last executing test programs: 833.964173ms ago: executing program 4 (id=697): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 723.145806ms ago: executing program 0 (id=701): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x6}}, {@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$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") lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 608.55211ms ago: executing program 1 (id=705): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x900}, 0x4, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000000100)='.\x00', &(0x7f0000001440), 0x200800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) 557.660651ms ago: executing program 2 (id=707): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 514.910123ms ago: executing program 1 (id=709): pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) 504.718413ms ago: executing program 0 (id=710): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 441.969715ms ago: executing program 2 (id=711): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) 441.798105ms ago: executing program 1 (id=712): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') openat$cgroup_ro(r0, &(0x7f0000001c80)='cgroup.stat\x00', 0x275a, 0x0) 441.691635ms ago: executing program 3 (id=713): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mknodat$loop(0xffffffffffffffff, 0x0, 0xe827, 0x1) 400.044327ms ago: executing program 2 (id=714): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 399.714697ms ago: executing program 1 (id=715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xda32}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 374.066657ms ago: executing program 3 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010026bd700000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 328.588389ms ago: executing program 0 (id=717): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001000)={@rand_addr, @dev}, &(0x7f0000000040)=0xc) 328.335819ms ago: executing program 0 (id=718): r0 = inotify_init1(0x800) fsetxattr$security_evm(r0, &(0x7f0000000000), 0x0, 0x0, 0x1) 303.95514ms ago: executing program 3 (id=719): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2a, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x8000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x100}, 0x0, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 302.88444ms ago: executing program 0 (id=720): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100, 0xfdfd}}) 296.43713ms ago: executing program 2 (id=721): r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0x4, &(0x7f0000000280), 0x8) 294.47218ms ago: executing program 1 (id=722): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x4, 0x7fff, 0x3}, 0x10) 244.602642ms ago: executing program 0 (id=723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x30, 0x3, 0x1, 0x201, 0x2000000, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x24000010) 217.142893ms ago: executing program 3 (id=724): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) readv(r0, 0x0, 0x57) 216.686583ms ago: executing program 4 (id=725): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 183.842494ms ago: executing program 1 (id=726): futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 183.498724ms ago: executing program 3 (id=727): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x250, 0x258, 0x258, 0x250, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], [0x0, 0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x2c, 0x5, 0x1, 0xf}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6b, 0x1, "4c0b4517e5d5fce7ac18f1f391645cce11e31c3259d386432309d783ac3f"}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x380) 134.047525ms ago: executing program 4 (id=728): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8000038, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xd0, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0xff000000], 'syz_tun\x00', 'ipvlan0\x00', {}, {}, 0x3a, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x7}, {0x0, 0x1, 0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [0x0, 0x0, 0xff000000], 'veth1\x00', 'bond0\x00', {0x8499377069aa4b5f}, {}, 0x2b, 0x80, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xb5a3, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 133.793505ms ago: executing program 3 (id=729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x4e, 0xb, 0xfe, 0xff, "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", 0x2, "5c8d5863a8bd89058fd3b2ea00"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2404e084}, 0x0) 133.673096ms ago: executing program 4 (id=730): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000200)=0x8, 0x4) 127.031476ms ago: executing program 2 (id=731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, 0xffffffffffffffff, &(0x7f0000000000)) 91.164257ms ago: executing program 4 (id=732): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 44.289019ms ago: executing program 2 (id=742): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1, 0x9, 0x8) 0s ago: executing program 4 (id=733): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100, 0xfdfd}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 32.713146][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 32.713165][ T28] audit: type=1400 audit(1779383326.042:123): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.742518][ T28] audit: type=1400 audit(1779383326.072:124): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.744989][ T3285] cgroup: Unknown subsys name 'net' [ 32.770456][ T28] audit: type=1400 audit(1779383326.102:125): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.904339][ T3285] cgroup: Unknown subsys name 'cpuset' [ 32.910655][ T3285] cgroup: Unknown subsys name 'rlimit' [ 33.042307][ T28] audit: type=1400 audit(1779383326.372:126): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.065693][ T28] audit: type=1400 audit(1779383326.382:127): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.090967][ T28] audit: type=1400 audit(1779383326.382:128): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.111695][ T28] audit: type=1400 audit(1779383326.382:129): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.132178][ T28] audit: type=1400 audit(1779383326.392:130): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.153232][ T28] audit: type=1400 audit(1779383326.402:131): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.161124][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.178611][ T28] audit: type=1400 audit(1779383326.412:132): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.269469][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.187983][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.195342][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.202507][ T3298] bridge_slave_0: entered allmulticast mode [ 35.209076][ T3298] bridge_slave_0: entered promiscuous mode [ 35.230670][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.237895][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.245143][ T3298] bridge_slave_1: entered allmulticast mode [ 35.251502][ T3298] bridge_slave_1: entered promiscuous mode [ 35.313888][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.321046][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.328294][ T3304] bridge_slave_0: entered allmulticast mode [ 35.334830][ T3304] bridge_slave_0: entered promiscuous mode [ 35.342549][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.364257][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.371401][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.378583][ T3304] bridge_slave_1: entered allmulticast mode [ 35.385078][ T3304] bridge_slave_1: entered promiscuous mode [ 35.392308][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.424275][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.431457][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.438643][ T3305] bridge_slave_0: entered allmulticast mode [ 35.445198][ T3305] bridge_slave_0: entered promiscuous mode [ 35.470739][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.477905][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.485132][ T3305] bridge_slave_1: entered allmulticast mode [ 35.491599][ T3305] bridge_slave_1: entered promiscuous mode [ 35.502243][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.509582][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.517064][ T3297] bridge_slave_0: entered allmulticast mode [ 35.523706][ T3297] bridge_slave_0: entered promiscuous mode [ 35.531297][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.541173][ T3298] team0: Port device team_slave_0 added [ 35.556836][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.564017][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.571187][ T3297] bridge_slave_1: entered allmulticast mode [ 35.577812][ T3297] bridge_slave_1: entered promiscuous mode [ 35.584875][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.594988][ T3298] team0: Port device team_slave_1 added [ 35.600809][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.607931][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.615308][ T3303] bridge_slave_0: entered allmulticast mode [ 35.621806][ T3303] bridge_slave_0: entered promiscuous mode [ 35.629612][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.653754][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.660934][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.668176][ T3303] bridge_slave_1: entered allmulticast mode [ 35.674762][ T3303] bridge_slave_1: entered promiscuous mode [ 35.682159][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.716122][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.726298][ T3304] team0: Port device team_slave_0 added [ 35.732200][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.739428][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.765422][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.786387][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.801114][ T3304] team0: Port device team_slave_1 added [ 35.807133][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.814152][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.840206][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.852499][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.862558][ T3305] team0: Port device team_slave_0 added [ 35.881801][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.891884][ T3305] team0: Port device team_slave_1 added [ 35.903242][ T3297] team0: Port device team_slave_0 added [ 35.914463][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.921497][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.947623][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.968214][ T3297] team0: Port device team_slave_1 added [ 35.974992][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.981971][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.007971][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.023998][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.030965][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.056932][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.079749][ T3303] team0: Port device team_slave_0 added [ 36.085805][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.092977][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.119022][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.148372][ T3298] hsr_slave_0: entered promiscuous mode [ 36.154517][ T3298] hsr_slave_1: entered promiscuous mode [ 36.167606][ T3303] team0: Port device team_slave_1 added [ 36.177485][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.184495][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.210568][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.221843][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.228987][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.254990][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.291073][ T3304] hsr_slave_0: entered promiscuous mode [ 36.297304][ T3304] hsr_slave_1: entered promiscuous mode [ 36.303257][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.309049][ T3304] Cannot create hsr debugfs directory [ 36.318946][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.326079][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.352007][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.375637][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.382632][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.408621][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.428426][ T3305] hsr_slave_0: entered promiscuous mode [ 36.434608][ T3305] hsr_slave_1: entered promiscuous mode [ 36.440453][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 36.446215][ T3305] Cannot create hsr debugfs directory [ 36.481461][ T3297] hsr_slave_0: entered promiscuous mode [ 36.487480][ T3297] hsr_slave_1: entered promiscuous mode [ 36.493457][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 36.499350][ T3297] Cannot create hsr debugfs directory [ 36.514275][ T3303] hsr_slave_0: entered promiscuous mode [ 36.520469][ T3303] hsr_slave_1: entered promiscuous mode [ 36.526381][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.532120][ T3303] Cannot create hsr debugfs directory [ 36.730695][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.739490][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.747523][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.756320][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.764281][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.773164][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.783194][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.792214][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.815434][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.824732][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.833243][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.842226][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.852207][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.861322][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.872333][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.881205][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.917068][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.925990][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.934181][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.943073][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.956175][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.964952][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.972870][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.981357][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.998501][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.022612][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.037324][ T826] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.044588][ T826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.055132][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.063966][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.071708][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.080841][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.089299][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.098623][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.107387][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.114531][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.124564][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.133383][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.192218][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.201110][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.208992][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.217721][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.225820][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.234453][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.246713][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.255433][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.264793][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.302659][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.324770][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.332889][ T826] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.340050][ T826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.350703][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.357804][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.397683][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.412272][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.428672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.435876][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.451997][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.459127][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.474392][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.494645][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.501753][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.512108][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.526016][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.533104][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.549285][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.581092][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.602827][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.610025][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.629224][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.636368][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.837075][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.906424][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.922403][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.948132][ T3298] veth0_vlan: entered promiscuous mode [ 37.975677][ T3298] veth1_vlan: entered promiscuous mode [ 37.992400][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.032004][ T3298] veth0_macvtap: entered promiscuous mode [ 38.040578][ T3298] veth1_macvtap: entered promiscuous mode [ 38.070597][ T3297] veth0_vlan: entered promiscuous mode [ 38.090279][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.114856][ T3297] veth1_vlan: entered promiscuous mode [ 38.125448][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.161508][ T3450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.170510][ T3450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.179425][ T3303] veth0_vlan: entered promiscuous mode [ 38.191037][ T3304] veth0_vlan: entered promiscuous mode [ 38.203149][ T3450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.212098][ T3450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.244080][ T3305] veth0_vlan: entered promiscuous mode [ 38.245182][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.245232][ T28] audit: type=1400 audit(1779383331.582:143): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.9bTRtY/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.266863][ T3305] veth1_vlan: entered promiscuous mode [ 38.285962][ T28] audit: type=1400 audit(1779383331.592:144): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.308902][ T28] audit: type=1400 audit(1779383331.592:145): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.9bTRtY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.313910][ T3303] veth1_vlan: entered promiscuous mode [ 38.343132][ T3304] veth1_vlan: entered promiscuous mode [ 38.351982][ T3297] veth0_macvtap: entered promiscuous mode [ 38.355350][ T28] audit: type=1400 audit(1779383331.592:146): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.364633][ T3297] veth1_macvtap: entered promiscuous mode [ 38.388424][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.397821][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.410289][ T28] audit: type=1400 audit(1779383331.592:147): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.9bTRtY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.433328][ T3305] veth0_macvtap: entered promiscuous mode [ 38.442751][ T28] audit: type=1400 audit(1779383331.592:148): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.9bTRtY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.470878][ T28] audit: type=1400 audit(1779383331.592:149): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.483251][ T3304] veth0_macvtap: entered promiscuous mode [ 38.497519][ T28] audit: type=1400 audit(1779383331.642:150): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.520620][ T28] audit: type=1400 audit(1779383331.642:151): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="gadgetfs" ino=4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.546300][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.558010][ T3305] veth1_macvtap: entered promiscuous mode [ 38.573979][ T3304] veth1_macvtap: entered promiscuous mode [ 38.577022][ T28] audit: type=1400 audit(1779383331.882:152): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.610977][ T75] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.628934][ T75] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.648439][ T75] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.656263][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7'. [ 38.674902][ T75] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.696438][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.710612][ T3303] veth0_macvtap: entered promiscuous mode [ 38.726960][ T3303] veth1_macvtap: entered promiscuous mode [ 38.746210][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.754616][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.790243][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.808753][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.838652][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.852731][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.877185][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.891147][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.900604][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.927198][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.958447][ T3523] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 38.984386][ T3439] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.036588][ T3439] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.066569][ T3439] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.105354][ T3439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.133899][ T3439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.147864][ T3439] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.165478][ T3439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.520162][ T3591] xt_TCPMSS: Only works on TCP SYN packets [ 39.656896][ T3608] capability: warning: `syz.4.51' uses deprecated v2 capabilities in a way that may be insecure [ 40.175704][ T3680] netlink: 32 bytes leftover after parsing attributes in process `syz.1.85'. [ 40.193570][ T3680] netlink: 32 bytes leftover after parsing attributes in process `syz.1.85'. [ 40.370026][ T3704] netlink: 10 bytes leftover after parsing attributes in process `syz.0.97'. [ 40.473617][ T3716] netlink: 'syz.2.104': attribute type 10 has an invalid length. [ 40.587911][ T3728] bond1: option mode: invalid value (9) [ 40.605843][ T3728] bond1 (unregistering): Released all slaves [ 40.762470][ T3757] ./file0: Can't lookup blockdev [ 40.783859][ T3764] SET target dimension over the limit! [ 40.846358][ T3766] netlink: 'syz.3.128': attribute type 3 has an invalid length. [ 40.859745][ T3772] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 40.879392][ T3772] Cannot find add_set index 0 as target [ 40.971422][ T3789] netlink: 'syz.4.139': attribute type 63 has an invalid length. [ 40.994738][ T3789] lo: entered promiscuous mode [ 41.004821][ T3789] lo: entered allmulticast mode [ 41.022953][ T3794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 41.035360][ T3794] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 41.046815][ T3794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 41.106127][ T3805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.143'. [ 41.303635][ T3827] x_tables: unsorted underflow at hook 2 [ 41.321785][ T3831] dummy0: mtu less than device minimum [ 41.592371][ T3874] netlink: 'syz.1.179': attribute type 21 has an invalid length. [ 41.624855][ T3874] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.634924][ T3876] bridge2: entered promiscuous mode [ 41.642041][ T3876] bridge2: entered allmulticast mode [ 41.657592][ T3874] IPv6: Can't replace route, no match found [ 41.671479][ T3880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 41.717193][ T3880] veth3: entered promiscuous mode [ 41.722412][ T3880] veth3: entered allmulticast mode [ 41.957308][ T3919] netlink: 'syz.4.202': attribute type 49 has an invalid length. [ 42.037272][ T3930] netlink: 'syz.1.207': attribute type 21 has an invalid length. [ 42.042309][ T3932] netlink: 'syz.3.208': attribute type 21 has an invalid length. [ 42.067487][ T3932] netlink: 'syz.3.208': attribute type 6 has an invalid length. [ 42.083737][ T3932] netlink: 132 bytes leftover after parsing attributes in process `syz.3.208'. [ 42.111630][ T3938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 42.298073][ T3964] netlink: 'syz.1.223': attribute type 21 has an invalid length. [ 42.342703][ T3964] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 43.014888][ T4035] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 43.307680][ T4069] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 43.436491][ T3948] syz.0.216 (3948) used greatest stack depth: 9312 bytes left [ 43.574994][ T4094] loop0: detected capacity change from 0 to 512 [ 43.641167][ T4094] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.646822][ T4100] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 43.700890][ T4094] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.712087][ T4108] bridge1: entered promiscuous mode [ 43.717550][ T4108] bridge1: entered allmulticast mode [ 43.737154][ T4094] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.287: casefold flag without casefold feature [ 43.763580][ T4094] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 43.764287][ T4094] EXT4-fs (loop0): Remounting filesystem read-only [ 43.773493][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 43.773508][ C1] EXT4-fs (loop0): initial error at time 1779383337: ext4_orphan_get:1397: inode 17 [ 43.773563][ C1] EXT4-fs (loop0): last error at time 1779383337: ext4_orphan_get:1397: inode 17 [ 43.856663][ T4117] __nla_validate_parse: 5 callbacks suppressed [ 43.856679][ T4117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 43.922853][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 43.922888][ T28] audit: type=1400 audit(1779383337.252:188): avc: denied { nlmsg_write } for pid=4120 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 43.959590][ T4094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.036351][ T28] audit: type=1400 audit(1779383337.252:189): avc: denied { audit_write } for pid=4120 comm="syz.3.297" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 44.081487][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.119011][ T28] audit: type=1400 audit(1779383337.332:190): avc: denied { mount } for pid=4093 comm="syz.0.287" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.207590][ T28] audit: type=1400 audit(1779383337.352:191): avc: denied { write } for pid=4093 comm="syz.0.287" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.275770][ T28] audit: type=1400 audit(1779383337.352:192): avc: denied { add_name } for pid=4093 comm="syz.0.287" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.321324][ T4150] C: renamed from veth1_to_team (while UP) [ 44.342654][ T4150] netlink: 152 bytes leftover after parsing attributes in process `syz.2.313'. [ 44.352730][ T28] audit: type=1400 audit(1779383337.352:193): avc: denied { create } for pid=4093 comm="syz.0.287" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 44.363112][ T4150] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 44.478077][ T4161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.319'. [ 44.844875][ T4204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 44.865477][ T4105] syz.1.291 (4105) used greatest stack depth: 9224 bytes left [ 44.873008][ T75] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.099169][ T75] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.208450][ T4249] mmap: syz.1.362 (4249) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.392147][ T75] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.541144][ T4286] loop3: detected capacity change from 0 to 512 [ 45.565533][ T4286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.613707][ T28] audit: type=1400 audit(1779383338.942:194): avc: denied { read write } for pid=4299 comm="syz.4.385" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.644112][ T28] audit: type=1400 audit(1779383338.942:195): avc: denied { open } for pid=4299 comm="syz.4.385" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.649151][ T4286] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.380: casefold flag without casefold feature [ 45.697535][ T4286] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 45.700332][ T4304] validate_nla: 4 callbacks suppressed [ 45.700352][ T4304] netlink: 'syz.0.386': attribute type 5 has an invalid length. [ 45.703558][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 45.729198][ C1] EXT4-fs (loop3): initial error at time 1779383339: ext4_orphan_get:1397: inode 17 [ 45.738628][ C1] EXT4-fs (loop3): last error at time 1779383339: ext4_orphan_get:1397: inode 17 [ 45.750399][ T4286] EXT4-fs (loop3): Remounting filesystem read-only [ 45.784015][ T4286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.803561][ T28] audit: type=1400 audit(1779383339.112:196): avc: denied { read } for pid=4307 comm="syz.4.390" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.836524][ T4317] netlink: 'syz.4.395': attribute type 4 has an invalid length. [ 45.845434][ T4317] netlink: 'syz.4.395': attribute type 30 has an invalid length. [ 45.853295][ T28] audit: type=1400 audit(1779383339.112:197): avc: denied { open } for pid=4307 comm="syz.4.390" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.950988][ T4324] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 45.966364][ T4323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 45.981179][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.043818][ T4334] Cannot find del_set index 0 as target [ 46.128799][ T4344] xfrm1: entered allmulticast mode [ 46.215533][ T4358] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 46.461096][ T4394] Cannot find del_set index 0 as target [ 46.529205][ T4402] netlink: 'syz.0.437': attribute type 4 has an invalid length. [ 46.550839][ T4402] netlink: 'syz.0.437': attribute type 30 has an invalid length. [ 46.643142][ T4414] netlink: 132 bytes leftover after parsing attributes in process `syz.2.444'. [ 46.817311][ T4436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.452'. [ 46.839801][ T4436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.452'. [ 46.861602][ T4437] loop4: detected capacity change from 0 to 512 [ 46.890555][ T4443] netlink: 132 bytes leftover after parsing attributes in process `syz.2.457'. [ 46.901646][ T4437] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.933708][ T4437] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.451: casefold flag without casefold feature [ 46.957504][ T4437] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 46.957730][ T4437] EXT4-fs (loop4): Remounting filesystem read-only [ 46.966960][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 46.966984][ C1] EXT4-fs (loop4): initial error at time 1779383340: ext4_orphan_get:1397: inode 17 [ 46.967038][ C1] EXT4-fs (loop4): last error at time 1779383340: ext4_orphan_get:1397: inode 17 [ 47.000515][ T4437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.079057][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.289208][ T4487] loop1: detected capacity change from 0 to 512 [ 47.311957][ T4487] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.353595][ T4487] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #17: comm syz.1.476: casefold flag without casefold feature [ 47.372570][ T4490] xt_CT: No such helper "syz1" [ 47.400573][ T4487] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 47.400758][ T4487] EXT4-fs (loop1): Remounting filesystem read-only [ 47.409995][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 47.410019][ C1] EXT4-fs (loop1): initial error at time 1779383340: ext4_orphan_get:1397: inode 17 [ 47.410063][ C1] EXT4-fs (loop1): last error at time 1779383340: ext4_orphan_get:1397: inode 17 [ 47.442389][ T4487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.482293][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.538227][ T4513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.488'. [ 47.592648][ T4515] loop4: detected capacity change from 0 to 1024 [ 47.639443][ T4515] EXT4-fs: inline encryption not supported [ 47.675361][ T4515] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 47.727009][ T4515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.829876][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.191675][ T4601] Cannot find del_set index 0 as target [ 48.301162][ T4618] xt_CT: No such helper "syz1" [ 48.417889][ T4635] capability: warning: `syz.4.547' uses 32-bit capabilities (legacy support in use) [ 48.907182][ T4694] __nla_validate_parse: 2 callbacks suppressed [ 48.907200][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 48.944456][ T4699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.579'. [ 48.976735][ T4699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 49.005911][ T4704] loop1: detected capacity change from 0 to 1024 [ 49.019960][ T4704] EXT4-fs: inline encryption not supported [ 49.040402][ T4704] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 49.075668][ T4704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.170469][ T4722] netlink: 188 bytes leftover after parsing attributes in process `syz.4.590'. [ 49.189267][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.327787][ T4742] bridge2: entered promiscuous mode [ 49.358011][ T4746] Invalid option length (57448) for dns_resolver key [ 49.438541][ T4755] sock: sock_timestamping_bind_phc: sock not bind to device [ 49.484586][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 49.484628][ T28] audit: type=1400 audit(1779383342.822:219): avc: denied { ioctl } for pid=4761 comm="syz.0.609" path="socket:[8031]" dev="sockfs" ino=8031 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.603412][ T4776] bridge2: entered promiscuous mode [ 49.681818][ T28] audit: type=1400 audit(1779383343.012:220): avc: denied { create } for pid=4785 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.709322][ T28] audit: type=1400 audit(1779383343.042:221): avc: denied { write } for pid=4785 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.753430][ T4790] loop2: detected capacity change from 0 to 1024 [ 49.761602][ T4790] EXT4-fs: inline encryption not supported [ 49.772522][ T4794] sock: sock_timestamping_bind_phc: sock not bind to device [ 49.814986][ T4790] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 49.855446][ T28] audit: type=1326 audit(1779383343.192:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.1.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff108cce59 code=0x7ffc0000 [ 49.867372][ T4807] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 49.887646][ T4790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.897916][ T28] audit: type=1326 audit(1779383343.212:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.1.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff108cce59 code=0x7ffc0000 [ 49.934567][ T28] audit: type=1326 audit(1779383343.212:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.1.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7eff108cce59 code=0x7ffc0000 [ 49.959881][ T28] audit: type=1326 audit(1779383343.212:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.1.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff108cce59 code=0x7ffc0000 [ 49.985466][ T28] audit: type=1326 audit(1779383343.212:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.1.630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff108cce59 code=0x7ffc0000 [ 50.047315][ T4813] loop4: detected capacity change from 0 to 256 [ 50.075388][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.085081][ T28] audit: type=1400 audit(1779383343.422:227): avc: denied { mount } for pid=4812 comm="syz.4.634" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.135375][ T28] audit: type=1326 audit(1779383343.452:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.3.638" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcf95ce59 code=0x7ffc0000 [ 50.189126][ T4825] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 50.209156][ T4824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'. [ 50.252140][ T4824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 50.351478][ T4843] loop3: detected capacity change from 0 to 1024 [ 50.358511][ T4843] EXT4-fs: inline encryption not supported [ 50.366957][ T4843] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 50.409064][ T4847] bridge3: entered promiscuous mode [ 50.466835][ T4843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.604876][ T4881] netlink: 'syz.4.675': attribute type 21 has an invalid length. [ 50.614335][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.757554][ T4903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.685'. [ 50.789630][ T4906] loop0: detected capacity change from 0 to 1024 [ 50.798287][ T4906] EXT4-fs: inline encryption not supported [ 50.830897][ T4906] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 50.867726][ T4906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.978252][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.996588][ T4929] loop2: detected capacity change from 0 to 128 [ 51.022080][ T4933] x_tables: unsorted underflow at hook 4 [ 51.038394][ T4929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 51.055083][ T4929] System zones: 1-3, 19-19, 35-36 [ 51.077814][ T4929] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 51.209599][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.252212][ T4954] loop0: detected capacity change from 0 to 1024 [ 51.283586][ T4954] EXT4-fs: inline encryption not supported [ 51.320587][ T4954] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 51.365565][ T4954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.406235][ T4971] xt_ecn: cannot match TCP bits for non-tcp packets [ 51.448387][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.739646][ T5007] netlink: 'syz.4.725': attribute type 49 has an invalid length. [ 51.774632][ T5010] xt_l2tp: missing protocol rule (udp|l2tpip) [ 51.897675][ T2980] ================================================================== [ 51.905831][ T2980] BUG: KCSAN: data-race in d_make_discardable / lookup_fast [ 51.913149][ T2980] [ 51.915492][ T2980] write to 0xffff888107fc4540 of 4 bytes by task 3286 on cpu 1: [ 51.923156][ T2980] d_make_discardable+0x4f/0xa0 [ 51.928043][ T2980] simple_unlink+0x68/0x80 [ 51.932516][ T2980] shmem_unlink+0x12d/0x140 [ 51.937056][ T2980] vfs_unlink+0x1c7/0x490 [ 51.941428][ T2980] filename_unlinkat+0x1e2/0x410 [ 51.946417][ T2980] __se_sys_unlink+0x2b/0xe0 [ 51.951062][ T2980] __x64_sys_unlink+0x1f/0x30 [ 51.955794][ T2980] x64_sys_call+0x2eb6/0x3020 [ 51.960512][ T2980] do_syscall_64+0x12c/0x3b0 [ 51.965142][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.971072][ T2980] [ 51.973430][ T2980] read to 0xffff888107fc4540 of 4 bytes by task 2980 on cpu 0: [ 51.981005][ T2980] lookup_fast+0xf0/0x320 [ 51.985394][ T2980] path_lookupat+0x15c/0x500 [ 51.990013][ T2980] filename_lookup+0x190/0x390 [ 51.994813][ T2980] do_readlinkat+0x74/0x2f0 [ 51.999359][ T2980] __x64_sys_readlink+0x47/0x60 [ 51.999384][ T2980] x64_sys_call+0x2b51/0x3020 [ 52.008946][ T2980] do_syscall_64+0x12c/0x3b0 [ 52.013580][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.019519][ T2980] [ 52.021861][ T2980] value changed: 0x08300080 -> 0x00004080 [ 52.027601][ T2980] [ 52.029944][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 52.036140][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 52.045018][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 52.055115][ T2980] ==================================================================