last executing test programs: 1.564374956s ago: executing program 4 (id=190): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000400)={'system_u:object_r:src_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x40}, 0x47) 1.466407656s ago: executing program 4 (id=191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) nanosleep(&(0x7f00000001c0), 0x0) 1.325979419s ago: executing program 4 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 948.450217ms ago: executing program 4 (id=202): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {r2, r3+10000000}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) close(0x3) 851.387796ms ago: executing program 4 (id=212): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000180)) 788.325352ms ago: executing program 4 (id=213): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000007b80)=[{{0x0, 0x600, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002a40)=""/181, 0xb5}], 0x1}, 0x5}], 0x2, 0x10000, 0x0) 669.432414ms ago: executing program 1 (id=220): setitimer(0x1, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x8000}, 0x18) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 611.5309ms ago: executing program 1 (id=224): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x70bd2d, 0xffffffff, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x60042800}, 0xc4c0) 610.64768ms ago: executing program 1 (id=226): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffff00], 'bridge_slave_1\x00', 'veth1_to_hsr\x00', {}, {}, 0x84, 0x5, 0x2, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0xe08, 0x1}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0x8da550356861e01, 0xffffffff, 0xff000000], [0xff000000, 0x0, 0x0, 0xffffffff], 'veth1\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x6, 0x1, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 591.373492ms ago: executing program 1 (id=228): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") linkat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1000) 521.830399ms ago: executing program 0 (id=229): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef5", 0xb) 521.497908ms ago: executing program 0 (id=230): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 521.314149ms ago: executing program 2 (id=231): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x48) pwrite64(r3, &(0x7f0000000380)="32401c48c2c84d37242d270ff4c9835fa542ef069b6193db73ecad9db4cc2ac6b1c522d77350642f7ab416e81079759c485a7262af374a7c6dc034ccc939cbd0fe379ceb509a8dcb45f6ffad794a", 0x4e, 0x1fecd) fallocate(r2, 0x0, 0x6, 0x2000402) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 437.507527ms ago: executing program 1 (id=233): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x20010080) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 316.369379ms ago: executing program 3 (id=234): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() process_vm_readv(r1, &(0x7f0000005880), 0x0, 0x0, 0x0, 0x0) 316.158699ms ago: executing program 2 (id=235): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 315.058339ms ago: executing program 0 (id=236): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 309.52008ms ago: executing program 3 (id=237): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42"], 0x120}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) io_setup(0x6, &(0x7f00000000c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x1a1081, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100)='9', 0x20000108}]) 303.1233ms ago: executing program 2 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 260.504674ms ago: executing program 1 (id=239): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xffc3, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 120.422278ms ago: executing program 0 (id=240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4044000) 120.217588ms ago: executing program 2 (id=241): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 120.023568ms ago: executing program 0 (id=242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 117.594799ms ago: executing program 2 (id=243): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 107.81562ms ago: executing program 3 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 67.682013ms ago: executing program 2 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 352.53µs ago: executing program 0 (id=246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x6, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 205.1µs ago: executing program 3 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000007d000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 113.88µs ago: executing program 3 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f0000001240)) 0s ago: executing program 3 (id=249): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x3) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x7, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.199' (ED25519) to the list of known hosts. [ 24.093916][ T24] audit: type=1400 audit(1760900032.910:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.095319][ T267] cgroup: Unknown subsys name 'net' [ 24.117147][ T24] audit: type=1400 audit(1760900032.910:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.144634][ T24] audit: type=1400 audit(1760900032.940:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.145092][ T267] cgroup: Unknown subsys name 'devices' [ 24.286753][ T267] cgroup: Unknown subsys name 'hugetlb' [ 24.292376][ T267] cgroup: Unknown subsys name 'rlimit' [ 24.493080][ T24] audit: type=1400 audit(1760900033.310:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.516232][ T24] audit: type=1400 audit(1760900033.310:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.523553][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.541228][ T24] audit: type=1400 audit(1760900033.310:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.572688][ T24] audit: type=1400 audit(1760900033.380:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.572716][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.598363][ T24] audit: type=1400 audit(1760900033.380:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.632668][ T24] audit: type=1400 audit(1760900033.380:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.658195][ T24] audit: type=1400 audit(1760900033.380:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.956590][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.963697][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.971318][ T275] device bridge_slave_0 entered promiscuous mode [ 25.979423][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.986494][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.993970][ T275] device bridge_slave_1 entered promiscuous mode [ 26.064337][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.071437][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.078894][ T276] device bridge_slave_0 entered promiscuous mode [ 26.085950][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.093077][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.100547][ T276] device bridge_slave_1 entered promiscuous mode [ 26.151404][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.158548][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.166011][ T277] device bridge_slave_0 entered promiscuous mode [ 26.175152][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.182283][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.189835][ T277] device bridge_slave_1 entered promiscuous mode [ 26.233475][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.240781][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.248237][ T278] device bridge_slave_0 entered promiscuous mode [ 26.257272][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.264416][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.271949][ T278] device bridge_slave_1 entered promiscuous mode [ 26.283328][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.290502][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.297928][ T279] device bridge_slave_0 entered promiscuous mode [ 26.304785][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.311995][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.319443][ T279] device bridge_slave_1 entered promiscuous mode [ 26.388630][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.395709][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.403105][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.410169][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.463447][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.470661][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.477939][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.485150][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.497967][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.505040][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.512297][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.519345][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.534459][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.541536][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.548849][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.555894][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.576062][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.583267][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.590681][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.597735][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.607563][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.615931][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.624429][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.631728][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.639269][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.646685][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.653925][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.661476][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.669075][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.676428][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.684079][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.691612][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.716418][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.724003][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.732906][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.739991][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.747843][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.768514][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.777439][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.784488][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.799382][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.806891][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.814805][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.823042][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.830084][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.848220][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.856851][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.863959][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.871440][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.879910][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.898903][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.906724][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.915212][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.923175][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.931376][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.939187][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.947526][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.956329][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.963666][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.971920][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.978968][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.986474][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.009242][ T275] device veth0_vlan entered promiscuous mode [ 27.016501][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.024623][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.032932][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.041757][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.049926][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.058403][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.066790][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.074140][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.081644][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.089572][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.097737][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.105198][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.115414][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.123525][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.131653][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.140265][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.148594][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.155627][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.163181][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.171571][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.179811][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.186911][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.197478][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.205902][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.214749][ T277] device veth0_vlan entered promiscuous mode [ 27.227533][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.235861][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.248251][ T276] device veth0_vlan entered promiscuous mode [ 27.266238][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.274358][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.282668][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.290838][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.299224][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.307820][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.316312][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.323970][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.333220][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.341671][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.355410][ T277] device veth1_macvtap entered promiscuous mode [ 27.362178][ T279] device veth0_vlan entered promiscuous mode [ 27.368505][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.376394][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.384694][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.393238][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.401774][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.409954][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.417915][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.426061][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.433541][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.445763][ T278] device veth0_vlan entered promiscuous mode [ 27.458233][ T276] device veth1_macvtap entered promiscuous mode [ 27.465994][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.473968][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.482197][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.490511][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.499637][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.508243][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.516612][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.524951][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.533046][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.540800][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.548863][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.557635][ T275] device veth1_macvtap entered promiscuous mode [ 27.571986][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.579858][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.588303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.597596][ T279] device veth1_macvtap entered promiscuous mode [ 27.607648][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.615550][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.623772][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.632281][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.640676][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.652132][ T278] device veth1_macvtap entered promiscuous mode [ 27.660486][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.669058][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.677661][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.696731][ T277] request_module fs-gadgetfs succeeded, but still no fs? [ 27.705819][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.714276][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.722700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.731354][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.740191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.748814][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.757267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.765712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.774717][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.783018][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.796986][ T277] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 27.832905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.841395][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.873762][ T299] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 27.883636][ T302] SELinux: Context Ü is not valid (left unmapped). [ 27.885548][ T299] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.908890][ T299] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.2: corrupted xattr block 32 [ 27.945872][ T299] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 27.955097][ T299] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.2: corrupted xattr block 32 [ 27.967691][ T299] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 27.977702][ T299] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.2: corrupted xattr block 32 [ 27.989494][ T299] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 27.999564][ T299] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.2: corrupted xattr block 32 [ 28.011361][ T299] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.2: corrupted xattr block 32 [ 28.023371][ T299] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 28.023825][ T316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 28.032544][ T299] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 197 vs 206 free clusters [ 28.123704][ T318] sch_tbf: peakrate 9 is lower than or equals to rate 6829859379779001161 ! [ 28.248010][ T322] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 28.257262][ T322] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.373010][ T331] netlink: 'syz.4.12': attribute type 13 has an invalid length. [ 28.415287][ T332] loop1: unable to read partition table [ 28.422142][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.429405][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.435651][ T332] loop1: partition table beyond EOD, truncated [ 28.448693][ T332] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 28.486548][ T95] loop1: unable to read partition table [ 28.501132][ T344] syz.4.12 (344) used obsolete PPPIOCDETACH ioctl [ 28.510438][ T95] loop1: partition table beyond EOD, truncated [ 28.722633][ T356] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue [ 28.840436][ T386] EXT4-fs (loop3): orphan cleanup on readonly fs [ 28.870795][ T386] EXT4-fs warning (device loop3): ext4_xattr_inode_get:495: inode #11: comm syz.3.32: ea_inode file size=4 entry size=6 [ 28.899888][ T382] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.916577][ T386] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.919795][ T382] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1376 with error 28 [ 28.942905][ T382] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.942905][ T382] [ 28.952890][ T382] EXT4-fs (loop1): Total free blocks count 0 [ 28.957292][ T386] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 28.974279][ T382] EXT4-fs (loop1): Free/Dirty block details [ 28.980741][ T382] EXT4-fs (loop1): free_blocks=2415919104 [ 28.986706][ T382] EXT4-fs (loop1): dirty_blocks=1392 [ 28.990734][ T386] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #15: comm syz.3.32: mark_inode_dirty error [ 28.992001][ T382] EXT4-fs (loop1): Block reservation details [ 28.992009][ T382] EXT4-fs (loop1): i_reserved_data_blocks=87 [ 29.021063][ T386] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 29.031822][ T399] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,,errors=continue [ 29.046456][ T386] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2959: inode #15: comm syz.3.32: mark_inode_dirty error [ 29.064732][ T386] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.32: mark inode dirty (error -27) [ 29.077724][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 29.097261][ T49] EXT4-fs (loop1): This should not happen!! Data will be lost [ 29.097261][ T49] [ 29.107539][ T386] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -27) [ 29.118225][ T386] EXT4-fs (loop3): 1 orphan inode deleted [ 29.119719][ T413] syz.0.44[413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.124106][ T386] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue [ 29.135501][ T413] syz.0.44[413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.167690][ T413] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 29.206213][ T410] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 29.233504][ T420] syz.0.45 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 29.265394][ T410] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.289865][ T423] SELinux: policydb version 0 does not match my version range 15-33 [ 29.298140][ T24] kauditd_printk_skb: 85 callbacks suppressed [ 29.298152][ T24] audit: type=1400 audit(1760900038.110:159): avc: denied { load_policy } for pid=421 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 29.324961][ T423] SELinux: failed to load policy [ 29.354628][ T24] audit: type=1400 audit(1760900038.160:160): avc: denied { setopt } for pid=424 comm="syz.3.47" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.375492][ T24] audit: type=1400 audit(1760900038.160:161): avc: denied { connect } for pid=424 comm="syz.3.47" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.413249][ T24] audit: type=1326 audit(1760900038.230:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=426 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e6adffc9 code=0x7ffc0000 [ 29.437122][ T24] audit: type=1326 audit(1760900038.230:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=426 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e6adffc9 code=0x7ffc0000 [ 29.471796][ T24] audit: type=1326 audit(1760900038.230:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=426 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f74e6adffc9 code=0x7ffc0000 [ 29.496922][ T24] audit: type=1400 audit(1760900038.230:165): avc: denied { watch watch_reads } for pid=426 comm="syz.4.48" path="/10/file0" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.520054][ T24] audit: type=1326 audit(1760900038.230:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=426 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e6adffc9 code=0x7ffc0000 [ 29.543289][ T24] audit: type=1326 audit(1760900038.230:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=426 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e6adffc9 code=0x7ffc0000 [ 29.567999][ T24] audit: type=1326 audit(1760900038.320:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=428 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d7446fc9 code=0x7ffc0000 [ 29.593078][ T433] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.52: casefold flag without casefold feature [ 29.605858][ T433] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.52: couldn't read orphan inode 15 (err -117) [ 29.619937][ T433] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.667273][ T442] ====================================================== [ 29.667273][ T442] WARNING: the mand mount option is being deprecated and [ 29.667273][ T442] will be removed in v5.15! [ 29.667273][ T442] ====================================================== [ 29.717840][ T442] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.762952][ T442] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,sysvgroups,discard,data_err=ignore,grpquota,nojournal_checksum,user_xattr,block_validity,errors=remount-ro, [ 29.844948][ T469] netlink: 'syz.0.65': attribute type 13 has an invalid length. [ 29.897213][ T477] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.922935][ T477] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 29.933095][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.934775][ T477] EXT4-fs (loop3): 1 truncate cleaned up [ 29.940344][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.946165][ T477] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001fe,stripe=0x0000000000000000,noblock_validity,,errors=continue [ 29.974020][ T477] EXT4-fs error (device loop3): ext4_generic_delete_entry:2683: inode #2: block 13: comm syz.3.69: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 30.000495][ T477] EXT4-fs error (device loop3) in ext4_delete_entry:2741: Corrupt filesystem [ 30.030006][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.037315][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.064104][ T484] device bridge_slave_1 left promiscuous mode [ 30.088004][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.114230][ T484] device bridge_slave_0 left promiscuous mode [ 30.120785][ T484] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.154893][ T295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.165335][ T500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 30.184293][ T502] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 30.375390][ T525] tipc: Started in network mode [ 30.385231][ T525] tipc: Own node identity e67a03bd1c43, cluster identity 4711 [ 30.393135][ T525] tipc: Enabled bearer , priority 0 [ 30.394950][ T295] usb 5-1: Using ep0 maxpacket: 16 [ 30.405817][ T524] tipc: Resetting bearer [ 30.418223][ T524] tipc: Disabling bearer [ 30.481130][ T537] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.496213][ T537] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.535062][ T295] usb 5-1: config index 0 descriptor too short (expected 2433, got 27) [ 30.547284][ T295] usb 5-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 30.557773][ T295] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 5 [ 30.700668][ T546] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,auto_da_alloc,block_validity,,errors=continue [ 30.736269][ T538] loop1: p1 p2 p3 < p5 p6 > [ 30.742383][ T538] loop1: p2 size 16775168 extends beyond EOD, truncated [ 30.746027][ T546] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 30.749746][ T295] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 30.767812][ T538] loop1: p5 start 4294970168 is beyond EOD, truncated [ 30.777493][ T295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.792774][ T295] usb 5-1: Product: syz [ 30.797122][ T295] usb 5-1: Manufacturer: syz [ 30.801787][ T295] usb 5-1: SerialNumber: syz [ 30.813463][ T546] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #15: comm syz.3.98: mark_inode_dirty error [ 30.825182][ T546] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 30.833672][ T546] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #15: comm syz.3.98: mark_inode_dirty error [ 30.845369][ T546] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 30.853815][ T546] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #15: comm syz.3.98: mark_inode_dirty error [ 30.865270][ T546] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 30.873713][ T546] EXT4-fs error (device loop3): ext4_truncate:4390: inode #15: comm syz.3.98: mark_inode_dirty error [ 30.884929][ T546] EXT4-fs error (device loop3): ext4_evict_inode:294: comm syz.3.98: couldn't truncate inode 15 (err -27) [ 30.959505][ T305] udevd[305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 30.962771][ T298] udevd[298]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 30.980342][ T457] udevd[457]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 30.991345][ T359] udevd[359]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 31.085839][ T295] usb 5-1: USB disconnect, device number 2 [ 31.120052][ T584] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 31.245335][ T592] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue [ 31.309318][ T601] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.326762][ T601] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.340192][ T601] EXT4-fs (loop2): 1 truncate cleaned up [ 31.346038][ T601] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache, [ 31.376239][ T606] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.391126][ T606] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1236 with error 28 [ 31.403635][ T606] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.403635][ T606] [ 31.413440][ T606] EXT4-fs (loop3): Total free blocks count 0 [ 31.419709][ T606] EXT4-fs (loop3): Free/Dirty block details [ 31.440218][ T606] EXT4-fs (loop3): free_blocks=2415919104 [ 31.445279][ T53] kernel write not supported for file bpf-prog (pid: 53 comm: kworker/1:2) [ 31.446362][ T606] EXT4-fs (loop3): dirty_blocks=1248 [ 31.460759][ T606] EXT4-fs (loop3): Block reservation details [ 31.469395][ T613] EXT4-fs (loop1): Ignoring removed orlov option [ 31.476050][ T613] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 31.482103][ T606] EXT4-fs (loop3): i_reserved_data_blocks=78 [ 31.488470][ T613] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 31.498705][ T609] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 31.523576][ T609] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.523576][ T609] [ 31.550404][ T615] EXT4-fs (loop2): failed to initialize system zone (-117) [ 31.557986][ T615] EXT4-fs (loop2): mount failed [ 31.804276][ T634] netlink: 3 bytes leftover after parsing attributes in process `syz.4.130'. [ 31.813327][ T634] 0ªX¹¦À: renamed from wg2 [ 31.819355][ T634] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 31.857914][ T632] tipc: Started in network mode [ 31.867593][ T632] tipc: Own node identity 926ed738ecbe, cluster identity 4711 [ 31.875333][ T632] tipc: Enabled bearer , priority 0 [ 31.884079][ T631] tipc: Resetting bearer [ 31.898820][ T631] tipc: Disabling bearer [ 32.036002][ T648] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.055900][ T648] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.084509][ T7] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.207412][ T669] EXT4-fs (loop4): too many log groups per flexible block group [ 32.227950][ T669] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 32.234955][ T669] EXT4-fs (loop4): mount failed [ 32.251239][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.258884][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.266946][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.274423][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.282093][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.289567][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.297184][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.304603][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.312274][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.319750][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.330467][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.338005][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.354584][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.364034][ T680] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.147: bg 0: block 248: padding at end of block bitmap is not set [ 32.378446][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.378464][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.378480][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.378506][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.386605][ T680] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.147: Failed to acquire dquot type 1 [ 32.410172][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.429322][ T680] EXT4-fs (loop2): 1 truncate cleaned up [ 32.435203][ T680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 32.444265][ T680] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.445831][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.462739][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.470453][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.478145][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.485676][ T693] FAT-fs (loop3): bogus number of directory entries (390) [ 32.485683][ T693] FAT-fs (loop3): Can't find a valid FAT filesystem [ 32.500058][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.507642][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.515294][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.522898][ T340] hid-generic 0000:0000:813B.0001: unknown main item tag 0x0 [ 32.532363][ T340] hid-generic 0000:0000:813B.0001: hidraw0: HID v0.85 Device [] on aller [ 32.604759][ T20] hid-generic 0000:0000:10001.0002: unknown main item tag 0x0 [ 32.616056][ T20] hid-generic 0000:0000:10001.0002: unknown main item tag 0x0 [ 32.627463][ T20] hid-generic 0000:0000:10001.0002: unknown main item tag 0x0 [ 32.635250][ T20] hid-generic 0000:0000:10001.0002: unknown main item tag 0x0 [ 32.642807][ T20] hid-generic 0000:0000:10001.0002: unknown main item tag 0x0 [ 32.651463][ T20] hid-generic 0000:0000:10001.0002: unknown main item tag 0x0 [ 32.659178][ T20] hid-generic 0000:0000:10001.0002: unknown main item tag 0x0 [ 32.666823][ T20] hid-generic 0000:0000:10001.0002: unknown main item tag 0x0 [ 32.675174][ T20] hid-generic 0000:0000:10001.0002: item fetching failed at offset 8/43 [ 32.686207][ T704] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.153: casefold flag without casefold feature [ 32.700789][ T20] hid-generic: probe of 0000:0000:10001.0002 failed with error -22 [ 32.726791][ T713] fido_id[713]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.740439][ T704] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.153: couldn't read orphan inode 15 (err -117) [ 32.837349][ T704] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 33.125630][ T741] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 33.135107][ T741] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 33.215219][ T741] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 33.223624][ T741] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 33.231930][ T741] System zones: 0-1, 15-15, 18-18, 34-34 [ 33.238126][ T741] EXT4-fs (loop0): orphan cleanup on readonly fs [ 33.244536][ T741] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 33.259229][ T741] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 33.271385][ T741] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.166: bg 0: block 40: padding at end of block bitmap is not set [ 33.286022][ T741] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 33.295223][ T741] EXT4-fs (loop0): 1 truncate cleaned up [ 33.300896][ T741] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,nogrpid,dioread_lock,,errors=continue [ 34.315355][ T764] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue [ 34.330782][ T764] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.390552][ T764] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:404: inode #2: comm syz.1.178: No space for directory leaf checksum. Please run e2fsck -D. [ 34.414944][ T764] EXT4-fs error (device loop1): __ext4_find_entry:1668: inode #2: comm syz.1.178: checksumming directory block 0 [ 34.415657][ T24] kauditd_printk_skb: 553 callbacks suppressed [ 34.415671][ T24] audit: type=1400 audit(1760900043.240:719): avc: denied { create } for pid=777 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.512027][ T24] audit: type=1400 audit(1760900043.330:720): avc: denied { read } for pid=779 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.708221][ T788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 34.719613][ T24] audit: type=1326 audit(1760900043.540:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=789 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdceb083fc9 code=0x7ffc0000 [ 34.748243][ T790] syz.1.187[790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.748450][ T790] syz.1.187[790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.799783][ T24] audit: type=1326 audit(1760900043.560:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=789 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdceb083fc9 code=0x7ffc0000 [ 34.921115][ T24] audit: type=1326 audit(1760900043.570:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=789 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdceb083fc9 code=0x7ffc0000 [ 34.994718][ T799] device pim6reg1 entered promiscuous mode [ 35.021943][ T24] audit: type=1326 audit(1760900043.570:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=791 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7a49fc9 code=0x7ffc0000 [ 35.148332][ T807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 35.157516][ T24] audit: type=1326 audit(1760900043.570:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=791 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f91d7a49fc9 code=0x7ffc0000 [ 35.184034][ T24] audit: type=1326 audit(1760900043.570:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=791 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7a49fc9 code=0x7ffc0000 [ 35.208127][ T24] audit: type=1326 audit(1760900043.570:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=791 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91d7a49fc9 code=0x7ffc0000 [ 35.231906][ T24] audit: type=1326 audit(1760900043.570:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=791 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d7a49fc9 code=0x7ffc0000 [ 35.594920][ T53] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 35.606402][ T53] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 35.614186][ T53] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 35.624042][ T53] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 35.646242][ T858] fido_id[858]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.767967][ T878] syz.2.223[878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.768025][ T878] syz.2.223[878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.864703][ T888] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.228: casefold flag without casefold feature [ 35.889333][ T888] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.228: couldn't read orphan inode 15 (err -117) [ 35.901744][ T888] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 35.912091][ T893] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.923794][ T893] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 35.938446][ T893] EXT4-fs (loop0): 1 truncate cleaned up [ 35.944157][ T893] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue [ 36.006300][ T897] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 36.017213][ T903] netlink: 80 bytes leftover after parsing attributes in process `syz.3.232'. [ 36.026311][ T903] netlink: 80 bytes leftover after parsing attributes in process `syz.3.232'. [ 36.036069][ T903] netlink: 80 bytes leftover after parsing attributes in process `syz.3.232'. [ 36.087029][ T907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 36.230328][ T913] 9pnet: Insufficient options for proto=fd [ 36.308970][ T924] tipc: Started in network mode [ 36.313999][ T924] tipc: Own node identity ac14140f, cluster identity 4711 [ 36.321513][ T924] tipc: New replicast peer: 255.255.255.83 [ 36.327585][ T924] tipc: Enabled bearer , priority 10 [ 36.334007][ T926] process 'syz.3.244' launched './file0' with NULL argv: empty string added [ 36.335019][ T922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 36.417608][ T932] ================================================================== [ 36.425770][ T932] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 36.433960][ T932] Read of size 8 at addr ffff88811241a2c0 by task syz.0.246/932 [ 36.441866][ T932] [ 36.444244][ T932] CPU: 0 PID: 932 Comm: syz.0.246 Not tainted syzkaller #0 [ 36.451441][ T932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 36.461491][ T932] Call Trace: [ 36.464786][ T932] __dump_stack+0x21/0x24 [ 36.469142][ T932] dump_stack_lvl+0x169/0x1d8 [ 36.473828][ T932] ? show_regs_print_info+0x18/0x18 [ 36.479040][ T932] ? thaw_kernel_threads+0x220/0x220 [ 36.484324][ T932] print_address_description+0x7f/0x2c0 [ 36.489878][ T932] ? tc_setup_flow_action+0x842/0x3280 [ 36.495336][ T932] kasan_report+0xe2/0x130 [ 36.499764][ T932] ? flow_action_cookie_create+0x28/0x90 [ 36.505420][ T932] ? tc_setup_flow_action+0x842/0x3280 [ 36.510883][ T932] __asan_report_load8_noabort+0x14/0x20 [ 36.516541][ T932] tc_setup_flow_action+0x842/0x3280 [ 36.521914][ T932] ? __kmalloc+0x1a7/0x330 [ 36.526330][ T932] ? flow_rule_alloc+0x32/0x2c0 [ 36.531180][ T932] mall_replace_hw_filter+0x293/0x810 [ 36.536907][ T932] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 36.543004][ T932] ? mall_set_parms+0x410/0x410 [ 36.547957][ T932] ? tcf_exts_destroy+0xb0/0xb0 [ 36.552808][ T932] ? pcpu_alloc+0xf8a/0x16b0 [ 36.557405][ T932] ? mall_set_parms+0x19d/0x410 [ 36.562266][ T932] mall_change+0x528/0x750 [ 36.566839][ T932] ? __kasan_check_write+0x14/0x20 [ 36.571953][ T932] ? mall_get+0xa0/0xa0 [ 36.576116][ T932] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 36.582011][ T932] ? nla_strcmp+0xf4/0x140 [ 36.586428][ T932] tc_new_tfilter+0x13f6/0x1a10 [ 36.591291][ T932] ? mall_get+0xa0/0xa0 [ 36.595443][ T932] ? tcf_gate_entry_destructor+0x20/0x20 [ 36.601074][ T932] ? security_capable+0x87/0xb0 [ 36.605920][ T932] ? ns_capable+0x8c/0xf0 [ 36.610247][ T932] ? netlink_net_capable+0x125/0x160 [ 36.615530][ T932] ? tcf_gate_entry_destructor+0x20/0x20 [ 36.621157][ T932] rtnetlink_rcv_msg+0x800/0xb90 [ 36.626092][ T932] ? rtnetlink_bind+0x80/0x80 [ 36.630761][ T932] ? arch_stack_walk+0xee/0x140 [ 36.635694][ T932] ? stack_trace_save+0x98/0xe0 [ 36.640538][ T932] ? stack_trace_snprint+0xf0/0xf0 [ 36.645651][ T932] ? memcpy+0x56/0x70 [ 36.649649][ T932] ? avc_has_perm+0x234/0x360 [ 36.654325][ T932] ? __kasan_slab_alloc+0xbd/0xf0 [ 36.659445][ T932] ? slab_post_alloc_hook+0x5d/0x2f0 [ 36.664727][ T932] ? ___sys_sendmsg+0x1f0/0x260 [ 36.669574][ T932] ? avc_has_perm_noaudit+0x240/0x240 [ 36.674946][ T932] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 36.680405][ T932] netlink_rcv_skb+0x1e0/0x430 [ 36.685163][ T932] ? rtnetlink_bind+0x80/0x80 [ 36.689838][ T932] ? netlink_ack+0xb80/0xb80 [ 36.694430][ T932] ? __netlink_lookup+0x387/0x3b0 [ 36.699457][ T932] rtnetlink_rcv+0x1c/0x20 [ 36.703871][ T932] netlink_unicast+0x876/0xa40 [ 36.708649][ T932] netlink_sendmsg+0x88d/0xb30 [ 36.713410][ T932] ? netlink_getsockopt+0x530/0x530 [ 36.718777][ T932] ? security_socket_sendmsg+0x82/0xa0 [ 36.724246][ T932] ? netlink_getsockopt+0x530/0x530 [ 36.729438][ T932] ____sys_sendmsg+0x5a2/0x8c0 [ 36.734201][ T932] ? __sys_sendmsg_sock+0x40/0x40 [ 36.739230][ T932] ? import_iovec+0x7c/0xb0 [ 36.743733][ T932] ___sys_sendmsg+0x1f0/0x260 [ 36.748515][ T932] ? __sys_sendmsg+0x250/0x250 [ 36.753281][ T932] ? __fdget+0x1a1/0x230 [ 36.757519][ T932] __x64_sys_sendmsg+0x1e2/0x2a0 [ 36.762553][ T932] ? __kasan_check_write+0x14/0x20 [ 36.767666][ T932] ? ___sys_sendmsg+0x260/0x260 [ 36.772523][ T932] ? __kasan_check_read+0x11/0x20 [ 36.777660][ T932] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 36.783378][ T932] do_syscall_64+0x31/0x40 [ 36.787885][ T932] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.793785][ T932] RIP: 0033:0x7f26d7446fc9 [ 36.798197][ T932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.817806][ T932] RSP: 002b:00007f26d5eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.826219][ T932] RAX: ffffffffffffffda RBX: 00007f26d769dfa0 RCX: 00007f26d7446fc9 [ 36.834191][ T932] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 36.842169][ T932] RBP: 00007f26d74c9f91 R08: 0000000000000000 R09: 0000000000000000 [ 36.850225][ T932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.858192][ T932] R13: 00007f26d769e038 R14: 00007f26d769dfa0 R15: 00007ffcc7159668 [ 36.866165][ T932] [ 36.868488][ T932] Allocated by task 932: [ 36.872740][ T932] __kasan_kmalloc+0xda/0x110 [ 36.877528][ T932] __kmalloc+0x1a7/0x330 [ 36.881772][ T932] tcf_idr_create+0x5f/0x790 [ 36.886360][ T932] tcf_idr_create_from_flags+0x61/0x70 [ 36.891811][ T932] tcf_gact_init+0x2b4/0x520 [ 36.896493][ T932] tcf_action_init_1+0x3e1/0x670 [ 36.901436][ T932] tcf_action_init+0x1e6/0x700 [ 36.906193][ T932] tcf_exts_validate+0x215/0x510 [ 36.911207][ T932] mall_set_parms+0x4b/0x410 [ 36.915789][ T932] mall_change+0x45c/0x750 [ 36.920194][ T932] tc_new_tfilter+0x13f6/0x1a10 [ 36.925037][ T932] rtnetlink_rcv_msg+0x800/0xb90 [ 36.929967][ T932] netlink_rcv_skb+0x1e0/0x430 [ 36.934733][ T932] rtnetlink_rcv+0x1c/0x20 [ 36.939323][ T932] netlink_unicast+0x876/0xa40 [ 36.944078][ T932] netlink_sendmsg+0x88d/0xb30 [ 36.948838][ T932] ____sys_sendmsg+0x5a2/0x8c0 [ 36.953701][ T932] ___sys_sendmsg+0x1f0/0x260 [ 36.958380][ T932] __x64_sys_sendmsg+0x1e2/0x2a0 [ 36.963313][ T932] do_syscall_64+0x31/0x40 [ 36.967755][ T932] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.973721][ T932] [ 36.976058][ T932] The buggy address belongs to the object at ffff88811241a200 [ 36.976058][ T932] which belongs to the cache kmalloc-192 of size 192 [ 36.990127][ T932] The buggy address is located 0 bytes to the right of [ 36.990127][ T932] 192-byte region [ffff88811241a200, ffff88811241a2c0) [ 37.003821][ T932] The buggy address belongs to the page: [ 37.009469][ T932] page:ffffea0004490680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11241a [ 37.019696][ T932] flags: 0x4000000000000200(slab) [ 37.024720][ T932] raw: 4000000000000200 ffffea00043c3900 0000000500000005 ffff888100043380 [ 37.033303][ T932] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 37.041889][ T932] page dumped because: kasan: bad access detected [ 37.048307][ T932] page_owner tracks the page as allocated [ 37.054228][ T932] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 100, ts 5576707690, free_ts 0 [ 37.069605][ T932] prep_new_page+0x179/0x180 [ 37.074196][ T932] get_page_from_freelist+0x2235/0x23d0 [ 37.079786][ T932] __alloc_pages_nodemask+0x268/0x5f0 [ 37.085148][ T932] new_slab+0x84/0x3f0 [ 37.089233][ T932] ___slab_alloc+0x2a6/0x450 [ 37.093822][ T932] __slab_alloc+0x63/0xa0 [ 37.098151][ T932] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 37.103512][ T932] kernfs_fop_open+0x343/0xb30 [ 37.108271][ T932] do_dentry_open+0x793/0x1090 [ 37.113123][ T932] vfs_open+0x73/0x80 [ 37.117104][ T932] path_openat+0x27ad/0x3160 [ 37.121690][ T932] do_filp_open+0x1b3/0x3e0 [ 37.126186][ T932] do_sys_openat2+0x14c/0x6d0 [ 37.130856][ T932] __x64_sys_openat+0x136/0x160 [ 37.135699][ T932] do_syscall_64+0x31/0x40 [ 37.140225][ T932] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.146103][ T932] page_owner free stack trace missing [ 37.151463][ T932] [ 37.153881][ T932] Memory state around the buggy address: [ 37.159537][ T932] ffff88811241a180: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 37.167739][ T932] ffff88811241a200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.175815][ T932] >ffff88811241a280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 37.184057][ T932] ^ [ 37.190298][ T932] ffff88811241a300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.198526][ T932] ffff88811241a380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 37.206664][ T932] ================================================================== [ 37.214740][ T932] Disabling lock debugging due to kernel taint [ 37.384871][ T296] tipc: 32-bit node address hash set to f1414ac