last executing test programs: 1.223088307s ago: executing program 1 (id=316): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* rwr'], 0x9) 1.181008929s ago: executing program 1 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.115863982s ago: executing program 1 (id=322): r0 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0x1075}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r0}) 1.059902615s ago: executing program 1 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 1.015971516s ago: executing program 3 (id=327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x453, 0x8, 0x70bd2d, 0x25dfdbff, '\f'}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 995.654137ms ago: executing program 1 (id=329): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 991.841458ms ago: executing program 3 (id=330): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1d, 0x2, 0x6) unshare(0x2c020400) bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) 972.702568ms ago: executing program 3 (id=331): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r0}, 0x18) pause() 303.797267ms ago: executing program 0 (id=362): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 277.868528ms ago: executing program 2 (id=363): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}], 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000080)) 270.135409ms ago: executing program 0 (id=364): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) 260.655099ms ago: executing program 4 (id=365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x7, 0x97, &(0x7f0000000a40)}) 246.61439ms ago: executing program 2 (id=366): process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) 209.954462ms ago: executing program 2 (id=367): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x8084) 203.803722ms ago: executing program 4 (id=368): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c040}, 0x4004084) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) 189.084413ms ago: executing program 0 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 175.444743ms ago: executing program 2 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) 174.597953ms ago: executing program 4 (id=371): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a000000000000c2040000000000dfaac7f65dde66007550d861b7b509000000000000007c2ed243f39735881ba7309715165c3b9edec92e7dadb7a5bbdd45a5fd4320d89ed45cf375461e38967ad0f0891dc4bbba54a2c4b99498353dcc9f0233d55a6e0fbf78c3ba4e983f48b6f65060c96fd75c4a82e937f62c958445a04c99c7646db75133bf141405b7db695b0de9a482b9dc8dc3a25f15db015321"], 0x2e8}}], 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12020, 0x0, 0x0) 149.946294ms ago: executing program 0 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) 140.366464ms ago: executing program 4 (id=373): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 111.950576ms ago: executing program 1 (id=374): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 97.441016ms ago: executing program 0 (id=375): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) 93.448247ms ago: executing program 4 (id=376): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 89.139897ms ago: executing program 3 (id=377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000dc00128009000100766c616e00000000cc0002"], 0x10c}, 0x1, 0xba01}, 0x0) 84.870957ms ago: executing program 2 (id=378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a00000800040001000000", 0x24) 36.138929ms ago: executing program 0 (id=379): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x2200, &(0x7f0000000000)={[{@noauto_da_alloc}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") 35.841059ms ago: executing program 3 (id=380): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 31.855669ms ago: executing program 2 (id=381): r0 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/162, 0xa2}], 0x1) 18.69794ms ago: executing program 4 (id=382): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) 0s ago: executing program 3 (id=383): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x1, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000280)) kernel console output (not intermixed with test programs): [ 22.193069][ T29] audit: type=1400 audit(1765449022.090:62): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.215059][ T29] audit: type=1400 audit(1765449022.090:63): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.237804][ T29] audit: type=1400 audit(1765449022.090:64): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.260709][ T29] audit: type=1400 audit(1765449022.090:65): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.283695][ T29] audit: type=1400 audit(1765449022.090:66): avc: denied { read open } for pid=3202 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 29.509698][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 29.509715][ T29] audit: type=1400 audit(1765449029.410:70): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.538659][ T29] audit: type=1400 audit(1765449029.440:71): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.539607][ T3307] cgroup: Unknown subsys name 'net' [ 29.566466][ T29] audit: type=1400 audit(1765449029.470:72): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.687613][ T3307] cgroup: Unknown subsys name 'cpuset' [ 29.693805][ T3307] cgroup: Unknown subsys name 'rlimit' [ 29.864989][ T29] audit: type=1400 audit(1765449029.760:73): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.891373][ T29] audit: type=1400 audit(1765449029.760:74): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.911866][ T29] audit: type=1400 audit(1765449029.760:75): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.932258][ T29] audit: type=1400 audit(1765449029.770:76): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.941171][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.952555][ T29] audit: type=1400 audit(1765449029.780:77): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.985894][ T29] audit: type=1400 audit(1765449029.780:78): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.009150][ T29] audit: type=1400 audit(1765449029.790:79): avc: denied { read } for pid=3048 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.038643][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.190984][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 31.216233][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.226613][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.270687][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 31.286675][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 31.336434][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.343530][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.350738][ T3320] bridge_slave_0: entered allmulticast mode [ 31.357371][ T3320] bridge_slave_0: entered promiscuous mode [ 31.383007][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.390109][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.397331][ T3320] bridge_slave_1: entered allmulticast mode [ 31.403660][ T3320] bridge_slave_1: entered promiscuous mode [ 31.432111][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.440656][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.447885][ T3317] bridge_slave_0: entered allmulticast mode [ 31.454318][ T3317] bridge_slave_0: entered promiscuous mode [ 31.463047][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.470194][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.477328][ T3318] bridge_slave_0: entered allmulticast mode [ 31.483971][ T3318] bridge_slave_0: entered promiscuous mode [ 31.504598][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.511949][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.519156][ T3317] bridge_slave_1: entered allmulticast mode [ 31.525565][ T3317] bridge_slave_1: entered promiscuous mode [ 31.533873][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.541098][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.548309][ T3318] bridge_slave_1: entered allmulticast mode [ 31.554720][ T3318] bridge_slave_1: entered promiscuous mode [ 31.561186][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.568267][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.575510][ T3328] bridge_slave_0: entered allmulticast mode [ 31.581984][ T3328] bridge_slave_0: entered promiscuous mode [ 31.589761][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.613429][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.620516][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.627713][ T3328] bridge_slave_1: entered allmulticast mode [ 31.634208][ T3328] bridge_slave_1: entered promiscuous mode [ 31.641490][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.676783][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.685908][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.693019][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.700321][ T3327] bridge_slave_0: entered allmulticast mode [ 31.707109][ T3327] bridge_slave_0: entered promiscuous mode [ 31.714504][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.734083][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.743272][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.750481][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.757667][ T3327] bridge_slave_1: entered allmulticast mode [ 31.764014][ T3327] bridge_slave_1: entered promiscuous mode [ 31.771337][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.781712][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.791737][ T3320] team0: Port device team_slave_0 added [ 31.813147][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.827862][ T3320] team0: Port device team_slave_1 added [ 31.849134][ T3317] team0: Port device team_slave_0 added [ 31.860725][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.870923][ T3318] team0: Port device team_slave_0 added [ 31.882426][ T3317] team0: Port device team_slave_1 added [ 31.893898][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.903923][ T3318] team0: Port device team_slave_1 added [ 31.910252][ T3328] team0: Port device team_slave_0 added [ 31.920727][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.927727][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.953712][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.974924][ T3328] team0: Port device team_slave_1 added [ 31.985493][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.992525][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.018501][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.044019][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.050997][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.076945][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.091011][ T3327] team0: Port device team_slave_0 added [ 32.096996][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.103935][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.129919][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.145865][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.152892][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.178879][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.193814][ T3327] team0: Port device team_slave_1 added [ 32.199784][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.206774][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.232703][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.243694][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.250674][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.276618][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.302510][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.309523][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.335519][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.380078][ T3317] hsr_slave_0: entered promiscuous mode [ 32.386063][ T3317] hsr_slave_1: entered promiscuous mode [ 32.392362][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.399420][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.425494][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.437459][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.444415][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.470431][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.486376][ T3320] hsr_slave_0: entered promiscuous mode [ 32.492417][ T3320] hsr_slave_1: entered promiscuous mode [ 32.498342][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 32.504074][ T3320] Cannot create hsr debugfs directory [ 32.542643][ T3318] hsr_slave_0: entered promiscuous mode [ 32.548723][ T3318] hsr_slave_1: entered promiscuous mode [ 32.554601][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 32.560392][ T3318] Cannot create hsr debugfs directory [ 32.573379][ T3328] hsr_slave_0: entered promiscuous mode [ 32.579613][ T3328] hsr_slave_1: entered promiscuous mode [ 32.585503][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 32.591258][ T3328] Cannot create hsr debugfs directory [ 32.604878][ T3327] hsr_slave_0: entered promiscuous mode [ 32.611167][ T3327] hsr_slave_1: entered promiscuous mode [ 32.617118][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 32.622904][ T3327] Cannot create hsr debugfs directory [ 32.820619][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.833929][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.842406][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.853268][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.873625][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.882551][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.891846][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.903932][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.930827][ T3328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.940042][ T3328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.950809][ T3328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.960077][ T3328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.010160][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.019174][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.032423][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.042692][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.067417][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.075739][ T3327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.088615][ T3327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.098119][ T3327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.113273][ T3327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.137952][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.149409][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.162159][ T2360] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.169296][ T2360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.193719][ T2360] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.200848][ T2360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.227358][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.238493][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.262234][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.269377][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.283493][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.290603][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.313008][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.340402][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.347517][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.362068][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.374081][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.381211][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.399302][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.417394][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.434591][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.441787][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.455427][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.462578][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.497815][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.510547][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.520490][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.538414][ T1855] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.545545][ T1855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.560195][ T1855] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.567286][ T1855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.679255][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.726729][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.737446][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.773776][ T3317] veth0_vlan: entered promiscuous mode [ 33.792728][ T3318] veth0_vlan: entered promiscuous mode [ 33.807975][ T3317] veth1_vlan: entered promiscuous mode [ 33.826885][ T3318] veth1_vlan: entered promiscuous mode [ 33.872916][ T3317] veth0_macvtap: entered promiscuous mode [ 33.883187][ T3318] veth0_macvtap: entered promiscuous mode [ 33.890323][ T3327] veth0_vlan: entered promiscuous mode [ 33.897876][ T3317] veth1_macvtap: entered promiscuous mode [ 33.909100][ T3318] veth1_macvtap: entered promiscuous mode [ 33.921665][ T3327] veth1_vlan: entered promiscuous mode [ 33.934849][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.950108][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.960393][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.974332][ T3320] veth0_vlan: entered promiscuous mode [ 33.981342][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.000647][ T1855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.009715][ T1855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.026338][ T3320] veth1_vlan: entered promiscuous mode [ 34.033275][ T1855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.045988][ T1855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.060873][ T1855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.071744][ T3327] veth0_macvtap: entered promiscuous mode [ 34.080009][ T1855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.088940][ T3328] veth0_vlan: entered promiscuous mode [ 34.096335][ T1855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.105297][ T1855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.115997][ T3327] veth1_macvtap: entered promiscuous mode [ 34.130933][ T3328] veth1_vlan: entered promiscuous mode [ 34.152940][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.165010][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.182147][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.209381][ T1855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.209811][ T3490] 9p: Bad value for 'wfdno' [ 34.225705][ T3328] veth0_macvtap: entered promiscuous mode [ 34.242756][ T1855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.255880][ T1855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.268110][ T3328] veth1_macvtap: entered promiscuous mode [ 34.274948][ T3320] veth0_macvtap: entered promiscuous mode [ 34.282804][ T1855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.313550][ T3320] veth1_macvtap: entered promiscuous mode [ 34.326765][ T3494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.332765][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.342848][ T3494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.355297][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.369635][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.400046][ T2648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.413023][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.427887][ T2648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.436960][ T2648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.446059][ T2648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.462431][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 34.481689][ T2648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.503604][ T2648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.512991][ T3507] openvswitch: netlink: Missing key (keys=40, expected=80) [ 34.534223][ T2648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.570897][ T2648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.597265][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 34.597281][ T29] audit: type=1400 audit(1765449034.500:118): avc: denied { bind } for pid=3514 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.671726][ T29] audit: type=1400 audit(1765449034.550:119): avc: denied { create } for pid=3516 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 34.691100][ T29] audit: type=1400 audit(1765449034.550:120): avc: denied { ioctl } for pid=3516 comm="syz.1.12" path="socket:[3958]" dev="sockfs" ino=3958 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 34.740332][ T3519] loop4: detected capacity change from 0 to 1024 [ 34.766521][ T29] audit: type=1326 audit(1765449034.620:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ac20f749 code=0x7ffc0000 [ 34.789988][ T29] audit: type=1326 audit(1765449034.620:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f62ac20f749 code=0x7ffc0000 [ 34.813373][ T29] audit: type=1326 audit(1765449034.620:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3521 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ac20f749 code=0x7ffc0000 [ 34.836623][ T29] audit: type=1400 audit(1765449034.650:124): avc: denied { write } for pid=3523 comm="syz.0.13" name="icmp6" dev="proc" ino=4026532672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.859157][ T29] audit: type=1400 audit(1765449034.660:125): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.883421][ T29] audit: type=1400 audit(1765449034.660:126): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.907522][ T29] audit: type=1400 audit(1765449034.660:127): avc: denied { watch watch_reads } for pid=3525 comm="syz.3.15" path="/2" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.933014][ T3519] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.010272][ T3528] netlink: 232 bytes leftover after parsing attributes in process `syz.1.16'. [ 35.013588][ T3519] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 35.056473][ T3519] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.086072][ T3545] netlink: 556 bytes leftover after parsing attributes in process `syz.0.24'. [ 35.095714][ T3519] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.5: Freeing blocks not in datazone - block = 0, count = 4096 [ 35.098669][ T3549] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 35.130604][ T3519] EXT4-fs (loop4): 1 orphan inode deleted [ 35.144549][ T3519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.151559][ T3553] pim6reg: tun_chr_ioctl cmd 2147767521 [ 35.180136][ T3555] loop3: detected capacity change from 0 to 128 [ 35.210803][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.403491][ T3585] loop3: detected capacity change from 0 to 128 [ 35.471178][ T3592] process 'syz.1.47' launched '/dev/fd/4' with NULL argv: empty string added [ 35.523164][ T3597] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 35.530762][ T3599] loop3: detected capacity change from 0 to 512 [ 35.547144][ T3599] ======================================================= [ 35.547144][ T3599] WARNING: The mand mount option has been deprecated and [ 35.547144][ T3599] and is ignored by this kernel. Remove the mand [ 35.547144][ T3599] option from the mount to silence this warning. [ 35.547144][ T3599] ======================================================= [ 35.612471][ T3599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.628154][ T3599] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 35.636115][ T3599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 35.645413][ T3599] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 35.654963][ T3599] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 35.664368][ T3599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.691076][ T3599] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.50: dx entry: limit 65535 != root limit 120 [ 35.703198][ T3599] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.50: Corrupt directory, running e2fsck is recommended [ 35.719894][ T3612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 35.749734][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.813735][ T3625] random: crng reseeded on system resumption [ 35.901350][ T3629] loop0: detected capacity change from 0 to 1024 [ 35.920715][ T3633] loop2: detected capacity change from 0 to 512 [ 35.936660][ T3633] EXT4-fs (loop2): 1 truncate cleaned up [ 35.958821][ T3633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.977368][ T3629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.995386][ T3629] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.028146][ T3633] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.58: bg 0: block 465: padding at end of block bitmap is not set [ 36.044617][ T3633] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 36.056977][ T3633] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.056977][ T3633] [ 36.066771][ T3633] EXT4-fs (loop2): Total free blocks count 0 [ 36.072774][ T3633] EXT4-fs (loop2): Free/Dirty block details [ 36.078835][ T3633] EXT4-fs (loop2): free_blocks=0 [ 36.083949][ T3633] EXT4-fs (loop2): dirty_blocks=10 [ 36.089211][ T3633] EXT4-fs (loop2): Block reservation details [ 36.095233][ T3633] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 36.101762][ T2693] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm kworker/u8:15: lblock 0 mapped to illegal pblock 0 (length 1) [ 36.126449][ T3633] syz.2.58 (3633) used greatest stack depth: 10200 bytes left [ 36.144266][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.166962][ T2693] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 36.179308][ T2693] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.179308][ T2693] [ 36.197869][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.221595][ T3503] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.229093][ T3503] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.236494][ T3503] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.239558][ T3663] syzkaller0: tun_chr_ioctl cmd 35108 [ 36.243938][ T3503] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.256849][ T3503] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.264421][ T3503] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.271881][ T3503] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.279308][ T3503] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.286784][ T3503] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.294200][ T3503] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 36.317069][ T3665] SELinux: Context ?J is not valid (left unmapped). [ 36.327991][ T3503] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 36.371567][ T3671] loop4: detected capacity change from 0 to 512 [ 36.385965][ T3668] fido_id[3668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.420512][ T3671] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 36.428580][ T3671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 36.442199][ T3671] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.448762][ T3671] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 36.463419][ T3671] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 36.470970][ T3671] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.70: bg 0: block 40: padding at end of block bitmap is not set [ 36.485818][ T3671] EXT4-fs (loop4): Remounting filesystem read-only [ 36.490754][ T3680] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 36.490754][ T3680] The task syz.2.66 (3680) triggered the difference, watch for misbehavior. [ 36.495210][ T3671] EXT4-fs (loop4): 1 truncate cleaned up [ 36.516059][ T3671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.544632][ T3671] EXT4-fs (loop4): shut down requested (2) [ 36.567708][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.576845][ T3687] tap0: tun_chr_ioctl cmd 1074812118 [ 36.610872][ T3689] wireguard0: entered promiscuous mode [ 36.616412][ T3689] wireguard0: entered allmulticast mode [ 36.779917][ T3710] loop3: detected capacity change from 0 to 512 [ 36.787339][ T3714] vhci_hcd vhci_hcd.4: invalid port number 236 [ 36.810545][ T3710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.828719][ T3710] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.852996][ T3720] sctp: [Deprecated]: syz.0.91 (pid 3720) Use of int in maxseg socket option. [ 36.852996][ T3720] Use struct sctp_assoc_value instead [ 36.867883][ T3710] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.86: corrupted xattr block 6: invalid header [ 36.887319][ T3716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 36.928008][ T3710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 36.940403][ T3710] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.86: corrupted xattr block 6: invalid header [ 36.954226][ T3710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 36.963702][ T3710] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.86: corrupted xattr block 6: invalid header [ 36.977071][ T3710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 36.986180][ T3710] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.86: corrupted xattr block 6: invalid header [ 37.000366][ T3710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 37.010074][ T3710] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.86: corrupted xattr block 6: invalid header [ 37.023419][ T3710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 37.038616][ T3710] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.86: corrupted xattr block 6: invalid header [ 37.096075][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.173622][ T3736] loop2: detected capacity change from 0 to 1024 [ 37.201570][ T3736] EXT4-fs: Ignoring removed nobh option [ 37.207237][ T3736] EXT4-fs: Ignoring removed bh option [ 37.250156][ T3736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.265918][ T3743] loop3: detected capacity change from 0 to 512 [ 37.293202][ T3736] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.100: Allocating blocks 401-513 which overlap fs metadata [ 37.307118][ T3743] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.364920][ T3743] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 37.381604][ T3743] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.397534][ T3735] EXT4-fs (loop2): pa ffff888107e25000: logic 32, phys. 145, len 23 [ 37.405586][ T3735] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 7 [ 37.434440][ T3743] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.101: corrupted inode contents [ 37.470176][ T3743] EXT4-fs (loop3): Remounting filesystem read-only [ 37.486712][ T3743] EXT4-fs (loop3): 1 truncate cleaned up [ 37.492616][ T1855] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 37.503354][ T1855] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 37.537149][ T1855] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 37.559260][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.568823][ T3743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.601742][ T3754] EXT4-fs: Ignoring removed bh option [ 37.639902][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.659793][ T3758] syz.2.104: attempt to access beyond end of device [ 37.659793][ T3758] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 37.683789][ T3754] EXT4-fs: inline encryption not supported [ 37.716775][ T3758] syz.2.104: attempt to access beyond end of device [ 37.716775][ T3758] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 37.746933][ T3754] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.787617][ T3754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 37.807831][ T3754] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.105: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.834449][ T3754] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.105: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.907351][ T3778] sctp: [Deprecated]: syz.2.115 (pid 3778) Use of int in max_burst socket option deprecated. [ 37.907351][ T3778] Use struct sctp_assoc_value instead [ 37.928462][ T3754] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.105: Failed to acquire dquot type 0 [ 37.959954][ T3754] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 37.976378][ T3754] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.105: mark_inode_dirty error [ 38.017026][ T3754] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 38.036679][ T3754] EXT4-fs (loop1): 1 orphan inode deleted [ 38.042825][ T3754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.056667][ T1855] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 38.076219][ T1855] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 38.095380][ T3754] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm syz.1.105: lblock 1 mapped to illegal pblock 1 (length 1) [ 38.120991][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.131621][ T3318] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 38.144602][ T3318] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 38.157488][ T3794] EXT4-fs: Ignoring removed nobh option [ 38.181479][ T3794] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.122: corrupted inode contents [ 38.193646][ T3794] EXT4-fs (loop0): Remounting filesystem read-only [ 38.200377][ T3318] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 38.208167][ T3793] netlink: 168 bytes leftover after parsing attributes in process `syz.2.121'. [ 38.221349][ T3794] EXT4-fs (loop0): 1 truncate cleaned up [ 38.243036][ T3794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.272015][ T3009] udevd[3009]: worker [3308] terminated by signal 33 (Unknown signal 33) [ 38.278664][ T3794] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.292801][ T3009] udevd[3009]: worker [3308] failed while handling '/devices/virtual/block/loop2' [ 38.315005][ T3794] syz.0.122 (3794) used greatest stack depth: 9696 bytes left [ 38.376511][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.564667][ T3833] xt_hashlimit: max too large, truncated to 1048576 [ 38.670235][ T3837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.724842][ T3837] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 38.792489][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.943433][ T3870] Process accounting resumed [ 39.042573][ T3426] kernel write not supported for file bpf-map (pid: 3426 comm: kworker/1:5) [ 39.091521][ T3896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3896 comm=syz.4.169 [ 39.142096][ T3899] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 39.156842][ T3903] sctp: [Deprecated]: syz.1.172 (pid 3903) Use of int in maxseg socket option. [ 39.156842][ T3903] Use struct sctp_assoc_value instead [ 39.177622][ T3899] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 39.185268][ T3899] FAT-fs (loop3): Filesystem has been set read-only [ 39.501348][ T3945] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.522909][ T3943] syz_tun: entered allmulticast mode [ 39.527041][ T3945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.564790][ T3938] program syz.3.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.587758][ T3943] syz_tun: left allmulticast mode [ 39.606832][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.628990][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 39.629014][ T29] audit: type=1400 audit(1765449039.530:297): avc: denied { allowed } for pid=3951 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.666043][ T3954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.193'. [ 39.733125][ T29] audit: type=1400 audit(1765449039.530:298): avc: denied { create } for pid=3951 comm="syz.4.194" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.754369][ T29] audit: type=1400 audit(1765449039.530:299): avc: denied { map } for pid=3951 comm="syz.4.194" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.778330][ T29] audit: type=1400 audit(1765449039.530:300): avc: denied { read write } for pid=3951 comm="syz.4.194" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.788298][ T3960] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.197' sets config #0 [ 39.802876][ T29] audit: type=1400 audit(1765449039.530:301): avc: denied { create } for pid=3951 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.844973][ T29] audit: type=1400 audit(1765449039.630:302): avc: denied { append } for pid=3958 comm="syz.3.197" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.910369][ T29] audit: type=1400 audit(1765449039.810:303): avc: denied { create } for pid=3967 comm="syz.2.200" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.987155][ T29] audit: type=1400 audit(1765449039.810:304): avc: denied { write } for pid=3967 comm="syz.2.200" name="file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.009497][ T29] audit: type=1400 audit(1765449039.810:305): avc: denied { open } for pid=3967 comm="syz.2.200" path="/26/file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.032043][ T29] audit: type=1400 audit(1765449039.810:306): avc: denied { ioctl } for pid=3967 comm="syz.2.200" path="/26/file0" dev="tmpfs" ino=155 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.111655][ T3980] set_capacity_and_notify: 7 callbacks suppressed [ 40.111681][ T3980] loop3: detected capacity change from 0 to 4096 [ 40.142304][ T3980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.301789][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.640495][ T4013] loop3: detected capacity change from 0 to 4096 [ 40.655864][ T4013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.733392][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.789562][ T4023] loop2: detected capacity change from 0 to 512 [ 40.806412][ T4023] EXT4-fs: Ignoring removed orlov option [ 40.812186][ T4023] EXT4-fs: Ignoring removed bh option [ 40.874349][ T4023] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 40.900831][ T4023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a04ec118, mo2=0002] [ 40.914555][ T4032] loop0: detected capacity change from 0 to 2048 [ 40.926606][ T4023] System zones: 1-12 [ 40.930969][ T4023] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.227: inode #15: comm syz.2.227: iget: illegal inode # [ 40.955085][ T4023] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.227: couldn't read orphan inode 15 (err -117) [ 40.992516][ T4023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.005991][ T23] IPVS: starting estimator thread 0... [ 41.011920][ T3310] loop0: p1 < > p4 [ 41.027763][ T3310] loop0: p4 size 8388608 extends beyond EOD, truncated [ 41.049767][ T4023] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #12: comm syz.2.227: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 41.069614][ T4032] loop0: p1 < > p4 [ 41.079414][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.097903][ T4032] loop0: p4 size 8388608 extends beyond EOD, truncated [ 41.106812][ T4038] IPVS: using max 2256 ests per chain, 112800 per kthread [ 41.192028][ T4050] loop1: detected capacity change from 0 to 256 [ 41.231114][ T4050] FAT-fs (loop1): Directory bread(block 64) failed [ 41.249011][ T4050] FAT-fs (loop1): Directory bread(block 65) failed [ 41.256393][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 41.260851][ T4050] FAT-fs (loop1): Directory bread(block 66) failed [ 41.265256][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 41.272810][ T4050] FAT-fs (loop1): Directory bread(block 67) failed [ 41.287464][ T4050] FAT-fs (loop1): Directory bread(block 68) failed [ 41.297956][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.309178][ T3683] udevd[3683]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 41.323862][ T4050] FAT-fs (loop1): Directory bread(block 69) failed [ 41.342715][ T4050] FAT-fs (loop1): Directory bread(block 70) failed [ 41.364542][ T4050] FAT-fs (loop1): Directory bread(block 71) failed [ 41.367831][ T3683] udevd[3683]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 41.374663][ T4050] FAT-fs (loop1): Directory bread(block 72) failed [ 41.383976][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.401543][ T4050] FAT-fs (loop1): Directory bread(block 73) failed [ 41.404911][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 41.510392][ T4050] syz.1.237: attempt to access beyond end of device [ 41.510392][ T4050] loop1: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 41.546842][ T4050] syz.1.237: attempt to access beyond end of device [ 41.546842][ T4050] loop1: rw=2049, sector=1288, nr_sectors = 44 limit=256 [ 41.652625][ T4091] sch_tbf: burst 4979 is lower than device lo mtu (65550) ! [ 41.742191][ T4101] loop0: detected capacity change from 0 to 1024 [ 41.788353][ T4101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.818727][ T4101] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.868544][ T4111] loop3: detected capacity change from 0 to 512 [ 41.907225][ T4111] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 41.963687][ T4111] EXT4-fs (loop3): orphan cleanup on readonly fs [ 41.977646][ T1855] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm kworker/u8:10: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.997551][ T4111] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.263: corrupted inode contents [ 42.011646][ T1855] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 42.024018][ T1855] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.024018][ T1855] [ 42.047635][ T4111] EXT4-fs (loop3): Remounting filesystem read-only [ 42.076000][ T4111] EXT4-fs (loop3): 1 truncate cleaned up [ 42.086726][ T1855] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.097343][ T1855] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.121459][ T4128] unsupported nla_type 52263 [ 42.153225][ T1855] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 42.183250][ T4111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.183492][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.228601][ T4134] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.282958][ T4139] syz.0.267 (4139) used greatest stack depth: 9160 bytes left [ 42.296879][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.398601][ T4153] raw_sendmsg: syz.3.280 forgot to set AF_INET. Fix it! [ 42.567471][ T4169] loop0: detected capacity change from 0 to 2048 [ 42.592913][ T4169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.686922][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.930111][ T4201] netlink: 64 bytes leftover after parsing attributes in process `syz.0.301'. [ 42.983118][ T4207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 43.022183][ T4207] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 43.139627][ T4218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.309'. [ 43.360540][ T4241] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 43.368614][ T4241] vhci_hcd vhci_hcd.2: invalid port number 96 [ 43.374713][ T4241] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 43.399741][ T4252] program syz.2.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.506299][ T4267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 43.515365][ T4267] netlink: 'syz.2.333': attribute type 7 has an invalid length. [ 43.523144][ T4267] netlink: 'syz.2.333': attribute type 8 has an invalid length. [ 43.530990][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 43.549149][ T4267] gretap0: entered promiscuous mode [ 43.557561][ T4267] gretap0: left promiscuous mode [ 43.639910][ T4276] syz.2.336 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.686333][ T4280] loop2: detected capacity change from 0 to 512 [ 43.693948][ T4280] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 43.851327][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 43.895067][ T4298] IPv6: Can't replace route, no match found [ 43.961162][ T4304] tap0: tun_chr_ioctl cmd 2148553947 [ 43.973993][ T4306] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.455066][ T4371] loop0: detected capacity change from 0 to 512 [ 44.467768][ T3009] ================================================================== [ 44.475899][ T3009] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 44.483389][ T3009] [ 44.485740][ T3009] write to 0xffff888107d13f00 of 4 bytes by task 4046 on cpu 1: [ 44.493390][ T3009] d_make_discardable+0x4f/0xa0 [ 44.498291][ T3009] simple_unlink+0x68/0x80 [ 44.502732][ T3009] shmem_unlink+0x12d/0x140 [ 44.507255][ T3009] vfs_unlink+0x28b/0x440 [ 44.511597][ T3009] do_unlinkat+0x1cd/0x4b0 [ 44.516015][ T3009] __x64_sys_unlink+0x2e/0x40 [ 44.520702][ T3009] x64_sys_call+0x2f48/0x3000 [ 44.525391][ T3009] do_syscall_64+0xd8/0x2a0 [ 44.529911][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.535815][ T3009] [ 44.538143][ T3009] read to 0xffff888107d13f00 of 4 bytes by task 3009 on cpu 0: [ 44.545686][ T3009] do_readlinkat+0x9f/0x320 [ 44.550205][ T3009] __x64_sys_readlink+0x47/0x60 [ 44.555067][ T3009] x64_sys_call+0x2af1/0x3000 [ 44.559754][ T3009] do_syscall_64+0xd8/0x2a0 [ 44.564272][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.570168][ T3009] [ 44.572488][ T3009] value changed: 0x08300080 -> 0x00300180 [ 44.578202][ T3009] [ 44.580538][ T3009] Reported by Kernel Concurrency Sanitizer on: [ 44.586705][ T3009] CPU: 0 UID: 0 PID: 3009 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.595994][ T3009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.606056][ T3009] ==================================================================