last executing test programs: 2.604056726s ago: executing program 2 (id=525): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.506882991s ago: executing program 2 (id=528): write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) acct(0x0) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=@random={'user.', 'ext4\x00'}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 2.399442508s ago: executing program 3 (id=531): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}, 0xfffe}, 0x90) 2.331815621s ago: executing program 3 (id=533): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x300, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2.234011897s ago: executing program 3 (id=536): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x197a, 0x1642, 0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x36, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.185901079s ago: executing program 2 (id=538): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.003221629s ago: executing program 3 (id=544): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x188f, &(0x7f00000004c0)={0x0, 0x20aedf, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) 1.890214655s ago: executing program 1 (id=546): r0 = epoll_create(0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x401) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 1.847046068s ago: executing program 2 (id=548): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 1.743922343s ago: executing program 1 (id=552): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xffe0, 0x2}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.740796204s ago: executing program 2 (id=553): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001740)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00210325bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="400000e3090002"], 0x28}, 0x1, 0x0, 0x0, 0x4c911}, 0x20000040) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 1.199880774s ago: executing program 1 (id=556): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000100)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 1.132098877s ago: executing program 4 (id=557): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1.117364098s ago: executing program 1 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.067534401s ago: executing program 4 (id=559): unshare(0x2a020400) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = fsmount(r0, 0x0, 0x8) r3 = openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r3, 0x0, 0xffff) 1.025868633s ago: executing program 3 (id=560): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) 989.559515ms ago: executing program 4 (id=561): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 968.449546ms ago: executing program 4 (id=562): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(r0, 0x0, 0x0) r1 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 919.628359ms ago: executing program 0 (id=563): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0000001}) epoll_wait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0x44000006) 850.140443ms ago: executing program 2 (id=564): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a00", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c"], 0x3c}}, 0x40000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 846.115383ms ago: executing program 4 (id=565): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) 782.964197ms ago: executing program 0 (id=566): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 599.114847ms ago: executing program 0 (id=567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb0615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 526.733961ms ago: executing program 1 (id=568): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) unshare(0x22020600) 244.897057ms ago: executing program 0 (id=569): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 217.624308ms ago: executing program 4 (id=570): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000300)="3114", 0x2, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0xaa, 0x6, @broadcast}, 0x14) 212.350378ms ago: executing program 0 (id=571): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@deltaction={0x30, 0x31, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x75, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x30}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 166.466541ms ago: executing program 0 (id=572): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 153.901852ms ago: executing program 1 (id=573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0xfffc, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b0, &(0x7f0000000280)="$eJzs3T9vI0UYB+B3E3vtg8IuqBASK0FBdbpcS+MI5aQIVyAXQAEn7k5CsYV0J0XijzBX0dJQ8gmQkOj4EjQU9Ei0SHRccdKi9e7GTlg72QgnwD1Pk8ns/Gbe3YwTpfD4g5dmR/eyePD481+j309iZxSjeJLEMHai9mWcMvo6AID/sid5Hn/kpTa5JCL62ysLANiilb//Ny4U+GHrJQEAW/b2O+++uT8eH7yVZf24M/vqeFL8Z198La/vP4iPYhr341YM4mlEfqJs38nzfN7JCsN4dTY/nhTJ2fs/VfPv/x6xyO/FIIaLrtP5w/HBXlZayc+LOp6r1h8V+dsxiBca1j8cH9xuyMckjddeWan/Zgzi5w/j45jGvUURy/wXe1n2Rv7Nn5+9V5RX5JP58aS3GLeU717xjwYAAAAAAAAAAAAAAAAAAAAAgP+xm9XZOb1YnN9TdFXn7+w+Lb7pRlYbnj6fp8wn9URnzgea5/Ftfb7OrSzL8mrgMt+JFzvRuZ67BgAAAAAAAAAAAAAAAAAAgH+XR598enR3Or3/8B9p1KcB1G/rv+w8o5Wel6NhzDBOenrLJXeqZTfMHLv1mCRiYxnFjK2K756/+prGjXWp775v++j654/pXqLClo16dx3dTZqfYS/qnn69SX5cHZPGBddK113KW22/tPFS2voFkj6/aMw3jIlkU2Gv/1Y+uaonOXsX6eKpNsa7VaN8LTTtjVb7+e+/KxKndQAAAAAAAAAAAAAAAAAAwFYt3/TbcPHxmtAvh+WH/Mdwy9UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNVYfv5/i8a8Cl9gcBoPH13zLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAM+CsAAP//yylfnw==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000004c0)=0x5, 0x46) 0s ago: executing program 3 (id=574): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0)) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x700, 0x40, 0x8, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) kernel console output (not intermixed with test programs): [ 23.324495][ T29] audit: type=1400 audit(1768903612.663:57): avc: denied { transition } for pid=3196 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.355426][ T29] audit: type=1400 audit(1768903612.663:58): avc: denied { noatsecure } for pid=3196 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.379365][ T29] audit: type=1400 audit(1768903612.663:59): avc: denied { write } for pid=3196 comm="sh" path="pipe:[2530]" dev="pipefs" ino=2530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 23.403199][ T29] audit: type=1400 audit(1768903612.663:60): avc: denied { rlimitinh } for pid=3196 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.423149][ T29] audit: type=1400 audit(1768903612.663:61): avc: denied { siginh } for pid=3196 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.470379][ T29] audit: type=1400 audit(1768903612.793:62): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.493073][ T29] audit: type=1400 audit(1768903612.793:63): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.518161][ T29] audit: type=1400 audit(1768903612.793:64): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.543763][ T29] audit: type=1400 audit(1768903612.793:65): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.567787][ T29] audit: type=1400 audit(1768903612.793:66): avc: denied { read open } for pid=3199 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 32.404930][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 32.404947][ T29] audit: type=1400 audit(1768903621.743:70): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.438010][ T29] audit: type=1400 audit(1768903621.773:71): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.440380][ T3308] cgroup: Unknown subsys name 'net' [ 32.467021][ T29] audit: type=1400 audit(1768903621.803:72): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.582126][ T3308] cgroup: Unknown subsys name 'cpuset' [ 32.588863][ T3308] cgroup: Unknown subsys name 'rlimit' [ 32.761028][ T29] audit: type=1400 audit(1768903622.093:73): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.792002][ T29] audit: type=1400 audit(1768903622.103:74): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.813992][ T29] audit: type=1400 audit(1768903622.103:75): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.836040][ T29] audit: type=1400 audit(1768903622.103:76): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.857912][ T3312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.858662][ T29] audit: type=1400 audit(1768903622.123:77): avc: denied { read } for pid=3048 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.891190][ T29] audit: type=1400 audit(1768903622.123:78): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.917325][ T29] audit: type=1400 audit(1768903622.123:79): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.952115][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.212246][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 34.235372][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 34.269551][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 34.310178][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 34.328195][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 34.398302][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.405954][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.413698][ T3318] bridge_slave_0: entered allmulticast mode [ 34.420365][ T3318] bridge_slave_0: entered promiscuous mode [ 34.427742][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.434868][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.442300][ T3329] bridge_slave_0: entered allmulticast mode [ 34.449259][ T3329] bridge_slave_0: entered promiscuous mode [ 34.469059][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.476303][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.483682][ T3318] bridge_slave_1: entered allmulticast mode [ 34.490313][ T3318] bridge_slave_1: entered promiscuous mode [ 34.496876][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.504060][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.511443][ T3329] bridge_slave_1: entered allmulticast mode [ 34.518076][ T3329] bridge_slave_1: entered promiscuous mode [ 34.547521][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.554657][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.561945][ T3321] bridge_slave_0: entered allmulticast mode [ 34.568561][ T3321] bridge_slave_0: entered promiscuous mode [ 34.598985][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.606314][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.614086][ T3321] bridge_slave_1: entered allmulticast mode [ 34.620797][ T3321] bridge_slave_1: entered promiscuous mode [ 34.633893][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.644291][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.653778][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.661039][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.668255][ T3319] bridge_slave_0: entered allmulticast mode [ 34.674860][ T3319] bridge_slave_0: entered promiscuous mode [ 34.686009][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.693200][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.700325][ T3325] bridge_slave_0: entered allmulticast mode [ 34.706843][ T3325] bridge_slave_0: entered promiscuous mode [ 34.714762][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.724969][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.734536][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.742153][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.749843][ T3319] bridge_slave_1: entered allmulticast mode [ 34.756886][ T3319] bridge_slave_1: entered promiscuous mode [ 34.773258][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.780808][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.788191][ T3325] bridge_slave_1: entered allmulticast mode [ 34.794796][ T3325] bridge_slave_1: entered promiscuous mode [ 34.818038][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.843638][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.854143][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.868529][ T3318] team0: Port device team_slave_0 added [ 34.875209][ T3329] team0: Port device team_slave_0 added [ 34.882955][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.893700][ T3329] team0: Port device team_slave_1 added [ 34.905793][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.916883][ T3318] team0: Port device team_slave_1 added [ 34.938573][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.962838][ T3321] team0: Port device team_slave_0 added [ 34.979232][ T3319] team0: Port device team_slave_0 added [ 34.985278][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.992401][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.018757][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.029891][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.037251][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.064012][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.076164][ T3321] team0: Port device team_slave_1 added [ 35.087822][ T3319] team0: Port device team_slave_1 added [ 35.095025][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.104495][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.131113][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.142364][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.149465][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.176330][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.194747][ T3325] team0: Port device team_slave_0 added [ 35.217876][ T3325] team0: Port device team_slave_1 added [ 35.230884][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.238962][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.269302][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.282838][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.289994][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.318063][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.343395][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.350388][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.377469][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.397405][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.404769][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.431244][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.443322][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.450315][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.476437][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.491933][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.499001][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.525215][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.560766][ T3318] hsr_slave_0: entered promiscuous mode [ 35.566916][ T3318] hsr_slave_1: entered promiscuous mode [ 35.577066][ T3329] hsr_slave_0: entered promiscuous mode [ 35.583362][ T3329] hsr_slave_1: entered promiscuous mode [ 35.589365][ T3329] debugfs: 'hsr0' already exists in 'hsr' [ 35.595318][ T3329] Cannot create hsr debugfs directory [ 35.646427][ T3319] hsr_slave_0: entered promiscuous mode [ 35.652537][ T3319] hsr_slave_1: entered promiscuous mode [ 35.658498][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 35.664305][ T3319] Cannot create hsr debugfs directory [ 35.672943][ T3321] hsr_slave_0: entered promiscuous mode [ 35.679154][ T3321] hsr_slave_1: entered promiscuous mode [ 35.685135][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 35.690954][ T3321] Cannot create hsr debugfs directory [ 35.699337][ T3325] hsr_slave_0: entered promiscuous mode [ 35.705488][ T3325] hsr_slave_1: entered promiscuous mode [ 35.711488][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 35.717239][ T3325] Cannot create hsr debugfs directory [ 35.938220][ T3329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.948051][ T3329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.959619][ T3329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.968457][ T3329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.991995][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.003763][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.012882][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.023635][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.059867][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.069801][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.079613][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.094003][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.124511][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.151852][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.167479][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.179625][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.188545][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.200108][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.208001][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.217499][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.230230][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.265655][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.283706][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.290825][ T1711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.306410][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.313582][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.340780][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.384951][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.394425][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.409798][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.416928][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.432805][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.439967][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.455100][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.470188][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.484051][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.493694][ T2294] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.500871][ T2294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.520705][ T2294] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.527986][ T2294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.547152][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.568567][ T2294] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.575847][ T2294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.589557][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.601999][ T2294] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.609920][ T2294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.627521][ T2294] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.634634][ T2294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.645045][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.675778][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.682959][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.764895][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.835179][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.850943][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.883631][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.926715][ T3329] veth0_vlan: entered promiscuous mode [ 36.946149][ T3329] veth1_vlan: entered promiscuous mode [ 37.014320][ T3325] veth0_vlan: entered promiscuous mode [ 37.026966][ T3321] veth0_vlan: entered promiscuous mode [ 37.036042][ T3329] veth0_macvtap: entered promiscuous mode [ 37.047831][ T3329] veth1_macvtap: entered promiscuous mode [ 37.064190][ T3321] veth1_vlan: entered promiscuous mode [ 37.071008][ T3325] veth1_vlan: entered promiscuous mode [ 37.104210][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.124955][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.143729][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.158203][ T3319] veth0_vlan: entered promiscuous mode [ 37.164204][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.174698][ T3325] veth0_macvtap: entered promiscuous mode [ 37.184372][ T3321] veth0_macvtap: entered promiscuous mode [ 37.192183][ T3321] veth1_macvtap: entered promiscuous mode [ 37.199610][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.215845][ T3325] veth1_macvtap: entered promiscuous mode [ 37.223553][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.236081][ T3319] veth1_vlan: entered promiscuous mode [ 37.258190][ T3318] veth0_vlan: entered promiscuous mode [ 37.267253][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.283236][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.294877][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.305702][ T3318] veth1_vlan: entered promiscuous mode [ 37.316097][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.326852][ T3329] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.343779][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.354751][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.365857][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.375823][ T3318] veth0_macvtap: entered promiscuous mode [ 37.388451][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.404336][ T3318] veth1_macvtap: entered promiscuous mode [ 37.419751][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.455420][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.465355][ T3319] veth0_macvtap: entered promiscuous mode [ 37.476971][ T3319] veth1_macvtap: entered promiscuous mode [ 37.496614][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.504697][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.518551][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.546789][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.569680][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.574812][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 37.574909][ T29] audit: type=1400 audit(1768903626.913:102): avc: denied { open } for pid=3495 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.602222][ T29] audit: type=1400 audit(1768903626.913:103): avc: denied { perfmon } for pid=3495 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.606499][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.622938][ T29] audit: type=1400 audit(1768903626.913:104): avc: denied { kernel } for pid=3495 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.659172][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.678520][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.687934][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.718138][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.734354][ T29] audit: type=1326 audit(1768903627.073:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc7a2acb9 code=0x7ffc0000 [ 37.762321][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.791697][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.816040][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.841022][ T29] audit: type=1326 audit(1768903627.073:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc7a2acb9 code=0x7ffc0000 [ 37.865253][ T29] audit: type=1326 audit(1768903627.073:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fabc7a2acb9 code=0x7ffc0000 [ 37.868465][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.890151][ T29] audit: type=1326 audit(1768903627.073:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc7a2acb9 code=0x7ffc0000 [ 37.890186][ T29] audit: type=1326 audit(1768903627.073:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc7a2acb9 code=0x7ffc0000 [ 37.890216][ T29] audit: type=1326 audit(1768903627.073:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fabc7a2acb9 code=0x7ffc0000 [ 37.890325][ T29] audit: type=1326 audit(1768903627.073:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc7a2acb9 code=0x7ffc0000 [ 38.074782][ T3512] loop3: detected capacity change from 0 to 128 [ 38.092665][ T3512] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.142986][ T3512] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.221077][ T3329] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.668044][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 38.679881][ T3562] netlink: 'syz.4.21': attribute type 26 has an invalid length. [ 38.689026][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 38.703101][ T3564] capability: warning: `syz.3.23' uses deprecated v2 capabilities in a way that may be insecure [ 38.723163][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 38.732209][ T3562] netlink: 'syz.4.21': attribute type 26 has an invalid length. [ 38.740002][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 38.750219][ T3562] Zero length message leads to an empty skb [ 38.780595][ T3564] GUP no longer grows the stack in syz.3.23 (3564): 200000004000-20000000a000 (200000002000) [ 38.791386][ T3564] CPU: 1 UID: 0 PID: 3564 Comm: syz.3.23 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.791446][ T3564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.791461][ T3564] Call Trace: [ 38.791475][ T3564] [ 38.791484][ T3564] __dump_stack+0x1d/0x30 [ 38.791520][ T3564] dump_stack_lvl+0x95/0xd0 [ 38.791545][ T3564] dump_stack+0x15/0x1b [ 38.791569][ T3564] __get_user_pages+0x195b/0x1ea0 [ 38.791690][ T3564] ? __rcu_read_unlock+0x4e/0x70 [ 38.791726][ T3564] get_user_pages_remote+0x1d5/0x6b0 [ 38.791765][ T3564] __access_remote_vm+0x15c/0x580 [ 38.791819][ T3564] access_remote_vm+0x32/0x40 [ 38.791854][ T3564] proc_pid_cmdline_read+0x32b/0x6b0 [ 38.791886][ T3564] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 38.791916][ T3564] vfs_readv+0x432/0x6e0 [ 38.791977][ T3564] __x64_sys_preadv+0xfd/0x1c0 [ 38.792082][ T3564] x64_sys_call+0x2805/0x3000 [ 38.792115][ T3564] do_syscall_64+0xc0/0x2a0 [ 38.792143][ T3564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.792169][ T3564] RIP: 0033:0x7f4fbfffacb9 [ 38.792189][ T3564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.792215][ T3564] RSP: 002b:00007f4fbea57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 38.792248][ T3564] RAX: ffffffffffffffda RBX: 00007f4fc0275fa0 RCX: 00007f4fbfffacb9 [ 38.792264][ T3564] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 38.792279][ T3564] RBP: 00007f4fc0068bf7 R08: 0000000000000000 R09: 0000000000000000 [ 38.792294][ T3564] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 38.792309][ T3564] R13: 00007f4fc0276038 R14: 00007f4fc0275fa0 R15: 00007ffe91340938 [ 38.792372][ T3564] [ 39.392616][ T3610] netlink: 'syz.0.36': attribute type 1 has an invalid length. [ 39.454625][ T3610] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 39.504439][ T3614] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 40.020142][ T3662] bond1: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 40.035775][ T3662] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 40.063014][ T3662] bond1: (slave lo): Enslaving as a backup interface with an up link [ 40.073006][ T3662] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 40.121630][ T3662] syz.3.52 (3662) used greatest stack depth: 10456 bytes left [ 40.901482][ T3693] netlink: 'syz.3.62': attribute type 3 has an invalid length. [ 40.909116][ T3693] netlink: 'syz.3.62': attribute type 1 has an invalid length. [ 40.916835][ T3693] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.62'. [ 41.810035][ T3738] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 41.822282][ T3738] SELinux: failed to load policy [ 42.629856][ T3769] netlink: 'syz.3.89': attribute type 3 has an invalid length. [ 42.710219][ T3780] netlink: 'syz.3.93': attribute type 3 has an invalid length. [ 42.717914][ T3780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 43.272961][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 43.272980][ T29] audit: type=1400 audit(1768903888.612:162): avc: denied { create } for pid=3807 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.300776][ T29] audit: type=1400 audit(1768903888.632:163): avc: denied { setopt } for pid=3807 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.320766][ T29] audit: type=1400 audit(1768903888.632:164): avc: denied { write } for pid=3807 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.843411][ T3805] syz.4.101 (3805) used greatest stack depth: 10448 bytes left [ 44.055902][ T29] audit: type=1400 audit(1768903889.392:165): avc: denied { name_bind } for pid=3864 comm="syz.0.115" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 44.139870][ T29] audit: type=1400 audit(1768903889.472:166): avc: denied { execute } for pid=3867 comm="syz.0.116" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.292118][ T3872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 44.302068][ T29] audit: type=1400 audit(1768903889.642:167): avc: denied { bind } for pid=3870 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.302906][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 44.338125][ T29] audit: type=1400 audit(1768903889.642:168): avc: denied { setopt } for pid=3870 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.394731][ T3875] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 44.426596][ T3875] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 44.518016][ T3884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.122'. [ 44.650196][ T3888] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 44.657747][ T23] IPVS: starting estimator thread 0... [ 44.723725][ T1784] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.771409][ T3892] IPVS: using max 2208 ests per chain, 110400 per kthread [ 44.908960][ T29] audit: type=1400 audit(1768903890.242:169): avc: denied { create } for pid=3901 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.964397][ T29] audit: type=1400 audit(1768903890.272:170): avc: denied { connect } for pid=3901 comm="syz.3.130" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.984994][ T29] audit: type=1400 audit(1768903890.272:171): avc: denied { setopt } for pid=3901 comm="syz.3.130" laddr=fe80::b lport=255 faddr=::1 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.021311][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 45.109670][ T3909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 45.128368][ T3912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 45.189823][ T3918] syzkaller1: entered promiscuous mode [ 45.195545][ T3918] syzkaller1: entered allmulticast mode [ 45.238301][ T3924] netlink: 'syz.4.141': attribute type 13 has an invalid length. [ 45.317645][ T3924] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.324999][ T3924] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.353313][ T3928] loop3: detected capacity change from 0 to 8192 [ 45.362442][ T3928] ======================================================= [ 45.362442][ T3928] WARNING: The mand mount option has been deprecated and [ 45.362442][ T3928] and is ignored by this kernel. Remove the mand [ 45.362442][ T3928] option from the mount to silence this warning. [ 45.362442][ T3928] ======================================================= [ 45.408388][ T3928] syz.3.143: attempt to access beyond end of device [ 45.408388][ T3928] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 45.455580][ T3329] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 45.463684][ T3329] FAT-fs (loop3): Filesystem has been set read-only [ 45.479003][ T3924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.494421][ T3924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.519083][ T3933] loop1: detected capacity change from 0 to 8192 [ 45.582284][ T3935] batman_adv: batadv0: Adding interface: ipvlan2 [ 45.588780][ T3935] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.614171][ T3935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.624811][ T3935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.635496][ T3935] batman_adv: batadv0: Interface activated: ipvlan2 [ 45.642663][ T2294] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.661905][ T2294] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.681102][ T2294] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.700331][ T2294] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.753405][ T3924] syz.4.141 (3924) used greatest stack depth: 10336 bytes left [ 45.913483][ T3958] pim6reg1: entered promiscuous mode [ 45.918887][ T3958] pim6reg1: entered allmulticast mode [ 46.022226][ T3964] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 46.042225][ T3964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.062862][ T3964] bond1: (slave geneve2): making interface the new active one [ 46.072162][ T3964] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 46.080946][ T3967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 46.093830][ T3964] syz.1.155 (3964) used greatest stack depth: 9976 bytes left [ 46.119498][ T3969] capability: warning: `syz.1.157' uses 32-bit capabilities (legacy support in use) [ 46.195353][ T3976] netlink: 'syz.3.160': attribute type 39 has an invalid length. [ 46.505235][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 46.764595][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.770999][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 46.948790][ T4017] SELinux: unknown common r [ 46.954114][ T4017] SELinux: failed to load policy [ 47.087827][ T4025] loop1: detected capacity change from 0 to 512 [ 47.094835][ T4025] EXT4-fs: inline encryption not supported [ 47.108237][ T4025] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 47.118024][ T4025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a04fc11c, mo2=0002] [ 47.123285][ T4027] syz.3.181 (4027) used greatest stack depth: 9376 bytes left [ 47.127821][ T4025] System zones: 1-12 [ 47.141571][ T4025] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.180: corrupted in-inode xattr: e_value size too large [ 47.159556][ T4031] process 'syz.3.182' launched './file0' with NULL argv: empty string added [ 47.159614][ T4025] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.180: couldn't read orphan inode 15 (err -117) [ 47.181117][ T4025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.248748][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.393374][ T4046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.464015][ T4043] loop0: detected capacity change from 0 to 8192 [ 47.498731][ T4054] loop2: detected capacity change from 0 to 1024 [ 47.521653][ T3309] loop0: p1 p2 p4 < > [ 47.525899][ T3309] loop0: partition table partially beyond EOD, truncated [ 47.540678][ T3309] loop0: p1 start 16777216 is beyond EOD, truncated [ 47.547474][ T3309] loop0: p2 size 515840 extends beyond EOD, truncated [ 47.566604][ T4054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.580594][ T3309] loop0: p4 start 16777216 is beyond EOD, truncated [ 47.599429][ T4043] loop0: p1 p2 p4 < > [ 47.603629][ T4043] loop0: partition table partially beyond EOD, truncated [ 47.616688][ T4043] loop0: p1 start 16777216 is beyond EOD, truncated [ 47.623407][ T4043] loop0: p2 size 515840 extends beyond EOD, truncated [ 47.633053][ T4043] loop0: p4 start 16777216 is beyond EOD, truncated [ 47.684460][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.720290][ T3575] udevd[3575]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 47.740342][ T3575] udevd[3575]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 47.786124][ T4075] loop2: detected capacity change from 0 to 764 [ 47.812579][ T4075] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.027702][ T4094] loop0: detected capacity change from 0 to 1024 [ 48.049095][ T4094] EXT4-fs: Ignoring removed orlov option [ 48.055046][ T4094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.200291][ T4101] loop4: detected capacity change from 0 to 256 [ 48.215268][ T4094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.238560][ T4069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 48.272906][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.355262][ T4108] loop0: detected capacity change from 0 to 2048 [ 48.405121][ T3575] GPT:first_usable_lbas don't match. [ 48.410563][ T3575] GPT:34 != 290 [ 48.414402][ T3575] GPT: Use GNU Parted to correct GPT errors. [ 48.421506][ T3575] loop0: p1 p2 p3 [ 48.434407][ T4108] GPT:first_usable_lbas don't match. [ 48.440207][ T4108] GPT:34 != 290 [ 48.444317][ T4108] GPT: Use GNU Parted to correct GPT errors. [ 48.450615][ T4108] loop0: p1 p2 p3 [ 48.513468][ T3575] udevd[3575]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 48.526810][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 48.527864][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 48.575532][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 48.577562][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 48.589321][ T3575] udevd[3575]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 48.610266][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 48.610284][ T29] audit: type=1400 audit(1768904149.949:232): avc: denied { create } for pid=4116 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.654900][ T29] audit: type=1400 audit(1768904149.949:233): avc: denied { connect } for pid=4116 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.710176][ T29] audit: type=1400 audit(1768904150.039:234): avc: denied { bind } for pid=4122 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.840279][ T29] audit: type=1326 audit(1768904150.169:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4135 comm="syz.0.225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ed79eacb9 code=0x0 [ 49.223000][ T29] audit: type=1400 audit(1768904150.559:236): avc: denied { ioctl } for pid=4153 comm="syz.4.232" path="socket:[6733]" dev="sockfs" ino=6733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.269204][ T29] audit: type=1400 audit(1768904150.599:237): avc: denied { mount } for pid=4156 comm="syz.3.233" name="/" dev="autofs" ino=6741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 49.357206][ T4163] netlink: 'syz.2.236': attribute type 29 has an invalid length. [ 49.366826][ T4163] netlink: 'syz.2.236': attribute type 29 has an invalid length. [ 49.378458][ T29] audit: type=1400 audit(1768904150.719:238): avc: denied { write } for pid=4162 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.378565][ T4163] netlink: 500 bytes leftover after parsing attributes in process `syz.2.236'. [ 49.407409][ T29] audit: type=1400 audit(1768904150.719:239): avc: denied { nlmsg_write } for pid=4162 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.411813][ T4163] unsupported nla_type 66 [ 49.824276][ T4173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.239'. [ 49.833595][ T4173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.239'. [ 49.920336][ T4173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.239'. [ 49.929394][ T4173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.239'. [ 49.951450][ T29] audit: type=1400 audit(1768904151.219:240): avc: denied { map } for pid=4178 comm="syz.2.244" path="socket:[6103]" dev="sockfs" ino=6103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 49.974733][ T29] audit: type=1400 audit(1768904151.239:241): avc: denied { module_request } for pid=4172 comm="syz.1.239" kmod="nft-expr-1-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 50.003083][ T4184] loop0: detected capacity change from 0 to 512 [ 50.024928][ T4184] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.238: inode has both inline data and extents flags [ 50.038428][ T4184] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.238: couldn't read orphan inode 15 (err -117) [ 50.052250][ T4184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.150665][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.189333][ T4173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.239'. [ 50.198362][ T4173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.239'. [ 50.274475][ T4200] syz.0.247: attempt to access beyond end of device [ 50.274475][ T4200] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 50.331321][ T4204] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 50.338681][ T4206] tipc: Started in network mode [ 50.345817][ T4206] tipc: Node identity ac1414aa, cluster identity 4711 [ 50.379337][ T31] kworker/u8:1: attempt to access beyond end of device [ 50.379337][ T31] loop0: rw=1, sector=153, nr_sectors = 89 limit=128 [ 50.418951][ T4206] tipc: Enabled bearer , priority 10 [ 50.535267][ T4226] netlink: 'syz.0.260': attribute type 29 has an invalid length. [ 50.544803][ T4226] netlink: 'syz.0.260': attribute type 29 has an invalid length. [ 50.588115][ C0] hrtimer: interrupt took 31681 ns [ 50.960903][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.416357][ T4262] geneve2: entered promiscuous mode [ 51.539398][ T3407] tipc: Node number set to 2886997162 [ 51.812878][ T4290] set_capacity_and_notify: 1 callbacks suppressed [ 51.812899][ T4290] loop1: detected capacity change from 0 to 128 [ 51.999348][ T4297] gretap0: entered promiscuous mode [ 52.135251][ T4303] netlink: 68 bytes leftover after parsing attributes in process `syz.2.292'. [ 52.172629][ T4303] netlink: 68 bytes leftover after parsing attributes in process `syz.2.292'. [ 52.256583][ T4307] loop2: detected capacity change from 0 to 128 [ 52.338561][ T4309] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 52.375324][ T4290] syz.1.283: attempt to access beyond end of device [ 52.375324][ T4290] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 52.389770][ T4290] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 52.400974][ T4290] syz.1.283: attempt to access beyond end of device [ 52.400974][ T4290] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 52.414914][ T4290] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 52.524175][ T4319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'. [ 52.616008][ T4325] SELinux: failed to load policy [ 52.844515][ T4307] syz.2.293: attempt to access beyond end of device [ 52.844515][ T4307] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 52.858464][ T4307] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 52.935218][ T4333] loop2: detected capacity change from 0 to 512 [ 52.955511][ T4333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.980058][ T4333] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.001325][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.007541][ T3628] Bluetooth: hci0: command 0x1003 tx timeout [ 53.045946][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.410892][ T4355] syz.1.313 uses obsolete (PF_INET,SOCK_PACKET) [ 53.496904][ T4361] team1: entered promiscuous mode [ 53.502978][ T4361] team1: entered allmulticast mode [ 53.509457][ T4361] 8021q: adding VLAN 0 to HW filter on device team1 [ 53.790605][ T4383] loop1: detected capacity change from 0 to 2048 [ 53.851642][ T3575] loop1: p1 p3 p4 [ 53.857379][ T3575] loop1: p4 size 589824 extends beyond EOD, truncated [ 53.878950][ T4383] loop1: p1 p3 p4 [ 53.886269][ T4383] loop1: p4 size 589824 extends beyond EOD, truncated [ 53.901015][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 53.901034][ T29] audit: type=1326 audit(1768904155.229:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fee8acb9 code=0x7ffc0000 [ 53.937243][ T29] audit: type=1326 audit(1768904155.229:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fee8acb9 code=0x7ffc0000 [ 53.964480][ T29] audit: type=1326 audit(1768904155.229:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fee8acb9 code=0x7ffc0000 [ 53.993836][ T29] audit: type=1326 audit(1768904155.229:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fee8acb9 code=0x7ffc0000 [ 54.021626][ T29] audit: type=1326 audit(1768904155.229:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff5fee8acb9 code=0x7ffc0000 [ 54.048860][ T29] audit: type=1400 audit(1768904155.229:310): avc: denied { read write } for pid=4382 comm="syz.1.326" name="loop1p4" dev="devtmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.075843][ T29] audit: type=1400 audit(1768904155.229:311): avc: denied { open } for pid=4382 comm="syz.1.326" path="/dev/loop1p4" dev="devtmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.103018][ T29] audit: type=1326 audit(1768904155.229:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fee8acb9 code=0x7ffc0000 [ 54.131913][ T29] audit: type=1326 audit(1768904155.229:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fee8acb9 code=0x7ffc0000 [ 54.157968][ T29] audit: type=1326 audit(1768904155.229:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fee8acb9 code=0x7ffc0000 [ 54.492979][ T4410] __nla_validate_parse: 3 callbacks suppressed [ 54.492999][ T4410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.336'. [ 54.740557][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 54.774750][ T4430] veth0_macvtap: left promiscuous mode [ 54.916537][ T4439] netlink: 'syz.4.349': attribute type 1 has an invalid length. [ 54.928073][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 54.962914][ T1784] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.976073][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 54.991646][ T1784] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.014616][ T4439] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 55.045113][ T4439] bond1: (slave batadv1): making interface the new active one [ 55.057938][ T4444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 55.136576][ T4439] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 55.146502][ T1784] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.162475][ T4444] bond1 (unregistering): (slave batadv1): Releasing active interface [ 55.220685][ T4444] bond1 (unregistering): Released all slaves [ 55.262721][ T1784] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.574364][ T4486] ipip0: entered promiscuous mode [ 55.721124][ T4496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 55.752809][ T4496] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 55.855596][ T4518] loop4: detected capacity change from 0 to 1024 [ 55.882996][ T4523] loop3: detected capacity change from 0 to 128 [ 55.916183][ T4518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.930801][ T4523] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.945120][ T4523] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.957546][ T4518] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.971871][ T4529] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 55.976629][ T4518] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.375: lblock 3 mapped to illegal pblock 3 (length 3) [ 56.000949][ T4518] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 56.013422][ T4518] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.013422][ T4518] [ 56.035661][ T4518] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm syz.4.375: lblock 8 mapped to illegal pblock 8 (length 8) [ 56.037887][ T3329] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.068199][ T4518] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 56.080866][ T4518] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.080866][ T4518] [ 56.094415][ T4518] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.375: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.110350][ T4518] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.375: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.150437][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.195532][ T4539] syzkaller0: entered promiscuous mode [ 56.201117][ T4539] syzkaller0: entered allmulticast mode [ 56.322855][ T4546] SELinux: failed to load policy [ 56.360170][ T4552] all: renamed from lo [ 56.471053][ T4558] netlink: 'syz.0.388': attribute type 20 has an invalid length. [ 56.478899][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 56.507559][ T4558] netlink: 'syz.0.388': attribute type 20 has an invalid length. [ 56.515906][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 56.527177][ T2391] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.560998][ T2391] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.583071][ T2391] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.592192][ T2391] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.713823][ T4581] netlink: 208 bytes leftover after parsing attributes in process `syz.4.397'. [ 56.723090][ T4581] netlink: 208 bytes leftover after parsing attributes in process `syz.4.397'. [ 57.105385][ T4592] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 57.377263][ T4626] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 57.400383][ T4626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.440484][ T4626] bond2: (slave gretap1): making interface the new active one [ 57.453256][ T4626] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 58.052442][ T4590] syz.1.401 (4590) used greatest stack depth: 7224 bytes left [ 58.166363][ T3414] IPVS: starting estimator thread 0... [ 58.271464][ T4699] IPVS: using max 1824 ests per chain, 91200 per kthread [ 58.323466][ T12] IPVS: stop unused estimator thread 0... [ 58.703766][ T4723] io-wq is not configured for unbound workers [ 58.863205][ T4727] SELinux: unknown common r [ 58.944066][ T4727] SELinux: failed to load policy [ 59.092621][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 59.092637][ T29] audit: type=1400 audit(1768904160.429:458): avc: denied { write } for pid=4742 comm="syz.4.455" lport=34886 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 59.275604][ T29] audit: type=1400 audit(1768904160.609:459): avc: denied { watch } for pid=4759 comm="syz.4.461" path="/91/file0" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.418433][ T4769] loop0: detected capacity change from 0 to 512 [ 59.434727][ T4769] EXT4-fs: Ignoring removed nobh option [ 59.449968][ T4769] EXT4-fs: old and new quota format mixing [ 59.581226][ T29] audit: type=1326 audit(1768904160.909:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ed79eacb9 code=0x0 [ 59.983023][ T29] audit: type=1400 audit(1768904161.319:461): avc: denied { getopt } for pid=4774 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.158919][ T29] audit: type=1400 audit(1768904161.489:462): avc: denied { read } for pid=4780 comm="syz.2.469" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 60.183237][ T29] audit: type=1400 audit(1768904161.489:463): avc: denied { open } for pid=4780 comm="syz.2.469" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 60.223618][ T29] audit: type=1400 audit(1768904161.539:464): avc: denied { write } for pid=4780 comm="syz.2.469" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 60.280139][ T29] audit: type=1400 audit(1768904161.609:465): avc: denied { create } for pid=4782 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 60.463927][ T4802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4802 comm=syz.1.478 [ 60.476331][ T29] audit: type=1400 audit(1768904161.719:466): avc: denied { read } for pid=4782 comm="syz.2.470" path="socket:[8130]" dev="sockfs" ino=8130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 60.497161][ T4802] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 60.517434][ T4800] sctp: [Deprecated]: syz.4.477 (pid 4800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.517434][ T4800] Use struct sctp_sack_info instead [ 60.565190][ T4808] bond2: (slave bridge1): making interface the new active one [ 60.602436][ T4808] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 60.906481][ T4829] gre1: entered promiscuous mode [ 61.070999][ T29] audit: type=1400 audit(1768904162.399:467): avc: denied { name_bind } for pid=4842 comm="syz.3.495" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 61.204702][ T4855] loop3: detected capacity change from 0 to 1024 [ 61.217894][ T4855] EXT4-fs: Ignoring removed oldalloc option [ 61.224569][ T4855] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 61.255863][ T4855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.289625][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.659494][ T4885] syzkaller1: entered promiscuous mode [ 61.665302][ T4885] syzkaller1: entered allmulticast mode [ 61.802301][ T4893] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.875111][ T4899] netlink: 'syz.2.518': attribute type 2 has an invalid length. [ 61.883073][ T4899] __nla_validate_parse: 4 callbacks suppressed [ 61.883093][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 61.899890][ T4899] netlink: 'syz.2.518': attribute type 2 has an invalid length. [ 61.907950][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 62.458454][ T4932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.533'. [ 62.744215][ T4952] loop2: detected capacity change from 0 to 256 [ 62.783961][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 62.967996][ T4970] geneve2: entered promiscuous mode [ 63.009251][ T4972] loop4: detected capacity change from 0 to 512 [ 63.040501][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 63.051472][ T4976] netlink: 'syz.1.552': attribute type 12 has an invalid length. [ 63.063740][ T4972] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.550: inode has both inline data and extents flags [ 63.104683][ T4972] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.550: couldn't read orphan inode 15 (err -117) [ 63.122467][ T4972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.145477][ T4981] loop7: detected capacity change from 0 to 7 [ 63.155810][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 63.166303][ T4976] netlink: 'syz.1.552': attribute type 12 has an invalid length. [ 63.174444][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.186786][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.198410][ T37] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.212241][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.225157][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.236287][ T4981] loop7: unable to read partition table [ 63.245011][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.248067][ T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.267229][ T4981] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 63.283316][ T37] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.292571][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.307033][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.316319][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.318679][ T37] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.328367][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.329074][ T3575] loop7: unable to read partition table [ 63.346476][ T4984] loop0: detected capacity change from 0 to 512 [ 63.366133][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.376784][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.387887][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.398460][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.409333][ T4983] loop7: unable to read partition table [ 63.418770][ T4983] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 63.432016][ T4984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.443695][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.454321][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.468867][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.480762][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.489922][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.501241][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.512254][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 63.515583][ T4984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.525572][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 63.537501][ T4984] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.594955][ T4993] netlink: 'syz.4.557': attribute type 4 has an invalid length. [ 63.604958][ T4984] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.554: bg 0: block 35: padding at end of block bitmap is not set [ 63.609220][ T4984] EXT4-fs (loop0): Remounting filesystem read-only [ 63.630689][ T4984] EXT4-fs (loop0): 1 truncate cleaned up [ 63.647607][ T4993] netlink: 'syz.4.557': attribute type 4 has an invalid length. [ 63.648034][ T4984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.800486][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.978688][ T5012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5012 comm=syz.2.564 [ 64.194124][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'. [ 64.212027][ T5012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 64.443100][ T5016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.456495][ T5020] bond3: option ad_select: unable to set because the bond device is up [ 64.564066][ T5025] netlink: 'syz.0.571': attribute type 9 has an invalid length. [ 64.572048][ T5025] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.571'. [ 64.771062][ T3009] ================================================================== [ 64.779321][ T3009] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 64.787357][ T3009] [ 64.790143][ T3009] write to 0xffff888107a11330 of 8 bytes by task 3575 on cpu 0: [ 64.798317][ T3009] dentry_unlink_inode+0x65/0x260 [ 64.803383][ T3009] d_delete+0x164/0x180 [ 64.807569][ T3009] d_delete_notify+0x32/0x100 [ 64.812331][ T3009] vfs_unlink+0x32c/0x440 [ 64.816697][ T3009] do_unlinkat+0x1e2/0x4b0 [ 64.821239][ T3009] __x64_sys_unlink+0x2e/0x40 [ 64.826045][ T3009] x64_sys_call+0x2f48/0x3000 [ 64.830780][ T3009] do_syscall_64+0xc0/0x2a0 [ 64.835486][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.841412][ T3009] [ 64.843791][ T3009] read to 0xffff888107a11330 of 8 bytes by task 3009 on cpu 1: [ 64.851450][ T3009] step_into_slowpath+0x12c/0x4c0 [ 64.856743][ T3009] path_lookupat+0x330/0x500 [ 64.861469][ T3009] filename_lookup+0x190/0x390 [ 64.866267][ T3009] do_readlinkat+0x7d/0x340 [ 64.870990][ T3009] __x64_sys_readlink+0x47/0x60 [ 64.876093][ T3009] x64_sys_call+0x2af1/0x3000 [ 64.880844][ T3009] do_syscall_64+0xc0/0x2a0 [ 64.885463][ T3009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.891407][ T3009] [ 64.893755][ T3009] value changed: 0xffff88811be1e360 -> 0x0000000000000000 [ 64.901034][ T3009] [ 64.903377][ T3009] Reported by Kernel Concurrency Sanitizer on: [ 64.909935][ T3009] CPU: 1 UID: 0 PID: 3009 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.919262][ T3009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.929520][ T3009] ================================================================== [ 64.938280][ T5030] loop1: detected capacity change from 0 to 256