last executing test programs: 3.714384006s ago: executing program 4 (id=893): r0 = syz_io_uring_setup(0xbc7, &(0x7f0000001480)={0x0, 0xb9e, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.491805509s ago: executing program 4 (id=901): socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.102195745s ago: executing program 4 (id=909): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x80, 0x10003, 0x7fff, 0x5, 0x4, 0xf095, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x9c3fa077fa966179, 0xa, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.538211883s ago: executing program 4 (id=918): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.09187601s ago: executing program 3 (id=928): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800040000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000000), &(0x7f0000000200)=""/138}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.06638716s ago: executing program 3 (id=929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000140)="3b3f82", 0x3, 0x2000c811, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) 2.05175649s ago: executing program 2 (id=930): fsopen(&(0x7f0000000080)='autofs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r2, 0x0, 0x0, 0x0, 0x0, 0x1}]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1.898533953s ago: executing program 2 (id=931): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x170, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x148, 0x8, 0x0, 0x1, [{0x144, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x408c0}, 0x20000085) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) 1.217124133s ago: executing program 3 (id=933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = eventfd(0x800a6) write$eventfd(r4, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) read$eventfd(r4, &(0x7f0000000040), 0x8) 1.215820373s ago: executing program 2 (id=943): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000080)=')@/#-^^\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='syztnl0\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)=',)\x00', &(0x7f0000000240)='syztnl1\x00', &(0x7f0000000280)='syztnl0\x00', &(0x7f00000002c0)='syztnl1\x00']}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 896.153167ms ago: executing program 4 (id=936): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) r1 = syz_io_uring_setup(0x6937, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xfffffffe, 0x100000, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000080)={0x1, 0x9}, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) 806.224309ms ago: executing program 1 (id=942): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00'], 0x1c}}, 0x4000054) 755.038779ms ago: executing program 1 (id=944): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil) munmap(&(0x7f0000308000/0x4000)=nil, 0x4000) mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil) mremap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 731.05105ms ago: executing program 1 (id=945): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 640.593211ms ago: executing program 1 (id=949): openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket(0x1f, 0x2, 0x200000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_setup(0x264c, 0x0, 0x0, &(0x7f0000000000)) 553.020862ms ago: executing program 1 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0904000000000d000000020000000900010073797a30000000000900020073797a32000000000600074069b80000240004802000018008000100647570"], 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x10010, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x99ed8d43af96217a) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20004000) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 472.179193ms ago: executing program 0 (id=954): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8014, &(0x7f0000000000)=ANY=[], 0x3, 0x7df, &(0x7f0000000a00)="$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") msgsnd(0x0, 0x0, 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 471.846353ms ago: executing program 1 (id=955): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x80001}, 0x18) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 335.400816ms ago: executing program 3 (id=956): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0xffffffffffffffff, 0x6, 0x6}, 0x3, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) 317.102606ms ago: executing program 2 (id=957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 301.146926ms ago: executing program 0 (id=958): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 224.072197ms ago: executing program 2 (id=959): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 218.348707ms ago: executing program 3 (id=960): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 180.299938ms ago: executing program 2 (id=961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x200, 0x102) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2, 0x0, 0x5}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 148.449628ms ago: executing program 0 (id=962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r4, 0x0, 0x46) close(r4) 147.740448ms ago: executing program 0 (id=963): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 131.429908ms ago: executing program 3 (id=964): syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$inet_udp(0x2, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n rejected, failed to enable media [ 32.501802][ T3503] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 33.138324][ T3515] loop0: detected capacity change from 0 to 4096 [ 33.148557][ T3515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.274187][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.774094][ T3539] loop0: detected capacity change from 0 to 512 [ 33.784192][ T3539] EXT4-fs: inline encryption not supported [ 33.799921][ T3539] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.883838][ T3573] loop2: detected capacity change from 0 to 1024 [ 33.911264][ T3573] EXT4-fs: test_dummy_encryption option not supported [ 34.026199][ T3572] syz.2.34 (3572) used greatest stack depth: 10720 bytes left [ 34.065032][ C1] hrtimer: interrupt took 40263 ns [ 34.135997][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.39'. [ 34.664668][ T3597] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.871670][ T3609] loop2: detected capacity change from 0 to 512 [ 34.882357][ T3609] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.895538][ T3609] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.916646][ T3609] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.932411][ T3609] EXT4-fs (loop2): 1 truncate cleaned up [ 34.938562][ T3609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.041823][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.104989][ T3597] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.166001][ T3597] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.226103][ T3597] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.268682][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 35.308741][ T3597] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.338437][ T3597] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.356019][ T3597] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.402564][ T3597] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.501070][ T3632] loop1: detected capacity change from 0 to 512 [ 35.515324][ T3638] process 'syz.2.59' launched './file0' with NULL argv: empty string added [ 35.613605][ T3632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.682282][ T3632] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.811168][ T3653] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.58: corrupted inode contents [ 35.814782][ T3654] loop2: detected capacity change from 0 to 512 [ 35.845168][ T3653] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.58: mark_inode_dirty error [ 35.865852][ T3653] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.58: corrupted inode contents [ 35.895728][ T3654] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.66: Failed to acquire dquot type 1 [ 35.930365][ T3653] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.58: mark_inode_dirty error [ 35.949167][ T3654] EXT4-fs (loop2): 1 truncate cleaned up [ 35.967245][ T3654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.990483][ T3653] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.58: mark inode dirty (error -117) [ 36.042004][ T3653] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 36.077065][ T3654] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.119789][ T3654] dvmrp0: entered allmulticast mode [ 36.140809][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.330143][ T3667] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.392720][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.393195][ T3664] Zero length message leads to an empty skb [ 36.529878][ T3673] lo: entered promiscuous mode [ 36.548599][ T3673] tunl0: entered promiscuous mode [ 36.563707][ T3673] gre0: entered promiscuous mode [ 36.592415][ T3673] gretap0: entered promiscuous mode [ 36.603914][ T3673] erspan0: entered promiscuous mode [ 36.611092][ T3673] ip_vti0: entered promiscuous mode [ 36.640728][ T3673] ip6_vti0: entered promiscuous mode [ 36.665519][ T3673] sit0: entered promiscuous mode [ 36.689894][ T3673] ip6tnl0: entered promiscuous mode [ 36.724729][ T3673] ip6gre0: entered promiscuous mode [ 36.792196][ T3673] syz_tun: entered promiscuous mode [ 36.804172][ T3673] ip6gretap0: entered promiscuous mode [ 36.811646][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.818993][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.847078][ T3673] bridge0: entered promiscuous mode [ 36.881176][ T3673] vcan0: entered promiscuous mode [ 36.937192][ T3673] bond0: entered promiscuous mode [ 36.942384][ T3673] bond_slave_0: entered promiscuous mode [ 36.948318][ T3673] bond_slave_1: entered promiscuous mode [ 36.971059][ T3673] team0: entered promiscuous mode [ 36.976217][ T3673] team_slave_0: entered promiscuous mode [ 36.981984][ T3673] team_slave_1: entered promiscuous mode [ 36.989475][ T3673] dummy0: entered promiscuous mode [ 37.003347][ T3673] nlmon0: entered promiscuous mode [ 37.009855][ T3673] caif0: entered promiscuous mode [ 37.015379][ T3673] batadv0: entered promiscuous mode [ 37.022367][ T3673] vxcan0: entered promiscuous mode [ 37.028305][ T3673] vxcan1: entered promiscuous mode [ 37.034388][ T3673] veth0: entered promiscuous mode [ 37.041098][ T3673] veth1: entered promiscuous mode [ 37.048531][ T3673] wg0: entered promiscuous mode [ 37.055375][ T3673] wg1: entered promiscuous mode [ 37.061703][ T3673] wg2: entered promiscuous mode [ 37.067744][ T3673] veth0_to_bridge: entered promiscuous mode [ 37.077678][ T3673] veth1_to_bridge: entered promiscuous mode [ 37.085905][ T3673] veth0_to_bond: entered promiscuous mode [ 37.093839][ T3673] veth1_to_bond: entered promiscuous mode [ 37.101156][ T3673] veth0_to_team: entered promiscuous mode [ 37.109124][ T3673] veth1_to_team: entered promiscuous mode [ 37.117814][ T3673] veth0_to_batadv: entered promiscuous mode [ 37.125409][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.133329][ T3673] batadv_slave_0: entered promiscuous mode [ 37.140648][ T3673] veth1_to_batadv: entered promiscuous mode [ 37.148176][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.155704][ T3673] batadv_slave_1: entered promiscuous mode [ 37.163348][ T3673] xfrm0: entered promiscuous mode [ 37.169390][ T3673] veth0_to_hsr: entered promiscuous mode [ 37.179090][ T3673] veth1_to_hsr: entered promiscuous mode [ 37.187341][ T3673] hsr0: entered promiscuous mode [ 37.193677][ T3673] veth1_virt_wifi: entered promiscuous mode [ 37.200658][ T3673] veth0_virt_wifi: entered promiscuous mode [ 37.212657][ T3673] vlan0: entered promiscuous mode [ 37.217926][ T3673] vlan1: entered promiscuous mode [ 37.223718][ T3673] macvlan0: entered promiscuous mode [ 37.230184][ T3673] macvlan1: entered promiscuous mode [ 37.236660][ T3673] ipvlan0: entered promiscuous mode [ 37.241974][ T3673] ipvlan1: entered promiscuous mode [ 37.249861][ T3673] macvtap0: entered promiscuous mode [ 37.256655][ T3673] macsec0: entered promiscuous mode [ 37.263169][ T3673] geneve0: entered promiscuous mode [ 37.269401][ T3673] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.278340][ T3673] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.287467][ T3673] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.296576][ T3673] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.306200][ T3673] geneve1: entered promiscuous mode [ 37.314950][ T3673] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 37.330886][ T3673] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 37.348629][ T3673] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 37.379473][ T3673] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 37.392651][ T3673] dvmrp0: entered promiscuous mode [ 37.410042][ T3683] pimreg: entered allmulticast mode [ 37.420998][ T3684] pimreg: left allmulticast mode [ 37.476171][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 37.476184][ T29] audit: type=1400 audit(1750675445.178:496): avc: denied { relabelfrom } for pid=3687 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.502126][ T29] audit: type=1400 audit(1750675445.178:497): avc: denied { relabelto } for pid=3687 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.559802][ T29] audit: type=1400 audit(1750675445.258:498): avc: denied { create } for pid=3689 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.581828][ T29] audit: type=1400 audit(1750675445.288:499): avc: denied { write } for pid=3689 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.635711][ T29] audit: type=1400 audit(1750675445.328:500): avc: denied { bind } for pid=3693 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.655166][ T29] audit: type=1400 audit(1750675445.328:501): avc: denied { listen } for pid=3693 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.674598][ T29] audit: type=1400 audit(1750675445.328:502): avc: denied { accept } for pid=3693 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.748557][ T29] audit: type=1400 audit(1750675445.438:503): avc: denied { create } for pid=3701 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.767985][ T29] audit: type=1400 audit(1750675445.438:504): avc: denied { name_connect } for pid=3701 comm="syz.4.84" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 37.818393][ T3696] syz.2.81 (3696) used greatest stack depth: 10248 bytes left [ 37.833515][ T3704] random: crng reseeded on system resumption [ 37.839015][ T29] audit: type=1400 audit(1750675445.538:505): avc: denied { append } for pid=3703 comm="syz.4.85" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.008320][ T3686] capability: warning: `syz.1.77' uses 32-bit capabilities (legacy support in use) [ 38.369542][ T3752] loop0: detected capacity change from 0 to 1024 [ 38.382889][ T3752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.407547][ T3752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.535540][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.599082][ T3766] syz.0.100 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.556629][ T3809] loop2: detected capacity change from 0 to 2048 [ 39.571447][ T3810] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.113'. [ 39.580602][ T3810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'. [ 39.591253][ T3809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.626206][ T3310] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 39.641157][ T3310] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 39.654428][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.216277][ T3836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.124'. [ 40.584767][ T3862] pim6reg1: entered promiscuous mode [ 40.590123][ T3862] pim6reg1: entered allmulticast mode [ 40.685681][ T3869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 40.756054][ T3875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 40.765166][ T3875] netlink: 212 bytes leftover after parsing attributes in process `syz.0.139'. [ 40.794355][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 40.896430][ T3887] vhci_hcd: invalid port number 65 [ 40.901614][ T3887] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 41.708553][ T3918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.823770][ T3923] wg2: entered promiscuous mode [ 41.828710][ T3923] wg2: entered allmulticast mode [ 41.864642][ T3918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.926167][ T3918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.992015][ T3918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.069433][ T3918] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.089240][ T3918] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.120899][ T3918] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.141357][ T3918] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.159507][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 42.187774][ T3934] loop4: detected capacity change from 0 to 4096 [ 42.209547][ T3932] ipvlan2: entered promiscuous mode [ 42.231731][ T3934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.345236][ T3940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 42.423565][ T3945] loop1: detected capacity change from 0 to 1024 [ 42.440422][ T3947] xt_hashlimit: max too large, truncated to 1048576 [ 42.473047][ T3945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.492946][ T3951] bridge: RTM_NEWNEIGH with invalid ether address [ 42.510653][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.528645][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 42.528660][ T29] audit: type=1400 audit(1750675450.228:600): avc: denied { rename } for pid=3944 comm="syz.1.163" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.561543][ T3945] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.163: bg 0: block 494: padding at end of block bitmap is not set [ 42.578350][ T3945] EXT4-fs (loop1): Remounting filesystem read-only [ 42.590117][ T3945] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 42.602646][ T29] audit: type=1400 audit(1750675450.308:601): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 42.624770][ T29] audit: type=1400 audit(1750675450.308:602): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.646332][ T29] audit: type=1400 audit(1750675450.308:603): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.667918][ T29] audit: type=1400 audit(1750675450.308:604): avc: denied { add_name } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.688779][ T29] audit: type=1400 audit(1750675450.308:605): avc: denied { create } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.709495][ T29] audit: type=1400 audit(1750675450.308:606): avc: denied { append open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.732852][ T29] audit: type=1400 audit(1750675450.308:607): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.743127][ T3957] all: renamed from lo [ 42.773122][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.797633][ T29] audit: type=1400 audit(1750675450.468:608): avc: denied { connect } for pid=3958 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.817468][ T29] audit: type=1400 audit(1750675450.468:609): avc: denied { write } for pid=3958 comm="syz.4.165" path="socket:[5861]" dev="sockfs" ino=5861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.854974][ T3955] loop0: detected capacity change from 0 to 1024 [ 42.867687][ T3955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.889661][ T3964] loop1: detected capacity change from 0 to 512 [ 42.909283][ T3964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.920647][ T3955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.933682][ T3964] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.170: invalid indirect mapped block 4294967295 (level 1) [ 42.939112][ T3969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 42.950290][ T3964] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.170: invalid indirect mapped block 4294967295 (level 1) [ 42.975647][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.977379][ T3964] EXT4-fs (loop1): 2 truncates cleaned up [ 42.991610][ T3964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.160956][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.181975][ T3986] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.190907][ T3986] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.199831][ T3986] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.208722][ T3986] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.237028][ T3986] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.246205][ T3986] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.255273][ T3986] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.264266][ T3986] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.293851][ T3984] tipc: Started in network mode [ 43.298878][ T3984] tipc: Node identity 7aab2266f9ce, cluster identity 4711 [ 43.306267][ T3984] tipc: Enabled bearer , priority 0 [ 43.331193][ T3981] tipc: Resetting bearer [ 43.368383][ T3999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3999 comm=syz.0.186 [ 43.401339][ T3981] tipc: Disabling bearer [ 43.416853][ T3999] vlan2: entered allmulticast mode [ 43.422178][ T3999] hsr0: entered allmulticast mode [ 43.427236][ T3999] hsr_slave_0: entered allmulticast mode [ 43.433154][ T3999] hsr_slave_1: entered allmulticast mode [ 43.485142][ T4003] loop2: detected capacity change from 0 to 512 [ 43.511644][ T3997] syz.1.185 (3997) used greatest stack depth: 10192 bytes left [ 43.519980][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.532886][ T4003] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.562207][ T4003] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.188: corrupted inode contents [ 43.571477][ T4009] loop0: detected capacity change from 0 to 512 [ 43.588119][ T4003] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.188: mark_inode_dirty error [ 43.600845][ T4009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.611258][ T4003] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.188: corrupted inode contents [ 43.624429][ T4009] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.189: bad orphan inode 11 [ 43.639095][ T4003] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.188: mark_inode_dirty error [ 43.662422][ T4009] ext4_test_bit(bit=10, block=4) = 1 [ 43.667787][ T4009] is_bad_inode(inode)=0 [ 43.672048][ T4009] NEXT_ORPHAN(inode)=2080374784 [ 43.677068][ T4009] max_ino=32 [ 43.680294][ T4009] i_nlink=0 [ 43.702377][ T4009] EXT4-fs (loop0): 1 truncate cleaned up [ 43.708596][ T4009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.748694][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.796412][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.208290][ T4031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.215818][ T4031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.224263][ T4031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.231877][ T4031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.480069][ T4050] loop4: detected capacity change from 0 to 2048 [ 44.503792][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.534862][ T4054] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 44.561072][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.570458][ T4054] bond1: entered promiscuous mode [ 44.575648][ T4054] bond1: entered allmulticast mode [ 44.581061][ T4054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.596853][ T4054] bridge2: entered promiscuous mode [ 44.602225][ T4054] bridge2: entered allmulticast mode [ 44.608222][ T4054] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 44.691441][ T4061] loop1: detected capacity change from 0 to 1024 [ 44.714106][ T1705] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 44.747047][ T4061] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 44.763017][ T4064] batadv_slave_0: entered promiscuous mode [ 44.769630][ T4064] __nla_validate_parse: 7 callbacks suppressed [ 44.769648][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 44.785713][ T4064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.838316][ T4064] batadv_slave_0 (unregistering): left promiscuous mode [ 44.850589][ T37] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 44.859841][ T4064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.894289][ T4068] @: renamed from vlan0 [ 44.923957][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 44.944940][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 44.964316][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 44.974780][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 46.349543][ T4147] loop2: detected capacity change from 0 to 1024 [ 46.362990][ T4147] EXT4-fs: Ignoring removed nobh option [ 46.368632][ T4147] EXT4-fs: Ignoring removed bh option [ 46.395155][ T4147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.420035][ T4147] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.240: Allocating blocks 497-513 which overlap fs metadata [ 46.468982][ T4147] EXT4-fs (loop2): pa ffff888106a9f000: logic 256, phys. 369, len 9 [ 46.477113][ T4147] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 46.489207][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 46.499064][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 46.508637][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 46.517799][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 46.526979][ T4147] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 46.568768][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.684098][ T4164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 47.173075][ T4192] usb usb1: usbfs: process 4192 (syz.1.259) did not claim interface 0 before use [ 47.463367][ T4214] bridge_slave_0: left allmulticast mode [ 47.469129][ T4214] bridge_slave_0: left promiscuous mode [ 47.475023][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.509981][ T4214] bridge_slave_1: left allmulticast mode [ 47.515951][ T4214] bridge_slave_1: left promiscuous mode [ 47.521705][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.542700][ T4214] bond0: (slave bond_slave_0): Releasing backup interface [ 47.577242][ T4214] bond0: (slave bond_slave_1): Releasing backup interface [ 47.624378][ T4214] team0: Port device team_slave_0 removed [ 47.656507][ T4214] team0: Port device team_slave_1 removed [ 47.671251][ T4214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.678906][ T4214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.737816][ T4228] loop2: detected capacity change from 0 to 512 [ 47.755448][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 47.755467][ T29] audit: type=1400 audit(1750675455.458:721): avc: denied { create } for pid=4229 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.798510][ T29] audit: type=1400 audit(1750675455.488:722): avc: denied { setopt } for pid=4229 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.820279][ T4228] EXT4-fs (loop2): 1 orphan inode deleted [ 47.826800][ T4228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.840917][ T4228] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.876900][ T52] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 47.886845][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 47.908800][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.961254][ T29] audit: type=1400 audit(1750675455.658:723): avc: denied { bind } for pid=4240 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.158159][ T29] audit: type=1400 audit(1750675455.858:724): avc: denied { write } for pid=4260 comm="syz.2.285" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.185085][ T29] audit: type=1326 audit(1750675455.888:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 48.221282][ T29] audit: type=1326 audit(1750675455.888:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 48.244666][ T29] audit: type=1326 audit(1750675455.888:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 48.268025][ T29] audit: type=1326 audit(1750675455.888:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 48.291341][ T29] audit: type=1326 audit(1750675455.888:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 48.323712][ T4268] 9pnet: p9_errstr2errno: server reported unknown error [ 48.494708][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.502259][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.679970][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.700622][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.777125][ T4278] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.786166][ T4278] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.795240][ T4278] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.804299][ T4278] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.940216][ T4308] syzkaller0: entered promiscuous mode [ 48.945888][ T4308] syzkaller0: entered allmulticast mode [ 48.974846][ T4316] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 49.104743][ T4321] loop1: detected capacity change from 0 to 8192 [ 49.118150][ T4321] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.524390][ T4357] capability: warning: `syz.3.319' uses deprecated v2 capabilities in a way that may be insecure [ 49.631349][ T4338] syz.1.310 (4338) used greatest stack depth: 10112 bytes left [ 49.919700][ T4370] __nla_validate_parse: 6 callbacks suppressed [ 49.919715][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 49.957261][ T4366] loop4: detected capacity change from 0 to 1024 [ 49.975939][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 49.988537][ T4366] EXT4-fs: Ignoring removed orlov option [ 50.016616][ T4366] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 50.044283][ T4366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.215700][ T4387] loop1: detected capacity change from 0 to 512 [ 50.233094][ T4391] bridge: RTM_NEWNEIGH with invalid ether address [ 50.234027][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.278347][ T4387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.401708][ T4387] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.439879][ T4387] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.331: corrupted inode contents [ 50.480012][ T4387] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.331: mark_inode_dirty error [ 50.523210][ T4387] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.331: corrupted inode contents [ 50.561133][ T4404] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.331: corrupted inode contents [ 50.601484][ T4404] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.331: mark_inode_dirty error [ 50.653756][ T4404] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.331: corrupted inode contents [ 50.655170][ T4410] netlink: 96 bytes leftover after parsing attributes in process `syz.0.339'. [ 50.665767][ T4404] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.331: mark_inode_dirty error [ 50.765202][ T4404] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.331: corrupted inode contents [ 50.769610][ T4416] loop4: detected capacity change from 0 to 8192 [ 50.790224][ T4404] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.331: mark_inode_dirty error [ 50.813200][ T4416] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.842112][ T4406] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.331: corrupted inode contents [ 50.978736][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.092244][ T4424] loop0: detected capacity change from 0 to 2048 [ 51.153950][ T4424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.773267][ T4434] syzkaller0: entered promiscuous mode [ 51.778819][ T4434] syzkaller0: entered allmulticast mode [ 52.024603][ T4438] loop2: detected capacity change from 0 to 2048 [ 52.090182][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.134145][ T3300] loop2: p1 < > p4 [ 52.139013][ T3300] loop2: p4 size 8388608 extends beyond EOD, truncated [ 52.149793][ T4444] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.350'. [ 52.158990][ T4444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 52.178103][ T4438] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 52.224991][ T4446] netlink: 388 bytes leftover after parsing attributes in process `syz.0.351'. [ 52.351603][ T4450] pim6reg1: entered promiscuous mode [ 52.357218][ T4450] pim6reg1: entered allmulticast mode [ 52.439583][ T4460] netlink: 52 bytes leftover after parsing attributes in process `syz.3.357'. [ 52.503911][ T4465] loop1: detected capacity change from 0 to 512 [ 52.535529][ T4465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.587906][ T4465] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.603504][ T4473] bridge: RTM_NEWNEIGH with invalid ether address [ 52.687006][ T4477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4477 comm=syz.0.365 [ 52.701947][ T4477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 52.719922][ T4477] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.728714][ T4477] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.737671][ T4477] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.746498][ T4477] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.871014][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 52.871029][ T29] audit: type=1400 audit(1750675460.568:878): avc: denied { ioctl } for pid=4480 comm="syz.0.366" path="socket:[7711]" dev="sockfs" ino=7711 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.904569][ T29] audit: type=1400 audit(1750675460.608:879): avc: denied { create } for pid=4480 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.904609][ T29] audit: type=1400 audit(1750675460.608:880): avc: denied { bind } for pid=4480 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.961265][ T29] audit: type=1326 audit(1750675460.658:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 52.961304][ T29] audit: type=1326 audit(1750675460.658:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 52.964655][ T29] audit: type=1326 audit(1750675460.668:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 53.075645][ T29] audit: type=1326 audit(1750675460.758:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 53.099061][ T29] audit: type=1326 audit(1750675460.758:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 53.122364][ T29] audit: type=1326 audit(1750675460.758:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 53.145704][ T29] audit: type=1326 audit(1750675460.758:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 53.294009][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.403817][ T4491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.370'. [ 53.449299][ T4491] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4491 comm=syz.2.370 [ 53.724969][ T4502] loop1: detected capacity change from 0 to 2048 [ 53.773166][ T4502] loop1: p1 < > p4 [ 53.779186][ T4502] loop1: p4 size 8388608 extends beyond EOD, truncated [ 53.792583][ T4509] netlink: 'syz.0.377': attribute type 10 has an invalid length. [ 53.811701][ T4509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.831505][ T4509] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 53.875706][ T4509] syz.0.377 (4509) used greatest stack depth: 10048 bytes left [ 53.891422][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 53.895803][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 53.914096][ T4517] loop1: detected capacity change from 0 to 1024 [ 53.944037][ T4517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.997941][ T4517] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.009861][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 54.015119][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 54.087859][ T4517] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.380: bg 0: block 393: padding at end of block bitmap is not set [ 54.110970][ T4517] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 54.123750][ T4517] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.123750][ T4517] [ 54.198586][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.223680][ T4537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.389'. [ 54.274928][ T4539] netlink: 'syz.1.388': attribute type 3 has an invalid length. [ 54.311463][ T4543] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.429168][ T4526] netlink: 'syz.0.383': attribute type 4 has an invalid length. [ 54.547965][ T4557] loop4: detected capacity change from 0 to 164 [ 54.571831][ T4557] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 54.722491][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.729972][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.737574][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.745035][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.752593][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.760132][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.767720][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.775187][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.782690][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.790177][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.797690][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.805434][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.812988][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.820413][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.827924][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.835467][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.842917][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.850356][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.857849][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.865414][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.872847][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.874271][ T4555] sch_fq: defrate 0 ignored. [ 54.880239][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.892297][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.899725][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.907274][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.914728][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.922235][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.929747][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.937327][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.944837][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.952286][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.959726][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.967203][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.974644][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.982189][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 54.982358][ T4560] mmap: syz.0.397 (4560) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.989599][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.008899][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.016386][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.023871][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.031382][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.038824][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.046246][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.053776][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.061178][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.068690][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.076151][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.083582][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.091072][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.098500][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.105928][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.113422][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.120882][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.128340][ T4291] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 55.151149][ T4291] hid-generic 0008:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 55.193119][ T4576] loop2: detected capacity change from 0 to 1024 [ 55.201602][ T4576] EXT4-fs: Ignoring removed oldalloc option [ 55.235267][ T4576] EXT4-fs: Ignoring removed orlov option [ 55.269888][ T4576] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 55.271897][ T4573] fido_id[4573]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.353735][ T4583] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.405'. [ 55.372259][ T4583] netlink: zone id is out of range [ 55.375361][ T4576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.382401][ T4583] netlink: del zone limit has 8 unknown bytes [ 55.521275][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.576344][ T4597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 55.625669][ T4601] loop4: detected capacity change from 0 to 256 [ 55.760467][ T4617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 55.769645][ T4617] bridge_slave_1: left allmulticast mode [ 55.775602][ T4617] bridge_slave_1: left promiscuous mode [ 55.781366][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.790652][ T4617] bridge_slave_0: left allmulticast mode [ 55.796409][ T4617] bridge_slave_0: left promiscuous mode [ 55.802434][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.155592][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.164509][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.508640][ T4644] netlink: 'syz.3.428': attribute type 10 has an invalid length. [ 56.520261][ T4644] team0: Port device dummy0 added [ 56.530694][ T4644] netlink: 'syz.3.428': attribute type 10 has an invalid length. [ 56.539464][ T4644] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 56.551068][ T4644] team0: Failed to send options change via netlink (err -105) [ 56.558994][ T4644] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 56.568061][ T4644] team0: Port device dummy0 removed [ 56.575799][ T4644] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.598545][ T4644] syz.3.428 (4644) used greatest stack depth: 9936 bytes left [ 56.873900][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.881405][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.889122][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.896732][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.904283][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.911723][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.919334][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.926939][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.934494][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.941939][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.949449][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.956931][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.964385][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.971869][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.979372][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.986911][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 56.994342][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.001746][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.009200][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.016759][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.024208][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.031776][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.039224][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.046722][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.054314][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.061730][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.069363][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.076828][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.084359][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.091799][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.099273][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.106770][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.114270][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.121728][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.129178][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.134739][ T4657] loop4: detected capacity change from 0 to 256 [ 57.136641][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.150283][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.157825][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.165258][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.172711][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.173696][ T4657] FAT-fs (loop4): bogus number of FAT sectors [ 57.180105][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.180131][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.186238][ T4657] FAT-fs (loop4): Can't find a valid FAT filesystem [ 57.193646][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.215109][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.222610][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.230037][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.237617][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.245141][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.252594][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.260027][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.267512][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.274953][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.282409][ T4291] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 57.324614][ T4291] hid-generic 0008:0006:0007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 57.374349][ T4665] fido_id[4665]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.381642][ T4664] loop1: detected capacity change from 0 to 1024 [ 57.412554][ T4664] EXT4-fs: Ignoring removed nobh option [ 57.418276][ T4664] EXT4-fs: Ignoring removed bh option [ 57.469057][ T4674] Driver unsupported XDP return value 0 on prog (id 382) dev N/A, expect packet loss! [ 57.483330][ T4664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.521942][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.828442][ T4693] loop4: detected capacity change from 0 to 1024 [ 57.835608][ T4693] ext4: Unknown parameter 'uid<00000000000000000000' [ 57.998057][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 57.998074][ T29] audit: type=1326 audit(1750675465.698:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.4.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 58.029415][ T4705] @ÿ: renamed from bond_slave_0 [ 58.284773][ T29] audit: type=1326 audit(1750675465.988:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 58.331992][ T29] audit: type=1326 audit(1750675466.018:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 58.355582][ T29] audit: type=1326 audit(1750675466.018:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 58.379127][ T29] audit: type=1326 audit(1750675466.018:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 58.402628][ T29] audit: type=1326 audit(1750675466.018:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 58.426307][ T29] audit: type=1326 audit(1750675466.018:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 58.449799][ T29] audit: type=1326 audit(1750675466.018:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 58.473151][ T29] audit: type=1326 audit(1750675466.018:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 58.496660][ T29] audit: type=1326 audit(1750675466.018:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc437e4e929 code=0x7ffc0000 [ 58.539843][ T4727] $Hÿ: renamed from bond0 [ 58.588042][ T4732] netlink: 'syz.0.462': attribute type 10 has an invalid length. [ 58.633271][ T4732] team0: Port device dummy0 added [ 58.642294][ T4735] netlink: 'syz.0.462': attribute type 10 has an invalid length. [ 58.663345][ T4735] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.706578][ T4735] team0: Failed to send options change via netlink (err -105) [ 58.720028][ T4735] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 58.736500][ T4735] team0: Port device dummy0 removed [ 58.744064][ T4735] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.891883][ T4742] loop0: detected capacity change from 0 to 2048 [ 58.935848][ T4742] loop0: p1 < > p4 [ 58.943878][ T4742] loop0: p4 size 8388608 extends beyond EOD, truncated [ 58.972729][ T2998] loop0: p1 < > p4 [ 58.978428][ T2998] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.017486][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 59.047595][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 59.071719][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 59.083164][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 59.210398][ T4760] loop4: detected capacity change from 0 to 512 [ 59.227051][ T4760] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.271981][ T4760] EXT4-fs (loop4): 1 truncate cleaned up [ 59.290913][ T4760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.391076][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.874397][ T4782] loop2: detected capacity change from 0 to 8192 [ 59.890432][ T4786] loop0: detected capacity change from 0 to 1024 [ 59.929924][ T4786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.026710][ T4786] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.051701][ T4793] pim6reg1: entered promiscuous mode [ 60.057216][ T4793] pim6reg1: entered allmulticast mode [ 60.190586][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.293328][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 60.406007][ T4811] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.495'. [ 60.555668][ T4818] veth0_vlan: entered allmulticast mode [ 60.842152][ T4834] : renamed from bond_slave_0 [ 60.925291][ T4837] loop0: detected capacity change from 0 to 8192 [ 60.986317][ T4847] netlink: 'syz.0.510': attribute type 39 has an invalid length. [ 61.151052][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 61.158394][ T4860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.169549][ T4860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.190424][ T4863] loop4: detected capacity change from 0 to 128 [ 61.265584][ T4870] loop2: detected capacity change from 0 to 2048 [ 61.307117][ T4870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.379780][ T4882] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.524'. [ 61.600209][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.618962][ T4902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4902 comm=syz.4.532 [ 61.714818][ T4911] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.723850][ T4911] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.732842][ T4911] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.741773][ T4911] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.811261][ T4916] loop1: detected capacity change from 0 to 2048 [ 61.843976][ T4916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.936202][ T4916] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.537: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 61.997007][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.040802][ T4931] loop2: detected capacity change from 0 to 512 [ 62.087944][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 62.114916][ T4931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.146714][ T4931] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.214547][ T4943] loop1: detected capacity change from 0 to 8192 [ 62.251049][ T4946] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 62.263290][ T4946] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error [ 62.274779][ T4946] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 62.287361][ T4946] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error [ 62.312352][ T4946] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117) [ 62.337245][ T4946] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 62.365431][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.465356][ T4955] loop2: detected capacity change from 0 to 512 [ 62.477515][ T4955] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.490723][ T4955] EXT4-fs (loop2): 1 truncate cleaned up [ 62.497012][ T4955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.523624][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.631068][ T4968] loop2: detected capacity change from 0 to 8192 [ 62.828889][ T4980] C: renamed from team_slave_0 (while UP) [ 62.847853][ T4980] netlink: 'syz.1.562': attribute type 3 has an invalid length. [ 62.856342][ T4980] netlink: 152 bytes leftover after parsing attributes in process `syz.1.562'. [ 62.866058][ T4978] loop0: detected capacity change from 0 to 8192 [ 62.886818][ T4980] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 63.022386][ T4990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4990 comm=syz.1.566 [ 63.047126][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 63.047164][ T29] audit: type=1326 audit(1750675470.748:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 63.094346][ T29] audit: type=1326 audit(1750675470.788:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 63.117951][ T29] audit: type=1326 audit(1750675470.788:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 63.141441][ T29] audit: type=1326 audit(1750675470.788:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 63.165074][ T29] audit: type=1326 audit(1750675470.788:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 63.188780][ T29] audit: type=1326 audit(1750675470.788:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 63.212680][ T29] audit: type=1326 audit(1750675470.788:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 63.236113][ T29] audit: type=1326 audit(1750675470.788:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 63.259599][ T29] audit: type=1326 audit(1750675470.788:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 63.282999][ T29] audit: type=1326 audit(1750675470.788:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccbb6e929 code=0x7ffc0000 [ 63.589514][ T5015] 9pnet: p9_errstr2errno: server reported unknown error [ 63.737763][ T5029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.578'. [ 63.781372][ T5029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5029 comm=syz.0.578 [ 64.011108][ T5060] C: renamed from team_slave_0 (while UP) [ 64.030477][ T5060] netlink: 'syz.3.584': attribute type 3 has an invalid length. [ 64.039129][ T5060] netlink: 152 bytes leftover after parsing attributes in process `syz.3.584'. [ 64.064992][ T5060] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 64.373018][ T5104] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 64.374263][ T5108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.593'. [ 64.386492][ T5104] vhci_hcd: default hub control req: 600e v8009 i0001 l0 [ 64.537730][ T5130] netlink: 'syz.4.599': attribute type 4 has an invalid length. [ 64.685683][ T5155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5155 comm=syz.0.603 [ 64.871818][ T5180] loop0: detected capacity change from 0 to 1024 [ 64.930296][ T5180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.055533][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.521185][ T5270] loop1: detected capacity change from 0 to 128 [ 65.559631][ T5276] loop1: detected capacity change from 0 to 128 [ 65.648662][ T5276] syz.1.620: attempt to access beyond end of device [ 65.648662][ T5276] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 65.663269][ T5276] syz.1.620: attempt to access beyond end of device [ 65.663269][ T5276] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 65.685509][ T5276] syz.1.620: attempt to access beyond end of device [ 65.685509][ T5276] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 65.699192][ T5276] syz.1.620: attempt to access beyond end of device [ 65.699192][ T5276] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 65.712969][ T5276] syz.1.620: attempt to access beyond end of device [ 65.712969][ T5276] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 65.746466][ T5276] syz.1.620: attempt to access beyond end of device [ 65.746466][ T5276] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 65.760138][ T5276] syz.1.620: attempt to access beyond end of device [ 65.760138][ T5276] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 65.774123][ T5276] syz.1.620: attempt to access beyond end of device [ 65.774123][ T5276] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 65.788762][ T5276] syz.1.620: attempt to access beyond end of device [ 65.788762][ T5276] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 65.803251][ T5276] syz.1.620: attempt to access beyond end of device [ 65.803251][ T5276] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 66.088356][ T5295] netlink: 'syz.1.628': attribute type 13 has an invalid length. [ 66.306006][ T5295] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.315220][ T5295] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.324282][ T5295] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.333321][ T5295] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.434751][ T5307] tipc: Started in network mode [ 66.439719][ T5307] tipc: Node identity ac14140f, cluster identity 4711 [ 66.468249][ T5307] tipc: New replicast peer: 255.255.255.255 [ 66.474599][ T5307] tipc: Enabled bearer , priority 10 [ 66.480941][ T5309] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 66.534567][ T5317] netlink: 'syz.3.638': attribute type 4 has an invalid length. [ 66.552791][ T5319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 66.557165][ T5322] vhci_hcd: invalid port number 96 [ 66.566991][ T5322] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 66.585383][ T5317] netlink: 'syz.3.638': attribute type 4 has an invalid length. [ 66.632783][ T5326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.667314][ T5326] bond1: (slave bond2): Enslaving as an active interface with an up link [ 66.711150][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 66.743915][ T5319] bond1 (unregistering): (slave bond2): Releasing backup interface [ 66.769881][ T5319] bond1 (unregistering): Released all slaves [ 66.912810][ T5338] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 66.919385][ T5338] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 66.927204][ T5338] vhci_hcd vhci_hcd.0: Device attached [ 66.957831][ T5334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.644'. [ 67.000663][ T5345] netlink: 14 bytes leftover after parsing attributes in process `syz.1.646'. [ 67.022834][ T5348] SELinux: failed to load policy [ 67.095131][ T5345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.104698][ T5345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.114156][ T5345] bond0 (unregistering): Released all slaves [ 67.123734][ T5350] tipc: Started in network mode [ 67.128685][ T5350] tipc: Node identity ac14140f, cluster identity 4711 [ 67.136121][ T5350] tipc: New replicast peer: 255.255.255.255 [ 67.142274][ T5350] tipc: Enabled bearer , priority 10 [ 67.202702][ T3415] usb 4-1: SetAddress Request (2) to port 0 [ 67.215588][ T5355] loop4: detected capacity change from 0 to 4096 [ 67.222156][ T3415] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 67.247049][ T5355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.266133][ T5355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 67.423869][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.468402][ T5340] vhci_hcd: connection reset by peer [ 67.483260][ T31] vhci_hcd: stop threads [ 67.487614][ T31] vhci_hcd: release socket [ 67.492153][ T31] vhci_hcd: disconnect device [ 67.553586][ T5369] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.655'. [ 67.576991][ T5364] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.655'. [ 67.602092][ T4291] tipc: Node number set to 2886997007 [ 67.622308][ T5373] loop0: detected capacity change from 0 to 128 [ 67.661019][ T5377] loop4: detected capacity change from 0 to 512 [ 67.669207][ T5377] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 67.679282][ T5377] EXT4-fs (loop4): failed to open journal device unknown-block(8,3) -6 [ 68.067056][ T5434] netlink: 'syz.1.668': attribute type 4 has an invalid length. [ 68.083570][ T5435] netlink: 'syz.3.669': attribute type 13 has an invalid length. [ 68.191555][ T5435] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.199165][ T5435] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.262164][ T3402] tipc: Node number set to 2886997007 [ 68.430557][ T5435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.464277][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 68.464293][ T29] audit: type=1326 audit(1750675476.168:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f665b3058e7 code=0x7ffc0000 [ 68.485094][ T5435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.528769][ T29] audit: type=1326 audit(1750675476.198:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f665b2aab19 code=0x7ffc0000 [ 68.552140][ T29] audit: type=1326 audit(1750675476.208:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f665b3058e7 code=0x7ffc0000 [ 68.575455][ T29] audit: type=1326 audit(1750675476.208:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f665b2aab19 code=0x7ffc0000 [ 68.598853][ T29] audit: type=1326 audit(1750675476.208:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 68.622367][ T29] audit: type=1326 audit(1750675476.208:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 68.645768][ T29] audit: type=1326 audit(1750675476.208:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 68.669163][ T29] audit: type=1326 audit(1750675476.208:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 68.692700][ T29] audit: type=1326 audit(1750675476.208:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 68.716268][ T29] audit: type=1326 audit(1750675476.208:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 68.747075][ T5467] loop2: detected capacity change from 0 to 1024 [ 68.771620][ T5435] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.780138][ T5435] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.788629][ T5435] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.797066][ T5435] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.810079][ T5467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.047317][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.117346][ T5484] loop2: detected capacity change from 0 to 256 [ 69.147482][ T5484] FAT-fs (loop2): Directory bread(block 64) failed [ 69.154314][ T5484] FAT-fs (loop2): Directory bread(block 65) failed [ 69.166866][ T5484] FAT-fs (loop2): Directory bread(block 66) failed [ 69.179069][ T5484] FAT-fs (loop2): Directory bread(block 67) failed [ 69.192194][ T5484] FAT-fs (loop2): Directory bread(block 68) failed [ 69.204288][ T5484] FAT-fs (loop2): Directory bread(block 69) failed [ 69.217476][ T5484] FAT-fs (loop2): Directory bread(block 70) failed [ 69.232207][ T5484] FAT-fs (loop2): Directory bread(block 71) failed [ 69.238842][ T5484] FAT-fs (loop2): Directory bread(block 72) failed [ 69.259409][ T5484] FAT-fs (loop2): Directory bread(block 73) failed [ 69.292750][ T5484] usb usb1: usbfs: process 5484 (syz.2.679) did not claim interface 0 before use [ 69.323285][ T5488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.680'. [ 69.399229][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 69.408166][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 69.466107][ T5504] loop2: detected capacity change from 0 to 4096 [ 69.482243][ T5504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.579133][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.618368][ T5511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5511 comm=syz.2.691 [ 69.876447][ T5518] netlink: 'syz.4.694': attribute type 13 has an invalid length. [ 70.153563][ T5528] usb usb8: usbfs: process 5528 (syz.0.697) did not claim interface 0 before use [ 70.179194][ T5518] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.187870][ T5518] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.196322][ T5518] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.204818][ T5518] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.358582][ T5543] loop4: detected capacity change from 0 to 128 [ 70.652606][ T5543] bio_check_eod: 12656 callbacks suppressed [ 70.652667][ T5543] syz.4.702: attempt to access beyond end of device [ 70.652667][ T5543] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 70.862953][ T5543] syz.4.702: attempt to access beyond end of device [ 70.862953][ T5543] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 70.963923][ T5543] syz.4.702: attempt to access beyond end of device [ 70.963923][ T5543] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.046630][ T5543] syz.4.702: attempt to access beyond end of device [ 71.046630][ T5543] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.059909][ T5543] syz.4.702: attempt to access beyond end of device [ 71.059909][ T5543] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.073943][ T5543] syz.4.702: attempt to access beyond end of device [ 71.073943][ T5543] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.087269][ T5543] syz.4.702: attempt to access beyond end of device [ 71.087269][ T5543] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.094148][ T5566] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 71.111956][ T5543] syz.4.702: attempt to access beyond end of device [ 71.111956][ T5543] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.125474][ T5566] SELinux: failed to load policy [ 71.127233][ T5543] syz.4.702: attempt to access beyond end of device [ 71.127233][ T5543] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.150071][ T5543] syz.4.702: attempt to access beyond end of device [ 71.150071][ T5543] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.204891][ T5574] loop2: detected capacity change from 0 to 164 [ 71.227260][ T5574] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.504415][ T5588] netlink: 'syz.2.720': attribute type 4 has an invalid length. [ 71.656138][ T5604] loop0: detected capacity change from 0 to 256 [ 71.656168][ T5600] loop4: detected capacity change from 0 to 512 [ 71.681172][ T5604] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.697352][ T5604] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.710907][ T5600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.753689][ T5600] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.791074][ T5600] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.727: Failed to acquire dquot type 0 [ 71.802879][ T5614] loop0: detected capacity change from 0 to 164 [ 71.814528][ T5614] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.835525][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.125531][ T5648] loop0: detected capacity change from 0 to 512 [ 72.135852][ T5648] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 72.149740][ T5648] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.157328][ T5648] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.747: Block bitmap for bg 0 marked uninitialized [ 72.170780][ T5648] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 72.180109][ T5648] EXT4-fs (loop0): 1 orphan inode deleted [ 72.186968][ T5648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.202395][ T5648] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 72.214174][ T5648] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 72.224168][ T5648] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.747: Block bitmap for bg 0 marked uninitialized [ 72.237770][ T5648] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.747: Block bitmap for bg 0 marked uninitialized [ 72.251283][ T5648] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.747: Block bitmap for bg 0 marked uninitialized [ 72.264791][ T5648] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.747: Block bitmap for bg 0 marked uninitialized [ 72.279481][ T5648] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.747: Block bitmap for bg 0 marked uninitialized [ 72.292298][ T3415] usb 4-1: device descriptor read/8, error -110 [ 72.299608][ T5648] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.747: Block bitmap for bg 0 marked uninitialized [ 72.324816][ T5648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.407194][ T3415] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 72.433055][ T3415] usb 4-1: enqueue for inactive port 0 [ 72.448873][ T3415] usb 4-1: enqueue for inactive port 0 [ 72.455142][ T3415] usb 4-1: enqueue for inactive port 0 [ 72.494484][ T5661] __nla_validate_parse: 1 callbacks suppressed [ 72.494506][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 72.645763][ T5668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 72.681510][ T5680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 72.784505][ T5686] netlink: 'syz.0.760': attribute type 4 has an invalid length. [ 72.949401][ T5688] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 72.961007][ T5688] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 73.349445][ T5712] ip6gre1: entered allmulticast mode [ 73.431690][ T5719] veth0_to_team: left promiscuous mode [ 73.492486][ T3415] usb usb4-port1: attempt power cycle [ 73.509922][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 73.509937][ T29] audit: type=1400 audit(1750675481.208:1640): avc: denied { search } for pid=5722 comm="syz.4.774" name="/" dev="configfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.590422][ T29] audit: type=1400 audit(1750675481.248:1641): avc: denied { search } for pid=5722 comm="syz.4.774" name="/" dev="configfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.612856][ T29] audit: type=1400 audit(1750675481.248:1642): avc: denied { read open } for pid=5722 comm="syz.4.774" path="/" dev="configfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.890666][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 73.922193][ T29] audit: type=1400 audit(1750675481.618:1643): avc: denied { connect } for pid=5730 comm="syz.3.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.427434][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 74.597537][ T5759] loop4: detected capacity change from 0 to 512 [ 74.640599][ T5759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.693420][ T5759] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.738938][ T5770] loop2: detected capacity change from 0 to 8192 [ 74.760036][ T5770] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.831818][ T5770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.840733][ T5770] FAT-fs (loop2): Filesystem has been set read-only [ 74.850900][ T5770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.873347][ T5770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.882365][ T5770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.891491][ T5770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.900881][ T5770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.937357][ T5770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.971187][ T5770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.000979][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 75.071746][ T5770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.120923][ T5770] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 75.593245][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.648573][ T5793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.798'. [ 75.714178][ T3415] usb usb4-port1: unable to enumerate USB device [ 75.758817][ T5800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5800 comm=syz.4.798 [ 75.787183][ T5796] syzkaller0: entered promiscuous mode [ 75.792803][ T5796] syzkaller0: entered allmulticast mode [ 75.961868][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 75.989412][ T5813] hsr_slave_0 (unregistering): left promiscuous mode [ 76.019166][ T5815] loop1: detected capacity change from 0 to 512 [ 76.033894][ T29] audit: type=1400 audit(1750675483.738:1644): avc: denied { mounton } for pid=5814 comm="syz.1.805" path="/154/bus" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.080791][ T5815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.109265][ T5815] EXT4-fs (loop1): 1 truncate cleaned up [ 76.124068][ T5815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.152696][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.396239][ T5829] pim6reg1: entered promiscuous mode [ 76.401626][ T5829] pim6reg1: entered allmulticast mode [ 76.537610][ T29] audit: type=1400 audit(1750675484.238:1645): avc: denied { create } for pid=5832 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.576510][ T29] audit: type=1400 audit(1750675484.268:1646): avc: denied { bind } for pid=5832 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.595825][ T29] audit: type=1400 audit(1750675484.268:1647): avc: denied { write } for pid=5832 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.925051][ T29] audit: type=1326 audit(1750675484.628:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.0.814" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf61f0e929 code=0x0 [ 77.173881][ T29] audit: type=1326 audit(1750675484.878:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.1.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34cea6e929 code=0x7ffc0000 [ 77.373681][ T5833] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 77.555947][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 77.565422][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 77.783715][ T5875] loop2: detected capacity change from 0 to 128 [ 77.821173][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.837996][ T5881] vlan2: entered promiscuous mode [ 77.843288][ T5881] syz_tun: entered promiscuous mode [ 78.060223][ T5898] loop0: detected capacity change from 0 to 2048 [ 78.124432][ T5891] loop2: detected capacity change from 0 to 8192 [ 78.323080][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.845'. [ 78.383364][ T5916] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5916 comm=syz.1.845 [ 78.451647][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 78.493341][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 78.521756][ T5926] hsr_slave_0 (unregistering): left promiscuous mode [ 78.586322][ T5932] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 78.622963][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 78.622976][ T29] audit: type=1400 audit(1750675742.331:1682): avc: denied { create } for pid=5934 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 78.663156][ T29] audit: type=1400 audit(1750675742.361:1683): avc: denied { bind } for pid=5934 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 78.697386][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.854'. [ 78.698549][ T5938] loop1: detected capacity change from 0 to 512 [ 78.716002][ T5940] bridge_slave_1: left allmulticast mode [ 78.720974][ T5938] EXT4-fs: Ignoring removed nobh option [ 78.721851][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.744382][ T5940] bridge_slave_0: left allmulticast mode [ 78.750223][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.759344][ T5942] xt_hashlimit: size too large, truncated to 1048576 [ 78.812700][ T5938] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 78.822435][ T5938] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.853: attempt to clear invalid blocks 2 len 1 [ 78.862147][ T5938] EXT4-fs (loop1): Remounting filesystem read-only [ 78.869076][ T5938] EXT4-fs (loop1): 1 truncate cleaned up [ 78.882741][ T5938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.978950][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.072474][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 79.115504][ T5960] hsr_slave_1: left promiscuous mode [ 79.186632][ T29] audit: type=1326 audit(1750675742.891:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.2.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 79.211171][ T29] audit: type=1326 audit(1750675742.911:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.2.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 79.470670][ T5972] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 79.513630][ T5974] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.520248][ T5974] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 79.528036][ T5974] audit: backlog limit exceeded [ 79.544111][ T5972] team0: Port device dummy0 added [ 79.596192][ T5972] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 79.629635][ T5972] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 79.654697][ T29] audit: type=1326 audit(1750675742.911:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.2.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 79.678195][ T29] audit: type=1326 audit(1750675742.911:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.2.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 79.701721][ T29] audit: type=1326 audit(1750675742.911:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.2.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b30e929 code=0x7ffc0000 [ 79.725677][ T5972] team0: Failed to send options change via netlink (err -105) [ 79.734408][ T5972] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 79.743608][ T5972] team0: Port device dummy0 removed [ 79.750231][ T5972] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.787439][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.796398][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.909589][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 79.943577][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 79.971107][ T6001] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 80.011403][ T6001] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 80.046117][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.878'. [ 80.083623][ T6001] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 80.094085][ T6001] bond0 (unregistering): Released all slaves [ 80.153412][ T6007] syzkaller0: entered promiscuous mode [ 80.159027][ T6007] syzkaller0: entered allmulticast mode [ 80.178406][ T6009] loop0: detected capacity change from 0 to 8192 [ 80.249502][ T6009] loop0: p1 p3 p4 [ 80.253767][ T6009] loop0: p1 size 8390912 extends beyond EOD, truncated [ 80.267763][ T6009] loop0: p3 size 589824 extends beyond EOD, truncated [ 80.325705][ T6016] loop2: detected capacity change from 0 to 2048 [ 80.366751][ T6016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.399115][ T6024] loop4: detected capacity change from 0 to 1024 [ 80.406232][ T6024] EXT4-fs: Ignoring removed nobh option [ 80.411967][ T6024] EXT4-fs: Ignoring removed bh option [ 80.430573][ T3542] udevd[3542]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 80.455432][ T6024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.478969][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 80.502454][ T6020] udevd[6020]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 80.553382][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.613288][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.652426][ T6039] netlink: 'syz.4.890': attribute type 298 has an invalid length. [ 80.730884][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 80.754713][ T6046] vlan0: entered allmulticast mode [ 80.766223][ T6046] dummy0: entered allmulticast mode [ 80.839739][ T6055] loop2: detected capacity change from 0 to 512 [ 80.902529][ T6055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.930835][ T6055] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.039841][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.268402][ T6075] IPv6: NLM_F_REPLACE set, but no existing node found! [ 81.358561][ T6085] loop0: detected capacity change from 0 to 1024 [ 81.394613][ T6087] loop4: detected capacity change from 0 to 1024 [ 81.417793][ T6085] EXT4-fs: Ignoring removed orlov option [ 81.424088][ T6085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.435981][ T6087] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.465800][ T6087] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.476871][ T6087] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 81.517289][ T6087] JBD2: no valid journal superblock found [ 81.523191][ T6087] EXT4-fs (loop4): Could not load journal inode [ 81.537664][ T6085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.610545][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.870861][ T6107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6107 comm=syz.3.917 [ 81.898906][ T6107] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 81.932564][ T6107] vlan2: entered allmulticast mode [ 81.937895][ T6107] bond1: entered allmulticast mode [ 81.943133][ T6107] gretap1: entered allmulticast mode [ 82.181045][ T6123] Invalid ELF header magic: != ELF [ 82.380421][ T6137] SELinux: failed to load policy [ 83.389043][ T6151] __nla_validate_parse: 1 callbacks suppressed [ 83.389097][ T6151] netlink: 96 bytes leftover after parsing attributes in process `syz.0.934'. [ 83.564117][ T6163] xt_hashlimit: max too large, truncated to 1048576 [ 83.596480][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 83.803296][ T6186] veth1_to_bond: entered allmulticast mode [ 83.809483][ T6186] veth1_to_bond: entered promiscuous mode [ 83.817188][ T6186] veth1_to_bond: left promiscuous mode [ 83.822949][ T6186] veth1_to_bond: left allmulticast mode [ 83.846412][ T6189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.952'. [ 83.855415][ T6189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.952'. [ 84.012187][ T6195] loop0: detected capacity change from 0 to 764 [ 84.021275][ T6195] rock: directory entry would overflow storage [ 84.027526][ T6195] rock: sig=0x5850, size=36, remaining=7 [ 84.092297][ T6198] team0 (unregistering): Port device C removed [ 84.099927][ T6198] team0 (unregistering): Port device team_slave_1 removed [ 84.263865][ T6213] netlink: 'syz.0.963': attribute type 4 has an invalid length. [ 84.272395][ T6213] netlink: 'syz.0.963': attribute type 4 has an invalid length. [ 84.332224][ T6219] loop4: detected capacity change from 0 to 1024 [ 84.339776][ T6219] EXT4-fs: Ignoring removed orlov option [ 84.349839][ T6219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.401419][ T6226] netlink: 'syz.0.967': attribute type 27 has an invalid length. [ 84.419670][ T6226] wg2: left promiscuous mode [ 84.424496][ T6226] wg2: left allmulticast mode [ 84.440879][ T6226] vlan2: left allmulticast mode [ 84.445869][ T6226] hsr0: left allmulticast mode [ 84.450725][ T6226] hsr_slave_0: left allmulticast mode [ 84.456184][ T6226] hsr_slave_1: left allmulticast mode [ 84.482868][ T6219] ================================================================== [ 84.491047][ T6219] BUG: KCSAN: data-race in filemap_read / filemap_read [ 84.497983][ T6219] [ 84.500324][ T6219] write to 0xffff8881182ae768 of 8 bytes by task 6227 on cpu 1: [ 84.507981][ T6219] filemap_read+0x974/0xa00 [ 84.512547][ T6219] generic_file_read_iter+0x79/0x330 [ 84.517894][ T6219] ext4_file_read_iter+0x1cc/0x290 [ 84.523050][ T6219] copy_splice_read+0x3c1/0x5f0 [ 84.527951][ T6219] splice_direct_to_actor+0x290/0x680 [ 84.533371][ T6219] do_splice_direct+0xda/0x150 [ 84.538177][ T6219] do_sendfile+0x380/0x650 [ 84.542616][ T6219] __x64_sys_sendfile64+0x105/0x150 [ 84.547846][ T6219] x64_sys_call+0xb39/0x2fb0 [ 84.552481][ T6219] do_syscall_64+0xd2/0x200 [ 84.557010][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.562951][ T6219] [ 84.565277][ T6219] read to 0xffff8881182ae768 of 8 bytes by task 6219 on cpu 0: [ 84.572827][ T6219] filemap_read+0x6f/0xa00 [ 84.577272][ T6219] generic_file_read_iter+0x79/0x330 [ 84.582582][ T6219] ext4_file_read_iter+0x1cc/0x290 [ 84.587708][ T6219] copy_splice_read+0x3c1/0x5f0 [ 84.592583][ T6219] splice_direct_to_actor+0x290/0x680 [ 84.597990][ T6219] do_splice_direct+0xda/0x150 [ 84.602771][ T6219] do_sendfile+0x380/0x650 [ 84.607204][ T6219] __x64_sys_sendfile64+0x105/0x150 [ 84.612419][ T6219] x64_sys_call+0xb39/0x2fb0 [ 84.617026][ T6219] do_syscall_64+0xd2/0x200 [ 84.621540][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.627449][ T6219] [ 84.629786][ T6219] value changed: 0x000000000000016d -> 0x000000000000016e [ 84.636992][ T6219] [ 84.639341][ T6219] Reported by Kernel Concurrency Sanitizer on: [ 84.645536][ T6219] CPU: 0 UID: 0 PID: 6219 Comm: syz.4.966 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 84.656148][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.666224][ T6219] ================================================================== [ 84.691793][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.706625][ T6228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.804451][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.