last executing test programs: 745.089846ms ago: executing program 4 (id=69): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 649.890118ms ago: executing program 4 (id=72): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 593.824228ms ago: executing program 4 (id=74): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x20010814) 514.8118ms ago: executing program 4 (id=77): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 466.480061ms ago: executing program 0 (id=79): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 413.739262ms ago: executing program 2 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x44, r1, 0x1, 0x4, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 384.019133ms ago: executing program 3 (id=83): r0 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240), &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0xfeffffff, 0xffffffffffffffff, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 383.855593ms ago: executing program 0 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x1c, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x40}}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20044000) 346.653403ms ago: executing program 2 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fedbdf250e"], 0x4c}}, 0x10) 335.307744ms ago: executing program 0 (id=86): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) 303.922724ms ago: executing program 3 (id=87): openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 300.989874ms ago: executing program 1 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0x44080) 265.043865ms ago: executing program 0 (id=89): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r0) 264.534365ms ago: executing program 4 (id=90): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@jqfmt_vfsv1}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0xca, 0x3, 0x100000a, 0x8, 0x0, 0x0, 0x9f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 259.551785ms ago: executing program 2 (id=91): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x80000) 250.378955ms ago: executing program 1 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'P'}]}], {0x14}}, 0x70}}, 0x0) 204.203036ms ago: executing program 0 (id=93): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd643d0831001021"], 0x0) 203.955356ms ago: executing program 2 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x603, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 199.383156ms ago: executing program 1 (id=95): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000bc0)={r0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x9, 0x9, 0x1, 0x3, 0x1b, 0x3, 0x0, 'syz1\x00'}) 198.967346ms ago: executing program 3 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@val={0x5, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) 152.422337ms ago: executing program 1 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 120.005578ms ago: executing program 3 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="99742dbd7000fbdbdf25150000004c0001"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 84.536808ms ago: executing program 2 (id=99): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x8}, 0x0) 74.195818ms ago: executing program 0 (id=100): memfd_secret(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) 73.740578ms ago: executing program 3 (id=101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) ustat(0x5, &(0x7f0000000000)) 58.777619ms ago: executing program 1 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x4c000) 31.94285ms ago: executing program 1 (id=103): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x1ffc, 0x0, 0x4, 0x0}) 27.057899ms ago: executing program 4 (id=104): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020642500000000002080007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006200000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) 20.907099ms ago: executing program 3 (id=105): r0 = gettid() clock_nanosleep(0xb, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 0s ago: executing program 2 (id=106): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x800, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2008, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresgid(0x0, 0xee01, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 20.265304][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 20.265321][ T29] audit: type=1400 audit(1759192671.741:57): avc: denied { transition } for pid=3174 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.296111][ T29] audit: type=1400 audit(1759192671.741:58): avc: denied { noatsecure } for pid=3174 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.316115][ T29] audit: type=1400 audit(1759192671.751:59): avc: denied { write } for pid=3174 comm="sh" path="pipe:[2472]" dev="pipefs" ino=2472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 20.338676][ T29] audit: type=1400 audit(1759192671.751:60): avc: denied { rlimitinh } for pid=3174 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.357573][ T29] audit: type=1400 audit(1759192671.751:61): avc: denied { siginh } for pid=3174 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts. [ 28.453092][ T29] audit: type=1400 audit(1759192679.931:62): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.454460][ T3284] cgroup: Unknown subsys name 'net' [ 28.476028][ T29] audit: type=1400 audit(1759192679.931:63): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.503698][ T29] audit: type=1400 audit(1759192679.961:64): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.697005][ T3284] cgroup: Unknown subsys name 'cpuset' [ 28.703460][ T3284] cgroup: Unknown subsys name 'rlimit' [ 28.836202][ T29] audit: type=1400 audit(1759192680.321:65): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.859653][ T29] audit: type=1400 audit(1759192680.321:66): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.880231][ T29] audit: type=1400 audit(1759192680.321:67): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.893448][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.900691][ T29] audit: type=1400 audit(1759192680.321:68): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.929767][ T29] audit: type=1400 audit(1759192680.321:69): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.937343][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.954714][ T29] audit: type=1400 audit(1759192680.321:70): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.988046][ T29] audit: type=1400 audit(1759192680.391:71): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.122092][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 30.134455][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 30.152700][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 30.231446][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 30.283112][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.290376][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.297879][ T3304] bridge_slave_0: entered allmulticast mode [ 30.304517][ T3304] bridge_slave_0: entered promiscuous mode [ 30.311442][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.318686][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.325825][ T3296] bridge_slave_0: entered allmulticast mode [ 30.332632][ T3296] bridge_slave_0: entered promiscuous mode [ 30.339574][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.346805][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.354090][ T3296] bridge_slave_1: entered allmulticast mode [ 30.360864][ T3296] bridge_slave_1: entered promiscuous mode [ 30.377551][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 30.386711][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.394033][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.401244][ T3304] bridge_slave_1: entered allmulticast mode [ 30.407764][ T3304] bridge_slave_1: entered promiscuous mode [ 30.419029][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.426207][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.433443][ T3302] bridge_slave_0: entered allmulticast mode [ 30.440155][ T3302] bridge_slave_0: entered promiscuous mode [ 30.469712][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.476913][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.484110][ T3302] bridge_slave_1: entered allmulticast mode [ 30.490732][ T3302] bridge_slave_1: entered promiscuous mode [ 30.511475][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.525144][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.541225][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.554107][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.567023][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.583148][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.619055][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.626172][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.633601][ T3297] bridge_slave_0: entered allmulticast mode [ 30.640239][ T3297] bridge_slave_0: entered promiscuous mode [ 30.658267][ T3296] team0: Port device team_slave_0 added [ 30.674030][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.681338][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.688683][ T3297] bridge_slave_1: entered allmulticast mode [ 30.695354][ T3297] bridge_slave_1: entered promiscuous mode [ 30.708670][ T3304] team0: Port device team_slave_0 added [ 30.715096][ T3296] team0: Port device team_slave_1 added [ 30.726387][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.733580][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.740982][ T3300] bridge_slave_0: entered allmulticast mode [ 30.747691][ T3300] bridge_slave_0: entered promiscuous mode [ 30.755103][ T3302] team0: Port device team_slave_0 added [ 30.761965][ T3302] team0: Port device team_slave_1 added [ 30.779016][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.789029][ T3304] team0: Port device team_slave_1 added [ 30.800325][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.807475][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.836809][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.847855][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.855075][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.862463][ T3300] bridge_slave_1: entered allmulticast mode [ 30.869068][ T3300] bridge_slave_1: entered promiscuous mode [ 30.886409][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.900740][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.907819][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.933754][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.952312][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.959357][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.985848][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.007858][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.014994][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.041650][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.053680][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.060763][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.086877][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.098743][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.109497][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.119145][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.126132][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.152357][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.170057][ T3297] team0: Port device team_slave_0 added [ 31.201538][ T3297] team0: Port device team_slave_1 added [ 31.215251][ T3296] hsr_slave_0: entered promiscuous mode [ 31.221364][ T3296] hsr_slave_1: entered promiscuous mode [ 31.239389][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.246731][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.272703][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.286743][ T3300] team0: Port device team_slave_0 added [ 31.298728][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.305728][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.332027][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.343607][ T3300] team0: Port device team_slave_1 added [ 31.375982][ T3304] hsr_slave_0: entered promiscuous mode [ 31.382147][ T3304] hsr_slave_1: entered promiscuous mode [ 31.388271][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 31.394127][ T3304] Cannot create hsr debugfs directory [ 31.412184][ T3302] hsr_slave_0: entered promiscuous mode [ 31.418354][ T3302] hsr_slave_1: entered promiscuous mode [ 31.424278][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 31.430207][ T3302] Cannot create hsr debugfs directory [ 31.450085][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.457277][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.483368][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.495035][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.502080][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.528103][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.570542][ T3297] hsr_slave_0: entered promiscuous mode [ 31.576756][ T3297] hsr_slave_1: entered promiscuous mode [ 31.582836][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 31.588774][ T3297] Cannot create hsr debugfs directory [ 31.657744][ T3300] hsr_slave_0: entered promiscuous mode [ 31.664259][ T3300] hsr_slave_1: entered promiscuous mode [ 31.670342][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 31.676142][ T3300] Cannot create hsr debugfs directory [ 31.758601][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.769605][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.792518][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.804440][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.868717][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.878887][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.889198][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.902347][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.930647][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.946281][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.955296][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.976768][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.992626][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.015225][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.031749][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.040974][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.051643][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.096038][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.105373][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.115538][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.124642][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.133780][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.147331][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.154459][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.164712][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.186770][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.194024][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.209293][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.225959][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.233090][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.253831][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.266093][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.273259][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.307891][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.325843][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.343599][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.350871][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.379685][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.387053][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.426592][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.448088][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.460142][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.476832][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.498216][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.507540][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.514726][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.525348][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.532563][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.565650][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.573204][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.594829][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.602148][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.633997][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.648826][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.663864][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.692498][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.759481][ T3296] veth0_vlan: entered promiscuous mode [ 32.768765][ T3296] veth1_vlan: entered promiscuous mode [ 32.810668][ T3296] veth0_macvtap: entered promiscuous mode [ 32.844980][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.859605][ T3297] veth0_vlan: entered promiscuous mode [ 32.868986][ T3296] veth1_macvtap: entered promiscuous mode [ 32.890710][ T3297] veth1_vlan: entered promiscuous mode [ 32.905300][ T3304] veth0_vlan: entered promiscuous mode [ 32.930298][ T3304] veth1_vlan: entered promiscuous mode [ 32.939366][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.948137][ T3297] veth0_macvtap: entered promiscuous mode [ 32.965448][ T3297] veth1_macvtap: entered promiscuous mode [ 32.982298][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.999668][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.020598][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.035525][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.052759][ T3304] veth0_macvtap: entered promiscuous mode [ 33.059836][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.068898][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.081537][ T3304] veth1_macvtap: entered promiscuous mode [ 33.094503][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.103571][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.115259][ T3302] veth0_vlan: entered promiscuous mode [ 33.128371][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.140441][ T3300] veth0_vlan: entered promiscuous mode [ 33.154535][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.168099][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.170352][ T346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.193036][ T3302] veth1_vlan: entered promiscuous mode [ 33.205577][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.215146][ T346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.238452][ T3300] veth1_vlan: entered promiscuous mode [ 33.250277][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.262394][ T3471] loop2: detected capacity change from 0 to 1024 [ 33.264631][ T3302] veth0_macvtap: entered promiscuous mode [ 33.278622][ T3302] veth1_macvtap: entered promiscuous mode [ 33.285213][ T3471] ======================================================= [ 33.285213][ T3471] WARNING: The mand mount option has been deprecated and [ 33.285213][ T3471] and is ignored by this kernel. Remove the mand [ 33.285213][ T3471] option from the mount to silence this warning. [ 33.285213][ T3471] ======================================================= [ 33.327520][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.327679][ T3471] EXT4-fs: Ignoring removed orlov option [ 33.342137][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.351897][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.363028][ T3471] EXT4-fs: Ignoring removed nobh option [ 33.368721][ T3471] EXT4-fs: Ignoring removed bh option [ 33.394467][ T3471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.407009][ T3300] veth0_macvtap: entered promiscuous mode [ 33.419372][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.451965][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.458513][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.460916][ T3300] veth1_macvtap: entered promiscuous mode [ 33.484116][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 33.484134][ T29] audit: type=1400 audit(1759192684.961:99): avc: denied { open } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.509348][ T29] audit: type=1400 audit(1759192684.961:100): avc: denied { perfmon } for pid=3480 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.530422][ T29] audit: type=1400 audit(1759192684.961:101): avc: denied { kernel } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.535493][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.551352][ T29] audit: type=1400 audit(1759192684.961:102): avc: denied { create } for pid=3479 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.578313][ T29] audit: type=1400 audit(1759192684.971:103): avc: denied { accept } for pid=3479 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.600744][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.612044][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.619464][ C0] hrtimer: interrupt took 40334 ns [ 33.630529][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.638227][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.661330][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.694171][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.715261][ T29] audit: type=1400 audit(1759192685.081:104): avc: denied { create } for pid=3483 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.735468][ T29] audit: type=1400 audit(1759192685.101:105): avc: denied { write } for pid=3483 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.755493][ T29] audit: type=1400 audit(1759192685.101:106): avc: denied { nlmsg_write } for pid=3483 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.775969][ T29] audit: type=1400 audit(1759192685.131:107): avc: denied { read } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.787033][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.832160][ T29] audit: type=1400 audit(1759192685.311:108): avc: denied { prog_load } for pid=3495 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.846482][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.907887][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.941589][ T3506] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.962909][ T3509] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17'. [ 33.994701][ T3509] netlink: zone id is out of range [ 34.000196][ T3509] netlink: zone id is out of range [ 34.005475][ T3509] netlink: get zone limit has 8 unknown bytes [ 34.019303][ T3515] loop0: detected capacity change from 0 to 512 [ 34.037385][ T3517] netlink: 96 bytes leftover after parsing attributes in process `syz.1.20'. [ 34.064206][ T3515] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.077457][ T3515] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.121097][ T3515] EXT4-fs (loop0): 1 orphan inode deleted [ 34.126987][ T3515] EXT4-fs (loop0): 1 truncate cleaned up [ 34.133546][ T3515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.174332][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.205488][ T3530] loop2: detected capacity change from 0 to 1024 [ 34.217967][ T3530] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.26: Failed to acquire dquot type 0 [ 34.233790][ T3530] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 34.249630][ T3530] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.26: corrupted inode contents [ 34.264273][ T3530] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.26: mark_inode_dirty error [ 34.280867][ T3530] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.26: corrupted inode contents [ 34.282235][ T3531] syz.1.28 (3531) used greatest stack depth: 10344 bytes left [ 34.308189][ T3530] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.26: mark_inode_dirty error [ 34.342159][ T3541] loop4: detected capacity change from 0 to 128 [ 34.352146][ T3530] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.26: corrupted inode contents [ 34.375817][ T3530] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 34.384742][ T3541] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 34.434092][ T3530] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.26: corrupted inode contents [ 34.457415][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.458071][ T3530] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.26: mark_inode_dirty error [ 34.502181][ T3530] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 34.545771][ T3530] EXT4-fs (loop2): 1 truncate cleaned up [ 34.576665][ T3530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.633713][ T3567] can0: slcan on ptm0. [ 34.661962][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.706585][ T3565] can0 (unregistered): slcan off ptm0. [ 34.938956][ T3606] loop4: detected capacity change from 0 to 128 [ 35.043817][ T3606] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 35.051465][ T3606] FAT-fs (loop4): Filesystem has been set read-only [ 35.128776][ T3619] Zero length message leads to an empty skb [ 35.371796][ T3634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.577245][ T3650] tipc: Enabling of bearer rejected, failed to enable media [ 35.736885][ T3669] mmap: syz.1.81 (3669) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.823705][ T3680] netlink: 56 bytes leftover after parsing attributes in process `syz.2.85'. [ 35.932251][ T3695] loop4: detected capacity change from 0 to 1024 [ 35.960153][ T3700] syz.0.93 uses obsolete (PF_INET,SOCK_PACKET) [ 35.967488][ T3695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.975832][ T3695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.987648][ T3703] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 36.005305][ T3695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 36.014232][ T3695] System zones: 0-1, 3-36 [ 36.038000][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.038601][ T3708] netlink: 72 bytes leftover after parsing attributes in process `syz.3.98'. [ 36.130196][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.158424][ T3538] ================================================================== [ 36.166927][ T3538] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 36.173917][ T3538] [ 36.176255][ T3538] write to 0xffff8881042460ec of 4 bytes by task 3290 on cpu 1: [ 36.183903][ T3538] shmem_mknod+0x137/0x180 [ 36.188611][ T3538] shmem_create+0x34/0x50 [ 36.193239][ T3538] path_openat+0x1102/0x2170 [ 36.197896][ T3538] do_filp_open+0x109/0x230 [ 36.202425][ T3538] do_sys_openat2+0xa6/0x110 [ 36.207246][ T3538] __x64_sys_openat+0xf2/0x120 [ 36.212135][ T3538] x64_sys_call+0x2e9c/0x2ff0 [ 36.216882][ T3538] do_syscall_64+0xd2/0x200 [ 36.221517][ T3538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.227435][ T3538] [ 36.229774][ T3538] read to 0xffff8881042460ec of 4 bytes by task 3538 on cpu 0: [ 36.237529][ T3538] fill_mg_cmtime+0x5b/0x260 [ 36.242225][ T3538] generic_fillattr+0x24a/0x340 [ 36.247109][ T3538] shmem_getattr+0x181/0x200 [ 36.251821][ T3538] vfs_getattr_nosec+0x146/0x1e0 [ 36.256878][ T3538] vfs_statx+0x113/0x390 [ 36.261256][ T3538] vfs_fstatat+0x115/0x170 [ 36.265808][ T3538] __se_sys_newfstatat+0x55/0x260 [ 36.270872][ T3538] __x64_sys_newfstatat+0x55/0x70 [ 36.276011][ T3538] x64_sys_call+0x135a/0x2ff0 [ 36.280786][ T3538] do_syscall_64+0xd2/0x200 [ 36.285306][ T3538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.291214][ T3538] [ 36.293554][ T3538] value changed: 0x26a1ef9c -> 0x26a85421 [ 36.299364][ T3538] [ 36.301694][ T3538] Reported by Kernel Concurrency Sanitizer on: [ 36.307967][ T3538] CPU: 0 UID: 0 PID: 3538 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.317349][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 36.327517][ T3538] ================================================================== [ 36.352901][ T3720] vhci_hcd: invalid port number 252 [ 36.358223][ T3720] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub