last executing test programs: 2.394916764s ago: executing program 4 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") r2 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x0) 2.321160149s ago: executing program 4 (id=677): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='rxrpc_peer\x00', r1, 0x0, 0xfffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r0}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 2.143930463s ago: executing program 4 (id=682): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', '', [], 0xa, "82bb4ade64246674044ed181"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.789269301s ago: executing program 4 (id=686): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x587}], 0x1}, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.560376708s ago: executing program 4 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 876.607871ms ago: executing program 2 (id=705): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230051) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) 748.112631ms ago: executing program 1 (id=709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 728.064813ms ago: executing program 0 (id=710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 723.500083ms ago: executing program 1 (id=712): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 648.158929ms ago: executing program 1 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 642.78846ms ago: executing program 0 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x2000000000000}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 637.77274ms ago: executing program 2 (id=715): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x0, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 591.236503ms ago: executing program 0 (id=716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="c80000000002010400000000010000000a0000033c0003800c00028005000100000000002c00018014000300fe80000000000000000000000000002414000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400fc0100000000000000000000000000010c00028005000100000000003c0001800c000280040001003a0000002c00018014000300fc01000000000000000000000000000014000400"], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket(0x2b, 0x80801, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "49fd003900"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x4, 0x2, 0xcc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) 590.898694ms ago: executing program 0 (id=717): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 540.215778ms ago: executing program 1 (id=718): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000, 0x7}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x7fffffffffffff, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 540.113048ms ago: executing program 2 (id=719): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 539.973768ms ago: executing program 2 (id=720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0xf}, 0x18) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r2, 0x541b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r4, 0x7, 0x4000, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 517.13768ms ago: executing program 2 (id=721): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000040180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000020000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x40900200, 0x0, 0x0, 0x0, 0x0, 0x0) 371.859411ms ago: executing program 2 (id=723): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 371.576651ms ago: executing program 0 (id=724): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 359.956492ms ago: executing program 3 (id=725): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) gettid() get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000ff3000/0xc000)=nil, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0xfffd, 0x0) socket$rds(0x15, 0x5, 0x0) 295.145546ms ago: executing program 3 (id=726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rename(0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) sync() sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x404c) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) getpid() 294.804217ms ago: executing program 4 (id=727): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230051) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) 211.507223ms ago: executing program 1 (id=728): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x7079, 0x1000, 0x14, 0x28b}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) listen(r0, 0x1) 149.288928ms ago: executing program 3 (id=729): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 83.656573ms ago: executing program 3 (id=730): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 54.617975ms ago: executing program 0 (id=731): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 54.215605ms ago: executing program 1 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x0, {0x0, 0xf0, 0x4}, {0x2, 0xf0, 0x3}, 0xfe}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 236.6µs ago: executing program 3 (id=733): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) 0s ago: executing program 3 (id=734): syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8921, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) kernel console output (not intermixed with test programs): [ 22.061829][ T29] audit: type=1400 audit(1765879007.137:62): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.083878][ T29] audit: type=1400 audit(1765879007.137:63): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.106567][ T29] audit: type=1400 audit(1765879007.137:64): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.129458][ T29] audit: type=1400 audit(1765879007.137:65): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.152429][ T29] audit: type=1400 audit(1765879007.137:66): avc: denied { read open } for pid=3200 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 29.216288][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 29.216304][ T29] audit: type=1400 audit(1765879014.287:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.245351][ T29] audit: type=1400 audit(1765879014.317:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.246351][ T3305] cgroup: Unknown subsys name 'net' [ 29.273088][ T29] audit: type=1400 audit(1765879014.347:72): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.390908][ T3305] cgroup: Unknown subsys name 'cpuset' [ 29.397173][ T3305] cgroup: Unknown subsys name 'rlimit' [ 29.529263][ T29] audit: type=1400 audit(1765879014.597:73): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.552612][ T29] audit: type=1400 audit(1765879014.607:74): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.573063][ T29] audit: type=1400 audit(1765879014.607:75): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.587798][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.593601][ T29] audit: type=1400 audit(1765879014.607:76): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.622556][ T29] audit: type=1400 audit(1765879014.607:77): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.645142][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.647346][ T29] audit: type=1400 audit(1765879014.607:78): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.679283][ T29] audit: type=1400 audit(1765879014.627:79): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.448479][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.553922][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.561133][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.568359][ T3320] bridge_slave_0: entered allmulticast mode [ 31.575168][ T3320] bridge_slave_0: entered promiscuous mode [ 31.587684][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.594927][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.602170][ T3320] bridge_slave_1: entered allmulticast mode [ 31.608658][ T3320] bridge_slave_1: entered promiscuous mode [ 31.615045][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 31.640159][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 31.670080][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.692335][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.726665][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.737794][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 31.747350][ T3320] team0: Port device team_slave_0 added [ 31.766983][ T3320] team0: Port device team_slave_1 added [ 31.807993][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.815142][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.822320][ T3316] bridge_slave_0: entered allmulticast mode [ 31.828863][ T3316] bridge_slave_0: entered promiscuous mode [ 31.848380][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.855486][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.862749][ T3319] bridge_slave_0: entered allmulticast mode [ 31.869284][ T3319] bridge_slave_0: entered promiscuous mode [ 31.875893][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.883008][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.890193][ T3316] bridge_slave_1: entered allmulticast mode [ 31.896608][ T3316] bridge_slave_1: entered promiscuous mode [ 31.905911][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.912942][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.938892][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.952042][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.959117][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.966325][ T3319] bridge_slave_1: entered allmulticast mode [ 31.972742][ T3319] bridge_slave_1: entered promiscuous mode [ 31.986309][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.993294][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.019251][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.057511][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.067959][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.088264][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.108549][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.115682][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.122886][ T3315] bridge_slave_0: entered allmulticast mode [ 32.129364][ T3315] bridge_slave_0: entered promiscuous mode [ 32.136988][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.155638][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.162891][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.170192][ T3323] bridge_slave_0: entered allmulticast mode [ 32.176795][ T3323] bridge_slave_0: entered promiscuous mode [ 32.183335][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.190529][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.197668][ T3315] bridge_slave_1: entered allmulticast mode [ 32.204305][ T3315] bridge_slave_1: entered promiscuous mode [ 32.216040][ T3316] team0: Port device team_slave_0 added [ 32.226923][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.234066][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.241262][ T3323] bridge_slave_1: entered allmulticast mode [ 32.247735][ T3323] bridge_slave_1: entered promiscuous mode [ 32.269667][ T3316] team0: Port device team_slave_1 added [ 32.277527][ T3320] hsr_slave_0: entered promiscuous mode [ 32.283741][ T3320] hsr_slave_1: entered promiscuous mode [ 32.300589][ T3319] team0: Port device team_slave_0 added [ 32.313075][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.323573][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.334175][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.344059][ T3319] team0: Port device team_slave_1 added [ 32.355331][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.362448][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.388386][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.405162][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.431497][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.438561][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.464577][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.494079][ T3323] team0: Port device team_slave_0 added [ 32.505821][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.512872][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.538870][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.555729][ T3323] team0: Port device team_slave_1 added [ 32.567239][ T3315] team0: Port device team_slave_0 added [ 32.573359][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.580359][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.606288][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.630562][ T3315] team0: Port device team_slave_1 added [ 32.648188][ T3316] hsr_slave_0: entered promiscuous mode [ 32.654309][ T3316] hsr_slave_1: entered promiscuous mode [ 32.660240][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 32.665976][ T3316] Cannot create hsr debugfs directory [ 32.685534][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.692512][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.718419][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.729643][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.736631][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.762560][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.774441][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.781472][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.807502][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.829192][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.836242][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.862190][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.904103][ T3319] hsr_slave_0: entered promiscuous mode [ 32.910314][ T3319] hsr_slave_1: entered promiscuous mode [ 32.916247][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 32.922029][ T3319] Cannot create hsr debugfs directory [ 32.960190][ T3323] hsr_slave_0: entered promiscuous mode [ 32.966231][ T3323] hsr_slave_1: entered promiscuous mode [ 32.972211][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 32.977929][ T3323] Cannot create hsr debugfs directory [ 33.007173][ T3315] hsr_slave_0: entered promiscuous mode [ 33.013183][ T3315] hsr_slave_1: entered promiscuous mode [ 33.019151][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 33.024918][ T3315] Cannot create hsr debugfs directory [ 33.133906][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.149710][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.179044][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.195165][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.232250][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.252208][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.264489][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.273339][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.285543][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.295099][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.304169][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.314391][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.360622][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.375115][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.384576][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.395798][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.420747][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.433068][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.452510][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.461897][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.488077][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.513020][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.526808][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.541172][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.548319][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.561207][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.574014][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.583868][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.591128][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.603923][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.611060][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.625439][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.632515][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.652541][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.667970][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.675062][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.683969][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.691114][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.737012][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.750049][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.783897][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.797528][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.811954][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.819073][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.841492][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.848736][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.861240][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.868368][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.882582][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.889642][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.923970][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.951982][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.982991][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.996475][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.056192][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.113409][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.145435][ T3323] veth0_vlan: entered promiscuous mode [ 34.163731][ T3316] veth0_vlan: entered promiscuous mode [ 34.183426][ T3323] veth1_vlan: entered promiscuous mode [ 34.199288][ T3316] veth1_vlan: entered promiscuous mode [ 34.243411][ T3323] veth0_macvtap: entered promiscuous mode [ 34.252801][ T3323] veth1_macvtap: entered promiscuous mode [ 34.278894][ T3316] veth0_macvtap: entered promiscuous mode [ 34.297201][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.305350][ T3316] veth1_macvtap: entered promiscuous mode [ 34.322034][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.331237][ T3320] veth0_vlan: entered promiscuous mode [ 34.337906][ T3315] veth0_vlan: entered promiscuous mode [ 34.353557][ T407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.363784][ T3320] veth1_vlan: entered promiscuous mode [ 34.369979][ T3319] veth0_vlan: entered promiscuous mode [ 34.376963][ T407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.386628][ T407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.396094][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.407583][ T407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.420210][ T3315] veth1_vlan: entered promiscuous mode [ 34.427336][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.438365][ T3319] veth1_vlan: entered promiscuous mode [ 34.452490][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 34.452507][ T29] audit: type=1400 audit(1765879019.527:90): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.MSlyk7/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.486902][ T29] audit: type=1400 audit(1765879019.557:91): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.509075][ T29] audit: type=1400 audit(1765879019.557:92): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.MSlyk7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.534318][ T29] audit: type=1400 audit(1765879019.557:93): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.556076][ T29] audit: type=1400 audit(1765879019.557:94): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.MSlyk7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.582710][ T29] audit: type=1400 audit(1765879019.557:95): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.MSlyk7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.610134][ T29] audit: type=1400 audit(1765879019.557:96): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.634825][ T29] audit: type=1400 audit(1765879019.707:97): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.636486][ T3320] veth0_macvtap: entered promiscuous mode [ 34.657803][ T29] audit: type=1400 audit(1765879019.707:98): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=3661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.686165][ T2119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.694955][ T2119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.707127][ T2119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.717008][ T2119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.726578][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.730592][ T3319] veth0_macvtap: entered promiscuous mode [ 34.751183][ T3320] veth1_macvtap: entered promiscuous mode [ 34.762054][ T3319] veth1_macvtap: entered promiscuous mode [ 34.772133][ T29] audit: type=1400 audit(1765879019.847:99): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.781805][ T3315] veth0_macvtap: entered promiscuous mode [ 34.820357][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.829550][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.845142][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.871089][ T3315] veth1_macvtap: entered promiscuous mode [ 34.888599][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.907311][ T2119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.937297][ T2119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.953454][ T2119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.970737][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.992045][ T2119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.005231][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.035389][ T2119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.046108][ T2119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.046430][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 35.065255][ T2119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.117777][ T2119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.148039][ T2119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.191235][ T2119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.221378][ T3512] tipc: Started in network mode [ 35.226403][ T3512] tipc: Node identity d6defff180a7, cluster identity 4711 [ 35.233829][ T3512] tipc: Enabled bearer , priority 0 [ 35.240992][ T2119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.259564][ T2119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.300486][ T3512] tipc: Disabling bearer [ 35.317976][ T3520] loop3: detected capacity change from 0 to 512 [ 35.367587][ T3520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.381749][ T3518] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 35.393225][ T3520] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.431344][ T3520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.612218][ C0] hrtimer: interrupt took 32651 ns [ 35.863496][ T3546] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.937521][ T3546] x_tables: duplicate underflow at hook 1 [ 35.947649][ T3548] loop3: detected capacity change from 0 to 1024 [ 35.977900][ T3548] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.988924][ T3548] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 36.033412][ T3548] EXT4-fs (loop3): invalid journal inode [ 36.039208][ T3548] EXT4-fs (loop3): can't get journal size [ 36.051529][ T3548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.130624][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.550836][ T3582] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 36.679592][ T3592] loop1: detected capacity change from 0 to 2048 [ 36.744086][ T3592] Alternate GPT is invalid, using primary GPT. [ 36.750483][ T3592] loop1: p2 p3 p7 [ 36.824097][ T3604] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.48'. [ 36.893191][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 36.904334][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 36.911498][ T3602] udevd[3602]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 36.942526][ T3635] vhci_hcd vhci_hcd.2: invalid port number 96 [ 36.948666][ T3635] vhci_hcd vhci_hcd.2: default hub control req: 8011 v0005 i0060 l7 [ 37.079475][ T3677] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 37.139326][ T3684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 37.212226][ T3688] loop3: detected capacity change from 0 to 164 [ 37.232373][ T3688] process 'syz.3.61' launched '/dev/fd/4' with NULL argv: empty string added [ 37.242997][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 37.253424][ T3688] syz.3.61: attempt to access beyond end of device [ 37.253424][ T3688] loop3: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 37.289930][ T3688] syz.3.61: attempt to access beyond end of device [ 37.289930][ T3688] loop3: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 37.487206][ T3700] loop3: detected capacity change from 0 to 164 [ 37.498347][ T3700] ISOFS: unable to read i-node block [ 37.511926][ T3700] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 37.643329][ T3705] loop8: detected capacity change from 0 to 7 [ 37.900889][ T3719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 37.931729][ T3719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 37.997141][ T3728] loop3: detected capacity change from 0 to 512 [ 38.016608][ T3728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.048632][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.342988][ T3753] vlan2: entered allmulticast mode [ 38.372463][ T3753] dummy0: entered allmulticast mode [ 38.422624][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 38.432265][ T3753] Zero length message leads to an empty skb [ 38.450501][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 38.478549][ T3766] netlink: 168 bytes leftover after parsing attributes in process `syz.3.92'. [ 38.521166][ T3770] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 38.536025][ T3774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.543357][ T3774] IPv6: NLM_F_CREATE should be set when creating new route [ 38.550645][ T3774] IPv6: NLM_F_CREATE should be set when creating new route [ 38.559281][ T3770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 38.576068][ T3770] hsr_slave_0 (unregistering): left promiscuous mode [ 38.847649][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.847821][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.882209][ T3809] loop1: detected capacity change from 0 to 764 [ 38.913456][ T3809] Symlink component flag not implemented [ 38.913522][ T3809] Symlink component flag not implemented [ 38.913762][ T3809] Symlink component flag not implemented (129) [ 38.913775][ T3809] Symlink component flag not implemented (6) [ 38.914604][ T3809] rock: directory entry would overflow storage [ 38.914615][ T3809] rock: sig=0x4f50, size=4, remaining=3 [ 38.914709][ T3809] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 38.930079][ T3815] loop4: detected capacity change from 0 to 2048 [ 39.486171][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 39.486257][ T29] audit: type=1400 audit(1765879024.557:401): avc: denied { ioctl } for pid=3860 comm="syz.2.131" path="socket:[6324]" dev="sockfs" ino=6324 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.611088][ T3869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3869 comm=syz.4.134 [ 39.713601][ T29] audit: type=1400 audit(1765879024.787:402): avc: denied { mounton } for pid=3871 comm="syz.2.135" path="/27/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 39.756270][ T29] audit: type=1400 audit(1765879024.827:403): avc: denied { shutdown } for pid=3874 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.758198][ T3875] sctp: [Deprecated]: syz.2.136 (pid 3875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 39.758198][ T3875] Use struct sctp_sack_info instead [ 39.799254][ T29] audit: type=1400 audit(1765879024.827:404): avc: denied { write } for pid=3874 comm="syz.2.136" lport=55364 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 39.823434][ T29] audit: type=1400 audit(1765879024.827:405): avc: denied { getopt } for pid=3874 comm="syz.2.136" lport=55364 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 39.847731][ T29] audit: type=1400 audit(1765879024.867:406): avc: denied { bpf } for pid=3876 comm="syz.3.137" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.868464][ T29] audit: type=1400 audit(1765879024.867:407): avc: denied { perfmon } for pid=3876 comm="syz.3.137" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.914034][ T29] audit: type=1400 audit(1765879024.987:408): avc: denied { create } for pid=3880 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.962106][ T29] audit: type=1326 audit(1765879025.037:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d38f749 code=0x7ffc0000 [ 40.004927][ T29] audit: type=1326 audit(1765879025.037:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3882 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0d38f749 code=0x7ffc0000 [ 40.449117][ T3932] GPL (3932) used greatest stack depth: 10072 bytes left [ 40.464615][ T3935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.625413][ T3946] veth2: entered promiscuous mode [ 40.630573][ T3946] veth2: entered allmulticast mode [ 40.771915][ T3957] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 40.776437][ T3961] ======================================================= [ 40.776437][ T3961] WARNING: The mand mount option has been deprecated and [ 40.776437][ T3961] and is ignored by this kernel. Remove the mand [ 40.776437][ T3961] option from the mount to silence this warning. [ 40.776437][ T3961] ======================================================= [ 40.804813][ T3960] loop1: detected capacity change from 0 to 512 [ 41.002672][ T3985] loop4: detected capacity change from 0 to 2368 [ 41.009641][ T3985] iso9660: Unknown parameter '¶ A¨¸Eßê“.¾~@þÿÿÿÿÿÿÿ' [ 41.228166][ T4009] Driver unsupported XDP return value 0 on prog (id 137) dev N/A, expect packet loss! [ 41.264970][ T4013] capability: warning: `syz.4.177' uses 32-bit capabilities (legacy support in use) [ 41.308611][ T4015] loop4: detected capacity change from 0 to 1024 [ 41.331537][ T4015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.463748][ T4015] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.178: Allocating blocks 385-513 which overlap fs metadata [ 41.479946][ T4015] EXT4-fs (loop4): pa ffff888107a4f070: logic 16, phys. 129, len 24 [ 41.488008][ T4015] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 41.503199][ T4015] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 41.505971][ T4024] __nla_validate_parse: 3 callbacks suppressed [ 41.505988][ T4024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 41.515601][ T4015] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.515601][ T4015] [ 41.521802][ T4024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 41.530587][ T4015] EXT4-fs (loop4): Total free blocks count 0 [ 41.530607][ T4015] EXT4-fs (loop4): Free/Dirty block details [ 41.560947][ T4015] EXT4-fs (loop4): free_blocks=128 [ 41.566179][ T4015] EXT4-fs (loop4): dirty_blocks=0 [ 41.571256][ T4015] EXT4-fs (loop4): Block reservation details [ 41.577254][ T4015] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 41.598988][ T4015] syz.4.178 (4015) used greatest stack depth: 9048 bytes left [ 41.812454][ T4037] netlink: 96 bytes leftover after parsing attributes in process `syz.1.186'. [ 41.871892][ T4037] netlink: 96 bytes leftover after parsing attributes in process `syz.1.186'. [ 41.929969][ T4048] ref_ctr_offset mismatch. inode: 0xd1 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 41.963888][ T4055] loop1: detected capacity change from 0 to 128 [ 42.127980][ T4064] syz.2.198: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 42.142488][ T4064] CPU: 1 UID: 0 PID: 4064 Comm: syz.2.198 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.142515][ T4064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.142528][ T4064] Call Trace: [ 42.142590][ T4064] [ 42.142600][ T4064] __dump_stack+0x1d/0x30 [ 42.142628][ T4064] dump_stack_lvl+0xe8/0x140 [ 42.142655][ T4064] dump_stack+0x15/0x1b [ 42.142686][ T4064] warn_alloc+0x12b/0x1a0 [ 42.142738][ T4064] ? _raw_spin_lock_irqsave+0x75/0xd0 [ 42.142839][ T4064] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 42.142886][ T4064] __vmalloc_node_range_noprof+0xa0/0x1310 [ 42.142993][ T4064] ? common_lsm_audit+0x1ca/0x230 [ 42.143023][ T4064] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 42.143062][ T4064] ? slow_avc_audit+0x104/0x140 [ 42.143156][ T4064] ? should_fail_ex+0x30/0x280 [ 42.143179][ T4064] ? should_failslab+0x8c/0xb0 [ 42.143275][ T4064] vmalloc_user_noprof+0x7d/0xb0 [ 42.143366][ T4064] ? xskq_create+0x80/0xe0 [ 42.143397][ T4064] xskq_create+0x80/0xe0 [ 42.143463][ T4064] xsk_init_queue+0x95/0xf0 [ 42.143504][ T4064] xsk_setsockopt+0x477/0x640 [ 42.143600][ T4064] ? __pfx_xsk_setsockopt+0x10/0x10 [ 42.143639][ T4064] __sys_setsockopt+0x184/0x200 [ 42.143671][ T4064] __x64_sys_setsockopt+0x64/0x80 [ 42.143710][ T4064] x64_sys_call+0x21d5/0x3000 [ 42.143742][ T4064] do_syscall_64+0xd8/0x2c0 [ 42.143784][ T4064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.143856][ T4064] RIP: 0033:0x7f5e0d38f749 [ 42.143878][ T4064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.143901][ T4064] RSP: 002b:00007f5e0bdef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 42.143925][ T4064] RAX: ffffffffffffffda RBX: 00007f5e0d5e5fa0 RCX: 00007f5e0d38f749 [ 42.143941][ T4064] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 42.143981][ T4064] RBP: 00007f5e0d413f91 R08: 0000000000000004 R09: 0000000000000000 [ 42.143992][ T4064] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 42.144003][ T4064] R13: 00007f5e0d5e6038 R14: 00007f5e0d5e5fa0 R15: 00007ffef28fbdb8 [ 42.144024][ T4064] [ 42.144036][ T4064] Mem-Info: [ 42.208431][ T4065] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 42.210260][ T4064] active_anon:8343 inactive_anon:2 isolated_anon:0 [ 42.210260][ T4064] active_file:8141 inactive_file:2247 isolated_file:0 [ 42.210260][ T4064] unevictable:0 dirty:1473 writeback:0 [ 42.210260][ T4064] slab_reclaimable:3099 slab_unreclaimable:15240 [ 42.210260][ T4064] mapped:29363 shmem:186 pagetables:1033 [ 42.210260][ T4064] sec_pagetables:0 bounce:0 [ 42.210260][ T4064] kernel_misc_reclaimable:0 [ 42.210260][ T4064] free:1900103 free_pcp:5434 free_cma:0 [ 42.414760][ T4064] Node 0 active_anon:33140kB inactive_anon:8kB active_file:32564kB inactive_file:8988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124400kB dirty:5892kB writeback:0kB shmem:744kB kernel_stack:4400kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 42.441989][ T4064] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 42.471733][ T4064] lowmem_reserve[]: 0 2880 7859 7859 [ 42.477137][ T4064] Node 0 DMA32 free:2945972kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949500kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 42.508404][ T4064] lowmem_reserve[]: 0 0 4978 4978 [ 42.513553][ T4064] Node 0 Normal free:4622956kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33140kB inactive_anon:8kB active_file:32564kB inactive_file:8988kB unevictable:0kB writepending:5880kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:28632kB local_pcp:9196kB free_cma:0kB [ 42.546651][ T4064] lowmem_reserve[]: 0 0 0 0 [ 42.551232][ T4064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 42.564144][ T4064] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945972kB [ 42.580276][ T4064] Node 0 Normal: 444*4kB (UM) 42*8kB (M) 18*16kB (M) 9*32kB (ME) 10*64kB (M) 16*128kB (UM) 11*256kB (UME) 3*512kB (ME) 3*1024kB (M) 5*2048kB (ME) 1123*4096kB (M) = 4622848kB [ 42.597961][ T4064] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 42.607283][ T4064] 10572 total pagecache pages [ 42.611977][ T4064] 2 pages in swap cache [ 42.616137][ T4064] Free swap = 124988kB [ 42.620367][ T4064] Total swap = 124996kB [ 42.624523][ T4064] 2097051 pages RAM [ 42.628318][ T4064] 0 pages HighMem/MovableOnly [ 42.633056][ T4064] 81276 pages reserved [ 42.831990][ T4092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.854921][ T4092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.878505][ T4098] netlink: 'syz.2.214': attribute type 30 has an invalid length. [ 42.913020][ T4102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.216'. [ 42.923322][ T4100] loop0: detected capacity change from 0 to 2048 [ 42.958027][ T4100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 42.998061][ T4110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.071481][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 43.083106][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.090494][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.170140][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.182496][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.223058][ T4110] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.248102][ T2228] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.270173][ T2228] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.287027][ T2228] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.296142][ T2228] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.314176][ T4110] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.389280][ T4110] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.428452][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 43.437438][ T4147] netlink: 'syz.3.230': attribute type 30 has an invalid length. [ 43.467241][ T3679] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.480867][ T3679] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.494720][ T3679] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.522822][ T3679] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.535595][ T3679] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.559832][ T3679] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.579108][ T3679] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.599344][ T3679] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.616711][ T4158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 43.637841][ T4158] team0: Port device team_slave_1 removed [ 43.779387][ T4165] loop0: detected capacity change from 0 to 164 [ 43.789417][ T4165] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.809262][ T4165] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.818530][ T4165] rock: directory entry would overflow storage [ 43.824815][ T4165] rock: sig=0x4f50, size=4, remaining=3 [ 43.830519][ T4165] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 44.376016][ T4184] netlink: 'syz.0.244': attribute type 16 has an invalid length. [ 44.383971][ T4184] netlink: 156 bytes leftover after parsing attributes in process `syz.0.244'. [ 44.446546][ T4188] Invalid argument reading file caps for ./file0 [ 44.501365][ T4190] dvmrp0: entered allmulticast mode [ 44.564571][ T4193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 44.573772][ T4193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 44.599398][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 44.599415][ T29] audit: type=1400 audit(1765879029.667:770): avc: denied { write } for pid=4196 comm="syz.1.251" name="raw" dev="proc" ino=4026532539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.748419][ T4206] wireguard0: entered promiscuous mode [ 44.754001][ T4206] wireguard0: entered allmulticast mode [ 44.792299][ T4186] loop2: detected capacity change from 0 to 32768 [ 44.947561][ T4186] loop2: p1 p2 p3 < p5 p6 > [ 44.957070][ T4186] loop2: p2 size 16775168 extends beyond EOD, truncated [ 45.000760][ T4186] loop2: p5 start 4294970168 is beyond EOD, truncated [ 45.015159][ T3007] loop2: p1 p2 p3 < p5 p6 > [ 45.023033][ T3007] loop2: p2 size 16775168 extends beyond EOD, truncated [ 45.033868][ T3007] loop2: p5 start 4294970168 is beyond EOD, truncated [ 45.143090][ T4194] Set syz1 is full, maxelem 65536 reached [ 45.224864][ T3007] udevd[3007]: worker [3306] terminated by signal 33 (Unknown signal 33) [ 45.352988][ T4239] netlink: 'syz.2.264': attribute type 13 has an invalid length. [ 45.388295][ T29] audit: type=1326 audit(1765879030.457:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.4.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 45.411768][ T29] audit: type=1326 audit(1765879030.457:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.4.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 45.435149][ T29] audit: type=1326 audit(1765879030.457:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.4.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 45.458523][ T29] audit: type=1326 audit(1765879030.457:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.4.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 45.514827][ T4248] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 45.537846][ T4248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.555544][ T4248] macvlan2: entered promiscuous mode [ 45.562756][ T4248] bond1: entered promiscuous mode [ 45.583015][ T4248] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 45.596542][ T29] audit: type=1400 audit(1765879030.667:775): avc: denied { connect } for pid=4251 comm="syz.0.271" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.621051][ T29] audit: type=1326 audit(1765879030.687:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.4.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 45.644468][ T29] audit: type=1326 audit(1765879030.687:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.4.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 45.669201][ T4248] bond1: left promiscuous mode [ 45.674385][ T29] audit: type=1400 audit(1765879030.737:778): avc: denied { write } for pid=4251 comm="syz.0.271" laddr=172.20.20.31 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.761211][ T29] audit: type=1400 audit(1765879030.837:779): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.966567][ T4278] loop3: detected capacity change from 0 to 512 [ 45.973388][ T4278] EXT4-fs: dax option not supported [ 45.992930][ T4278] loop3: detected capacity change from 0 to 512 [ 46.020960][ T4278] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 100663314)! [ 46.031844][ T4278] EXT4-fs (loop3): group descriptors corrupted! [ 46.218285][ T4293] loop0: detected capacity change from 0 to 512 [ 46.227889][ T4293] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.241763][ T4296] random: crng reseeded on system resumption [ 46.253570][ T4296] Restarting kernel threads ... [ 46.258730][ T4296] Done restarting kernel threads. [ 46.278106][ T4287] loop3: detected capacity change from 0 to 512 [ 46.308108][ T4293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.380349][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.405443][ T4287] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.287: error while reading EA inode 32 err=-116 [ 46.424569][ T4287] EXT4-fs (loop3): Remounting filesystem read-only [ 46.431821][ T4287] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.445864][ T4287] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 46.463187][ T4287] EXT4-fs (loop3): 1 orphan inode deleted [ 46.482787][ T4311] loop0: detected capacity change from 0 to 1024 [ 46.496430][ T4311] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.507453][ T4311] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.518621][ T4310] loop1: detected capacity change from 0 to 1024 [ 46.527724][ T4287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.545805][ T4311] JBD2: no valid journal superblock found [ 46.551623][ T4311] EXT4-fs (loop0): Could not load journal inode [ 46.563183][ T4310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.611155][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.632142][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.682006][ T4325] ip6gre1: entered allmulticast mode [ 46.846606][ T4347] geneve2: entered promiscuous mode [ 47.320711][ T4366] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 47.453561][ T4375] loop0: detected capacity change from 0 to 164 [ 47.510493][ T4375] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.540574][ T4375] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.620575][ T4375] Symlink component flag not implemented [ 47.626304][ T4375] Symlink component flag not implemented [ 47.650714][ T4375] Symlink component flag not implemented (7) [ 47.656800][ T4375] Symlink component flag not implemented (116) [ 47.724165][ T4379] netlink: 'syz.4.323': attribute type 13 has an invalid length. [ 47.787669][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.794945][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.883669][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.912749][ T4379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.003168][ T4382] dummy0: entered promiscuous mode [ 48.010053][ T4382] macsec1: entered allmulticast mode [ 48.015489][ T4382] dummy0: entered allmulticast mode [ 48.027994][ T3661] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.037717][ T3661] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.046842][ T3661] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.068646][ T3661] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.382905][ T4391] loop2: detected capacity change from 0 to 512 [ 48.486840][ T4391] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.494741][ T4391] EXT4-fs: Ignoring removed bh option [ 48.501227][ T4391] ext4: Unknown parameter 'obj_role' [ 49.489328][ T4439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.499707][ T4439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.643506][ T4439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.653893][ T4439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.766917][ T4441] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 49.902225][ T4441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.972409][ T4442] bond1: (slave veth5): Enslaving as an active interface with a down link [ 50.027835][ T4439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.038278][ T4439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.062599][ T4442] bond1 (unregistering): (slave veth5): Releasing active interface [ 50.073494][ T4442] bond1 (unregistering): Released all slaves [ 50.107918][ T4439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.118311][ T4439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.182952][ T4455] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.224513][ T4458] netlink: 'syz.1.352': attribute type 10 has an invalid length. [ 50.232347][ T4458] __nla_validate_parse: 4 callbacks suppressed [ 50.232367][ T4458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.352'. [ 50.276808][ T4458] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 50.298433][ T4458] team0: Failed to send options change via netlink (err -105) [ 50.306080][ T4458] team0: Port device geneve1 added [ 50.333002][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 50.333021][ T29] audit: type=1326 audit(1765879035.407:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 50.370638][ T29] audit: type=1326 audit(1765879035.407:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 50.370755][ T3645] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.393932][ T29] audit: type=1326 audit(1765879035.407:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 50.402103][ T3645] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.433756][ T29] audit: type=1326 audit(1765879035.407:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 50.434006][ T3645] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.457059][ T29] audit: type=1326 audit(1765879035.407:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 50.457111][ T29] audit: type=1326 audit(1765879035.407:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 50.465291][ T3645] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.488541][ T29] audit: type=1326 audit(1765879035.407:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 50.488569][ T29] audit: type=1326 audit(1765879035.407:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 50.513105][ T3645] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.520112][ T29] audit: type=1326 audit(1765879035.407:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 50.543367][ T3645] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.566676][ T29] audit: type=1326 audit(1765879035.407:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 50.654066][ T4470] loop4: detected capacity change from 0 to 1024 [ 50.671617][ T4470] EXT4-fs: Ignoring removed orlov option [ 50.732285][ T4470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.801818][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.811065][ T3679] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.819357][ T3679] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.850987][ T4479] loop3: detected capacity change from 0 to 512 [ 50.857963][ T4479] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.871137][ T4479] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.884602][ T4455] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.913019][ T4480] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.919604][ T4479] EXT4-fs (loop3): 1 truncate cleaned up [ 50.921960][ T4480] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.937510][ T4479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.953112][ T4455] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.968456][ T4480] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.359: Allocating blocks 41-42 which overlap fs metadata [ 51.005873][ T4480] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.359: Failed to acquire dquot type 1 [ 51.019556][ T4455] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.041053][ T4480] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 51.067481][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.076737][ T4480] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.359: corrupted inode contents [ 51.088702][ T4480] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.359: mark_inode_dirty error [ 51.100778][ T4480] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.359: corrupted inode contents [ 51.114466][ T4480] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.359: mark_inode_dirty error [ 51.131208][ T3645] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.143367][ T4480] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.359: corrupted inode contents [ 51.158541][ T3645] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.180457][ T4480] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 51.192750][ T4480] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.359: corrupted inode contents [ 51.204818][ T3645] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.220265][ T3645] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.244874][ T4480] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.359: mark_inode_dirty error [ 51.268093][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 51.279133][ T4480] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 51.294844][ T4480] EXT4-fs (loop4): 1 truncate cleaned up [ 51.306075][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 51.315614][ T4480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.341887][ T4480] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.361274][ T4498] tipc: Started in network mode [ 51.362096][ T4480] EXT4-fs (loop4): shut down requested (1) [ 51.366293][ T4498] tipc: Node identity ac14140f, cluster identity 4711 [ 51.379815][ T4498] tipc: New replicast peer: 255.255.255.83 [ 51.385732][ T4498] tipc: Enabled bearer , priority 10 [ 51.404839][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.482319][ T4513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 51.515332][ T3620] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.721540][ T4523] set_capacity_and_notify: 1 callbacks suppressed [ 51.721554][ T4523] loop4: detected capacity change from 0 to 1024 [ 51.735741][ T4523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.744167][ T4523] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 51.752554][ T4523] System zones: 0-1, 3-36 [ 51.758444][ T4523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.790698][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.184121][ T4539] loop1: detected capacity change from 0 to 512 [ 52.199921][ T4539] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.208709][ T4539] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.231562][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 52.247998][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 52.261638][ T4541] loop0: detected capacity change from 0 to 512 [ 52.270688][ T4539] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.383: Allocating blocks 41-42 which overlap fs metadata [ 52.295742][ T4539] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.383: Allocating blocks 41-42 which overlap fs metadata [ 52.318364][ T4539] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.383: Failed to acquire dquot type 1 [ 52.334186][ T4541] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.384: error while reading EA inode 32 err=-116 [ 52.340368][ T4539] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 52.356071][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 52.369663][ T4541] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 52.381384][ T4541] EXT4-fs (loop0): 1 orphan inode deleted [ 52.393303][ T4539] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.383: corrupted inode contents [ 52.404597][ T4541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.450028][ T4539] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.383: mark_inode_dirty error [ 52.463238][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.464573][ T4551] loop4: detected capacity change from 0 to 512 [ 52.484580][ T4551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.494679][ T4539] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.383: corrupted inode contents [ 52.506590][ T3482] tipc: Node number set to 2886997007 [ 52.514613][ T4539] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.383: mark_inode_dirty error [ 52.527635][ T4551] EXT4-fs (loop4): 1 truncate cleaned up [ 52.533994][ T4551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.547142][ T4539] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.383: corrupted inode contents [ 52.559647][ T4539] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 52.570775][ T4539] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.383: corrupted inode contents [ 52.603059][ T4539] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.383: mark_inode_dirty error [ 52.622562][ T4539] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 52.661392][ T4539] EXT4-fs (loop1): 1 truncate cleaned up [ 52.689831][ T4539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.709369][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.721273][ T4539] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.744020][ T4539] EXT4-fs (loop1): shut down requested (1) [ 52.761373][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.979314][ T4572] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 53.018951][ T4572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.051145][ T4572] bond1: (slave veth3): Enslaving as an active interface with a down link [ 53.069577][ T4572] bond1: (slave dummy0): making interface the new active one [ 53.078539][ T4572] dummy0: entered promiscuous mode [ 53.084026][ T4572] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 53.103776][ T4572] bond1 (unregistering): (slave veth3): Releasing active interface [ 53.113546][ T4572] bond1 (unregistering): (slave dummy0): Releasing active interface [ 53.123150][ T4572] bond1 (unregistering): Released all slaves [ 53.450858][ T4591] loop0: detected capacity change from 0 to 512 [ 53.467474][ T4591] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.484766][ T4591] EXT4-fs (loop0): 1 truncate cleaned up [ 53.503918][ T4591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.519807][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.520049][ T3549] Bluetooth: hci0: command 0x1003 tx timeout [ 53.604016][ T4597] loop2: detected capacity change from 0 to 7 [ 53.667549][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.849986][ T4607] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.955221][ T4607] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.030169][ T4607] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.104310][ T4607] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.178286][ T3657] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.196960][ T3657] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.210914][ T3657] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.231065][ T3657] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.383519][ T9] Process accounting resumed [ 54.478332][ T4626] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 54.997066][ T4642] loop2: detected capacity change from 0 to 512 [ 55.007615][ T4642] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.020686][ T4642] EXT4-fs (loop2): 1 truncate cleaned up [ 55.027901][ T4642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.120648][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.141706][ T4647] loop2: detected capacity change from 0 to 1024 [ 55.148359][ T4647] EXT4-fs: Ignoring removed orlov option [ 55.160795][ T4647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.333249][ T4655] netlink: 'syz.3.423': attribute type 21 has an invalid length. [ 55.347732][ T4655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.423'. [ 55.392158][ T4654] loop1: detected capacity change from 0 to 512 [ 55.448171][ T4660] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 55.449160][ T4654] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.422: error while reading EA inode 32 err=-116 [ 55.481802][ T4654] EXT4-fs (loop1): Remounting filesystem read-only [ 55.481817][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 55.488585][ T4662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.488606][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.514290][ T4654] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 55.514603][ T4662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.514620][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.542198][ T4654] EXT4-fs (loop1): 1 orphan inode deleted [ 55.559484][ T4654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.597617][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.654649][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 55.671843][ T4666] team1: entered promiscuous mode [ 55.676987][ T4666] team1: entered allmulticast mode [ 55.682525][ T4666] 8021q: adding VLAN 0 to HW filter on device team1 [ 56.017072][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.038360][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 56.038379][ T29] audit: type=1400 audit(1765879041.107:1346): avc: denied { read write } for pid=4687 comm="syz.2.439" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.040285][ T3403] hid-generic 0003:0004:0000.0001: unknown main item tag 0x7 [ 56.044652][ T29] audit: type=1400 audit(1765879041.107:1347): avc: denied { open } for pid=4687 comm="syz.2.439" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.067967][ T3403] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 56.106125][ T3403] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 56.113549][ T3403] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 56.120954][ T3403] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 56.128348][ T3403] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 56.135784][ T3403] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 56.143202][ T3403] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 56.150691][ T3403] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 56.158108][ T3403] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 56.166128][ T3403] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 56.239189][ T4693] loop2: detected capacity change from 0 to 512 [ 56.273185][ T4693] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.441: error while reading EA inode 32 err=-116 [ 56.287700][ T4693] EXT4-fs (loop2): Remounting filesystem read-only [ 56.295351][ T4693] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 56.306401][ T4693] EXT4-fs (loop2): 1 orphan inode deleted [ 56.322552][ T4693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.353778][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.427257][ T29] audit: type=1400 audit(1765879041.497:1348): avc: denied { create } for pid=4704 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.446806][ T29] audit: type=1400 audit(1765879041.497:1349): avc: denied { connect } for pid=4704 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.466377][ T29] audit: type=1400 audit(1765879041.497:1350): avc: denied { bind } for pid=4704 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.513451][ T29] audit: type=1400 audit(1765879041.497:1351): avc: denied { write } for pid=4704 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.362868][ T9] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 57.476669][ T4734] loop0: detected capacity change from 0 to 512 [ 57.494119][ T4734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.494185][ T4734] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.513290][ T4737] loop4: detected capacity change from 0 to 764 [ 57.539052][ T4737] Symlink component flag not implemented [ 57.539060][ T4737] Symlink component flag not implemented [ 57.539180][ T4737] Symlink component flag not implemented (129) [ 57.539191][ T4737] Symlink component flag not implemented (6) [ 57.540250][ T4737] rock: directory entry would overflow storage [ 57.540261][ T4737] rock: sig=0x4f50, size=4, remaining=3 [ 57.540280][ T4737] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 57.570337][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.684025][ T29] audit: type=1400 audit(1765879042.757:1352): avc: denied { mount } for pid=4745 comm="syz.1.461" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.706143][ T29] audit: type=1400 audit(1765879042.757:1353): avc: denied { unmount } for pid=4745 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.751484][ T29] audit: type=1326 audit(1765879042.817:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 57.756158][ T4750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.457'. [ 57.775399][ T29] audit: type=1326 audit(1765879042.817:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.4.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 57.980108][ T3403] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 58.335513][ T4791] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 58.342164][ T4791] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 58.349983][ T4791] vhci_hcd vhci_hcd.0: Device attached [ 58.360103][ T4792] vhci_hcd: connection closed [ 58.360285][ T3660] vhci_hcd vhci_hcd.2: stop threads [ 58.370281][ T3660] vhci_hcd vhci_hcd.2: release socket [ 58.375680][ T3660] vhci_hcd vhci_hcd.2: disconnect device [ 58.784851][ T4828] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=4828 comm=syz.3.489 [ 58.997797][ T4836] loop4: detected capacity change from 0 to 32768 [ 59.017787][ T4850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4850 comm=syz.2.499 [ 59.032741][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'. [ 59.050344][ T4836] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 59.055707][ T4836] loop4: p1 start 460800 is beyond EOD, truncated [ 59.062311][ T4836] loop4: p2 size 83886080 extends beyond EOD, truncated [ 59.077819][ T4836] loop4: p5 start 460800 is beyond EOD, truncated [ 59.084422][ T4836] loop4: p6 size 83886080 extends beyond EOD, truncated [ 59.224848][ T4870] bridge0: port 3(gretap0) entered blocking state [ 59.231622][ T4870] bridge0: port 3(gretap0) entered disabled state [ 59.239930][ T4870] gretap0: entered allmulticast mode [ 59.246169][ T4870] gretap0: entered promiscuous mode [ 59.253465][ T4870] bridge0: port 3(gretap0) entered blocking state [ 59.260025][ T4870] bridge0: port 3(gretap0) entered forwarding state [ 59.273650][ T4870] gretap0: left allmulticast mode [ 59.278781][ T4870] gretap0: left promiscuous mode [ 59.284099][ T4870] bridge0: port 3(gretap0) entered disabled state [ 59.405105][ T4894] loop0: detected capacity change from 0 to 1024 [ 59.418200][ T4887] loop3: detected capacity change from 0 to 1024 [ 59.424176][ T4894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.433346][ T4887] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.470824][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.481300][ T4905] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 59.487578][ T4887] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.516: Invalid block bitmap block 0 in block_group 0 [ 59.487835][ T4905] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.501953][ T4887] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.516: Failed to acquire dquot type 0 [ 59.508907][ T4905] vhci_hcd vhci_hcd.0: Device attached [ 59.538691][ T4906] vhci_hcd: connection closed [ 59.538934][ T3620] vhci_hcd vhci_hcd.4: stop threads [ 59.549001][ T3620] vhci_hcd vhci_hcd.4: release socket [ 59.554437][ T3620] vhci_hcd vhci_hcd.4: disconnect device [ 59.561574][ T4887] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.516: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.577374][ T4887] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.516: Invalid inode bitmap blk 0 in block_group 0 [ 59.591043][ T1925] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 59.630099][ T4887] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 59.648894][ T4887] EXT4-fs (loop3): 1 orphan inode deleted [ 59.657169][ T4887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.724955][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.779095][ T4913] serio: Serial port ptm0 [ 59.934411][ T4913] serio: Serial port ptm0 [ 60.244452][ T4946] netlink: 'syz.0.534': attribute type 12 has an invalid length. [ 60.311057][ T4952] loop0: detected capacity change from 0 to 764 [ 60.320409][ T4952] Symlink component flag not implemented [ 60.326088][ T4952] Symlink component flag not implemented [ 60.332077][ T4952] Symlink component flag not implemented (129) [ 60.338267][ T4952] Symlink component flag not implemented (6) [ 60.346265][ T4952] rock: directory entry would overflow storage [ 60.352520][ T4952] rock: sig=0x4f50, size=4, remaining=3 [ 60.358132][ T4952] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 60.433116][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 60.446899][ T4962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 60.620712][ T4980] program syz.4.546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.721320][ T4986] loop1: detected capacity change from 0 to 512 [ 60.755982][ T4984] loop4: detected capacity change from 0 to 4096 [ 60.783410][ T4986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.807743][ T4984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.829917][ T4986] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.876469][ T4979] loop2: detected capacity change from 0 to 32768 [ 60.891632][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.907658][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.911270][ T4979] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 60.935706][ T4979] loop2: p1 start 460800 is beyond EOD, truncated [ 60.942291][ T4979] loop2: p2 size 83886080 extends beyond EOD, truncated [ 60.951598][ T4979] loop2: p5 start 460800 is beyond EOD, truncated [ 60.958141][ T4979] loop2: p6 size 83886080 extends beyond EOD, truncated [ 60.977261][ T4996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 61.087369][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 61.104893][ T5000] loop3: detected capacity change from 0 to 764 [ 61.114529][ T5003] team1: entered promiscuous mode [ 61.119622][ T5003] team1: entered allmulticast mode [ 61.133010][ T5003] 8021q: adding VLAN 0 to HW filter on device team1 [ 61.140168][ T5000] Symlink component flag not implemented [ 61.145841][ T5000] Symlink component flag not implemented [ 61.153672][ T5000] Symlink component flag not implemented (129) [ 61.159907][ T5000] Symlink component flag not implemented (6) [ 61.184029][ T5000] rock: directory entry would overflow storage [ 61.190327][ T5000] rock: sig=0x4f50, size=4, remaining=3 [ 61.195958][ T5000] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 61.366850][ T5011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.447561][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.591308][ T5018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.700693][ T5018] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.769247][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.956178][ T5040] EXT4-fs: Ignoring removed bh option [ 61.979318][ T5041] pim6reg: entered allmulticast mode [ 61.995816][ T5041] pim6reg: left allmulticast mode [ 62.001589][ T5040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.018410][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 62.018423][ T29] audit: type=1400 audit(1765879047.087:1664): avc: denied { setattr } for pid=5038 comm="syz.2.573" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.064694][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.119359][ T5049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.577'. [ 62.182861][ T5054] Symlink component flag not implemented [ 62.188634][ T5054] Symlink component flag not implemented [ 62.197347][ T29] audit: type=1326 audit(1765879047.267:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 62.221012][ T5054] Symlink component flag not implemented (129) [ 62.221030][ T5054] Symlink component flag not implemented (6) [ 62.222991][ T5054] rock: directory entry would overflow storage [ 62.232669][ T29] audit: type=1326 audit(1765879047.297:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 62.233448][ T5054] rock: sig=0x4f50, size=4, remaining=3 [ 62.239578][ T29] audit: type=1326 audit(1765879047.297:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 62.262940][ T5054] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 62.268378][ T29] audit: type=1326 audit(1765879047.307:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 62.322665][ T29] audit: type=1326 audit(1765879047.307:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 62.346143][ T29] audit: type=1326 audit(1765879047.307:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 62.369462][ T29] audit: type=1326 audit(1765879047.307:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 62.377988][ T5060] bridge: RTM_NEWNEIGH with invalid ether address [ 62.392903][ T29] audit: type=1326 audit(1765879047.307:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 62.422658][ T29] audit: type=1326 audit(1765879047.307:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5061 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4943a3f749 code=0x7ffc0000 [ 62.473434][ T5065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.493656][ T5065] Invalid ELF header magic: != ELF [ 62.499563][ T5069] set_capacity_and_notify: 5 callbacks suppressed [ 62.499580][ T5069] loop2: detected capacity change from 0 to 512 [ 62.525262][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.537065][ T5069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.557308][ T5078] loop1: detected capacity change from 0 to 1024 [ 62.565933][ T5069] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.579520][ T5078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.607980][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.618717][ T5078] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.637448][ T5078] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.583: lblock 3 mapped to illegal pblock 3 (length 3) [ 62.652030][ T5078] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 62.664710][ T5078] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.664710][ T5078] [ 62.711936][ T3664] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:63: lblock 8 mapped to illegal pblock 8 (length 8) [ 62.735043][ T3664] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 62.747513][ T3664] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.747513][ T3664] [ 62.764367][ T5074] loop0: detected capacity change from 0 to 32768 [ 62.773785][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.810424][ T5074] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 62.820105][ T5074] loop0: p1 start 460800 is beyond EOD, truncated [ 62.826690][ T5074] loop0: p2 size 83886080 extends beyond EOD, truncated [ 62.836111][ T5074] loop0: p5 start 460800 is beyond EOD, truncated [ 62.842684][ T5074] loop0: p6 size 83886080 extends beyond EOD, truncated [ 62.856940][ T5089] program syz.1.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.962946][ T5100] loop0: detected capacity change from 0 to 512 [ 62.972614][ T5100] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.601: inode has both inline data and extents flags [ 62.986023][ T5100] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.601: couldn't read orphan inode 15 (err -117) [ 62.998949][ T5100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.180700][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.349407][ T5131] loop1: detected capacity change from 0 to 764 [ 63.369647][ T5131] Symlink component flag not implemented [ 63.375409][ T5131] Symlink component flag not implemented [ 63.402048][ T5131] Symlink component flag not implemented (129) [ 63.408296][ T5131] Symlink component flag not implemented (6) [ 63.437199][ T5131] rock: directory entry would overflow storage [ 63.443476][ T5131] rock: sig=0x4f50, size=4, remaining=3 [ 63.449121][ T5131] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 63.875500][ T5149] loop1: detected capacity change from 0 to 164 [ 63.894338][ T5149] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.971766][ T5152] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.988379][ T5152] Symlink component flag not implemented [ 63.994169][ T5152] Symlink component flag not implemented [ 64.022415][ T5152] Symlink component flag not implemented (7) [ 64.028541][ T5152] Symlink component flag not implemented (116) [ 64.073702][ T5155] loop2: detected capacity change from 0 to 1024 [ 64.103652][ T5155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.144076][ T5164] loop4: detected capacity change from 0 to 2048 [ 64.171338][ T5155] Invalid ELF header magic: != ELF [ 64.205058][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.221411][ T5164] loop4: p1 < > p4 [ 64.228374][ T5164] loop4: p4 size 8388608 extends beyond EOD, truncated [ 64.372761][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 64.428411][ T5175] loop2: detected capacity change from 0 to 1024 [ 64.549790][ T5169] team1: entered promiscuous mode [ 64.555028][ T5169] team1: entered allmulticast mode [ 64.561468][ T5169] 8021q: adding VLAN 0 to HW filter on device team1 [ 64.569560][ T5175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.626634][ T5176] loop1: detected capacity change from 0 to 32768 [ 64.635512][ T5175] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.664376][ T5175] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.619: lblock 3 mapped to illegal pblock 3 (length 3) [ 64.679270][ T5176] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 64.684663][ T5176] loop1: p1 start 460800 is beyond EOD, truncated [ 64.691272][ T5176] loop1: p2 size 83886080 extends beyond EOD, truncated [ 64.702814][ T5175] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 64.715256][ T5175] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.715256][ T5175] [ 64.726941][ T5176] loop1: p5 start 460800 is beyond EOD, truncated [ 64.733622][ T5176] loop1: p6 size 83886080 extends beyond EOD, truncated [ 64.825032][ T3662] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:61: lblock 8 mapped to illegal pblock 8 (length 8) [ 64.867247][ T3662] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 64.879916][ T3662] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.879916][ T3662] [ 64.900410][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.945635][ T5186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.981241][ T5186] EXT4-fs (loop3): 1 truncate cleaned up [ 64.987510][ T5186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.076088][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.147044][ T5232] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.642'. [ 66.156245][ T5232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.642'. [ 66.513896][ T5246] EXT4-fs: Ignoring removed bh option [ 66.703511][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 66.712615][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 66.998262][ T5289] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 67.105642][ T5299] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.115742][ T5299] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.170496][ T5303] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 67.182001][ T5303] team0: Failed to send options change via netlink (err -105) [ 67.189534][ T5303] team0: Port device dummy0 added [ 67.196438][ T5303] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 67.215465][ T5303] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.225765][ T5303] team0: Failed to send options change via netlink (err -105) [ 67.262789][ T5303] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.285418][ T5303] team0: Port device dummy0 removed [ 67.300718][ T5303] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.324327][ T5299] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.334607][ T5299] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.351489][ T5313] Invalid ELF header magic: != ELF [ 67.371719][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 67.371739][ T29] audit: type=1326 audit(1765879052.437:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.0.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 67.401561][ T29] audit: type=1326 audit(1765879052.437:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.0.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 67.425290][ T29] audit: type=1326 audit(1765879052.437:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5315 comm="syz.0.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a585f749 code=0x7ffc0000 [ 67.451048][ T29] audit: type=1400 audit(1765879052.527:1926): avc: denied { getopt } for pid=5319 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.473872][ T5299] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.483784][ T5299] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.552833][ T29] audit: type=1400 audit(1765879052.627:1927): avc: denied { ioctl } for pid=5332 comm="syz.0.681" path="socket:[10095]" dev="sockfs" ino=10095 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.578449][ T5299] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.588510][ T5299] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.676922][ T29] audit: type=1400 audit(1765879052.747:1928): avc: denied { read } for pid=5338 comm="syz.0.683" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.701148][ T29] audit: type=1400 audit(1765879052.747:1929): avc: denied { open } for pid=5338 comm="syz.0.683" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.724389][ T29] audit: type=1400 audit(1765879052.747:1930): avc: denied { ioctl } for pid=5338 comm="syz.0.683" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.749118][ T29] audit: type=1400 audit(1765879052.757:1931): avc: denied { write } for pid=5338 comm="syz.0.683" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.777002][ T396] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.785259][ T396] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.797317][ T396] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.805564][ T396] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.820414][ T3628] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.828704][ T3628] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.842346][ T3628] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.850751][ T3628] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.920509][ T29] audit: type=1326 audit(1765879052.987:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.2.695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e0d38f749 code=0x0 [ 68.155516][ T5356] set_capacity_and_notify: 5 callbacks suppressed [ 68.155537][ T5356] loop0: detected capacity change from 0 to 1024 [ 68.194598][ T5356] Invalid ELF header magic: != ELF [ 68.682201][ T5390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.716895][ T5390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.737995][ T5396] netlink: 'syz.1.704': attribute type 1 has an invalid length. [ 68.771028][ T5396] macvlan2: entered promiscuous mode [ 68.776492][ T5396] macvlan2: entered allmulticast mode [ 68.782864][ T5396] bond1: entered promiscuous mode [ 68.788237][ T5396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.816894][ T5396] bond1: left promiscuous mode [ 68.978689][ T5413] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 69.018690][ T5415] netlink: 68 bytes leftover after parsing attributes in process `syz.1.713'. [ 69.079027][ T5421] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 69.319476][ T5438] loop2: detected capacity change from 0 to 7 [ 69.357379][ T5440] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 69.368850][ T5440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.724'. [ 69.543671][ T5440] team0: Port device geneve1 added [ 69.645740][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'. [ 69.705943][ T5464] ================================================================== [ 69.714075][ T5464] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 69.720790][ T5464] [ 69.723129][ T5464] write to 0xffff88811b25be50 of 8 bytes by task 5463 on cpu 0: [ 69.730775][ T5464] __dentry_kill+0x142/0x4b0 [ 69.735397][ T5464] finish_dput+0x2b/0x200 [ 69.739745][ T5464] dput+0x52/0x60 [ 69.743417][ T5464] step_into_slowpath+0x36b/0x480 [ 69.748481][ T5464] path_lookupat+0x330/0x500 [ 69.753098][ T5464] filename_lookup+0x147/0x340 [ 69.757880][ T5464] filename_getxattr+0x54/0x180 [ 69.762754][ T5464] io_getxattr+0x50/0xe0 [ 69.767047][ T5464] __io_issue_sqe+0xfe/0x2e0 [ 69.771659][ T5464] io_issue_sqe+0x56/0xa80 [ 69.776117][ T5464] io_wq_submit_work+0x3f7/0x5f0 [ 69.781081][ T5464] io_worker_handle_work+0x44e/0x9b0 [ 69.786390][ T5464] io_wq_worker+0x22e/0x860 [ 69.790897][ T5464] ret_from_fork+0x149/0x290 [ 69.795509][ T5464] ret_from_fork_asm+0x1a/0x30 [ 69.800287][ T5464] [ 69.802632][ T5464] read to 0xffff88811b25be50 of 8 bytes by task 5464 on cpu 1: [ 69.810180][ T5464] fast_dput+0x5f/0x2c0 [ 69.814350][ T5464] dput+0x24/0x60 [ 69.817992][ T5464] step_into_slowpath+0x36b/0x480 [ 69.823046][ T5464] path_lookupat+0x330/0x500 [ 69.827646][ T5464] filename_lookup+0x147/0x340 [ 69.832416][ T5464] filename_getxattr+0x54/0x180 [ 69.837275][ T5464] io_getxattr+0x50/0xe0 [ 69.841528][ T5464] __io_issue_sqe+0xfe/0x2e0 [ 69.846138][ T5464] io_issue_sqe+0x56/0xa80 [ 69.850570][ T5464] io_wq_submit_work+0x3f7/0x5f0 [ 69.855537][ T5464] io_worker_handle_work+0x44e/0x9b0 [ 69.860826][ T5464] io_wq_worker+0x22e/0x860 [ 69.865334][ T5464] ret_from_fork+0x149/0x290 [ 69.869935][ T5464] ret_from_fork_asm+0x1a/0x30 [ 69.874716][ T5464] [ 69.877041][ T5464] value changed: 0xffff8882376e3d28 -> 0x0000000000000000 [ 69.884147][ T5464] [ 69.886470][ T5464] Reported by Kernel Concurrency Sanitizer on: [ 69.892625][ T5464] CPU: 1 UID: 0 PID: 5464 Comm: iou-wrk-5459 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.902525][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.912588][ T5464] ================================================================== [ 69.928054][ T5471] xt_hashlimit: max too large, truncated to 1048576 [ 69.940936][ T5471] xt_CT: You must specify a L4 protocol and not use inversions on it