last executing test programs: 2.099690947s ago: executing program 4 (id=1519): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400fdff00000000dd0a000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='-7'], 0x9) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.099315837s ago: executing program 4 (id=1520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree_skb\x00', r2}, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, 0x0, 0xfdef) 2.07481836s ago: executing program 4 (id=1521): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0), 0x8) 2.029237404s ago: executing program 4 (id=1522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x138, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.989823187s ago: executing program 4 (id=1523): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.900635186s ago: executing program 4 (id=1526): r0 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x21, 0x0) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) tkill(r0, 0x13) 1.429750839s ago: executing program 0 (id=1533): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 1.391669402s ago: executing program 0 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x48}}, 0x0) 1.31148066s ago: executing program 0 (id=1536): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) syz_open_dev$sg(0x0, 0x7fffffffffffffff, 0x4002) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000002010104005600000000000000000000060012400000000008001a"], 0x24}}, 0x20004010) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) close(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x208040, 0x1c5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ae288de70000000200"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x10, 0x3, 0x0) connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x6c, 0x20, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x28}}, 0x0) 1.299085101s ago: executing program 2 (id=1537): r0 = socket(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 1.257755905s ago: executing program 2 (id=1538): r0 = socket(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe017be01}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)) 1.20598293s ago: executing program 2 (id=1539): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c"], 0x38}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.172200663s ago: executing program 0 (id=1540): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 508.318564ms ago: executing program 3 (id=1542): socket(0x1, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000610000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 483.646206ms ago: executing program 3 (id=1543): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000400)='./file0\x00', 0xc896, &(0x7f0000000500)=ANY=[@ANYBLOB='rodir,shortname=winnt\x00\x00n=0,uni_xlate=1,utf8=0,utf8=1,nonumtail=0,utf8=0,uni_xlate=0,flush,shortname=mixed,sh\t\x00tname=lower,rodir,shortname=winnt,shortname=lower,utf8=1,\x00\x00\x00\x00\x00\x00\\\x00'], 0xfe, 0x2aa, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 448.921609ms ago: executing program 3 (id=1545): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 419.589472ms ago: executing program 3 (id=1546): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) close(r1) 367.762006ms ago: executing program 1 (id=1547): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x10c, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 364.152067ms ago: executing program 3 (id=1548): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff0b358, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 347.824219ms ago: executing program 2 (id=1549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) symlinkat(0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 346.848559ms ago: executing program 1 (id=1550): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) 308.786522ms ago: executing program 2 (id=1551): socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x36, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[], 0x0) 301.094843ms ago: executing program 1 (id=1552): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f280011800e000100"], 0xac}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1}, &(0x7f00000001c0), &(0x7f00000004c0)='%+9llu \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x0) 183.666523ms ago: executing program 0 (id=1553): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000001100)="94", 0x1) tee(r1, r5, 0xaf5, 0x0) write$binfmt_script(r5, &(0x7f0000000540)={'#! ', './file0'}, 0xb) write(r3, 0x0, 0x0) 168.058845ms ago: executing program 3 (id=1554): syz_open_dev$usbfs(0x0, 0x75, 0x109301) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0003000500fbc30009000001000000ffff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000480)={0xfffffffe, 0x0, 0x1, 0x0, 0xf, "0062ba7d82000000000000000000f7a6ffff00"}) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x75) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x5}}, './file1\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x8, 0x3, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x800) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x2, 0x4002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffffffffffff8001}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@journal_checksum}, {@user_xattr}, {@sb={'sb', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") truncate(&(0x7f00000005c0)='./file1\x00', 0x2ba4) unshare(0x64000600) 147.965857ms ago: executing program 2 (id=1555): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) 79.769243ms ago: executing program 1 (id=1556): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r4, 0xee01) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)='v', 0x1}], 0x1}}], 0x1, 0x4044c84) 79.572633ms ago: executing program 1 (id=1557): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 23.481958ms ago: executing program 1 (id=1558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) clock_getres(0xeaffffff, 0x0) 0s ago: executing program 0 (id=1559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000480)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r3}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000001c0)={[{@grpid}, {@auto_da_alloc}, {@minixdf}, {@noinit_itable}, {@init_itable}]}, 0xff, 0x52e, &(0x7f0000000640)="$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") close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={0x0, @generic={0x2a, "3d1ba00cae7a9dfdb8ed863064f2"}, @sco, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)='macvlan1\x00', 0xfffffffffffffffb, 0x32, 0xd}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tm'], 0xa) read(r8, &(0x7f0000000200)=""/211, 0xd3) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 70.408619][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.429421][ T7889] loop2: detected capacity change from 0 to 1024 [ 70.443935][ T7889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.471664][ T7887] loop4: detected capacity change from 0 to 512 [ 70.500143][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.513967][ T7887] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.628: Failed to acquire dquot type 1 [ 70.526490][ T7887] EXT4-fs (loop4): 1 truncate cleaned up [ 70.533859][ T7887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.549128][ T7887] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.562461][ T7887] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.608353][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.623262][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.672654][ T7877] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.681783][ T7877] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.690905][ T7877] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.699831][ T7877] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.720651][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 70.760882][ T7885] 8021q: adding VLAN 0 to HW filter on device @ [ 70.768330][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.778725][ T7885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.801488][ T7895] tipc: Enabling of bearer rejected, already enabled [ 70.893866][ T7940] loop3: detected capacity change from 0 to 164 [ 70.918495][ T7940] rock: directory entry would overflow storage [ 70.924924][ T7940] rock: sig=0x4f50, size=4, remaining=3 [ 70.930583][ T7940] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 71.022674][ T7976] netlink: 'syz.1.650': attribute type 27 has an invalid length. [ 71.102236][ T7993] loop2: detected capacity change from 0 to 256 [ 71.103364][ T7976] 8021q: adding VLAN 0 to HW filter on device @ [ 71.116802][ T7993] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.122533][ T7976] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.139272][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.269852][ T8024] netlink: 'syz.1.665': attribute type 9 has an invalid length. [ 71.277753][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 71.448527][ T8053] netlink: 'syz.0.673': attribute type 4 has an invalid length. [ 71.456310][ T8053] netlink: 152 bytes leftover after parsing attributes in process `syz.0.673'. [ 71.468021][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'. [ 71.698987][ T8099] tipc: Enabling of bearer rejected, already enabled [ 71.737427][ T8103] loop1: detected capacity change from 0 to 512 [ 71.755669][ T8103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.768431][ T8103] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.812621][ T8113] loop3: detected capacity change from 0 to 128 [ 71.822691][ T8113] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.867691][ T8119] loop0: detected capacity change from 0 to 256 [ 71.874415][ T8113] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.933226][ T8119] bpf_get_probe_write_proto: 8 callbacks suppressed [ 71.933292][ T8119] syz.0.692[8119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.941073][ T3494] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.963211][ T3490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.968096][ T8119] syz.0.692[8119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.972710][ T8119] syz.0.692[8119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.986925][ T8119] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 72.057934][ T8145] netlink: 'syz.0.699': attribute type 27 has an invalid length. [ 72.069360][ T8141] loop1: detected capacity change from 0 to 2048 [ 72.084968][ T8148] loop4: detected capacity change from 0 to 256 [ 72.129989][ T8156] loop3: detected capacity change from 0 to 512 [ 72.137178][ T8156] EXT4-fs: test_dummy_encryption option not supported [ 72.147775][ T8141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.162505][ T8141] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.187754][ T3490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.282551][ T8145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.294387][ T8145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.310303][ T8189] loop1: detected capacity change from 0 to 512 [ 72.335471][ T8189] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.709: Failed to acquire dquot type 1 [ 72.348238][ T8189] EXT4-fs (loop1): 1 truncate cleaned up [ 72.354537][ T8189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.367460][ T8189] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.379074][ T8189] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.404715][ T8145] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.413713][ T8145] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.423035][ T8145] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.432179][ T8145] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.487690][ T8208] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 72.497048][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.505654][ T8160] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.518584][ T8216] loop4: detected capacity change from 0 to 512 [ 72.526214][ T8160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.543833][ T8196] netlink: 'syz.3.710': attribute type 3 has an invalid length. [ 72.545949][ T8216] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.714: attempt to clear invalid blocks 2 len 1 [ 72.552302][ T8212] tipc: Enabling of bearer rejected, already enabled [ 72.566724][ T8216] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 72.590171][ T8216] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.714: invalid indirect mapped block 1819239214 (level 0) [ 72.624923][ T8216] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.714: invalid indirect mapped block 1819239214 (level 1) [ 72.668277][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'. [ 72.678316][ T8232] syz.2.717[8232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.678471][ T8232] syz.2.717[8232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.701638][ T8216] EXT4-fs (loop4): 1 truncate cleaned up [ 72.729505][ T8232] syz.2.717[8232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.733514][ T8216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.806579][ T8216] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 72.853566][ T8246] usb usb1: usbfs: process 8246 (syz.1.723) did not claim interface 0 before use [ 72.886373][ T8246] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.980167][ T8258] loop3: detected capacity change from 0 to 1024 [ 73.022457][ T8262] loop2: detected capacity change from 0 to 512 [ 73.035393][ T8258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.070641][ T8262] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.728: Failed to acquire dquot type 1 [ 73.142294][ T8262] EXT4-fs (loop2): 1 truncate cleaned up [ 73.152614][ T3494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.164704][ T8262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.178061][ T3456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.222347][ T8262] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.251611][ T8262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.265163][ T8283] loop4: detected capacity change from 0 to 128 [ 73.278704][ T8280] loop3: detected capacity change from 0 to 128 [ 73.290951][ T8280] vfat: Unknown parameter '' [ 73.331066][ T8293] loop1: detected capacity change from 0 to 256 [ 73.340096][ T8283] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.366944][ T8302] program syz.2.735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.369666][ T8283] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.405579][ T8293] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.446329][ T8309] Cannot find del_set index 0 as target [ 73.474152][ T8321] loop2: detected capacity change from 0 to 1024 [ 73.481422][ T8321] EXT4-fs: Ignoring removed orlov option [ 73.487234][ T8321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.509718][ T8321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.527792][ T3456] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.559160][ T8328] tipc: Enabling of bearer rejected, already enabled [ 73.583357][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.602591][ T8345] loop3: detected capacity change from 0 to 512 [ 73.652760][ T8345] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.745: Failed to acquire dquot type 1 [ 73.670350][ T8345] EXT4-fs (loop3): 1 truncate cleaned up [ 73.676546][ T8345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.689524][ T8345] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.700816][ T8345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.798220][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 73.876207][ T8395] loop4: detected capacity change from 0 to 512 [ 73.920360][ T8395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.936670][ T8395] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.980680][ T3456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.009962][ T8420] loop0: detected capacity change from 0 to 512 [ 74.020955][ T8420] EXT4-fs: inline encryption not supported [ 74.026341][ T8419] loop3: detected capacity change from 0 to 512 [ 74.059819][ T8420] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 74.074858][ T8419] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.766: Failed to acquire dquot type 1 [ 74.088169][ T8429] SELinux: Context system_u:object_r:adjtime_t:s0 is not valid (left unmapped). [ 74.128768][ T8419] EXT4-fs (loop3): 1 truncate cleaned up [ 74.148213][ T8419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.185028][ T8435] loop2: detected capacity change from 0 to 512 [ 74.213295][ T9] kernel write not supported for file /checkreqprot (pid: 9 comm: kworker/0:1) [ 74.225632][ T8419] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.254657][ T8435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.274037][ T8419] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.290465][ T8435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 74.373852][ T8435] System zones: 1-12 [ 74.448616][ T8435] EXT4-fs (loop2): 1 truncate cleaned up [ 74.497315][ T8435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.499631][ T8464] tipc: Enabling of bearer rejected, already enabled [ 74.622507][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 74.622526][ T29] audit: type=1400 audit(1727247519.826:2382): avc: denied { mount } for pid=8469 comm="syz.4.779" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.682342][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.783'. [ 74.699544][ T8362] coredump: 403(syz.2.748): written to core: VMAs: 29, size 89030656; core: 60019374 bytes, pos 89038848 [ 74.768688][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.893248][ T29] audit: type=1400 audit(1727247520.106:2383): avc: denied { read write } for pid=8513 comm="syz.4.793" name="uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.925737][ T29] audit: type=1400 audit(1727247520.126:2384): avc: denied { open } for pid=8513 comm="syz.4.793" path="/dev/uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.943848][ T8511] tipc: Enabling of bearer rejected, already enabled [ 74.998536][ T29] audit: type=1400 audit(1727247520.206:2385): avc: denied { read } for pid=8525 comm="syz.1.797" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.026134][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'. [ 75.058423][ T29] audit: type=1400 audit(1727247520.206:2386): avc: denied { open } for pid=8525 comm="syz.1.797" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.082758][ T29] audit: type=1326 audit(1727247520.256:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4929def9 code=0x7ffc0000 [ 75.106255][ T29] audit: type=1326 audit(1727247520.256:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f1e4929def9 code=0x7ffc0000 [ 75.129862][ T29] audit: type=1326 audit(1727247520.256:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4929def9 code=0x7ffc0000 [ 75.164439][ T29] audit: type=1326 audit(1727247520.376:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8529 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 75.189967][ T29] audit: type=1326 audit(1727247520.406:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8529 comm="syz.3.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 75.222382][ T8547] loop0: detected capacity change from 0 to 512 [ 75.245891][ T8547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.279700][ T8547] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.372766][ T4724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.435206][ T8584] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 75.441802][ T8584] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.449582][ T8584] vhci_hcd vhci_hcd.0: Device attached [ 75.459516][ T8591] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 75.498954][ T8596] vhci_hcd: connection closed [ 75.499173][ T368] vhci_hcd: stop threads [ 75.508212][ T368] vhci_hcd: release socket [ 75.512702][ T368] vhci_hcd: disconnect device [ 75.566323][ T8610] loop1: detected capacity change from 0 to 512 [ 75.593557][ T8610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.638861][ T8610] EXT4-fs (loop1): 1 truncate cleaned up [ 75.648967][ T8610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.665990][ T8618] loop2: detected capacity change from 0 to 1024 [ 75.677910][ T8618] EXT4-fs: Ignoring removed oldalloc option [ 75.690801][ T3490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.721392][ T8618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.761472][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.864192][ T8637] netlink: 36 bytes leftover after parsing attributes in process `syz.4.828'. [ 75.872138][ T8633] loop2: detected capacity change from 0 to 1024 [ 75.890443][ T8633] EXT4-fs: Ignoring removed oldalloc option [ 75.912695][ T8633] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0102] [ 75.926238][ T8648] loop0: detected capacity change from 0 to 1024 [ 75.930783][ T8633] System zones: 0-1, 3-12 [ 75.935940][ T8648] EXT4-fs: Ignoring removed i_version option [ 75.937851][ T8633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.959016][ T8648] EXT4-fs: Ignoring removed bh option [ 75.965368][ T8648] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.978894][ T8648] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 75.994114][ T8648] EXT4-fs (loop0): mount failed [ 76.022272][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.053149][ T8659] loop4: detected capacity change from 0 to 512 [ 76.074600][ T8671] 9pnet_fd: Insufficient options for proto=fd [ 76.089105][ T8659] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 76.102095][ T8675] wireguard0: entered promiscuous mode [ 76.107602][ T8675] wireguard0: entered allmulticast mode [ 76.116492][ T8659] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 76.124954][ T8659] System zones: 0-2, 18-18, 34-35 [ 76.132541][ T8659] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.149795][ T8659] EXT4-fs (loop4): re-mounted 00000000-0700-0000-0000-000000000000 ro. Quota mode: none. [ 76.170219][ T3456] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 76.272604][ T8706] smc: net device wg0 applied user defined pnetid SYZ0 [ 76.279783][ T8706] smc: net device wg0 erased user defined pnetid SYZ0 [ 76.366815][ T8719] tipc: Enabling of bearer rejected, already enabled [ 76.376810][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 76.787884][ T8740] loop1: detected capacity change from 0 to 512 [ 76.811720][ T8740] EXT4-fs: inline encryption not supported [ 76.830864][ T8740] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 76.873530][ T8743] tipc: Enabling of bearer rejected, already enabled [ 77.251429][ T8784] loop0: detected capacity change from 0 to 512 [ 77.307082][ T8784] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.867: Failed to acquire dquot type 1 [ 77.334198][ T8790] tipc: Enabling of bearer rejected, already enabled [ 77.346444][ T8784] EXT4-fs (loop0): 1 truncate cleaned up [ 77.355970][ T8784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.379711][ T8797] netlink: 'syz.4.871': attribute type 27 has an invalid length. [ 77.395160][ T8784] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.419323][ T8784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.474983][ T8801] loop2: detected capacity change from 0 to 512 [ 77.484260][ T8797] bond1: left promiscuous mode [ 77.489083][ T8797] bond1: left allmulticast mode [ 77.505286][ T8801] EXT4-fs: Ignoring removed oldalloc option [ 77.530479][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.539409][ T8801] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm +}[@: Parent and EA inode have the same ino 15 [ 77.554824][ T8798] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.562825][ T8801] EXT4-fs (loop2): Remounting filesystem read-only [ 77.569420][ T8801] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 77.590008][ T8798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.634696][ T8801] EXT4-fs (loop2): 1 orphan inode deleted [ 77.642037][ T8801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.662648][ T8801] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 77.703576][ T8801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.807532][ T8831] loop0: detected capacity change from 0 to 1024 [ 77.852358][ T8831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.890420][ T4724] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /149/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 77.925812][ T4724] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 77.945754][ T4724] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 77.966718][ T4724] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /149/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 78.013711][ T4724] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 78.044594][ T8861] netlink: 'syz.4.887': attribute type 1 has an invalid length. [ 78.047089][ T8863] loop2: detected capacity change from 0 to 512 [ 78.066427][ T4724] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 78.081446][ T8863] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.100690][ T4724] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /149/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 78.142715][ T4724] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 78.162789][ T4724] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 78.174074][ T8878] syz.1.895[8878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.174234][ T8878] syz.1.895[8878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.180886][ T4724] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /149/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 78.185792][ T8878] syz.1.895[8878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.203018][ T4724] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 78.250484][ T4724] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 78.263280][ T4724] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /149/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 78.276100][ T8863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.300206][ T4724] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 78.330416][ T8883] netlink: 9 bytes leftover after parsing attributes in process `syz.3.894'. [ 78.339590][ T4724] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 78.351170][ T8883] gretap0: entered promiscuous mode [ 78.351828][ T4724] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 78.367998][ T8878] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 78.374545][ T8878] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.382204][ T8878] vhci_hcd vhci_hcd.0: Device attached [ 78.388921][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.399815][ T8888] vhci_hcd: connection closed [ 78.400075][ T3582] vhci_hcd: stop threads [ 78.409221][ T3582] vhci_hcd: release socket [ 78.413775][ T3582] vhci_hcd: disconnect device [ 78.426675][ T8894] loop3: detected capacity change from 0 to 512 [ 78.440766][ T8894] EXT4-fs: Ignoring removed nobh option [ 78.446778][ T8894] EXT4-fs: quotafile must be on filesystem root [ 78.453571][ T4724] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 78.480470][ T4724] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 78.496718][ T4724] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 78.514839][ T4724] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 78.563901][ T8916] netlink: 'syz.4.903': attribute type 29 has an invalid length. [ 78.582805][ T8916] netlink: 'syz.4.903': attribute type 29 has an invalid length. [ 78.602672][ T8916] netlink: 500 bytes leftover after parsing attributes in process `syz.4.903'. [ 78.611917][ T8916] unsupported nla_type 40 [ 78.622354][ T8921] loop3: detected capacity change from 0 to 1024 [ 78.632014][ T8921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.652177][ T8921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.710264][ T4724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.729721][ T8938] 9pnet_fd: Insufficient options for proto=fd [ 78.737868][ T3494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.896662][ T8958] loop4: detected capacity change from 0 to 1024 [ 78.903605][ T8958] ext4: Bad value for 'debug_want_extra_isize' [ 79.007356][ T8984] SELinux: failed to load policy [ 79.158168][ T55] bridge_slave_1: left allmulticast mode [ 79.163891][ T55] bridge_slave_1: left promiscuous mode [ 79.169657][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.212261][ T55] bridge_slave_0: left allmulticast mode [ 79.217957][ T55] bridge_slave_0: left promiscuous mode [ 79.223733][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.322481][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 79.403410][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.413316][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.422849][ T55] bond0 (unregistering): Released all slaves [ 79.431722][ T55] bond1 (unregistering): Released all slaves [ 79.440726][ T9023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.926'. [ 79.450418][ T9026] tipc: Enabling of bearer rejected, already enabled [ 79.476008][ T55] tipc: Disabling bearer [ 79.481380][ T55] tipc: Left network mode [ 79.596833][ T9049] loop2: detected capacity change from 0 to 164 [ 79.635268][ T9049] rock: directory entry would overflow storage [ 79.641514][ T9049] rock: sig=0x4f50, size=4, remaining=3 [ 79.647190][ T9049] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 79.655829][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 79.655846][ T29] audit: type=1400 audit(1727247524.866:2610): avc: denied { unmount } for pid=3494 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.695477][ T55] hsr_slave_0: left promiscuous mode [ 79.725082][ T9082] loop3: detected capacity change from 0 to 512 [ 79.741036][ T55] hsr_slave_1: left promiscuous mode [ 79.748110][ T9090] loop2: detected capacity change from 0 to 128 [ 79.757190][ T29] audit: type=1400 audit(1727247524.966:2611): avc: denied { write } for pid=9039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.783903][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.790469][ T9090] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 79.792627][ T29] audit: type=1400 audit(1727247524.996:2612): avc: denied { add_name } for pid=9039 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.798932][ T9090] FAT-fs (loop2): Filesystem has been set read-only [ 79.821398][ T29] audit: type=1400 audit(1727247524.996:2613): avc: denied { create } for pid=9039 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.830458][ T9082] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 79.850609][ T29] audit: type=1400 audit(1727247524.996:2614): avc: denied { write } for pid=9039 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=5193 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.850717][ T29] audit: type=1400 audit(1727247524.996:2615): avc: denied { append } for pid=9039 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=5193 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.860979][ T9082] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 79.888735][ T9090] syz.2.938: attempt to access beyond end of device [ 79.888735][ T9090] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 79.911474][ T9082] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.936: Failed to acquire dquot type 1 [ 79.922319][ T9090] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 79.954397][ T9090] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 79.957735][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.964047][ T29] audit: type=1400 audit(1727247525.166:2616): avc: denied { remove_name } for pid=9104 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5193 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.993224][ T29] audit: type=1400 audit(1727247525.166:2617): avc: denied { unlink } for pid=9104 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5193 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.016413][ T9090] syz.2.938: attempt to access beyond end of device [ 80.016413][ T9090] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 80.016909][ T9082] EXT4-fs (loop3): 1 truncate cleaned up [ 80.029658][ T9090] syz.2.938: attempt to access beyond end of device [ 80.029658][ T9090] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 80.039617][ T9082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.061253][ T9082] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.073006][ T9082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.136473][ T55] team0 (unregistering): Port device team_slave_1 removed [ 80.147051][ T55] team0 (unregistering): Port device team_slave_0 removed [ 80.185279][ T9095] tipc: Enabling of bearer rejected, already enabled [ 80.204085][ T9079] tipc: Enabling of bearer rejected, already enabled [ 80.244686][ T9134] loop3: detected capacity change from 0 to 512 [ 80.302383][ T998] IPVS: starting estimator thread 0... [ 80.325796][ T9134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.329308][ T9203] loop4: detected capacity change from 0 to 2048 [ 80.347936][ T9134] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.368455][ T8954] chnl_net:caif_netlink_parms(): no params data found [ 80.388045][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 80.396878][ T9203] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.942: bad orphan inode 8192 [ 80.398079][ T9203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.410141][ T9229] syz_tun: entered promiscuous mode [ 80.422953][ T9218] IPVS: using max 2016 ests per chain, 100800 per kthread [ 80.425099][ T9229] macsec1: entered promiscuous mode [ 80.445343][ T9229] syz_tun: left promiscuous mode [ 80.453502][ T9134] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.941: corrupted inode contents [ 80.466865][ T9134] EXT4-fs (loop3): Remounting filesystem read-only [ 80.492439][ T3494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.509517][ T3456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.531380][ T9251] tipc: Enabling of bearer rejected, already enabled [ 80.584043][ T9287] SELinux: policydb version 0 does not match my version range 15-33 [ 80.610033][ T9287] SELinux: failed to load policy [ 80.623294][ T9303] loop1: detected capacity change from 0 to 512 [ 80.625718][ T9304] loop4: detected capacity change from 0 to 512 [ 80.657077][ T9304] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.657721][ T8954] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.673157][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.685474][ T8954] bridge_slave_0: entered allmulticast mode [ 80.692109][ T8954] bridge_slave_0: entered promiscuous mode [ 80.696735][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.951'. [ 80.716740][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.724187][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.731453][ T8954] bridge_slave_1: entered allmulticast mode [ 80.738086][ T8954] bridge_slave_1: entered promiscuous mode [ 80.754410][ T9303] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.950: Failed to acquire dquot type 1 [ 80.772681][ T8954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.772691][ T9303] EXT4-fs (loop1): 1 truncate cleaned up [ 80.773005][ T9303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.792396][ T9332] tipc: Enabling of bearer rejected, already enabled [ 80.800721][ T9303] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.826201][ T9304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.827115][ T8954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.839492][ T9304] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.849399][ T9303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.971401][ T9397] siw: device registration error -23 [ 80.981758][ T8954] team0: Port device team_slave_0 added [ 80.987679][ T9389] tipc: Enabling of bearer rejected, already enabled [ 81.002581][ T8954] team0: Port device team_slave_1 added [ 81.033453][ T9416] loop3: detected capacity change from 0 to 2048 [ 81.101720][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.108707][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.134692][ T8954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.149729][ T9416] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 81.165678][ T9416] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 81.191908][ T9469] loop4: detected capacity change from 0 to 128 [ 81.201225][ T9469] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 81.205537][ T8954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.217367][ T8954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.234117][ T9469] syz.4.963: attempt to access beyond end of device [ 81.234117][ T9469] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 81.243326][ T8954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.256686][ T9469] syz.4.963: attempt to access beyond end of device [ 81.256686][ T9469] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 81.273191][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.962'. [ 81.360380][ T9479] loop4: detected capacity change from 0 to 512 [ 81.396978][ T8954] hsr_slave_0: entered promiscuous mode [ 81.415472][ T8954] hsr_slave_1: entered promiscuous mode [ 81.435881][ T9479] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.965: Failed to acquire dquot type 1 [ 81.448837][ T9479] EXT4-fs (loop4): 1 truncate cleaned up [ 81.461504][ T9479] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.497097][ T9524] bond1: entered promiscuous mode [ 81.503903][ T9524] bond1: entered allmulticast mode [ 81.512457][ T9524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.544340][ T9524] bond1 (unregistering): Released all slaves [ 81.627158][ T9643] SELinux: Context ìjz is not valid (left unmapped). [ 81.709377][ T9662] bridge0: port 1(vlan2) entered blocking state [ 81.715895][ T9662] bridge0: port 1(vlan2) entered disabled state [ 81.724054][ T9662] vlan2: entered allmulticast mode [ 81.730545][ T9662] vlan2: left allmulticast mode [ 81.748577][ T9661] tipc: Enabling of bearer rejected, already enabled [ 81.812477][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 81.872601][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.978'. [ 82.198897][ T9761] loop3: detected capacity change from 0 to 1024 [ 82.205866][ T9761] ext4: Bad value for 'debug_want_extra_isize' [ 82.513604][ T8954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.541508][ T8954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.551420][ T8954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.604548][ T8954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.669642][ T9832] tipc: Enabling of bearer rejected, already enabled [ 82.709876][ T8954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.734321][ T8954] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.765860][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.772975][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.783466][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.790618][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.804304][ T9844] loop1: detected capacity change from 0 to 2048 [ 82.869186][ T8954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.879668][ T8954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.000861][ T9882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.995'. [ 83.009760][ T9882] netlink: 312 bytes leftover after parsing attributes in process `syz.2.995'. [ 83.062472][ T8954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.076482][ T9919] syz.4.998[9919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.076594][ T9919] syz.4.998[9919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.089036][ T9919] syz.4.998[9919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.131044][ T9914] loop2: detected capacity change from 0 to 1024 [ 83.247083][ T9946] loop3: detected capacity change from 0 to 2048 [ 83.269494][ T8954] veth0_vlan: entered promiscuous mode [ 83.284692][ T9946] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 9) [ 83.301864][ T8954] veth1_vlan: entered promiscuous mode [ 83.323131][ T9941] tipc: Enabling of bearer rejected, already enabled [ 83.355647][ T8954] veth0_macvtap: entered promiscuous mode [ 83.363204][ T8954] veth1_macvtap: entered promiscuous mode [ 83.385540][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.396160][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.427285][ T9958] loop2: detected capacity change from 0 to 512 [ 83.448744][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.469448][ T9964] loop4: detected capacity change from 0 to 1024 [ 83.476337][ T9964] ext4: Bad value for 'debug_want_extra_isize' [ 83.619746][ T9958] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 83.782881][ T9958] EXT4-fs error (device loop2): __ext4_fill_super:5458: inode #2: comm syz.2.1003: iget: special inode unallocated [ 83.797481][ T9958] EXT4-fs (loop2): get root inode failed [ 83.803222][ T9958] EXT4-fs (loop2): mount failed [ 83.803427][ T8954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.818734][ T8954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.865058][T10012] atomic_op ffff888118338128 conn xmit_atomic 0000000000000000 [ 83.877486][ T8954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.913031][ T8954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.922013][ T8954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.930898][ T8954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.939667][ T8954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.002194][T10024] loop2: detected capacity change from 0 to 1024 [ 84.024648][T10024] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 84.035895][T10024] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 84.047988][T10024] JBD2: no valid journal superblock found [ 84.053946][T10024] EXT4-fs (loop2): Could not load journal inode [ 86.042825][T10097] SELinux: Context system_u:object_r:dhcpd_unit_file_t:s0 is not valid (left unmapped). [ 86.053039][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 86.053056][ T29] audit: type=1400 audit(1727247531.266:2651): avc: denied { relabelto } for pid=10096 comm="syz.1.1022" name="file0" dev="tmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_unit_file_t:s0" [ 86.086395][ T29] audit: type=1400 audit(1727247531.266:2652): avc: denied { associate } for pid=10096 comm="syz.1.1022" name="file0" dev="tmpfs" ino=944 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_unit_file_t:s0" [ 86.106474][T10106] tipc: Failed to obtain node identity [ 86.119668][T10106] tipc: Enabling of bearer rejected, failed to enable media [ 86.129241][T10107] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1025'. [ 86.213450][T10120] atomic_op ffff888118337d28 conn xmit_atomic 0000000000000000 [ 86.233429][T10115] loop3: detected capacity change from 0 to 2048 [ 86.244134][T10117] loop2: detected capacity change from 0 to 8192 [ 86.258189][T10124] loop0: detected capacity change from 0 to 512 [ 86.309197][ T29] audit: type=1326 audit(1727247531.506:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e7b7def9 code=0x7ffc0000 [ 86.310383][T10124] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 86.332998][ T29] audit: type=1326 audit(1727247531.506:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd7e7b7def9 code=0x7ffc0000 [ 86.343059][T10124] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 86.343085][T10124] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.1030: Failed to acquire dquot type 1 [ 86.383692][T10124] EXT4-fs (loop0): 1 truncate cleaned up [ 86.388052][ T29] audit: type=1326 audit(1727247531.506:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10133 comm="syz.1.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e7b7def9 code=0x7ffc0000 [ 86.394348][T10149] PM: Enabling pm_trace changes system date and time during resume. [ 86.394348][T10149] PM: Correct system time has to be restored manually after resume. [ 86.419712][T10124] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.444392][T10149] PM: Enabling pm_trace changes system date and time during resume. [ 86.444392][T10149] PM: Correct system time has to be restored manually after resume. [ 86.580434][T10171] tipc: Enabling of bearer rejected, already enabled [ 86.656865][ T29] audit: type=1400 audit(1727247531.866:2656): avc: denied { create } for pid=10179 comm="syz.1.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.676473][ T29] audit: type=1400 audit(1727247531.866:2657): avc: denied { write } for pid=10179 comm="syz.1.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.717300][T10183] tipc: Enabling of bearer rejected, already enabled [ 86.833765][T10175] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.849151][T10175] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 86.861720][T10175] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.861720][T10175] [ 86.871645][T10175] EXT4-fs (loop3): Total free blocks count 0 [ 86.877753][T10175] EXT4-fs (loop3): Free/Dirty block details [ 86.883855][T10175] EXT4-fs (loop3): free_blocks=2415919104 [ 86.889610][T10175] EXT4-fs (loop3): dirty_blocks=8192 [ 86.894983][T10175] EXT4-fs (loop3): Block reservation details [ 86.901113][T10175] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 86.945895][ T368] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 86.958918][ T368] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.958918][ T368] [ 87.024485][T10192] loop1: detected capacity change from 0 to 1024 [ 87.031375][T10192] ext4: Bad value for 'debug_want_extra_isize' [ 87.267430][T10221] tipc: Enabling of bearer rejected, already enabled [ 87.399705][ T29] audit: type=1326 audit(1727247532.606:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10241 comm="syz.3.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 87.422241][T10245] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.431913][T10245] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.440165][T10245] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.448471][T10245] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.457641][T10245] vxlan0: entered promiscuous mode [ 87.462925][T10245] vxlan0: entered allmulticast mode [ 87.470726][T10245] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.479421][T10245] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.488082][T10245] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.496710][T10245] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.509802][T10249] tipc: Enabling of bearer rejected, already enabled [ 87.704535][T10278] Cannot find set identified by id 0 to match [ 87.718965][T10276] loop1: detected capacity change from 0 to 1024 [ 87.727743][T10276] EXT4-fs: Ignoring removed orlov option [ 87.735276][T10276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.747226][T10283] loop4: detected capacity change from 0 to 1024 [ 87.763091][T10283] EXT4-fs: Ignoring removed i_version option [ 87.776447][T10290] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1066'. [ 87.791008][T10283] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 87.806506][T10283] EXT4-fs (loop4): Remounting filesystem read-only [ 87.810804][T10298] loop3: detected capacity change from 0 to 1024 [ 87.815232][T10283] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 87.821520][T10276] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 87.837120][T10276] System zones: 0-1, 3-12 [ 87.873875][ T368] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 87.888861][ T368] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 87.901284][ T368] EXT4-fs (loop3): This should not happen!! Data will be lost [ 87.901284][ T368] [ 87.911253][ T368] EXT4-fs (loop3): Total free blocks count 0 [ 87.917230][ T368] EXT4-fs (loop3): Free/Dirty block details [ 87.923182][ T368] EXT4-fs (loop3): free_blocks=68451041280 [ 87.929184][ T368] EXT4-fs (loop3): dirty_blocks=64 [ 87.934328][ T368] EXT4-fs (loop3): Block reservation details [ 87.940329][ T368] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 88.000052][T10323] tipc: Enabling of bearer rejected, already enabled [ 88.044475][T10329] loop4: detected capacity change from 0 to 512 [ 88.064174][T10333] loop3: detected capacity change from 0 to 512 [ 88.083856][T10329] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.084258][T10333] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.166866][T10362] syz.4.1080[10362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.166987][T10362] syz.4.1080[10362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.180489][T10362] syz.4.1080[10362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.189467][T10365] loop3: detected capacity change from 0 to 1024 [ 88.212326][T10365] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 88.223119][T10365] JBD2: no valid journal superblock found [ 88.228885][T10365] EXT4-fs (loop3): Could not load journal inode [ 88.256893][T10371] tipc: Enabled bearer , priority 0 [ 88.372705][T10393] tipc: Enabling of bearer rejected, already enabled [ 88.466982][T10414] loop0: detected capacity change from 0 to 512 [ 88.474044][T10414] EXT4-fs: Ignoring removed i_version option [ 88.480094][T10414] EXT4-fs: Ignoring removed nobh option [ 88.486569][T10414] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.501651][T10414] EXT4-fs (loop0): 1 truncate cleaned up [ 88.522072][T10422] loop4: detected capacity change from 0 to 128 [ 88.541037][T10422] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.606584][T10438] loop0: detected capacity change from 0 to 128 [ 88.642205][T10445] tmpfs: Bad value for 'mpol' [ 88.763201][T10472] tipc: Enabling of bearer rejected, already enabled [ 88.812967][T10482] loop4: detected capacity change from 0 to 1024 [ 88.823778][T10482] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 89.146375][T10538] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 89.146375][T10538] program syz.3.1107 not setting count and/or reply_len properly [ 89.222715][T10549] tipc: Enabling of bearer rejected, already enabled [ 89.299760][T10559] tipc: Enabling of bearer rejected, already enabled [ 89.464791][T10586] loop3: detected capacity change from 0 to 128 [ 89.481953][T10586] FAT-fs (loop3): Directory bread(block 162) failed [ 89.496031][T10586] FAT-fs (loop3): Directory bread(block 163) failed [ 89.509658][T10586] FAT-fs (loop3): Directory bread(block 164) failed [ 89.522952][T10586] FAT-fs (loop3): Directory bread(block 165) failed [ 89.536382][T10586] FAT-fs (loop3): Directory bread(block 166) failed [ 89.549726][T10586] FAT-fs (loop3): Directory bread(block 167) failed [ 89.564280][T10586] FAT-fs (loop3): Directory bread(block 168) failed [ 89.578117][T10586] FAT-fs (loop3): Directory bread(block 169) failed [ 89.597914][T10586] FAT-fs (loop3): Directory bread(block 162) failed [ 89.614386][T10586] FAT-fs (loop3): Directory bread(block 163) failed [ 89.628301][T10586] syz.3.1112: attempt to access beyond end of device [ 89.628301][T10586] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 89.657544][T10610] loop2: detected capacity change from 0 to 512 [ 89.665102][T10586] syz.3.1112: attempt to access beyond end of device [ 89.665102][T10586] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 89.698826][T10610] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1114: corrupted in-inode xattr: invalid ea_ino [ 89.739298][T10610] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1114: couldn't read orphan inode 15 (err -117) [ 89.789893][T10501] coredump: 553(syz.4.1104): written to core: VMAs: 29, size 72253440; core: 60052142 bytes, pos 72261632 [ 89.928505][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1116'. [ 89.981652][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 90.021864][T10657] tipc: Enabling of bearer rejected, already enabled [ 90.054103][T10664] loop2: detected capacity change from 0 to 256 [ 90.185149][T10682] loop4: detected capacity change from 0 to 512 [ 90.259455][T10682] EXT4-fs: Ignoring removed bh option [ 90.287159][T10682] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.1125: invalid block [ 90.300388][T10682] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1125: couldn't read orphan inode 15 (err -117) [ 90.325464][T10701] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.352747][T10711] loop2: detected capacity change from 0 to 512 [ 90.380945][T10711] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.409455][T10707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 90.501542][T10727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1133'. [ 90.582630][T10736] tipc: Enabling of bearer rejected, already enabled [ 90.596991][T10744] netlink: 'syz.1.1136': attribute type 27 has an invalid length. [ 90.671015][T10754] IPv6: Can't replace route, no match found [ 90.743509][T10744] 8021q: adding VLAN 0 to HW filter on device @ [ 90.764748][T10744] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.793379][T10744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.832912][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1142'. [ 90.882538][T10795] loop4: detected capacity change from 0 to 256 [ 90.908489][T10800] netlink: 'syz.1.1146': attribute type 17 has an invalid length. [ 90.918217][T10796] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1145'. [ 90.938046][T10793] loop2: detected capacity change from 0 to 128 [ 90.957862][T10807] loop4: detected capacity change from 0 to 512 [ 90.966746][T10807] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.998277][T10817] loop1: detected capacity change from 0 to 256 [ 91.005838][T10811] tipc: Enabling of bearer rejected, already enabled [ 91.017064][T10807] EXT4-fs (loop4): 1 truncate cleaned up [ 91.198768][T10838] loop3: detected capacity change from 0 to 512 [ 91.210351][T10838] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.227659][T10843] netlink: 'syz.4.1158': attribute type 10 has an invalid length. [ 91.263572][T10845] syz.4.1159[10845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.263713][T10845] syz.4.1159[10845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.288690][T10846] loop2: detected capacity change from 0 to 1024 [ 91.307033][T10846] ext4: Bad value for 'debug_want_extra_isize' [ 91.394313][T10838] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1156: iget: bad extra_isize 7 (inode size 256) [ 91.409121][T10845] syz.4.1159[10845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.410168][T10845] Cannot find add_set index 0 as target [ 91.429883][T10838] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1156: couldn't read orphan inode 15 (err -117) [ 91.541258][T10838] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 91.612042][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 91.612059][ T29] audit: type=1326 audit(1727247536.826:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 91.642354][ T29] audit: type=1326 audit(1727247536.836:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 91.666292][ T29] audit: type=1326 audit(1727247536.836:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 91.684137][T10896] loop4: detected capacity change from 0 to 4096 [ 91.690018][ T29] audit: type=1326 audit(1727247536.836:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 91.719819][ T29] audit: type=1326 audit(1727247536.836:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 91.720489][T10896] EXT4-fs: Ignoring removed nobh option [ 91.743420][ T29] audit: type=1326 audit(1727247536.836:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 91.749032][T10896] EXT4-fs: Ignoring removed i_version option [ 91.772544][ T29] audit: type=1326 audit(1727247536.836:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 91.772577][ T29] audit: type=1326 audit(1727247536.836:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 91.825703][ T29] audit: type=1326 audit(1727247536.836:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 91.849225][ T29] audit: type=1326 audit(1727247536.836:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc74ddef9 code=0x7ffc0000 [ 91.959432][T10914] syz.0.1172[10914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.959518][T10914] syz.0.1172[10914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.982982][T10914] syz.0.1172[10914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.011084][T10915] tipc: Enabling of bearer rejected, already enabled [ 92.112644][T10936] ipvlan1: entered promiscuous mode [ 92.118589][T10936] ipvlan1: left promiscuous mode [ 92.241795][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.250848][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.296168][T10956] tipc: Enabling of bearer rejected, already enabled [ 92.329331][T10959] loop2: detected capacity change from 0 to 512 [ 92.335851][T10959] EXT4-fs: Ignoring removed nobh option [ 92.342727][T10959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.362581][T10959] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1183: bg 0: block 248: padding at end of block bitmap is not set [ 92.377138][T10959] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1183: Failed to acquire dquot type 1 [ 92.389139][T10959] EXT4-fs (loop2): 1 truncate cleaned up [ 92.395208][T10959] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.416961][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6902: comm kworker/u8:0: Failed to release dquot type 1 [ 92.459361][T10971] loop2: detected capacity change from 0 to 512 [ 92.542942][T10980] tipc: Enabling of bearer rejected, already enabled [ 92.676790][T11009] syz.1.1196[11009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.697474][T11012] loop1: detected capacity change from 0 to 128 [ 92.836736][T11031] tipc: Started in network mode [ 92.843245][T11031] tipc: Node identity 7f000001, cluster identity 4711 [ 92.853818][T11031] tipc: Enabled bearer , priority 10 [ 92.968111][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 92.989579][T11046] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 93.077750][T11052] tipc: Enabling of bearer rejected, already enabled [ 93.179826][T11068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1213'. [ 93.192988][T11065] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1212'. [ 93.421122][T11117] loop4: detected capacity change from 0 to 512 [ 93.433423][T11123] loop1: detected capacity change from 0 to 512 [ 93.460964][T11117] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.520591][T11123] loop1: detected capacity change from 512 to 64 [ 93.531860][T11123] syz.1.1230: attempt to access beyond end of device [ 93.531860][T11123] loop1: rw=0, sector=70, nr_sectors = 2 limit=64 [ 93.559586][ T3490] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 93.573954][ T3490] EXT4-fs error (device loop1): ext4_lookup:1813: inode #14: comm syz-executor: unexpected EA_INODE flag [ 93.585982][ T3490] EXT4-fs error (device loop1): ext4_lookup:1813: inode #14: comm syz-executor: unexpected EA_INODE flag [ 93.612084][T11154] loop4: detected capacity change from 0 to 256 [ 93.639267][T11157] tipc: Enabling of bearer rejected, already enabled [ 93.660863][T11154] loop4: detected capacity change from 256 to 11 [ 93.775931][T11175] batadv0: entered promiscuous mode [ 93.782218][T11175] batadv_slave_0: entered promiscuous mode [ 93.788124][T11175] batadv_slave_0: left promiscuous mode [ 93.793861][T11175] batadv0: left promiscuous mode [ 93.807950][ T11] @: (slave netdevsim1): Releasing backup interface [ 93.813199][ T3456] FAT-fs (loop4): Directory bread(block 3) failed [ 93.851578][ T8] tipc: Node number set to 2130706433 [ 93.922316][T11166] chnl_net:caif_netlink_parms(): no params data found [ 93.943928][T11292] loop2: detected capacity change from 0 to 512 [ 93.983431][T11292] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.005114][T11166] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.012420][T11166] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.026489][T11166] bridge_slave_0: entered allmulticast mode [ 94.034905][T11166] bridge_slave_0: entered promiscuous mode [ 94.042366][T11166] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.049463][T11166] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.061064][T11166] bridge_slave_1: entered allmulticast mode [ 94.067599][T11166] bridge_slave_1: entered promiscuous mode [ 94.068992][T11353] loop2: detected capacity change from 0 to 128 [ 94.105134][T11166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.149310][T11166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.173747][ T11] bridge_slave_1: left allmulticast mode [ 94.179658][ T11] bridge_slave_1: left promiscuous mode [ 94.185621][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.198096][ T11] bridge_slave_0: left allmulticast mode [ 94.203926][ T11] bridge_slave_0: left promiscuous mode [ 94.209754][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.293429][ T11] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.303056][ T11] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.312206][ T11] @ (unregistering): (slave batadv0): Releasing backup interface [ 94.321389][ T11] @ (unregistering): Released all slaves [ 94.354729][T11405] tipc: Enabling of bearer rejected, already enabled [ 94.365122][ T11] tipc: Disabling bearer [ 94.370367][ T11] tipc: Left network mode [ 94.382961][T11166] team0: Port device team_slave_0 added [ 94.391067][T11166] team0: Port device team_slave_1 added [ 94.413408][ T11] hsr_slave_0: left promiscuous mode [ 94.420580][ T11] hsr_slave_1: left promiscuous mode [ 94.433253][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.444212][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.509213][ T11] team0 (unregistering): Port device team_slave_1 removed [ 94.521881][ T11] team0 (unregistering): Port device team_slave_0 removed [ 94.574609][T11472] netlink: 'syz.0.1254': attribute type 9 has an invalid length. [ 94.582639][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 94.596277][T11470] tipc: Enabling of bearer rejected, already enabled [ 94.605481][T11166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.612506][T11166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.638814][T11166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.663655][T11166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.670788][T11166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.697072][T11166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.796024][T11166] hsr_slave_0: entered promiscuous mode [ 94.805943][T11166] hsr_slave_1: entered promiscuous mode [ 94.812044][T11166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.819657][T11166] Cannot create hsr debugfs directory [ 94.839668][T11628] bridge: RTM_NEWNEIGH with invalid ether address [ 94.866210][T11326] chnl_net:caif_netlink_parms(): no params data found [ 94.894604][T11654] tipc: Enabling of bearer rejected, already enabled [ 95.011564][ T11] IPVS: stop unused estimator thread 0... [ 95.027038][T11326] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.034233][T11326] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.042142][T11326] bridge_slave_0: entered allmulticast mode [ 95.049075][T11326] bridge_slave_0: entered promiscuous mode [ 95.063134][T11326] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.070258][T11326] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.077698][T11326] bridge_slave_1: entered allmulticast mode [ 95.084426][T11326] bridge_slave_1: entered promiscuous mode [ 95.118071][T11326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.130207][T11326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.160879][T11326] team0: Port device team_slave_0 added [ 95.167986][T11326] team0: Port device team_slave_1 added [ 95.216782][T11326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.223999][T11326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.250034][T11326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.275530][T11326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.282606][T11326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.308761][T11326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.352839][T11326] hsr_slave_0: entered promiscuous mode [ 95.363210][T11326] hsr_slave_1: entered promiscuous mode [ 95.369325][T11326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.378286][T11326] Cannot create hsr debugfs directory [ 95.418550][T11166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.432480][T11166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.444555][T11166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.484686][T11166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.612374][T11166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.629288][T12033] tipc: Enabling of bearer rejected, already enabled [ 95.684792][T11166] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.707843][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.715046][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.743628][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.750756][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.839638][T11326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.860897][T11326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.880448][T11326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.892873][T12094] netlink: 1328 bytes leftover after parsing attributes in process `syz.0.1270'. [ 95.908638][T11326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.927358][T11166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.046029][T11326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.080455][T11166] veth0_vlan: entered promiscuous mode [ 96.089821][T11326] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.106936][T10003] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.114107][T10003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.125763][T10003] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.132893][T10003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.154231][T11166] veth1_vlan: entered promiscuous mode [ 96.203221][T11166] veth0_macvtap: entered promiscuous mode [ 96.220137][T11166] veth1_macvtap: entered promiscuous mode [ 96.243685][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.254251][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.264125][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.274670][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.286650][T11166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.314970][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.325560][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.335548][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.346103][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.360280][T11166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.391542][ C1] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(258909871078609) <= P.seqno(258909871078608) <= S.SWH(258909871078645)) and (P.ackno exists or LAWL(128058672676956) <= P.ackno(128058672676956) <= S.AWH(128058672676957), sending SYNC... [ 96.422340][ T3288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.436771][ T3288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.452247][ T3288] bond0 (unregistering): (slave team0): Releasing backup interface [ 96.465127][ T3288] bond0 (unregistering): Released all slaves [ 96.474745][ T3288] bond1 (unregistering): Released all slaves [ 96.491728][T11326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.500236][T11166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.509019][T11166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.517764][T11166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.526520][T11166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.556819][ T3288] tipc: Disabling bearer [ 96.562314][ T3288] tipc: Left network mode [ 96.581809][ T3288] hsr_slave_0: left promiscuous mode [ 96.589579][ T3288] hsr_slave_1: left promiscuous mode [ 96.595838][ T3288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.603969][ T3288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.654166][ T3288] team0 (unregistering): Port device team_slave_1 removed [ 96.680874][ T3288] team0 (unregistering): Port device team_slave_0 removed [ 96.727733][T12195] tipc: Enabling of bearer rejected, already enabled [ 96.885554][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 96.885573][ T29] audit: type=1326 audit(1727247542.096:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f167def9 code=0x7ffc0000 [ 96.915988][ T29] audit: type=1326 audit(1727247542.106:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f02f167def9 code=0x7ffc0000 [ 96.916858][T12229] loop1: detected capacity change from 0 to 256 [ 96.939756][ T29] audit: type=1326 audit(1727247542.106:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f167def9 code=0x7ffc0000 [ 96.963699][T12233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1273'. [ 96.969228][ T29] audit: type=1326 audit(1727247542.106:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f167def9 code=0x7ffc0000 [ 96.984115][T11326] veth0_vlan: entered promiscuous mode [ 97.001292][ T29] audit: type=1326 audit(1727247542.106:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02f167def9 code=0x7ffc0000 [ 97.029917][ T29] audit: type=1326 audit(1727247542.106:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f167def9 code=0x7ffc0000 [ 97.036613][T12229] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.053227][ T29] audit: type=1326 audit(1727247542.106:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f167def9 code=0x7ffc0000 [ 97.068353][T11326] veth1_vlan: entered promiscuous mode [ 97.086554][ T29] audit: type=1326 audit(1727247542.106:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f02f167def9 code=0x7ffc0000 [ 97.086589][ T29] audit: type=1326 audit(1727247542.106:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f167def9 code=0x7ffc0000 [ 97.086619][ T29] audit: type=1326 audit(1727247542.106:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f02f167def9 code=0x7ffc0000 [ 97.188440][T12244] netlink: 'syz.1.1275': attribute type 4 has an invalid length. [ 97.199909][T12244] netlink: 'syz.1.1275': attribute type 4 has an invalid length. [ 97.223522][T11326] veth0_macvtap: entered promiscuous mode [ 97.237395][T12247] loop1: detected capacity change from 0 to 256 [ 97.250079][T11326] veth1_macvtap: entered promiscuous mode [ 97.265389][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.276047][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.286021][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.296566][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.306486][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.317170][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.329114][T11326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.342263][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.352854][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.362905][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.373481][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.383406][T11326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.394255][T11326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.406029][T11326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.415011][T11326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.423957][T11326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.432762][T11326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.441785][T11326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.573392][T12280] tipc: Started in network mode [ 97.579010][T12280] tipc: Node identity 7f000001, cluster identity 4711 [ 97.596172][T12285] loop4: detected capacity change from 0 to 512 [ 97.604199][T12285] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.612620][T12285] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1286: corrupted in-inode xattr: invalid ea_ino [ 97.613997][T12280] tipc: Enabled bearer , priority 10 [ 97.627749][T12285] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1286: couldn't read orphan inode 15 (err -117) [ 97.675065][T12292] tipc: New replicast peer: 100.1.1.1 [ 97.680842][T12292] tipc: Enabled bearer , priority 10 [ 97.703207][T12297] netlink: 'syz.4.1288': attribute type 27 has an invalid length. [ 97.786306][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.793592][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.846435][T12297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.857583][T12297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.923762][T12297] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.932835][T12297] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.941952][T12297] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.950881][T12297] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.973494][T12314] loop2: detected capacity change from 0 to 1024 [ 97.980744][T12314] ext4: Bad value for 'debug_want_extra_isize' [ 98.138517][T12307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.194970][T12307] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.237211][T12307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.409823][T12357] tipc: Enabling of bearer rejected, already enabled [ 98.438227][T12355] tipc: Enabling of bearer rejected, already enabled [ 98.535246][T12391] bridge0: port 3(syz_tun) entered blocking state [ 98.541902][T12391] bridge0: port 3(syz_tun) entered disabled state [ 98.548813][T12391] syz_tun: entered allmulticast mode [ 98.554999][T12391] syz_tun: entered promiscuous mode [ 98.561074][T12391] bridge0: port 3(syz_tun) entered blocking state [ 98.567640][T12391] bridge0: port 3(syz_tun) entered forwarding state [ 98.714411][T12404] program syz.2.1305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.731209][ T3489] tipc: Node number set to 2130706433 [ 98.840342][T12422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.869730][T12423] tipc: Enabling of bearer rejected, already enabled [ 98.882625][T12422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.067107][T12445] loop2: detected capacity change from 0 to 512 [ 99.088017][T12445] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1318: Failed to acquire dquot type 1 [ 99.113120][T12445] EXT4-fs (loop2): 1 truncate cleaned up [ 99.119372][T12445] EXT4-fs mount: 51 callbacks suppressed [ 99.119388][T12445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.157636][T12445] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.187274][T12445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.203057][T12460] bpf_get_probe_write_proto: 5 callbacks suppressed [ 99.203074][T12460] syz.4.1323[12460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.220700][T12460] syz.4.1323[12460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.241659][T12460] syz.4.1323[12460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.288341][T12469] loop2: detected capacity change from 0 to 128 [ 99.335466][T12476] loop4: detected capacity change from 0 to 2048 [ 99.378545][T12476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.417301][T12392] coredump: 40(syz.1.1301): written to core: VMAs: 29, size 74350592; core: 62149294 bytes, pos 74358784 [ 99.432383][T12476] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 99.504032][T11326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.554321][T12492] syz.2.1331[12492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.554398][T12492] syz.2.1331[12492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.567807][T12492] syz.2.1331[12492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.610165][T12507] netlink: 'syz.4.1333': attribute type 1 has an invalid length. [ 99.642237][T12507] team_slave_0: entered promiscuous mode [ 99.758886][T12527] pim6reg: entered allmulticast mode [ 99.774365][T12527] pim6reg: left allmulticast mode [ 99.786765][T12532] rdma_op ffff888118335180 conn xmit_rdma 0000000000000000 [ 99.817098][T12542] loop2: detected capacity change from 0 to 128 [ 99.888178][T12542] syz.2.1347: attempt to access beyond end of device [ 99.888178][T12542] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 99.929392][T12567] syz.4.1349[12567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.929462][T12567] syz.4.1349[12567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.016566][T12575] netlink: 'syz.0.1357': attribute type 27 has an invalid length. [ 100.087261][T12575] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.094514][T12575] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.156304][T12575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.171240][T12575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.218908][T12575] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.228165][T12575] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.237613][T12575] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.246558][T12575] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.263209][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 100.297592][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.307055][T12581] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.317843][T12581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.337163][T12593] tipc: Enabling of bearer rejected, already enabled [ 100.499026][T12616] loop2: detected capacity change from 0 to 1024 [ 100.506278][T12616] EXT4-fs: Ignoring removed orlov option [ 100.512191][T12616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.541902][T12616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 100.550161][T12616] System zones: 0-1, 3-12 [ 100.555383][T12616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.572344][T12616] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2792: inode #14: comm syz.2.1369: corrupted in-inode xattr: bad magic number in in-inode xattr [ 100.588254][T12616] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #14: comm syz.2.1369: attempt to clear invalid blocks 1886221359 len 1 [ 100.608574][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.656389][T12628] tipc: Enabling of bearer rejected, already enabled [ 100.754609][T12643] tipc: Started in network mode [ 100.760346][T12643] tipc: Node identity 7f000001, cluster identity 4711 [ 100.778880][T12643] tipc: Enabled bearer , priority 10 [ 100.834843][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1379'. [ 100.844036][T12655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.849423][T12658] loop2: detected capacity change from 0 to 512 [ 100.858399][T12655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.860887][T12658] EXT4-fs: Ignoring removed i_version option [ 100.871932][T12658] EXT4-fs: Ignoring removed nobh option [ 100.878678][T12658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.890640][T12658] EXT4-fs (loop2): 1 truncate cleaned up [ 100.896973][T12658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.925778][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.962797][T12670] netlink: 'syz.2.1382': attribute type 27 has an invalid length. [ 100.978803][T12670] gretap0: left promiscuous mode [ 101.036311][T12670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.047866][T12670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.071702][T12670] veth0_vlan: left allmulticast mode [ 101.091163][T12670] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.100338][T12670] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.109762][T12670] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.118986][T12670] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.146198][T12671] ip6gretap0: left promiscuous mode [ 101.153907][T12671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.162335][T12671] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.171720][T12671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.228652][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'. [ 101.237859][T12679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1384'. [ 101.249002][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'. [ 101.258359][T12679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1384'. [ 101.357218][T12698] loop4: detected capacity change from 0 to 512 [ 101.383233][T12698] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1389: corrupted in-inode xattr: invalid ea_ino [ 101.400387][T12698] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1389: couldn't read orphan inode 15 (err -117) [ 101.401317][T12709] cgroup: fork rejected by pids controller in /syz1 [ 101.414043][T12698] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.490393][T11326] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 101.503404][T12718] loop2: detected capacity change from 0 to 512 [ 101.504055][T11166] bridge0: port 3(syz_tun) entered disabled state [ 101.510256][T12718] EXT4-fs: Ignoring removed orlov option [ 101.524515][T11166] syz_tun (unregistering): left allmulticast mode [ 101.531035][T11166] syz_tun (unregistering): left promiscuous mode [ 101.538199][T11166] bridge0: port 3(syz_tun) entered disabled state [ 101.566593][T12727] loop4: detected capacity change from 0 to 512 [ 101.574613][T12718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.592603][T12727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.607029][T12718] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.608527][T12727] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.637862][T12727] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1396: Failed to acquire dquot type 0 [ 101.662380][T11326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.663712][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.694528][T12747] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1401'. [ 101.713367][T12749] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 101.732105][T10003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.770798][ T9] tipc: Node number set to 2130706433 [ 101.783904][T10003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.844229][T10003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.888347][T12755] tipc: Enabling of bearer rejected, already enabled [ 101.900809][T10003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.918247][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 101.918263][ T29] audit: type=1400 audit(1727247547.126:3035): avc: denied { read } for pid=12757 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.946342][ T29] audit: type=1400 audit(1727247547.126:3036): avc: denied { open } for pid=12757 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.969966][ T29] audit: type=1400 audit(1727247547.126:3037): avc: denied { mounton } for pid=12757 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 102.075315][ T29] audit: type=1400 audit(1727247547.266:3038): avc: denied { search } for pid=3002 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.096753][ T29] audit: type=1400 audit(1727247547.266:3039): avc: denied { read } for pid=3002 comm="dhcpcd" name="n73" dev="tmpfs" ino=7304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.118669][ T29] audit: type=1400 audit(1727247547.266:3040): avc: denied { open } for pid=3002 comm="dhcpcd" path="/run/udev/data/n73" dev="tmpfs" ino=7304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.141838][ T29] audit: type=1400 audit(1727247547.266:3041): avc: denied { getattr } for pid=3002 comm="dhcpcd" path="/run/udev/data/n73" dev="tmpfs" ino=7304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.165215][ T29] audit: type=1326 audit(1727247547.276:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f7a5def9 code=0x7ffc0000 [ 102.188838][ T29] audit: type=1326 audit(1727247547.276:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f7a5def9 code=0x7ffc0000 [ 102.212572][ T29] audit: type=1326 audit(1727247547.276:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12765 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05f7a5def9 code=0x7ffc0000 [ 102.226463][T12771] bond1: entered promiscuous mode [ 102.241406][T12771] bond1: entered allmulticast mode [ 102.271406][T12771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.283126][T12771] bond1 (unregistering): Released all slaves [ 102.342044][T10003] bridge_slave_1: left allmulticast mode [ 102.347778][T10003] bridge_slave_1: left promiscuous mode [ 102.353722][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.363051][T10003] bridge_slave_0: left allmulticast mode [ 102.368824][T10003] bridge_slave_0: left promiscuous mode [ 102.374657][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.458128][T12863] loop2: detected capacity change from 0 to 1024 [ 102.465207][T12863] ext4: Bad value for 'debug_want_extra_isize' [ 102.575298][T10003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.599383][T10003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.641851][T10003] bond0 (unregistering): Released all slaves [ 102.652515][T12870] loop4: detected capacity change from 0 to 4096 [ 102.709246][T12870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.725682][T10003] tipc: Disabling bearer [ 102.731011][T10003] tipc: Disabling bearer [ 102.736257][T10003] tipc: Left network mode [ 102.756751][T12862] wg2: entered promiscuous mode [ 102.761783][T12862] wg2: entered allmulticast mode [ 102.793200][T11326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.855285][T10003] hsr_slave_0: left promiscuous mode [ 102.861394][T10003] hsr_slave_1: left promiscuous mode [ 102.874353][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.881847][T10003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.895202][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.902745][T10003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.950385][T10003] veth1_macvtap: left promiscuous mode [ 102.955976][T10003] veth0_macvtap: left promiscuous mode [ 102.961812][T10003] veth1_vlan: left promiscuous mode [ 102.967243][T10003] veth0_vlan: left promiscuous mode [ 102.988397][T12926] loop2: detected capacity change from 0 to 512 [ 103.026641][T12926] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.1419: casefold flag without casefold feature [ 103.040322][T12926] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1419: couldn't read orphan inode 15 (err -117) [ 103.052854][T12926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.077089][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.166638][T10003] team0 (unregistering): Port device team_slave_1 removed [ 103.209629][T10003] team0 (unregistering): Port device team_slave_0 removed [ 103.268310][T12945] netlink: 'syz.0.1426': attribute type 27 has an invalid length. [ 103.755513][T12945] wg2: left promiscuous mode [ 103.760230][T12945] wg2: left allmulticast mode [ 103.798261][T12956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.806579][T12956] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.815743][T12956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.848580][T12971] tipc: Enabling of bearer rejected, already enabled [ 104.136812][T12757] chnl_net:caif_netlink_parms(): no params data found [ 104.339674][T12757] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.346842][T12757] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.385342][T12757] bridge_slave_0: entered allmulticast mode [ 104.392049][T12757] bridge_slave_0: entered promiscuous mode [ 104.399222][T12757] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.406436][T12757] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.413799][T12757] bridge_slave_1: entered allmulticast mode [ 104.420374][T12757] bridge_slave_1: entered promiscuous mode [ 104.445465][T12757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.461686][T12757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.487374][T12757] team0: Port device team_slave_0 added [ 104.497651][T12757] team0: Port device team_slave_1 added [ 104.547803][T12757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.554983][T12757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.581370][T12757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.606296][T12757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.613314][T12757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.639380][T12757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.669118][T12757] hsr_slave_0: entered promiscuous mode [ 104.675582][T12757] hsr_slave_1: entered promiscuous mode [ 104.681561][T12757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.691073][T12757] Cannot create hsr debugfs directory [ 105.042969][T13445] SELinux: policydb magic number 0xf07cff8c does not match expected magic number 0xf97cff8c [ 105.054619][T13445] SELinux: failed to load policy [ 105.118776][T13258] chnl_net:caif_netlink_parms(): no params data found [ 105.218609][T13258] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.226079][T13258] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.233591][T13258] bridge_slave_0: entered allmulticast mode [ 105.240355][T13258] bridge_slave_0: entered promiscuous mode [ 105.247617][T13258] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.254819][T13258] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.263511][T13258] bridge_slave_1: entered allmulticast mode [ 105.269984][T13258] bridge_slave_1: entered promiscuous mode [ 105.276204][T12757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.304784][T12757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.321151][T12757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.354752][T13258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.365634][T12757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.402763][T13258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.457473][T13675] loop2: detected capacity change from 0 to 512 [ 105.487042][T13258] team0: Port device team_slave_0 added [ 105.507299][ T11] bridge_slave_1: left allmulticast mode [ 105.511032][T13685] dccp_flush_write_queue: CCID did not manage to send all packets [ 105.513287][ T11] bridge_slave_1: left promiscuous mode [ 105.526595][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.543871][ T11] bridge_slave_0: left allmulticast mode [ 105.549553][ T11] bridge_slave_0: left promiscuous mode [ 105.555389][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.566570][T13675] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 105.575503][T13675] System zones: 0-2, 18-18, 34-35 [ 105.583070][T13675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.604537][T13675] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.652355][T13712] loop4: detected capacity change from 0 to 1024 [ 105.659642][T13712] EXT4-fs: Ignoring removed oldalloc option [ 105.684711][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.698264][T13712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.711087][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.738361][ T11] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 105.749604][ T11] bond0 (unregistering): Released all slaves [ 105.781772][T13258] team0: Port device team_slave_1 added [ 105.798583][T11326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.808468][T13675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1452'. [ 105.867681][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.877981][T13258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.885087][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.885170][T13258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.895894][ T11] tipc: Disabling bearer [ 105.927802][ T11] tipc: Disabling bearer [ 105.956477][ T11] tipc: Left network mode [ 105.965462][T13258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.972567][T13258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.972596][T13258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.014394][ T11] hsr_slave_0: left promiscuous mode [ 106.025847][ T11] hsr_slave_1: left promiscuous mode [ 106.033023][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.033405][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.034444][ T11] veth0_vlan: left promiscuous mode [ 106.103709][ T11] team0 (unregistering): Port device team_slave_1 removed [ 106.110160][T13809] coredump: 753(syz.2.1462): coredump has not been created, error -2 [ 106.119517][ T11] team0 (unregistering): Port device team_slave_0 removed [ 106.186437][T13258] hsr_slave_0: entered promiscuous mode [ 106.193425][T13258] hsr_slave_1: entered promiscuous mode [ 106.199415][T13258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.207027][T13258] Cannot create hsr debugfs directory [ 106.216810][T12757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.228649][T12757] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.238402][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.245580][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.274552][T12757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.285024][T12757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.312834][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.319962][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.397479][T13893] loop2: detected capacity change from 0 to 1024 [ 106.424908][T13893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 106.439726][T12757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.451099][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 106.569832][T12757] veth0_vlan: entered promiscuous mode [ 106.578348][T12757] veth1_vlan: entered promiscuous mode [ 106.606990][T12757] veth0_macvtap: entered promiscuous mode [ 106.614355][T12757] veth1_macvtap: entered promiscuous mode [ 106.629618][T12757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.643487][T12757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.656110][T12757] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.664907][T12757] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.673624][T12757] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.682400][T12757] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.759727][T13988] tipc: Enabled bearer , priority 0 [ 106.776990][T13258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.795071][T13988] ªªªªªª: renamed from syzkaller0 [ 106.822819][T13988] tipc: Disabling bearer [ 106.847393][T13258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.898584][T14011] syzkaller0: entered promiscuous mode [ 106.904397][T14011] syzkaller0: entered allmulticast mode [ 106.914102][T13258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.938235][T13258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.963849][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 106.963865][ T29] audit: type=1326 audit(1727247552.176:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c39f9def9 code=0x7ffc0000 [ 106.986510][T13258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.003264][ T29] audit: type=1326 audit(1727247552.216:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c39f9def9 code=0x7ffc0000 [ 107.017377][T13258] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.026878][ T29] audit: type=1326 audit(1727247552.216:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c39f9def9 code=0x7ffc0000 [ 107.057200][ T29] audit: type=1326 audit(1727247552.216:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8c39f9def9 code=0x7ffc0000 [ 107.057787][T13258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.081057][ T29] audit: type=1326 audit(1727247552.216:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c39f9def9 code=0x7ffc0000 [ 107.091329][T13258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.125614][ T29] audit: type=1326 audit(1727247552.216:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c39f9def9 code=0x7ffc0000 [ 107.149227][ T29] audit: type=1326 audit(1727247552.216:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f8c39f9def9 code=0x7ffc0000 [ 107.172813][ T29] audit: type=1326 audit(1727247552.216:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c39f9def9 code=0x7ffc0000 [ 107.196414][ T29] audit: type=1326 audit(1727247552.216:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f8c39f9def9 code=0x7ffc0000 [ 107.220323][ T29] audit: type=1326 audit(1727247552.216:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c39f9def9 code=0x7ffc0000 [ 107.244369][T14020] dccp_close: ABORT with 32 bytes unread [ 107.247016][T10003] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.257190][T10003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.268314][T10003] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.275418][T10003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.293770][T14034] netlink: 'syz.1.1478': attribute type 27 has an invalid length. [ 107.322571][T14034] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.329807][T14034] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.366568][T14034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.377154][T14034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.421169][T14034] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.430240][T14034] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.439281][T14034] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.448668][T14034] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.469674][T14038] tipc: Enabling of bearer rejected, already enabled [ 107.495057][T14041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.503454][T14041] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.514489][T14041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.572902][T13258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.614675][T14067] tipc: Enabling of bearer rejected, already enabled [ 107.658419][T14074] tipc: Started in network mode [ 107.663427][T14074] tipc: Node identity 2, cluster identity 4711 [ 107.669612][T14074] tipc: Node number set to 2 [ 107.706989][T14080] syz.4.1490[14080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.707137][T14080] syz.4.1490[14080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.713026][T13258] veth0_vlan: entered promiscuous mode [ 107.722160][T14080] syz.4.1490[14080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.736565][T13258] veth1_vlan: entered promiscuous mode [ 107.756598][T14080] bridge_slave_1: left allmulticast mode [ 107.762388][T14080] bridge_slave_1: left promiscuous mode [ 107.768079][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.776766][T14080] bridge_slave_0: left allmulticast mode [ 107.782566][T14080] bridge_slave_0: left promiscuous mode [ 107.788355][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.841691][T13258] veth0_macvtap: entered promiscuous mode [ 107.848926][T13258] veth1_macvtap: entered promiscuous mode [ 107.859588][T13258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.870625][T13258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.880405][T13258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.889370][T13258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.898125][T13258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.906936][T13258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.939672][T14090] tipc: Enabling of bearer rejected, already enabled [ 107.969746][T14094] netlink: 'syz.3.1435': attribute type 11 has an invalid length. [ 107.977733][T14094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1435'. [ 107.987871][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 108.017171][T14104] ref_ctr increment failed for inode: 0x16 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881148d1a40 [ 108.029062][T14103] uprobe: syz.3.1494:14103 failed to unregister, leaking uprobe [ 108.065206][T14110] netlink: 'syz.3.1495': attribute type 27 has an invalid length. [ 108.097020][T14110] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.104370][T14110] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.168268][T14110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.178373][T14110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.218527][T14110] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.227650][T14110] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.236692][T14110] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.245620][T14110] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.276065][T14112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.304227][T14112] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.314780][T14112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.333499][T14120] loop2: detected capacity change from 0 to 512 [ 108.363308][T14120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.377070][T14120] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.425194][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.439710][T14126] tipc: Started in network mode [ 108.445911][T14126] tipc: Node identity 7f000001, cluster identity 4711 [ 108.461738][T14126] tipc: Enabled bearer , priority 10 [ 108.528339][T14131] xt_hashlimit: size too large, truncated to 1048576 [ 108.725036][T14143] tipc: Enabling of bearer rejected, already enabled [ 108.866641][T14158] loop3: detected capacity change from 0 to 1024 [ 108.997633][T14158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.022772][T14158] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.1509: attempt to clear invalid blocks 1886221359 len 1 [ 109.054339][T13258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.206031][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'. [ 109.570543][ T3339] tipc: Node number set to 2130706433 [ 109.790849][ T3339] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.798425][ T3339] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.808655][ T3339] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 110.054876][T14255] netlink: 'syz.0.1536': attribute type 27 has an invalid length. [ 110.163507][T14259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.175619][T14259] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.192604][T14259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.249958][T14273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1539'. [ 110.892352][T14281] tipc: Enabling of bearer rejected, already enabled [ 110.918929][T14285] loop3: detected capacity change from 0 to 256 [ 110.954905][T14292] program syz.3.1545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.059226][T14301] can0: slcan on ttyS3. [ 111.100945][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1552'. [ 111.180469][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1552'. [ 111.200748][T14300] can0 (unregistered): slcan off ttyS3. [ 111.234407][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1552'. [ 111.324964][T14346] hub 8-0:1.0: USB hub found [ 111.331472][T14346] hub 8-0:1.0: 8 ports detected [ 111.888416][T14337] loop3: detected capacity change from 0 to 1024 [ 111.895238][T14337] ext4: Bad value for 'debug_want_extra_isize' [ 112.031549][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 112.037763][ T29] audit: type=1400 audit(1727247557.016:3271): avc: denied { create } for pid=14334 comm="syz.3.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.931404][ T29] audit: type=1400 audit(1727247571.146:3272): avc: denied { mounton } for pid=14397 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 126.041486][ T29] audit: type=1400 audit(1727247571.196:3273): avc: denied { sys_module } for pid=14397 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 126.558386][ T28] bridge_slave_1: left allmulticast mode [ 126.564090][ T28] bridge_slave_1: left promiscuous mode [ 126.569849][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.577619][ T28] bridge_slave_0: left allmulticast mode [ 126.583357][ T28] bridge_slave_0: left promiscuous mode [ 126.588999][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.682851][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.692356][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.701562][ T28] bond0 (unregistering): Released all slaves [ 126.727040][T10003] ================================================================== [ 126.735156][T10003] BUG: KCSAN: data-race in alloc_pid / copy_process [ 126.741762][T10003] [ 126.744086][T10003] read-write to 0xffffffff8665d878 of 4 bytes by task 368 on cpu 1: [ 126.752413][T10003] alloc_pid+0x542/0x6f0 [ 126.756659][T10003] copy_process+0xe72/0x1f90 [ 126.761259][T10003] kernel_clone+0x167/0x5e0 [ 126.765774][T10003] user_mode_thread+0x7d/0xb0 [ 126.770469][T10003] call_usermodehelper_exec_work+0x41/0x150 [ 126.776383][T10003] process_scheduled_works+0x483/0x9a0 [ 126.781861][T10003] worker_thread+0x51d/0x6f0 [ 126.786452][T10003] kthread+0x1d1/0x210 [ 126.790524][T10003] ret_from_fork+0x4b/0x60 [ 126.794947][T10003] ret_from_fork_asm+0x1a/0x30 [ 126.799726][T10003] [ 126.802051][T10003] read to 0xffffffff8665d878 of 4 bytes by task 10003 on cpu 0: [ 126.809682][T10003] copy_process+0x1799/0x1f90 [ 126.814370][T10003] kernel_clone+0x167/0x5e0 [ 126.818886][T10003] user_mode_thread+0x7d/0xb0 [ 126.823661][T10003] call_usermodehelper_exec_work+0x41/0x150 [ 126.829575][T10003] process_scheduled_works+0x483/0x9a0 [ 126.835050][T10003] worker_thread+0x51d/0x6f0 [ 126.839642][T10003] kthread+0x1d1/0x210 [ 126.843718][T10003] ret_from_fork+0x4b/0x60 [ 126.848142][T10003] ret_from_fork_asm+0x1a/0x30 [ 126.852930][T10003] [ 126.855253][T10003] value changed: 0x800000b3 -> 0x800000b4 [ 126.860972][T10003] [ 126.863297][T10003] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 126.869451][T10003] CPU: 0 UID: 0 PID: 10003 Comm: kworker/u8:8 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 126.880052][T10003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 126.890216][T10003] Workqueue: events_unbound call_usermodehelper_exec_work [ 126.897370][T10003] ================================================================== [ 126.912691][ T29] audit: type=1400 audit(1727247572.116:3274): avc: denied { write } for pid=3251 comm="syz-executor" path="pipe:[612]" dev="pipefs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 126.943745][T14397] chnl_net:caif_netlink_parms(): no params data found [ 126.955499][T14409] chnl_net:caif_netlink_parms(): no params data found [ 126.975970][T14408] chnl_net:caif_netlink_parms(): no params data found [ 126.985217][ T28] tipc: Disabling bearer [ 126.990527][ T28] tipc: Left network mode [ 127.078228][ T28] hsr_slave_0: left promiscuous mode [ 127.092244][ T28] hsr_slave_1: left promiscuous mode [ 127.099560][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.107426][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.151651][ T28] team0 (unregistering): Port device team_slave_1 removed [ 127.163233][ T28] team0 (unregistering): Port device team_slave_0 removed [ 128.009852][ T28] bridge_slave_1: left allmulticast mode [ 128.015646][ T28] bridge_slave_1: left promiscuous mode [ 128.021403][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.031336][ T28] bridge_slave_0: left allmulticast mode [ 128.037056][ T28] bridge_slave_0: left promiscuous mode [ 128.043023][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.051579][ T28] bridge_slave_1: left allmulticast mode [ 128.057282][ T28] bridge_slave_1: left promiscuous mode [ 128.062955][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.070732][ T28] bridge_slave_0: left allmulticast mode [ 128.076624][ T28] bridge_slave_0: left promiscuous mode [ 128.082278][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.452077][ T28] bond0 (unregistering): Released all slaves [ 128.460344][ T28] bond0 (unregistering): Released all slaves [ 128.468354][ T28] bond0 (unregistering): Released all slaves [ 128.476988][ T28] bond0 (unregistering): Released all slaves [ 128.485722][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.495141][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.504588][ T28] bond0 (unregistering): Released all slaves [ 128.513704][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.523159][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.532411][ T28] bond0 (unregistering): Released all slaves [ 128.541225][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.550919][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.560215][ T28] bond0 (unregistering): Released all slaves [ 128.617301][ T28] tipc: Disabling bearer [ 128.622709][ T28] tipc: Left network mode [ 128.627613][ T28] tipc: Disabling bearer [ 128.632880][ T28] tipc: Left network mode [ 128.638265][ T28] tipc: Left network mode [ 128.648194][ T28] hsr_slave_0: left promiscuous mode [ 128.656179][ T28] hsr_slave_1: left promiscuous mode [ 128.663924][ T28] hsr_slave_0: left promiscuous mode [ 128.669692][ T28] hsr_slave_1: left promiscuous mode [ 128.677817][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.685946][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.696454][ T28] hsr_slave_0: left promiscuous mode [ 128.702291][ T28] hsr_slave_1: left promiscuous mode [ 128.707965][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.715665][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.794921][ T28] team0 (unregistering): Port device team_slave_1 removed [ 128.804815][ T28] team0 (unregistering): Port device team_slave_0 removed [ 128.863445][ T28] team0 (unregistering): Port device team_slave_1 removed [ 128.873126][ T28] team0 (unregistering): Port device team_slave_0 removed [ 128.936014][ T28] team0 (unregistering): Port device team_slave_1 removed [ 128.945976][ T28] team0 (unregistering): Port device team_slave_0 removed [ 128.988589][ T29] audit: type=1400 audit(1727247574.196:3275): avc: denied { sys_chroot } for pid=15088 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 129.011076][ T29] audit: type=1400 audit(1727247574.196:3276): avc: denied { setgid } for pid=15088 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 129.032070][ T29] audit: type=1400 audit(1727247574.196:3277): avc: denied { setuid } for pid=15088 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 129.053100][ T29] audit: type=1400 audit(1727247574.196:3278): avc: denied { setrlimit } for pid=15088 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1