last executing test programs: 5.547417509s ago: executing program 1 (id=323): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) 5.547306589s ago: executing program 1 (id=324): r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(r1) 5.54370777s ago: executing program 1 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)={0x0, 0x2aaaaaaaaaaaaaf9, [@multicast]}) 4.650838539s ago: executing program 1 (id=336): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x1, 0x0, 0x3, 0x3}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x9, 0xfffd}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x7, 0x10}) 4.581517591s ago: executing program 0 (id=339): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) setreuid(r1, r1) 4.545288652s ago: executing program 1 (id=342): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.534891422s ago: executing program 0 (id=343): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x355) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60a40, 0x8) 4.509514803s ago: executing program 1 (id=345): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) getpeername$unix(r0, 0x0, &(0x7f0000000180)) 4.454254825s ago: executing program 0 (id=348): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000040)=r1, 0x4) 4.314951959s ago: executing program 0 (id=353): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) 4.270314131s ago: executing program 0 (id=355): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.218577333s ago: executing program 0 (id=357): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x70bd2b, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0xffffadf3, 0xffffffffffffffff, 0x3, 0x10000}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.160229822s ago: executing program 3 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x48}}, 0x0) 1.116244983s ago: executing program 3 (id=409): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0x0) 910.16582ms ago: executing program 3 (id=410): unshare(0x6a040000) unshare(0x400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) 731.437266ms ago: executing program 3 (id=412): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) 643.976499ms ago: executing program 3 (id=414): r0 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000200)='$.,[]]{^', &(0x7f0000000080)="15", 0x1) 606.5991ms ago: executing program 2 (id=415): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x552355c2) 587.219991ms ago: executing program 3 (id=416): io_uring_setup(0x5755, &(0x7f00000001c0)={0x0, 0xf463, 0x40, 0x1, 0x1a9}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(0x3) 463.677705ms ago: executing program 4 (id=418): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 463.091255ms ago: executing program 2 (id=428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500283a6b304c"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 355.307958ms ago: executing program 4 (id=419): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc, 0x32, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0xfff, 0x1, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) 354.795878ms ago: executing program 2 (id=430): setreuid(0x0, 0xee00) setgroups(0xffffffffffffff88, 0x0) r0 = syz_clone(0x1184600, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x4, 0x0, 0x0) 308.75646ms ago: executing program 4 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x48}}, 0x0) 280.925171ms ago: executing program 2 (id=421): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x41, &(0x7f0000000640), 0x1, 0x5d7, &(0x7f0000000e40)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) 254.500571ms ago: executing program 4 (id=422): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 193.051844ms ago: executing program 4 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x525}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x430d}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x101}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1c, 0x2, 0x0, 0x9, 0x151, 0x1}, {0x81, 0x0, 0x4, 0x499d, 0x2, 0x8}, 0x7, 0xffffffc0, 0x477}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 162.933894ms ago: executing program 2 (id=424): unshare(0x6a040000) unshare(0x400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) 147.962495ms ago: executing program 4 (id=425): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 0s ago: executing program 2 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x80000000) kernel console output (not intermixed with test programs): ystem_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.575836][ T28] audit: type=1400 audit(1781004212.103:125): avc: denied { write } for pid=3274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 30.242995][ T28] audit: type=1400 audit(1781004219.773:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.266121][ T28] audit: type=1400 audit(1781004219.793:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.266814][ T3285] cgroup: Unknown subsys name 'net' [ 30.294413][ T28] audit: type=1400 audit(1781004219.823:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.411658][ T3285] cgroup: Unknown subsys name 'cpuset' [ 30.417892][ T3285] cgroup: Unknown subsys name 'rlimit' [ 30.547651][ T28] audit: type=1400 audit(1781004220.073:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.571156][ T28] audit: type=1400 audit(1781004220.073:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.596672][ T28] audit: type=1400 audit(1781004220.073:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.611535][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.617321][ T28] audit: type=1400 audit(1781004220.073:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.646487][ T28] audit: type=1400 audit(1781004220.083:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.660610][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.671400][ T28] audit: type=1400 audit(1781004220.083:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.703379][ T28] audit: type=1400 audit(1781004220.103:135): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.893687][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.901542][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.908811][ T3299] bridge_slave_0: entered allmulticast mode [ 31.915356][ T3299] bridge_slave_0: entered promiscuous mode [ 31.940488][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.947791][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.954972][ T3299] bridge_slave_1: entered allmulticast mode [ 31.961629][ T3299] bridge_slave_1: entered promiscuous mode [ 31.985051][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.992222][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.999373][ T3296] bridge_slave_0: entered allmulticast mode [ 32.005920][ T3296] bridge_slave_0: entered promiscuous mode [ 32.025881][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.033067][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.040294][ T3296] bridge_slave_1: entered allmulticast mode [ 32.046829][ T3296] bridge_slave_1: entered promiscuous mode [ 32.073408][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.099853][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.115973][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.123159][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.131682][ T3306] bridge_slave_0: entered allmulticast mode [ 32.138429][ T3306] bridge_slave_0: entered promiscuous mode [ 32.145913][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.163587][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.170738][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.178132][ T3304] bridge_slave_0: entered allmulticast mode [ 32.184560][ T3304] bridge_slave_0: entered promiscuous mode [ 32.191238][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.198467][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.205670][ T3306] bridge_slave_1: entered allmulticast mode [ 32.212190][ T3306] bridge_slave_1: entered promiscuous mode [ 32.219497][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.237669][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.244790][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.252020][ T3304] bridge_slave_1: entered allmulticast mode [ 32.258570][ T3304] bridge_slave_1: entered promiscuous mode [ 32.278295][ T3299] team0: Port device team_slave_0 added [ 32.284141][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.291293][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.298372][ T3307] bridge_slave_0: entered allmulticast mode [ 32.304910][ T3307] bridge_slave_0: entered promiscuous mode [ 32.324522][ T3299] team0: Port device team_slave_1 added [ 32.330211][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.337354][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.344509][ T3307] bridge_slave_1: entered allmulticast mode [ 32.351066][ T3307] bridge_slave_1: entered promiscuous mode [ 32.358288][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.368467][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.378433][ T3296] team0: Port device team_slave_0 added [ 32.393851][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.408882][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.423770][ T3296] team0: Port device team_slave_1 added [ 32.450416][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.457453][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.483663][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.495650][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.506528][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.516500][ T3304] team0: Port device team_slave_0 added [ 32.522719][ T3306] team0: Port device team_slave_0 added [ 32.533070][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.540146][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.566083][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.581805][ T3304] team0: Port device team_slave_1 added [ 32.588210][ T3306] team0: Port device team_slave_1 added [ 32.598103][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.605103][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.631222][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.656769][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.663836][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.689856][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.704881][ T3307] team0: Port device team_slave_0 added [ 32.715308][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.722430][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.748463][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.760111][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.767135][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.793060][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.806400][ T3307] team0: Port device team_slave_1 added [ 32.812466][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.819429][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.845690][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.877394][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.884607][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.910699][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.928957][ T3299] hsr_slave_0: entered promiscuous mode [ 32.934962][ T3299] hsr_slave_1: entered promiscuous mode [ 32.952288][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.959833][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.986940][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.998673][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.005664][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.031587][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.047771][ T3296] hsr_slave_0: entered promiscuous mode [ 33.053887][ T3296] hsr_slave_1: entered promiscuous mode [ 33.059663][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 33.065454][ T3296] Cannot create hsr debugfs directory [ 33.088729][ T3306] hsr_slave_0: entered promiscuous mode [ 33.094811][ T3306] hsr_slave_1: entered promiscuous mode [ 33.100663][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 33.106701][ T3306] Cannot create hsr debugfs directory [ 33.139478][ T3304] hsr_slave_0: entered promiscuous mode [ 33.145815][ T3304] hsr_slave_1: entered promiscuous mode [ 33.151680][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 33.157419][ T3304] Cannot create hsr debugfs directory [ 33.184429][ T3307] hsr_slave_0: entered promiscuous mode [ 33.190306][ T3307] hsr_slave_1: entered promiscuous mode [ 33.196213][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 33.201974][ T3307] Cannot create hsr debugfs directory [ 33.375837][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.384435][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.392107][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.400651][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.408443][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.417082][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.429543][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.437800][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.458330][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.466983][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.475572][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.484038][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.491839][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.500444][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.508450][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.516812][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.550039][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.558811][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.566728][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.575295][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.583612][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.592076][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.600475][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.609401][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.640243][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.648554][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.656366][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.665047][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.672970][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.681512][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.689219][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.697920][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.747601][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.756195][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.764945][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.773442][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.785577][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.794124][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.802892][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.814667][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.823519][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.838822][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.857719][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.875798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.882900][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.892256][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.901541][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.908754][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.926742][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.933839][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.943220][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.950348][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.965732][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.981936][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.013735][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.038898][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.046040][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.054954][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.075849][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.082978][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.094885][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.101998][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.111871][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.124435][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.131591][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.152352][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.172605][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.179715][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.196135][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.203295][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.335702][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.349796][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.481388][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.501574][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.521987][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.557235][ T3306] veth0_vlan: entered promiscuous mode [ 34.580715][ T3306] veth1_vlan: entered promiscuous mode [ 34.594380][ T3304] veth0_vlan: entered promiscuous mode [ 34.622980][ T3304] veth1_vlan: entered promiscuous mode [ 34.645069][ T3296] veth0_vlan: entered promiscuous mode [ 34.668024][ T3304] veth0_macvtap: entered promiscuous mode [ 34.677346][ T3306] veth0_macvtap: entered promiscuous mode [ 34.688982][ T3304] veth1_macvtap: entered promiscuous mode [ 34.705259][ T3296] veth1_vlan: entered promiscuous mode [ 34.719390][ T3306] veth1_macvtap: entered promiscuous mode [ 34.739519][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.750467][ T3299] veth0_vlan: entered promiscuous mode [ 34.760019][ T3299] veth1_vlan: entered promiscuous mode [ 34.768270][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.785339][ T3452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.794365][ T3452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.809550][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.817134][ T3452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.826140][ T3452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.843640][ T3296] veth0_macvtap: entered promiscuous mode [ 34.855401][ T3307] veth0_vlan: entered promiscuous mode [ 34.862315][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.877267][ T3296] veth1_macvtap: entered promiscuous mode [ 34.884125][ T3452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.893078][ T3452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.902602][ T3299] veth0_macvtap: entered promiscuous mode [ 34.913883][ T3307] veth1_vlan: entered promiscuous mode [ 34.920904][ T3452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.930562][ T3452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.947062][ T3299] veth1_macvtap: entered promiscuous mode [ 34.955470][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.979691][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.999495][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.016566][ T3307] veth0_macvtap: entered promiscuous mode [ 35.024483][ T3307] veth1_macvtap: entered promiscuous mode [ 35.042395][ T396] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.051500][ T396] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.061738][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.077595][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.088515][ T396] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.097899][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.111747][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.124624][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.161606][ T396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.184221][ T396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.209704][ T396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.225892][ T396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.245554][ T3515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 35.259362][ T396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.273073][ T396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.303348][ T396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.313588][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 35.313606][ T28] audit: type=1400 audit(1781004224.843:165): avc: denied { prog_run } for pid=3516 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.327515][ T396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.353134][ T28] audit: type=1400 audit(1781004224.883:166): avc: denied { create } for pid=3518 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.397772][ T28] audit: type=1400 audit(1781004224.883:167): avc: denied { write } for pid=3518 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.407537][ T3519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 35.540921][ T3531] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 35.589426][ T3535] Zero length message leads to an empty skb [ 35.603544][ T28] audit: type=1400 audit(1781004225.123:168): avc: denied { execute } for pid=3536 comm="syz.2.14" path="/1/memory.events" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.652789][ T28] audit: type=1400 audit(1781004225.183:169): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.737109][ T28] audit: type=1400 audit(1781004225.183:171): avc: denied { ioctl } for pid=3299 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.738219][ T3545] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 35.774939][ T28] audit: type=1400 audit(1781004225.183:170): avc: denied { open } for pid=3307 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.805375][ T3549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.888383][ T28] audit: type=1400 audit(1781004225.243:172): avc: denied { open } for pid=3542 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.916524][ T28] audit: type=1400 audit(1781004225.243:173): avc: denied { kernel } for pid=3542 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.938390][ T28] audit: type=1400 audit(1781004225.243:174): avc: denied { tracepoint } for pid=3542 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.974252][ T3558] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 36.078290][ T3572] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.30'. [ 36.121922][ T3572] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.30'. [ 36.152038][ T3578] netlink: 'syz.2.33': attribute type 39 has an invalid length. [ 36.238725][ T3588] process 'syz.4.38' launched '/dev/fd/4' with NULL argv: empty string added [ 36.408210][ T3601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.44'. [ 36.974443][ T3633] syz.1.59 (3633) used greatest stack depth: 9928 bytes left [ 36.995506][ T3640] syz.3.61 (3640) used greatest stack depth: 9072 bytes left [ 37.221285][ T3670] bond1: invalid ARP target 0.0.0.0 specified for addition [ 37.228558][ T3670] bond1: option arp_ip_target: invalid value (0) [ 37.236272][ T3670] bond1 (unregistering): Released all slaves [ 37.586184][ T3710] macvtap1: entered promiscuous mode [ 37.602521][ T3710] macvtap1: entered allmulticast mode [ 37.609735][ T3710] dummy0: entered allmulticast mode [ 37.625400][ T3710] dummy0: entered promiscuous mode [ 37.631748][ T3710] team0: Device macvtap1 failed to register rx_handler [ 37.660367][ T3710] dummy0: left allmulticast mode [ 37.696006][ T3714] capability: warning: `syz.3.93' uses deprecated v2 capabilities in a way that may be insecure [ 37.707489][ T3377] dummy0: left promiscuous mode [ 37.780013][ T3721] loop1: detected capacity change from 0 to 256 [ 37.788347][ T3721] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.881764][ T3721] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 37.890112][ T3721] FAT-fs (loop1): Filesystem has been set read-only [ 37.897995][ T3721] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 37.906094][ T3721] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 37.914479][ T3721] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 37.922853][ T3721] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 38.144621][ T3736] mmap: syz.0.100 (3736) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.255323][ T3743] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.460600][ T3762] loop1: detected capacity change from 0 to 1024 [ 38.491760][ T3762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.542315][ T3773] loop2: detected capacity change from 0 to 512 [ 38.657677][ T3781] netlink: 132 bytes leftover after parsing attributes in process `syz.4.119'. [ 38.692669][ T3781] netlink: 'syz.4.119': attribute type 12 has an invalid length. [ 38.719157][ T3781] netlink: 132 bytes leftover after parsing attributes in process `syz.4.119'. [ 39.035177][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.229627][ T3812] loop0: detected capacity change from 0 to 1024 [ 39.730709][ T3855] capability: warning: `syz.0.153' uses 32-bit capabilities (legacy support in use) [ 39.783646][ T3858] program syz.0.153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.997561][ T3877] program syz.3.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.180388][ T3899] netlink: 2044 bytes leftover after parsing attributes in process `syz.0.172'. [ 40.190016][ T3899] netlink: 73 bytes leftover after parsing attributes in process `syz.0.172'. [ 40.237564][ T3884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.255186][ T3884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.352543][ T3921] loop1: detected capacity change from 0 to 128 [ 40.398305][ T3923] loop3: detected capacity change from 0 to 4096 [ 40.413027][ T3923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.430696][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 40.430714][ T28] audit: type=1400 audit(1781004229.953:263): avc: denied { write } for pid=3922 comm="syz.3.184" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.464906][ T28] audit: type=1400 audit(1781004229.993:264): avc: denied { ioctl } for pid=3922 comm="syz.3.184" path="/34/file0/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.522417][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.581516][ T28] audit: type=1400 audit(1781004230.103:265): avc: denied { perfmon } for pid=3931 comm="syz.3.187" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.602833][ T28] audit: type=1400 audit(1781004230.113:266): avc: denied { bpf } for pid=3931 comm="syz.3.187" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.673692][ T3936] SELinux: ebitmap: empty map [ 40.674164][ T28] audit: type=1400 audit(1781004230.203:267): avc: denied { load_policy } for pid=3933 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 40.678548][ T3936] SELinux: failed to load policy [ 40.746054][ T28] audit: type=1400 audit(1781004230.263:268): avc: denied { append } for pid=3939 comm="syz.0.191" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.776382][ T28] audit: type=1400 audit(1781004230.273:269): avc: denied { write } for pid=3939 comm="syz.0.191" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.815043][ T28] audit: type=1400 audit(1781004230.343:270): avc: denied { create } for pid=3944 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 40.846619][ T28] audit: type=1400 audit(1781004230.373:271): avc: denied { write } for pid=3944 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 40.873843][ T28] audit: type=1400 audit(1781004230.403:272): avc: denied { setopt } for pid=3949 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 40.970090][ T3959] netlink: 884 bytes leftover after parsing attributes in process `syz.0.200'. [ 41.045996][ T3969] loop3: detected capacity change from 0 to 512 [ 41.058242][ T3969] ======================================================= [ 41.058242][ T3969] WARNING: The mand mount option has been deprecated and [ 41.058242][ T3969] and is ignored by this kernel. Remove the mand [ 41.058242][ T3969] option from the mount to silence this warning. [ 41.058242][ T3969] ======================================================= [ 41.113839][ T3969] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.134853][ T3969] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.148526][ T3969] EXT4-fs (loop3): 1 truncate cleaned up [ 41.158426][ T3969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.189195][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.199046][ T3980] veth3: entered allmulticast mode [ 41.233062][ T3983] batadv0: entered promiscuous mode [ 41.244947][ T3983] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 41.262962][ T3983] batadv0: left promiscuous mode [ 41.264930][ T3989] loop0: detected capacity change from 0 to 128 [ 41.283967][ T3989] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.305944][ T3989] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.375517][ T3996] loop1: detected capacity change from 0 to 1024 [ 41.408866][ T3996] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.423539][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.429155][ T3996] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.453780][ T3996] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.490670][ T3996] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 41.497380][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 41.509646][ T3996] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 41.514249][ T4005] netlink: 'syz.3.220': attribute type 30 has an invalid length. [ 41.522289][ T3996] EXT4-fs (loop1): 1 truncate cleaned up [ 41.535074][ T3996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.550577][ T4001] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.557363][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 41.557910][ T4001] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.571167][ T4008] netlink: 'syz.3.220': attribute type 30 has an invalid length. [ 41.596530][ T3996] EXT4-fs (loop1): shut down requested (0) [ 41.613583][ T4001] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 41.630427][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.643204][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.653537][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.671558][ T4011] loop2: detected capacity change from 0 to 512 [ 41.677921][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.695861][ T396] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.767396][ T4017] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.800791][ T4017] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.845968][ T4019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.862654][ T396] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.940401][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.084708][ T4061] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.097808][ T4061] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.113325][ T4062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.149117][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.175042][ T30] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.249501][ T4072] program syz.0.249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.369857][ T4076] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.250: invalid indirect mapped block 4294967295 (level 1) [ 42.404704][ T4076] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.404870][ T4076] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.250: invalid indirect mapped block 4294967295 (level 1) [ 42.414094][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 42.414125][ C0] EXT4-fs (loop4): initial error at time 1781004231: ext4_free_branches:1023: inode 11 [ 42.414161][ C0] EXT4-fs (loop4): last error at time 1781004231: ext4_free_branches:1023: inode 11 [ 42.453782][ T4076] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.454157][ T4076] EXT4-fs (loop4): 2 truncates cleaned up [ 42.471548][ T4076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.533168][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.546561][ T4087] EXT4-fs: Ignoring removed orlov option [ 42.562892][ T4087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.614967][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.674508][ T4100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.861213][ T4119] set_capacity_and_notify: 8 callbacks suppressed [ 42.861232][ T4119] loop1: detected capacity change from 0 to 128 [ 42.914201][ T4119] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.933760][ T4119] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.037201][ T4131] batadv0: entered promiscuous mode [ 43.060903][ T4131] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 43.071602][ T4131] batadv0: left promiscuous mode [ 43.099931][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.114720][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.231991][ T4134] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.239267][ T4134] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.357592][ T4134] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 43.455474][ T4166] loop4: detected capacity change from 0 to 1024 [ 43.493236][ T4166] EXT4-fs: Ignoring removed orlov option [ 43.499168][ T4169] loop0: detected capacity change from 0 to 1024 [ 43.555771][ T4166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.577372][ T4169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.632666][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.695546][ T4183] loop2: detected capacity change from 0 to 256 [ 43.703148][ T4183] FAT-fs (loop2): Directory bread(block 1285) failed [ 43.710041][ T4183] FAT-fs (loop2): Directory bread(block 1286) failed [ 43.710115][ T4183] FAT-fs (loop2): Directory bread(block 1287) failed [ 43.710150][ T4183] FAT-fs (loop2): Directory bread(block 1288) failed [ 43.748797][ T4183] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 43.939969][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.003687][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.006329][ T4201] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 44.123862][ T4217] loop2: detected capacity change from 0 to 1024 [ 44.141636][ T4217] EXT4-fs: Ignoring removed orlov option [ 44.165385][ T4217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.236108][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.281528][ T4226] loop4: detected capacity change from 0 to 256 [ 44.301824][ T4226] FAT-fs (loop4): Directory bread(block 1285) failed [ 44.338488][ T4226] FAT-fs (loop4): Directory bread(block 1286) failed [ 44.345725][ T4226] FAT-fs (loop4): Directory bread(block 1287) failed [ 44.352763][ T4226] FAT-fs (loop4): Directory bread(block 1288) failed [ 44.366254][ T4226] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 44.423691][ T4237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 44.494394][ T4247] loop3: detected capacity change from 0 to 128 [ 44.507938][ T4247] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.523175][ T4247] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.572738][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.676648][ T4260] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 44.684898][ T3377] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 45.342336][ T4276] loop4: detected capacity change from 0 to 7 [ 45.348857][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.358056][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 45.366627][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.375806][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 45.383947][ T4276] loop4: unable to read partition table [ 45.390378][ T4276] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 45.405341][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.414541][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 45.426401][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.435678][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 45.443849][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.453039][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 45.461508][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.470703][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 45.480964][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.490161][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 45.672519][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 45.672535][ T28] audit: type=1400 audit(1781004235.203:356): avc: denied { lock } for pid=4297 comm="syz.1.336" path="socket:[6894]" dev="sockfs" ino=6894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.710858][ T28] audit: type=1400 audit(1781004235.233:357): avc: denied { setopt } for pid=4299 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.787478][ T28] audit: type=1400 audit(1781004235.313:358): avc: denied { remount } for pid=4307 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 45.846012][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 45.850049][ T28] audit: type=1400 audit(1781004235.343:359): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.206491][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 46.239525][ T4344] netlink: 128 bytes leftover after parsing attributes in process `syz.3.372'. [ 46.406485][ T4355] loop4: detected capacity change from 0 to 256 [ 46.450443][ T4355] FAT-fs (loop4): Directory bread(block 64) failed [ 46.457133][ T4355] FAT-fs (loop4): Directory bread(block 65) failed [ 46.471103][ T4355] FAT-fs (loop4): Directory bread(block 66) failed [ 46.494605][ T4355] FAT-fs (loop4): Directory bread(block 67) failed [ 46.508556][ T28] audit: type=1400 audit(1781004236.033:360): avc: denied { write } for pid=4358 comm="syz.3.368" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.541074][ T4355] FAT-fs (loop4): Directory bread(block 68) failed [ 46.554087][ T4355] FAT-fs (loop4): Directory bread(block 69) failed [ 46.586207][ T4355] FAT-fs (loop4): Directory bread(block 70) failed [ 46.609015][ T4355] FAT-fs (loop4): Directory bread(block 71) failed [ 46.626247][ T4355] FAT-fs (loop4): Directory bread(block 72) failed [ 46.645718][ T4355] FAT-fs (loop4): Directory bread(block 73) failed [ 46.681206][ T4355] syz.4.366: attempt to access beyond end of device [ 46.681206][ T4355] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 47.004099][ T28] audit: type=1400 audit(1781004236.533:361): avc: denied { nlmsg_write } for pid=4375 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.063503][ T28] audit: type=1400 audit(1781004236.533:362): avc: denied { module_request } for pid=4375 comm="syz.2.374" kmod="crypto-rfc4106(gcm(aes))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.552535][ T4392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.377'. [ 47.698516][ T4400] loop4: detected capacity change from 0 to 512 [ 47.774724][ T4400] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.809355][ T4400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.871205][ T4400] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.938559][ T4400] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.380: corrupted inode contents [ 47.939166][ T28] audit: type=1400 audit(1781004237.463:363): avc: denied { write } for pid=4399 comm="syz.4.380" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.988631][ T4400] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #2: comm syz.4.380: mark_inode_dirty error [ 48.003038][ T28] audit: type=1400 audit(1781004237.463:364): avc: denied { add_name } for pid=4399 comm="syz.4.380" name="blkio.bfq.sectors_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.041117][ T4400] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.380: corrupted inode contents [ 48.061524][ T4400] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.380: mark_inode_dirty error [ 48.104434][ T4408] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.380: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 48.104434][ T4408] [ 48.126894][ T28] audit: type=1400 audit(1781004237.633:365): avc: denied { write } for pid=4399 comm="syz.4.380" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.159477][ T4408] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.380: corrupted inode contents [ 48.182677][ T4408] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.380: mark_inode_dirty error [ 48.195038][ T4408] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 48.214913][ T4411] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.380: corrupted inode contents [ 48.244281][ T4411] EXT4-fs error (device loop4): add_dirent_to_buf:2151: inode #2: comm syz.4.380: mark_inode_dirty error [ 48.303855][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.356153][ T4415] netlink: 128 bytes leftover after parsing attributes in process `syz.4.385'. [ 48.557092][ T4426] bond0: (slave ip6tnl0): refused to change device type [ 48.587292][ T4426] ip6erspan0: entered allmulticast mode [ 48.595777][ T4419] loop3: detected capacity change from 0 to 512 [ 48.639427][ T4419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.659049][ T4419] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.804352][ T4419] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 48.836140][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.203547][ T4474] loop3: detected capacity change from 0 to 128 [ 49.244518][ T4470] loop2: detected capacity change from 0 to 512 [ 49.262985][ T4474] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.297373][ T4474] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.337988][ T4470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.356066][ T4470] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.385858][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.469239][ T3391] IPVS: starting estimator thread 0... [ 49.493408][ T4470] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 49.524128][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.591017][ T4481] IPVS: using max 2640 ests per chain, 132000 per kthread [ 49.849136][ T4499] netlink: 104 bytes leftover after parsing attributes in process `syz.2.428'. [ 50.050455][ T4511] loop2: detected capacity change from 0 to 512 [ 50.086407][ T4511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.134983][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.223758][ T4159] IPVS: starting estimator thread 0... [ 50.311051][ T4522] IPVS: using max 2448 ests per chain, 122400 per kthread [ 52.971096][ T30] ================================================================== [ 52.979234][ T30] BUG: KCSAN: data-race in fprop_new_period / fprop_reflect_period_percpu [ 52.987795][ T30] [ 52.990134][ T30] read-write to 0xffffffff893c2e40 of 4 bytes by interrupt on cpu 0: [ 52.998220][ T30] fprop_new_period+0xa4/0x110 [ 53.003007][ T30] writeout_period+0x5a/0xe0 [ 53.007610][ T30] call_timer_fn+0x3b/0x240 [ 53.012128][ T30] __run_timer_base+0x415/0x5f0 [ 53.017014][ T30] run_timer_softirq+0x45/0x70 [ 53.021788][ T30] handle_softirqs+0xb9/0x280 [ 53.026505][ T30] __irq_exit_rcu+0x42/0xd0 [ 53.031031][ T30] sysvec_apic_timer_interrupt+0x74/0x80 [ 53.036693][ T30] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.042705][ T30] kcsan_setup_watchpoint+0x404/0x410 [ 53.048112][ T30] link_path_walk+0x6db/0xe30 [ 53.052815][ T30] path_openat+0x1c6/0x2050 [ 53.057343][ T30] do_file_open+0x16c/0x290 [ 53.061873][ T30] do_sys_openat2+0x94/0x130 [ 53.066482][ T30] __x64_sys_openat+0xf2/0x120 [ 53.071271][ T30] x64_sys_call+0x1e39/0x3020 [ 53.075972][ T30] do_syscall_64+0x12c/0x3b0 [ 53.080596][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.086762][ T30] [ 53.089129][ T30] read to 0xffffffff893c2e40 of 4 bytes by task 30 on cpu 1: [ 53.096530][ T30] fprop_reflect_period_percpu+0x22/0x190 [ 53.102291][ T30] __fprop_add_percpu_max+0x57/0x190 [ 53.107613][ T30] __wb_writeout_add+0x75/0x1b0 [ 53.112475][ T30] __folio_end_writeback+0x14b/0x360 [ 53.117788][ T30] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 53.124058][ T30] folio_end_writeback+0x1c/0x70 [ 53.129021][ T30] ext4_finish_bio+0x450/0x760 [ 53.133810][ T30] ext4_release_io_end+0x9f/0x1f0 [ 53.138860][ T30] ext4_end_io_end+0x18d/0x240 [ 53.143652][ T30] ext4_end_io_rsv_work+0x15b/0x1f0 [ 53.148870][ T30] process_scheduled_works+0x4f0/0x9c0 [ 53.154370][ T30] worker_thread+0x58a/0x780 [ 53.158984][ T30] kthread+0x22a/0x280 [ 53.163076][ T30] ret_from_fork+0x146/0x330 [ 53.167700][ T30] ret_from_fork_asm+0x1a/0x30 [ 53.172492][ T30] [ 53.174831][ T30] value changed: 0x00000005 -> 0x00000006 [ 53.180559][ T30] [ 53.182899][ T30] Reported by Kernel Concurrency Sanitizer on: [ 53.189062][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.198378][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 53.208446][ T30] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 53.215252][ T30] ==================================================================