447188][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.459467][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.466594][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.477824][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.484919][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.574601][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.607290][ T6668] loop8: detected capacity change from 0 to 1764 [ 71.639493][ T6668] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 71.676651][ T6557] veth0_vlan: entered promiscuous mode [ 71.686972][ T6557] veth1_vlan: entered promiscuous mode [ 71.706227][ T6684] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 71.711771][ T6557] veth0_macvtap: entered promiscuous mode [ 71.722010][ T6557] veth1_macvtap: entered promiscuous mode [ 71.742270][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.752868][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.762757][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.773252][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.783267][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.791790][ T6688] loop6: detected capacity change from 0 to 2048 [ 71.793745][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.809975][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.820477][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.831942][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.843665][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.854157][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.864138][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.874599][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.884502][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.894960][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.904813][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.915273][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.930227][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.941726][ T6688] loop6: p1 < > p2 p3 < p5 > [ 71.952416][ T6557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.961240][ T6557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.965614][ T6688] loop6: p2 start 16908804 is beyond EOD, truncated [ 71.970052][ T6557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.979249][ T6688] loop6: p5 start 16908804 is beyond EOD, [ 71.985442][ T6557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.991384][ T6688] truncated [ 72.013375][ T6700] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1289'. [ 72.258790][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 72.275637][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 72.336566][ T6746] vlan2: entered promiscuous mode [ 72.341713][ T6746] veth1: entered promiscuous mode [ 72.342462][ T6749] loop1: detected capacity change from 0 to 1024 [ 72.346838][ T6746] vlan2: entered allmulticast mode [ 72.355027][ T6749] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.358311][ T6746] veth1: entered allmulticast mode [ 72.393613][ T6749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.432509][ T6749] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 72.488876][ T6557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.581412][ T6769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1323'. [ 72.615616][ T6771] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.621693][ T6775] loop1: detected capacity change from 0 to 128 [ 72.651038][ T6775] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.670345][ T6775] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.732520][ T6557] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.859163][ T6796] vlan2: entered promiscuous mode [ 72.864320][ T6796] veth1: entered promiscuous mode [ 72.869447][ T6796] vlan2: entered allmulticast mode [ 72.874640][ T6796] veth1: entered allmulticast mode [ 73.034924][ T6818] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1345'. [ 73.077873][ T6822] tun0: tun_chr_ioctl cmd 1074025675 [ 73.083329][ T6822] tun0: persist enabled [ 73.088450][ T6822] tun0: tun_chr_ioctl cmd 1074025675 [ 73.093816][ T6822] tun0: persist disabled [ 73.143842][ T6830] loop1: detected capacity change from 0 to 1764 [ 73.218135][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 73.279610][ T6857] bond0: entered promiscuous mode [ 73.284750][ T6857] bond_slave_0: entered promiscuous mode [ 73.290844][ T6857] bond_slave_1: entered promiscuous mode [ 73.311392][ T6857] bond0: (slave bond_slave_0): Releasing backup interface [ 73.321264][ T6857] bond_slave_0: left promiscuous mode [ 73.345407][ T6856] bond0: left promiscuous mode [ 73.350406][ T6856] bond_slave_1: left promiscuous mode [ 73.400513][ T6866] loop1: detected capacity change from 0 to 8192 [ 73.409766][ T6869] tipc: Enabling of bearer rejected, failed to enable media [ 73.485995][ T6881] lo speed is unknown, defaulting to 1000 [ 73.611073][ T6899] netlink: 'syz.7.1384': attribute type 1 has an invalid length. [ 73.612770][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 73.612786][ T29] audit: type=1400 audit(2132970881.044:1651): avc: denied { name_bind } for pid=6900 comm="syz.1.1386" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 73.618847][ T6899] netlink: 'syz.7.1384': attribute type 2 has an invalid length. [ 73.654673][ T29] audit: type=1400 audit(2132970881.044:1652): avc: denied { node_bind } for pid=6900 comm="syz.1.1386" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.691005][ T29] audit: type=1326 audit(2132970881.124:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.8.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 73.719118][ T29] audit: type=1326 audit(2132970881.144:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.8.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 73.742709][ T29] audit: type=1326 audit(2132970881.144:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.8.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 73.766287][ T29] audit: type=1326 audit(2132970881.144:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.8.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 73.789790][ T29] audit: type=1326 audit(2132970881.144:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.8.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 73.813692][ T29] audit: type=1400 audit(2132970881.144:1658): avc: denied { mount } for pid=6910 comm="syz.7.1392" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.920602][ T6927] binfmt_misc: register: failed to install interpreter file ./file0 [ 73.934620][ T6929] syzkaller1: entered promiscuous mode [ 73.940332][ T6929] syzkaller1: entered allmulticast mode [ 74.344861][ T29] audit: type=1326 audit(2132970881.774:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6934 comm="syz.7.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 74.368413][ T29] audit: type=1326 audit(2132970881.774:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6934 comm="syz.7.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 74.419223][ T6945] loop8: detected capacity change from 0 to 764 [ 74.439072][ T6945] __nla_validate_parse: 4 callbacks suppressed [ 74.439089][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1413'. [ 74.474119][ T6952] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.488670][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1412'. [ 74.523920][ T6952] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.540963][ T6963] loop8: detected capacity change from 0 to 512 [ 74.568254][ T6971] 9pnet_fd: Insufficient options for proto=fd [ 74.576232][ T6963] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.594096][ T6952] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.596647][ T6963] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.643722][ T6963] EXT4-fs (loop8): shut down requested (2) [ 74.650119][ T6963] syz.8.1417 (6963) used greatest stack depth: 10064 bytes left [ 74.664817][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.674142][ T166] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.675691][ T6952] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.684710][ T166] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.705917][ T166] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 74.743302][ T6992] loop8: detected capacity change from 0 to 512 [ 74.750166][ T6992] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 74.761256][ T6992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 74.769209][ T6992] System zones: 1-12 [ 74.773771][ T6992] EXT4-fs (loop8): 1 truncate cleaned up [ 74.779791][ T6992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.799205][ T6952] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.812610][ T6952] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822946][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.824267][ T6952] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.843125][ T6952] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.863300][ T6997] loop8: detected capacity change from 0 to 512 [ 74.873041][ T6997] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 74.881162][ T6997] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 74.889592][ T6997] EXT4-fs (loop8): 1 truncate cleaned up [ 74.890949][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1433'. [ 74.896788][ T6997] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.933614][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.977196][ T7002] loop7: detected capacity change from 0 to 8192 [ 74.984959][ T7002] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.987248][ T7008] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 75.041547][ T7012] loop7: detected capacity change from 0 to 128 [ 75.042262][ T7014] loop8: detected capacity change from 0 to 128 [ 75.088920][ T7020] tipc: Started in network mode [ 75.089663][ T1026] IPVS: starting estimator thread 0... [ 75.093870][ T7020] tipc: Node identity ac1414aa, cluster identity 4711 [ 75.107442][ T7020] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 75.114581][ T7020] tipc: Enabled bearer , priority 10 [ 75.199907][ T7021] IPVS: using max 2256 ests per chain, 112800 per kthread [ 75.242267][ T7047] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1456'. [ 75.251411][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 75.322922][ T7062] netlink: 'syz.8.1463': attribute type 3 has an invalid length. [ 75.348097][ T1026] kernel write not supported for file /snd/seq (pid: 1026 comm: kworker/1:2) [ 75.382501][ T7070] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 75.390313][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 75.408442][ T7071] lo speed is unknown, defaulting to 1000 [ 75.435601][ T7077] loop8: detected capacity change from 0 to 256 [ 75.529892][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 75.591605][ T7103] xt_connbytes: Forcing CT accounting to be enabled [ 75.601531][ T7103] Cannot find add_set index 0 as target [ 75.679970][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 75.715316][ T7115] netlink: 'syz.6.1487': attribute type 3 has an invalid length. [ 75.757530][ T7119] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 75.819927][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 75.857150][ T7142] syz.6.1499[7142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.857269][ T7142] syz.6.1499[7142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.881984][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1501'. [ 75.885410][ T7142] syz.6.1499[7142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.955245][ T7156] loop6: detected capacity change from 0 to 512 [ 75.969923][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 75.988481][ T7156] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 76.015600][ T7156] EXT4-fs (loop6): 1 truncate cleaned up [ 76.057612][ T7156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.098659][ T7172] loop1: detected capacity change from 0 to 2048 [ 76.105456][ T1035] tipc: Node number set to 2886997162 [ 76.123688][ T5130] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 76.152366][ T7174] loop8: detected capacity change from 0 to 2048 [ 76.164322][ T7181] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1518'. [ 76.171809][ T7172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.195841][ T7172] EXT4-fs (loop1): shut down requested (2) [ 76.212586][ T7183] bond1 (unregistering): Released all slaves [ 76.214240][ T6557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.222425][ T5130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.240035][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 76.258927][ T7188] Cannot find set identified by id 0 to match [ 76.332772][ T7198] loop6: detected capacity change from 0 to 1024 [ 76.346263][ T7174] loop8: unable to read partition table [ 76.352103][ T7174] loop8: partition table beyond EOD, truncated [ 76.358307][ T7174] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 76.370664][ T7198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.411744][ T7198] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.432006][ T7198] EXT4-fs: Cannot change journaled quota options when quota turned on [ 76.470727][ T5130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.497504][ T7209] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1530'. [ 76.509912][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 76.678561][ T7231] loop7: detected capacity change from 0 to 2048 [ 76.721861][ T7231] loop7: p1 < > p4 [ 76.726252][ T7231] loop7: p4 size 8388608 extends beyond EOD, truncated [ 76.734901][ T7237] netlink: 'syz.8.1545': attribute type 21 has an invalid length. [ 76.931077][ T7269] loop7: detected capacity change from 0 to 128 [ 76.939140][ T7278] syz.8.1564[7278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.939221][ T7278] syz.8.1564[7278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.952446][ T7278] syz.8.1564[7278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.956628][ T7279] atomic_op ffff88811474c128 conn xmit_atomic 0000000000000000 [ 77.022636][ T7285] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1567'. [ 77.032056][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 77.041016][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1567'. [ 77.214207][ T7304] loop8: detected capacity change from 0 to 512 [ 77.240686][ T7304] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.1576: invalid block [ 77.273667][ T7304] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1576: invalid indirect mapped block 4294967295 (level 1) [ 77.294892][ T7304] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1576: invalid indirect mapped block 4294967295 (level 1) [ 77.347298][ T7304] EXT4-fs (loop8): 2 truncates cleaned up [ 77.377977][ T7304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.432001][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.736837][ T7362] loop1: detected capacity change from 0 to 512 [ 77.775357][ T7362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.788419][ T7362] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.805786][ T7364] loop7: detected capacity change from 0 to 512 [ 77.819153][ T7364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.851642][ T6557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.870186][ T7364] EXT4-fs error (device loop7): ext4_init_orphan_info:586: comm syz.7.1604: inode #0: comm syz.7.1604: iget: illegal inode # [ 77.888768][ T7364] EXT4-fs (loop7): Remounting filesystem read-only [ 77.895355][ T7364] EXT4-fs (loop7): get orphan inode failed [ 77.901418][ T7364] EXT4-fs (loop7): mount failed [ 78.139428][ T7394] loop8: detected capacity change from 0 to 128 [ 78.552390][ T7444] loop7: detected capacity change from 0 to 256 [ 78.584398][ T7444] FAT-fs (loop7): Directory bread(block 64) failed [ 78.599912][ T7444] FAT-fs (loop7): Directory bread(block 65) failed [ 78.606737][ T7444] FAT-fs (loop7): Directory bread(block 66) failed [ 78.621371][ T7444] FAT-fs (loop7): Directory bread(block 67) failed [ 78.633391][ T7444] FAT-fs (loop7): Directory bread(block 68) failed [ 78.639983][ T7444] FAT-fs (loop7): Directory bread(block 69) failed [ 78.646653][ T7444] FAT-fs (loop7): Directory bread(block 70) failed [ 78.658179][ T7444] FAT-fs (loop7): Directory bread(block 71) failed [ 78.665845][ T7444] FAT-fs (loop7): Directory bread(block 72) failed [ 78.674129][ T7444] FAT-fs (loop7): Directory bread(block 73) failed [ 78.684496][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 78.684512][ T29] audit: type=1400 audit(2267188614.113:1818): avc: denied { mount } for pid=7441 comm="syz.7.1639" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 78.728169][ T29] audit: type=1400 audit(2267188614.153:1819): avc: denied { create } for pid=7447 comm="syz.8.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.747932][ T29] audit: type=1400 audit(2267188614.153:1820): avc: denied { ioctl } for pid=7447 comm="syz.8.1642" path="socket:[20006]" dev="sockfs" ino=20006 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.772952][ T29] audit: type=1326 audit(2267188614.153:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.7.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 78.796483][ T29] audit: type=1326 audit(2267188614.153:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.7.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 78.819940][ T29] audit: type=1326 audit(2267188614.153:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.7.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3e2de719 code=0x7ffc0000 [ 78.843617][ T29] audit: type=1400 audit(2267188614.183:1824): avc: denied { unmount } for pid=5161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 78.881709][ T29] audit: type=1400 audit(2267188614.313:1825): avc: denied { read } for pid=7453 comm="syz.1.1645" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.904579][ T29] audit: type=1400 audit(2267188614.313:1826): avc: denied { open } for pid=7453 comm="syz.1.1645" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.931585][ T29] audit: type=1400 audit(2267188614.313:1827): avc: denied { create } for pid=7453 comm="syz.1.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.985053][ T7458] loop8: detected capacity change from 0 to 512 [ 79.009762][ T7466] sg_write: data in/out 91/4 bytes for SCSI command 0x92-- guessing data in; [ 79.009762][ T7466] program syz.6.1649 not setting count and/or reply_len properly [ 79.049933][ T7458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.062887][ T7458] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.128142][ T7478] loop6: detected capacity change from 0 to 8192 [ 79.136223][ T7478] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.141879][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.314345][ T7498] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.342482][ T7498] vhci_hcd: invalid port number 219 [ 79.347745][ T7498] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 79.367951][ T7504] rdma_op ffff888115f77180 conn xmit_rdma 0000000000000000 [ 79.978020][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.023701][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.083994][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.143010][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.159961][ C0] net_ratelimit: 3 callbacks suppressed [ 80.159976][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 80.225472][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.260165][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.314225][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.362965][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.421982][ T52] bridge_slave_1: left allmulticast mode [ 80.427635][ T52] bridge_slave_1: left promiscuous mode [ 80.433310][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.441196][ T52] bridge_slave_0: left allmulticast mode [ 80.446884][ T52] bridge_slave_0: left promiscuous mode [ 80.452593][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.461035][ T52] bridge_slave_1: left allmulticast mode [ 80.466715][ T52] bridge_slave_1: left promiscuous mode [ 80.472484][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.480273][ T52] bridge_slave_0: left allmulticast mode [ 80.485972][ T52] bridge_slave_0: left promiscuous mode [ 80.491770][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.712281][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.722624][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.732804][ T52] bond0 (unregistering): Released all slaves [ 80.742138][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.752341][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.762535][ T52] bond0 (unregistering): Released all slaves [ 80.801500][ T52] tipc: Disabling bearer [ 80.806504][ T52] tipc: Left network mode [ 80.813339][ T52] IPVS: stopping master sync thread 6019 ... [ 80.821978][ T52] hsr_slave_0: left promiscuous mode [ 80.827814][ T52] hsr_slave_1: left promiscuous mode [ 80.834191][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.841708][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.849434][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.857033][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.866301][ T52] hsr_slave_0: left promiscuous mode [ 80.871952][ T52] hsr_slave_1: left promiscuous mode [ 80.877635][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.885108][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.892618][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.900052][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.910505][ T52] veth1_macvtap: left promiscuous mode [ 80.916049][ T52] veth0_macvtap: left promiscuous mode [ 80.921614][ T52] veth1_vlan: left promiscuous mode [ 80.926876][ T52] veth0_vlan: left promiscuous mode [ 80.932464][ T52] veth1: left allmulticast mode [ 80.937365][ T52] veth1: left promiscuous mode [ 80.942292][ T52] veth1_macvtap: left promiscuous mode [ 80.947764][ T52] veth0_macvtap: left promiscuous mode [ 80.953680][ T52] veth1_vlan: left promiscuous mode [ 80.958954][ T52] veth0_vlan: left promiscuous mode [ 81.088437][ T52] team0 (unregistering): Port device team_slave_1 removed [ 81.099281][ T52] team0 (unregistering): Port device team_slave_0 removed [ 81.166121][ T52] team0 (unregistering): Port device team_slave_1 removed [ 81.176525][ T52] team0 (unregistering): Port device team_slave_0 removed [ 81.189936][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 81.216766][ T3393] lo speed is unknown, defaulting to 1000 [ 81.478810][ T7547] loop8: detected capacity change from 0 to 128 [ 81.627121][ T7548] chnl_net:caif_netlink_parms(): no params data found [ 81.662953][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.670137][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.677388][ T7548] bridge_slave_0: entered allmulticast mode [ 81.684001][ T7548] bridge_slave_0: entered promiscuous mode [ 81.690967][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.698105][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.705346][ T7548] bridge_slave_1: entered allmulticast mode [ 81.711870][ T7548] bridge_slave_1: entered promiscuous mode [ 81.728905][ T7548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.739442][ T7548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.758354][ T7548] team0: Port device team_slave_0 added [ 81.765300][ T7548] team0: Port device team_slave_1 added [ 81.777211][ T52] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.793180][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.800246][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.826213][ T7548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.837472][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.844466][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.870549][ T7548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.882823][ T52] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.908326][ T7548] hsr_slave_0: entered promiscuous mode [ 81.914553][ T7548] hsr_slave_1: entered promiscuous mode [ 81.920536][ T7548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.928093][ T7548] Cannot create hsr debugfs directory [ 81.935136][ T52] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.982607][ T52] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.063135][ T52] bridge_slave_1: left allmulticast mode [ 82.068794][ T52] bridge_slave_1: left promiscuous mode [ 82.074575][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.082370][ T52] bridge_slave_0: left allmulticast mode [ 82.088029][ T52] bridge_slave_0: left promiscuous mode [ 82.093744][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.164477][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.174897][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.185229][ T52] bond0 (unregistering): Released all slaves [ 82.222927][ T52] tipc: Disabling bearer [ 82.228411][ T52] tipc: Left network mode [ 82.235936][ T52] hsr_slave_0: left promiscuous mode [ 82.241914][ T52] hsr_slave_1: left promiscuous mode [ 82.247672][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.255133][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.262773][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.270204][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.279093][ T52] veth1_macvtap: left promiscuous mode [ 82.284617][ T52] veth0_macvtap: left promiscuous mode [ 82.290182][ T52] veth1_vlan: left promiscuous mode [ 82.295434][ T52] veth0_vlan: left promiscuous mode [ 82.373999][ T52] team0 (unregistering): Port device team_slave_1 removed [ 82.384394][ T52] team0 (unregistering): Port device team_slave_0 removed [ 82.513901][ T7548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.522454][ T7548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.531156][ T7548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.539587][ T7548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.573903][ T7548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.585783][ T7548] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.595855][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.602953][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.613698][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.620850][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.684234][ T7548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.728411][ T52] IPVS: stop unused estimator thread 0... [ 82.757432][ T7548] veth0_vlan: entered promiscuous mode [ 82.765780][ T7548] veth1_vlan: entered promiscuous mode [ 82.778806][ T7548] veth0_macvtap: entered promiscuous mode [ 82.802392][ T7548] veth1_macvtap: entered promiscuous mode [ 82.820644][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.828071][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.835612][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.842452][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.843029][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.853433][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.860799][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.860827][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.871279][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.878119][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.885479][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.887307][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.895917][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.907915][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.913148][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.920379][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.927721][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.927747][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.938344][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.945686][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.945772][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.955564][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.962934][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.013367][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.020790][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.028258][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.035996][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.037056][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.043447][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.058100][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.065526][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.072969][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.080389][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.081379][ T7548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.087844][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.096630][ T7548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.103915][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.112627][ T7548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.119953][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.128615][ T7548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.135991][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.152208][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.159712][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.167146][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.174659][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.182094][ T3393] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 83.193470][ T3393] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 83.262281][ T7600] __nla_validate_parse: 1 callbacks suppressed [ 83.262299][ T7600] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1676'. [ 83.297280][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1686'. [ 83.306403][ T7604] netlink: 'syz.3.1686': attribute type 7 has an invalid length. [ 83.314171][ T7604] netlink: 'syz.3.1686': attribute type 8 has an invalid length. [ 83.321936][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'. [ 83.333605][ T7604] gretap0: entered promiscuous mode [ 83.339457][ T7604] batadv_slave_1: entered promiscuous mode [ 83.425966][ T7618] tap0: tun_chr_ioctl cmd 1074025675 [ 83.431361][ T7618] tap0: persist enabled [ 83.437509][ T7618] tap0: tun_chr_ioctl cmd 1074025675 [ 83.442893][ T7618] tap0: persist enabled [ 83.448426][ T7581] chnl_net:caif_netlink_parms(): no params data found [ 83.597901][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.605227][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.612960][ T7581] bridge_slave_0: entered allmulticast mode [ 83.620140][ T7581] bridge_slave_0: entered promiscuous mode [ 83.627037][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.634324][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.641670][ T7581] bridge_slave_1: entered allmulticast mode [ 83.660701][ T7581] bridge_slave_1: entered promiscuous mode [ 83.698149][ T7581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.709046][ T7581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.729540][ T7579] chnl_net:caif_netlink_parms(): no params data found [ 83.789200][ T7581] team0: Port device team_slave_0 added [ 83.806101][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 83.806119][ T29] audit: type=1326 audit(2267188619.233:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.8.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 83.836798][ T29] audit: type=1326 audit(2267188619.233:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.8.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 83.860436][ T29] audit: type=1326 audit(2267188619.233:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.8.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 83.883906][ T29] audit: type=1326 audit(2267188619.233:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.8.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 83.907408][ T29] audit: type=1326 audit(2267188619.233:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.8.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 83.931040][ T29] audit: type=1326 audit(2267188619.233:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.8.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 83.954534][ T29] audit: type=1326 audit(2267188619.233:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.8.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 83.978088][ T29] audit: type=1326 audit(2267188619.273:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.8.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 84.001688][ T29] audit: type=1326 audit(2267188619.273:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.8.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 84.010800][ T7581] team0: Port device team_slave_1 added [ 84.031136][ T29] audit: type=1326 audit(2267188619.273:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.8.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f4eca47e719 code=0x7ffc0000 [ 84.072854][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.080028][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.106086][ T7581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.117651][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.124707][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.150741][ T7581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.161902][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.169077][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.176518][ T7579] bridge_slave_0: entered allmulticast mode [ 84.183268][ T7579] bridge_slave_0: entered promiscuous mode [ 84.191899][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.199165][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.206384][ T7579] bridge_slave_1: entered allmulticast mode [ 84.213193][ T7579] bridge_slave_1: entered promiscuous mode [ 84.235419][ T7678] block device autoloading is deprecated and will be removed. [ 84.243213][ T7678] syz.8.1713: attempt to access beyond end of device [ 84.243213][ T7678] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 84.258377][ T7579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.269309][ T7579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.301360][ T7581] hsr_slave_0: entered promiscuous mode [ 84.309304][ T7581] hsr_slave_1: entered promiscuous mode [ 84.352843][ T7579] team0: Port device team_slave_0 added [ 84.359651][ T7579] team0: Port device team_slave_1 added [ 84.430778][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.437753][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.463829][ T7579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.475407][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.482507][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.508504][ T7579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.558971][ T7579] hsr_slave_0: entered promiscuous mode [ 84.566166][ T7579] hsr_slave_1: entered promiscuous mode [ 84.572955][ T7579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.581050][ T7579] Cannot create hsr debugfs directory [ 84.984594][ T7581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.993658][ T7581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.002209][ T7581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.010892][ T7581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.032890][ T7579] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.050431][ T7579] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.059516][ T7579] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.070426][ T7579] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.100580][ T7581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.118689][ T7581] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.142146][ T7579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.151822][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.159016][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.173427][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.180708][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.210150][ T7579] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.222851][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.230070][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.246275][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.253410][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.303961][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.361862][ T7579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.408317][ T7581] veth0_vlan: entered promiscuous mode [ 85.417388][ T7581] veth1_vlan: entered promiscuous mode [ 85.437699][ T7581] veth0_macvtap: entered promiscuous mode [ 85.445748][ T7581] veth1_macvtap: entered promiscuous mode [ 85.466067][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.476627][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.486606][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.497097][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.507299][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.517990][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.528900][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.540614][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.551266][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.561343][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.571828][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.581714][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.592548][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.603725][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.614552][ T7581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.623495][ T7581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.632327][ T7581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.641102][ T7581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.668686][ T7579] veth0_vlan: entered promiscuous mode [ 85.678948][ T7579] veth1_vlan: entered promiscuous mode [ 85.695353][ T7740] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1737'. [ 85.707436][ T7740] vlan3: entered promiscuous mode [ 85.724176][ T7579] veth0_macvtap: entered promiscuous mode [ 85.731716][ T7579] veth1_macvtap: entered promiscuous mode [ 85.745108][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.755726][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.765593][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.776119][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.785960][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.796563][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.806402][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.816927][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.828101][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.839759][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.850548][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.860402][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.870943][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.880832][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.891464][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.901370][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.911821][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.923510][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.934985][ T7579] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.943859][ T7579] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.952609][ T7579] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.961484][ T7579] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.066948][ T7759] loop8: detected capacity change from 0 to 1024 [ 86.094661][ T7759] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.113703][ T7768] loop3: detected capacity change from 0 to 128 [ 86.127182][ T7768] EXT4-fs: Ignoring removed nobh option [ 86.143353][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.157414][ T7768] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.180189][ T7768] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.193126][ T7785] netlink: 'syz.5.1746': attribute type 2 has an invalid length. [ 86.200968][ T7785] netlink: 'syz.5.1746': attribute type 1 has an invalid length. [ 86.227565][ T7548] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.326191][ T7803] netlink: 'syz.3.1754': attribute type 1 has an invalid length. [ 86.326412][ T7804] tipc: Started in network mode [ 86.338965][ T7804] tipc: Node identity -, cluster identity 4711 [ 86.345225][ T7804] tipc: Enabling of bearer rejected, failed to enable media [ 86.423315][ T7815] loop5: detected capacity change from 0 to 1024 [ 86.431657][ T7815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.461193][ T7815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.478263][ T7824] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1764'. [ 86.499195][ T7826] ebt_among: dst integrity fail: 101 [ 86.517034][ T7579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.660463][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'. [ 86.679278][ T7844] loop5: detected capacity change from 0 to 512 [ 86.691036][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'. [ 86.719326][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'. [ 86.744119][ T7844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.760829][ T7844] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.789963][ T7855] netlink: 'syz.0.1775': attribute type 27 has an invalid length. [ 86.811553][ T7579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.901929][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 86.926959][ T7868] team1: entered promiscuous mode [ 86.932130][ T7868] team1: entered allmulticast mode [ 86.995379][ T7876] loop0: detected capacity change from 0 to 128 [ 87.008524][ T7876] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 87.016407][ T7876] FAT-fs (loop0): Filesystem has been set read-only [ 87.102509][ T7889] netlink: 'syz.0.1792': attribute type 9 has an invalid length. [ 87.110339][ T7889] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1792'. [ 87.549337][ T7948] openvswitch: netlink: Message has 8 unknown bytes. [ 87.925676][ T8011] Invalid ELF header magic: != ELF [ 87.986874][ T8022] loop5: detected capacity change from 0 to 512 [ 88.167246][ T8046] loop2: detected capacity change from 0 to 1024 [ 88.175760][ T8046] EXT4-fs: Ignoring removed nobh option [ 88.179169][ T8042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.221101][ T8042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.221896][ T8046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.252356][ T8042] bond0 (unregistering): Released all slaves [ 88.268247][ T7581] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.581670][ T8108] SELinux: syz.2.1895 (8108) set checkreqprot to 1. This is no longer supported. [ 88.613896][ T8114] netlink: 'syz.5.1898': attribute type 153 has an invalid length. [ 88.667104][ T8124] __nla_validate_parse: 1 callbacks suppressed [ 88.667121][ T8124] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1903'. [ 88.688099][ T8123] loop8: detected capacity change from 0 to 512 [ 88.722874][ T8123] EXT4-fs (loop8): too many log groups per flexible block group [ 88.730655][ T8123] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 88.737509][ T8123] EXT4-fs (loop8): mount failed [ 88.844073][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 88.844088][ T29] audit: type=1400 audit(2267188624.273:2091): avc: denied { mounton } for pid=8142 comm="syz.8.1912" path="/261/bus" dev="tmpfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.873410][ T29] audit: type=1400 audit(2267188624.283:2092): avc: denied { unmount } for pid=5128 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 88.944613][ T8149] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.006052][ T8158] syz.5.1919[8158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.006226][ T8158] syz.5.1919[8158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.019697][ T8158] syz.5.1919[8158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.111418][ T29] audit: type=1326 audit(2267188624.543:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda506e719 code=0x7ffc0000 [ 89.146471][ T29] audit: type=1326 audit(2267188624.543:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda506e719 code=0x7ffc0000 [ 89.177274][ T29] audit: type=1326 audit(2267188624.543:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fbda506e719 code=0x7ffc0000 [ 89.200886][ T29] audit: type=1326 audit(2267188624.543:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda506e719 code=0x7ffc0000 [ 89.223091][ T8182] lo speed is unknown, defaulting to 1000 [ 89.224519][ T29] audit: type=1326 audit(2267188624.553:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8171 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda506e719 code=0x7ffc0000 [ 89.232005][ T8182] lo speed is unknown, defaulting to 1000 [ 89.262006][ T29] audit: type=1400 audit(2267188624.653:2098): avc: denied { create } for pid=8181 comm="syz.0.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.266088][ T8176] loop5: detected capacity change from 0 to 512 [ 89.283000][ T29] audit: type=1400 audit(2267188624.653:2099): avc: denied { write } for pid=8181 comm="syz.0.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.309503][ T8182] lo speed is unknown, defaulting to 1000 [ 89.316376][ T8182] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 89.326777][ T8182] lo speed is unknown, defaulting to 1000 [ 89.336533][ T8182] lo speed is unknown, defaulting to 1000 [ 89.341739][ T8180] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.342767][ T8182] lo speed is unknown, defaulting to 1000 [ 89.356022][ T8182] lo speed is unknown, defaulting to 1000 [ 89.362200][ T8182] lo speed is unknown, defaulting to 1000 [ 89.389966][ T8176] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 89.396199][ T29] audit: type=1400 audit(2267188624.803:2100): avc: denied { getopt } for pid=8185 comm="syz.3.1932" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.397968][ T8176] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 89.420892][ T8176] System zones: 0-1, 15-15, 18-18, 34-34 [ 89.438346][ T8176] EXT4-fs (loop5): orphan cleanup on readonly fs [ 89.439914][ T8191] loop3: detected capacity change from 0 to 128 [ 89.444908][ T8176] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 89.465628][ T8176] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 89.473086][ T8195] netlink: 'syz.0.1936': attribute type 21 has an invalid length. [ 89.473828][ T8191] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.483605][ T8176] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1928: bg 0: block 40: padding at end of block bitmap is not set [ 89.507781][ T8176] EXT4-fs (loop5): Remounting filesystem read-only [ 89.517078][ T8191] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.520139][ T8176] EXT4-fs (loop5): 1 truncate cleaned up [ 89.559763][ T8176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.574215][ T8176] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 89.581067][ T8176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.604476][ T7548] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.727710][ T1026] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 89.735943][ T1026] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 89.749322][ T8225] loop5: detected capacity change from 0 to 1024 [ 89.756272][ T1026] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 89.770401][ T1026] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 89.770485][ T8225] EXT4-fs: Ignoring removed oldalloc option [ 89.773038][ T8225] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 89.815988][ T8225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.866879][ T7579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.961316][ T8232] syz.8.1952[8232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.961419][ T8232] syz.8.1952[8232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.979936][ T8232] syz.8.1952[8232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.029885][ T8241] loop8: detected capacity change from 0 to 1024 [ 90.049589][ T8241] EXT4-fs: Ignoring removed orlov option [ 90.055362][ T8241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.066960][ T3430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.078683][ T8241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.128743][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.131820][ T3430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.278512][ T3430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.300390][ T8248] lo speed is unknown, defaulting to 1000 [ 90.345833][ T3430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.368547][ T8248] chnl_net:caif_netlink_parms(): no params data found [ 90.404392][ T8248] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.411553][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.418815][ T8248] bridge_slave_0: entered allmulticast mode [ 90.425244][ T8248] bridge_slave_0: entered promiscuous mode [ 90.432265][ T8248] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.439342][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.446655][ T8248] bridge_slave_1: entered allmulticast mode [ 90.453370][ T8248] bridge_slave_1: entered promiscuous mode [ 90.475316][ T8248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.485956][ T8248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.558282][ T8248] team0: Port device team_slave_0 added [ 90.571672][ T8248] team0: Port device team_slave_1 added [ 90.607012][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.614039][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.640162][ T8248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.654194][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.661224][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.687323][ T8248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.702393][ T3430] bridge_slave_1: left allmulticast mode [ 90.708099][ T3430] bridge_slave_1: left promiscuous mode [ 90.714105][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.725426][ T3430] bridge_slave_0: left allmulticast mode [ 90.731191][ T3430] bridge_slave_0: left promiscuous mode [ 90.736899][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.833641][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.844432][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.855273][ T3430] bond0 (unregistering): Released all slaves [ 90.898903][ T3430] hsr_slave_0: left promiscuous mode [ 90.905017][ T3430] hsr_slave_1: left promiscuous mode [ 90.912269][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.919747][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.927451][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.934945][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.947111][ T3430] veth1_macvtap: left promiscuous mode [ 90.952861][ T3430] veth0_macvtap: left promiscuous mode [ 90.958427][ T3430] veth1_vlan: left promiscuous mode [ 90.963706][ T3430] veth0_vlan: left promiscuous mode [ 91.004352][ T8291] loop3: detected capacity change from 0 to 1024 [ 91.013313][ T8291] EXT4-fs: Ignoring removed orlov option [ 91.019167][ T8291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.041294][ T8291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.076024][ T7548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.098884][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 91.109675][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 91.159706][ T8303] loop8: detected capacity change from 0 to 2048 [ 91.187535][ T8248] hsr_slave_0: entered promiscuous mode [ 91.194604][ T8248] hsr_slave_1: entered promiscuous mode [ 91.203083][ T8305] loop5: detected capacity change from 0 to 512 [ 91.212800][ T8303] loop8: p1 < > p2 p3 < p5 > [ 91.223367][ T8305] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 91.237278][ T8303] loop8: p2 start 16908804 is beyond EOD, truncated [ 91.246055][ T8305] EXT4-fs (loop5): 1 truncate cleaned up [ 91.252619][ T8303] loop8: p5 start 16908804 is beyond EOD, truncated [ 91.254027][ T8305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.323597][ T8303] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1986'. [ 91.364672][ T7579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.616550][ T8327] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 91.656977][ T8248] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 91.669002][ T8248] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 91.679779][ T8248] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 91.690449][ T8329] loop5: detected capacity change from 0 to 1764 [ 91.700846][ T8248] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 91.744495][ T8329] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 91.754135][ T8248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.766694][ T8248] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.784378][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.791567][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.822775][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.829885][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.846012][ T8332] lo speed is unknown, defaulting to 1000 [ 91.869809][ T8248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.880307][ T8248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.988924][ T8248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.077155][ T8352] loop5: detected capacity change from 0 to 512 [ 92.092607][ T8352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.111253][ T8352] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.119076][ T8357] loop3: detected capacity change from 0 to 2048 [ 92.151137][ T8352] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.1990: Failed to acquire dquot type 0 [ 92.175043][ T8357] loop3: p1 < > p2 p3 < p5 > [ 92.180420][ T8357] loop3: p2 start 16908804 is beyond EOD, truncated [ 92.199985][ T8357] loop3: p5 start 16908804 is beyond EOD, truncated [ 92.224780][ T7579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.244358][ T8366] loop8: detected capacity change from 0 to 512 [ 92.258509][ T8248] veth0_vlan: entered promiscuous mode [ 92.270537][ T8366] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 92.278548][ T8366] EXT4-fs (loop8): orphan cleanup on readonly fs [ 92.283016][ T8373] sd 0:0:1:0: device reset [ 92.284986][ T8357] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1992'. [ 92.291044][ T8366] EXT4-fs error (device loop8): ext4_acquire_dquot:6879: comm syz.8.2004: Failed to acquire dquot type 1 [ 92.311565][ T8366] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2004: bg 0: block 40: padding at end of block bitmap is not set [ 92.321709][ T8248] veth1_vlan: entered promiscuous mode [ 92.344775][ T8248] veth0_macvtap: entered promiscuous mode [ 92.352563][ T8248] veth1_macvtap: entered promiscuous mode [ 92.362572][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.373186][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.383105][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.393689][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.403619][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.414158][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.424046][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.434512][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.445278][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.453612][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.464159][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.474250][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.484856][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.494750][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.505241][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.515125][ T8248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.525791][ T8248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.536676][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.544596][ T8366] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 92.558313][ T8248] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.567245][ T8248] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.576006][ T8248] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.584848][ T8248] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.594417][ T8366] EXT4-fs (loop8): 1 truncate cleaned up [ 92.603437][ T8366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.664619][ T8398] Invalid ELF header magic: != ELF [ 92.678891][ T5128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.734355][ T8406] sd 0:0:1:0: device reset [ 92.853414][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2024'. [ 92.864750][ T8417] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.882779][ T8418] loop5: detected capacity change from 0 to 2048 [ 92.895660][ T8420] loop9: detected capacity change from 0 to 1764 [ 92.904745][ T8420] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 92.912529][ T8418] loop5: p1 < > p2 p3 < p5 > [ 92.918028][ T8418] loop5: p2 start 16908804 is beyond EOD, truncated [ 92.925446][ T8418] loop5: p5 start 16908804 is beyond EOD, truncated [ 92.939319][ T8418] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2015'. [ 93.000986][ T8427] 9pnet: Could not find request transport: 0xffffffffffffffff [ 93.031489][ T8434] Invalid ELF header magic: != ELF [ 347.720019][ T0] ================================================================== [ 347.728379][ T0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_update_events [ 347.736550][ T0] [ 347.738885][ T0] write to 0xffff888237c205dc of 1 bytes by task 0 on cpu 0: [ 347.746264][ T0] __tmigr_cpu_activate+0x55/0x200 [ 347.751411][ T0] tmigr_cpu_activate+0x8a/0xc0 [ 347.756285][ T0] timer_clear_idle+0x28/0x100 [ 347.761053][ T0] tick_nohz_restart_sched_tick+0x22/0x110 [ 347.766969][ T0] tick_nohz_idle_exit+0xfe/0x1d0 [ 347.772004][ T0] do_idle+0x1ee/0x230 [ 347.776080][ T0] cpu_startup_entry+0x25/0x30 [ 347.780864][ T0] rest_init+0xef/0xf0 [ 347.784955][ T0] start_kernel+0x586/0x5e0 [ 347.789462][ T0] x86_64_start_reservations+0x2a/0x30 [ 347.794951][ T0] x86_64_start_kernel+0x9a/0xa0 [ 347.799902][ T0] common_startup_64+0x12c/0x137 [ 347.804974][ T0] [ 347.807318][ T0] read to 0xffff888237c205dc of 1 bytes by task 0 on cpu 1: [ 347.814615][ T0] tmigr_update_events+0x41d/0x5d0 [ 347.819735][ T0] __tmigr_cpu_deactivate+0x2b1/0x410 [ 347.825109][ T0] tmigr_cpu_deactivate+0x66/0x180 [ 347.830225][ T0] __get_next_timer_interrupt+0x137/0x530 [ 347.835975][ T0] timer_base_try_to_set_idle+0x54/0x60 [ 347.841549][ T0] tick_nohz_idle_stop_tick+0x15b/0x650 [ 347.847127][ T0] do_idle+0x178/0x230 [ 347.851223][ T0] cpu_startup_entry+0x25/0x30 [ 347.856017][ T0] start_secondary+0x96/0xa0 [ 347.860613][ T0] common_startup_64+0x12c/0x137 [ 347.865583][ T0] [ 347.867899][ T0] value changed: 0x00 -> 0x01 [ 347.872582][ T0] [ 347.874930][ T0] Reported by Kernel Concurrency Sanitizer on: [ 347.881095][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 347.891442][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 347.901521][ T0] ==================================================================