last executing test programs: 4.235196972s ago: executing program 1 (id=228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x775, 0x0, 0x0) 4.123267097s ago: executing program 3 (id=232): unshare(0x22020600) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x43}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100035ab, 0x4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x709d) 2.455822853s ago: executing program 1 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={[{@nr_inodes}], [], 0x39}) 2.230942295s ago: executing program 4 (id=245): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) 2.195156097s ago: executing program 0 (id=246): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfe6}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x42, 0x0) 1.875104933s ago: executing program 0 (id=247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 1.874676003s ago: executing program 4 (id=248): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x1, @perf_config_ext={0xa4d, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x4, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002a00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x70000000, 0x0, 0x3f00, 0x0, 0x0, 0x1000, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x3b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 1.682128033s ago: executing program 0 (id=249): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3080000, @mcast2, 0x6}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x2}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write(r0, &(0x7f00000000c0)="842a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.287788054s ago: executing program 1 (id=250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="18020000002000000000000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x2, @void}, 0xa) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[], 0x0) 1.17624706s ago: executing program 1 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c041}, 0x80) 1.098106184s ago: executing program 3 (id=255): socket(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r0], 0x18}}, 0x2080) 1.088228694s ago: executing program 1 (id=256): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000000c0)='ns\x00') bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.035108477s ago: executing program 4 (id=257): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xcce1}], 0x1, 0x20, 0x0) 990.969159ms ago: executing program 3 (id=259): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 961.505041ms ago: executing program 3 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180"], 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4008800) 924.476213ms ago: executing program 3 (id=261): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000002280)=ANY=[@ANYBLOB="6e6f646f74732c636865636b3d738a726963742c6e6f646f74732c7507643d", @ANYRESHEX=0xee00, @ANYRESHEX], 0x1, 0x1fa, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f00000004c0)=""/132, 0x84}], 0x3}, 0x2) 744.388192ms ago: executing program 2 (id=264): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) getdents(r2, 0xfffffffffffffffd, 0xbb) 571.179401ms ago: executing program 2 (id=265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 543.599152ms ago: executing program 2 (id=266): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x20010000, 0x1}, 0x1c) 466.598116ms ago: executing program 2 (id=267): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="259a53f27137b5a76d2688f54c65", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 367.155292ms ago: executing program 0 (id=268): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") rename(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x1, 0x4, 0x3}) 179.560291ms ago: executing program 4 (id=269): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3f}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) sendto$packet(r1, &(0x7f0000000380)="7c8888a8", 0x4, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x87}, 0x14) 175.036902ms ago: executing program 0 (id=270): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 143.909063ms ago: executing program 2 (id=271): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711828000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 79.016806ms ago: executing program 0 (id=272): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='binfmt_misc\x00', 0x1214040, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x454b82, 0x120, 0x5}, 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f0000000100)) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) syz_io_uring_setup(0x3af6, &(0x7f0000001400)={0x0, 0xd9b2, 0x1000, 0x0, 0x23b}, &(0x7f0000000280), 0x0, &(0x7f0000000000)) ptrace$peek(0x1, r0, &(0x7f00000020c0)) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') 78.804036ms ago: executing program 4 (id=273): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r0}, 0xc) 599.251µs ago: executing program 1 (id=274): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 464.42µs ago: executing program 2 (id=275): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[], 0xe) 147.871µs ago: executing program 3 (id=276): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x1, @perf_config_ext={0xa4d, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x4, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002a00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x70000000, 0x0, 0x3f00, 0x0, 0x0, 0x1000, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x3b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 0s ago: executing program 4 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x44, 0x18, 0x1, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1}, 0x5, 0x2}, 0x3}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x2, 0x0, 0x0, "4eb3438d215fbcd3"}, 0x5}}]}, 0x44}}, 0x240448c8) kernel console output (not intermixed with test programs): [ 23.699232][ T28] audit: type=1400 audit(1776908266.884:62): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.721367][ T28] audit: type=1400 audit(1776908266.884:63): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.744022][ T28] audit: type=1400 audit(1776908266.884:64): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.767161][ T28] audit: type=1400 audit(1776908266.884:65): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.790336][ T28] audit: type=1400 audit(1776908266.884:66): avc: denied { read open } for pid=3202 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 29.824373][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 29.824391][ T28] audit: type=1400 audit(1776908273.004:70): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.853546][ T28] audit: type=1400 audit(1776908273.034:71): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.855943][ T3304] cgroup: Unknown subsys name 'net' [ 29.881639][ T28] audit: type=1400 audit(1776908273.074:72): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.977235][ T3304] cgroup: Unknown subsys name 'cpuset' [ 29.983524][ T3304] cgroup: Unknown subsys name 'rlimit' [ 30.095012][ T28] audit: type=1400 audit(1776908273.274:73): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.119045][ T28] audit: type=1400 audit(1776908273.284:74): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.147360][ T28] audit: type=1400 audit(1776908273.284:75): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.170283][ T28] audit: type=1400 audit(1776908273.284:76): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.191092][ T28] audit: type=1400 audit(1776908273.304:77): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.211928][ T3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.216737][ T28] audit: type=1400 audit(1776908273.304:78): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.248243][ T28] audit: type=1400 audit(1776908273.324:79): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.302437][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.237785][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 32.268112][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 32.315403][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 32.364870][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 32.380551][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.387871][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.395063][ T3329] bridge_slave_0: entered allmulticast mode [ 32.401543][ T3329] bridge_slave_0: entered promiscuous mode [ 32.413360][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 32.427316][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.434448][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.441697][ T3329] bridge_slave_1: entered allmulticast mode [ 32.448290][ T3329] bridge_slave_1: entered promiscuous mode [ 32.487400][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.494531][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.501792][ T3320] bridge_slave_0: entered allmulticast mode [ 32.508498][ T3320] bridge_slave_0: entered promiscuous mode [ 32.533617][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.540795][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.548031][ T3320] bridge_slave_1: entered allmulticast mode [ 32.554591][ T3320] bridge_slave_1: entered promiscuous mode [ 32.569786][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.593544][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.600791][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.608064][ T3323] bridge_slave_0: entered allmulticast mode [ 32.614602][ T3323] bridge_slave_0: entered promiscuous mode [ 32.622717][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.643938][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.651177][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.658467][ T3323] bridge_slave_1: entered allmulticast mode [ 32.665116][ T3323] bridge_slave_1: entered promiscuous mode [ 32.676526][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.683784][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.691248][ T3319] bridge_slave_0: entered allmulticast mode [ 32.698334][ T3319] bridge_slave_0: entered promiscuous mode [ 32.706045][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.729595][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.736776][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.744038][ T3319] bridge_slave_1: entered allmulticast mode [ 32.750634][ T3319] bridge_slave_1: entered promiscuous mode [ 32.757909][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.781774][ T3329] team0: Port device team_slave_0 added [ 32.796553][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.803721][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.811098][ T3324] bridge_slave_0: entered allmulticast mode [ 32.817659][ T3324] bridge_slave_0: entered promiscuous mode [ 32.825398][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.835631][ T3329] team0: Port device team_slave_1 added [ 32.852166][ T3320] team0: Port device team_slave_0 added [ 32.858048][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.865153][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.872477][ T3324] bridge_slave_1: entered allmulticast mode [ 32.879008][ T3324] bridge_slave_1: entered promiscuous mode [ 32.886762][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.901528][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.911890][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.921960][ T3320] team0: Port device team_slave_1 added [ 32.942114][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.949234][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.975484][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.004782][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.011981][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.038637][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.054553][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.061647][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.088015][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.100062][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.110176][ T3323] team0: Port device team_slave_0 added [ 33.119347][ T3319] team0: Port device team_slave_0 added [ 33.125353][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.132402][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.158504][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.170101][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.180046][ T3323] team0: Port device team_slave_1 added [ 33.187559][ T3319] team0: Port device team_slave_1 added [ 33.235862][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.242889][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.268957][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.284660][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.291708][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.317651][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.329233][ T3324] team0: Port device team_slave_0 added [ 33.340275][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.347515][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.373729][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.390071][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.397197][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.423414][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.435220][ T3324] team0: Port device team_slave_1 added [ 33.448450][ T3329] hsr_slave_0: entered promiscuous mode [ 33.454488][ T3329] hsr_slave_1: entered promiscuous mode [ 33.465800][ T3320] hsr_slave_0: entered promiscuous mode [ 33.472032][ T3320] hsr_slave_1: entered promiscuous mode [ 33.478032][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 33.483772][ T3320] Cannot create hsr debugfs directory [ 33.497150][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.504143][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.530170][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.541491][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.548552][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.574480][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.639109][ T3323] hsr_slave_0: entered promiscuous mode [ 33.645204][ T3323] hsr_slave_1: entered promiscuous mode [ 33.651361][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 33.657108][ T3323] Cannot create hsr debugfs directory [ 33.672205][ T3324] hsr_slave_0: entered promiscuous mode [ 33.678196][ T3324] hsr_slave_1: entered promiscuous mode [ 33.684089][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 33.689934][ T3324] Cannot create hsr debugfs directory [ 33.705502][ T3319] hsr_slave_0: entered promiscuous mode [ 33.711597][ T3319] hsr_slave_1: entered promiscuous mode [ 33.717801][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 33.723578][ T3319] Cannot create hsr debugfs directory [ 33.916831][ T3329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.925474][ T3329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.933179][ T3329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.941789][ T3329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.949649][ T3329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.958629][ T3329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.969293][ T3329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.978192][ T3329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.001093][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.009935][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.017794][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.026631][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.035430][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.045022][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.052863][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.061852][ T3320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.090533][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.099193][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.106988][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.116587][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.124197][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.133034][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.143676][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.152405][ T3319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.187307][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.197853][ T3324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.210350][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.219832][ T3324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.227891][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.236743][ T3324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.245014][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.254216][ T3324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.310341][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.317860][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.326876][ T3323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.334684][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.343525][ T3323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.358667][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.365786][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.374654][ T3323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.382553][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.391319][ T3323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.417975][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.430524][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.444959][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.452064][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.465426][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.472537][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.485624][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.492840][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.512614][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.525239][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.534614][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.541703][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.579378][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.587710][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.604828][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.611980][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.621533][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.628684][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.640737][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.647881][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.676895][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.684085][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.699453][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.751292][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.762946][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.791085][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.798249][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.831182][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.838330][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.874335][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.893743][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.905777][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.963630][ T3329] veth0_vlan: entered promiscuous mode [ 34.979495][ T3329] veth1_vlan: entered promiscuous mode [ 35.025390][ T3329] veth0_macvtap: entered promiscuous mode [ 35.041547][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.057430][ T3329] veth1_macvtap: entered promiscuous mode [ 35.091119][ T3324] veth0_vlan: entered promiscuous mode [ 35.102749][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.114950][ T3324] veth1_vlan: entered promiscuous mode [ 35.124279][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.145854][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.156655][ T307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.165645][ T307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.177381][ T307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.201860][ T3320] veth0_vlan: entered promiscuous mode [ 35.211842][ T3324] veth0_macvtap: entered promiscuous mode [ 35.219880][ T3324] veth1_macvtap: entered promiscuous mode [ 35.233387][ T3319] veth0_vlan: entered promiscuous mode [ 35.240035][ T3320] veth1_vlan: entered promiscuous mode [ 35.250419][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 35.250435][ T28] audit: type=1400 audit(1776908278.434:90): avc: denied { mounton } for pid=3329 comm="syz-executor" path="/root/syzkaller.eZDOcj/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.288049][ T28] audit: type=1400 audit(1776908278.464:91): avc: denied { mount } for pid=3329 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.312273][ T28] audit: type=1400 audit(1776908278.464:92): avc: denied { mounton } for pid=3329 comm="syz-executor" path="/root/syzkaller.eZDOcj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.336956][ T3319] veth1_vlan: entered promiscuous mode [ 35.351570][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.352110][ T28] audit: type=1400 audit(1776908278.464:93): avc: denied { mount } for pid=3329 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.387206][ T3329] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.389442][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.409829][ T28] audit: type=1400 audit(1776908278.464:94): avc: denied { mounton } for pid=3329 comm="syz-executor" path="/root/syzkaller.eZDOcj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.436874][ T3320] veth0_macvtap: entered promiscuous mode [ 35.443094][ T28] audit: type=1400 audit(1776908278.464:95): avc: denied { mounton } for pid=3329 comm="syz-executor" path="/root/syzkaller.eZDOcj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.474360][ T3319] veth0_macvtap: entered promiscuous mode [ 35.484399][ T28] audit: type=1400 audit(1776908278.474:96): avc: denied { unmount } for pid=3329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.513752][ T28] audit: type=1400 audit(1776908278.494:97): avc: denied { mounton } for pid=3329 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.517762][ T3320] veth1_macvtap: entered promiscuous mode [ 35.551280][ T28] audit: type=1400 audit(1776908278.494:98): avc: denied { mount } for pid=3329 comm="syz-executor" name="/" dev="gadgetfs" ino=3939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 35.574252][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.575350][ T28] audit: type=1400 audit(1776908278.674:99): avc: denied { read write } for pid=3329 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.595320][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.624359][ T3319] veth1_macvtap: entered promiscuous mode [ 35.638581][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.650119][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.679733][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.690499][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.707802][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.716841][ T3323] veth0_vlan: entered promiscuous mode [ 35.730518][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.739378][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.750159][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.768786][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.780404][ T3323] veth1_vlan: entered promiscuous mode [ 35.792302][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.825576][ T3496] veth1_macvtap: left promiscuous mode [ 35.835084][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.844368][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.862804][ T3496] veth1_macvtap: entered promiscuous mode [ 35.870710][ T3496] macsec0: entered promiscuous mode [ 35.877388][ T3496] macsec0: entered allmulticast mode [ 35.890491][ T3496] veth1_macvtap: entered allmulticast mode [ 35.899707][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.960655][ T3501] syzkaller0: entered promiscuous mode [ 35.966300][ T3501] syzkaller0: entered allmulticast mode [ 35.975271][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.999998][ T3323] veth0_macvtap: entered promiscuous mode [ 36.067911][ T3323] veth1_macvtap: entered promiscuous mode [ 36.300562][ T3513] syzkaller0: entered promiscuous mode [ 36.314685][ T3513] syzkaller0: entered allmulticast mode [ 36.428625][ T3524] syzkaller0: entered promiscuous mode [ 36.454422][ T3524] syzkaller0: entered allmulticast mode [ 36.496515][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.556129][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.585636][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.602258][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.623583][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.643007][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.251496][ T3537] syzkaller0: entered promiscuous mode [ 37.267266][ T3537] syzkaller0: entered allmulticast mode [ 37.375870][ T3539] syzkaller0: entered promiscuous mode [ 37.398412][ T3539] syzkaller0: entered allmulticast mode [ 37.580889][ T3552] syzkaller0: entered promiscuous mode [ 37.586647][ T3552] syzkaller0: entered allmulticast mode [ 38.424414][ T3603] syzkaller0: entered promiscuous mode [ 38.430238][ T3603] syzkaller0: entered allmulticast mode [ 38.481524][ T3612] syz.1.40 (3612) used obsolete PPPIOCDETACH ioctl [ 38.810131][ T3630] syzkaller0: entered promiscuous mode [ 38.817440][ T3630] syzkaller0: entered allmulticast mode [ 38.935362][ T3633] syzkaller0: entered promiscuous mode [ 38.951188][ T3633] syzkaller0: entered allmulticast mode [ 39.544840][ T3664] loop3: detected capacity change from 0 to 512 [ 39.596111][ T3664] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.58: inode has both inline data and extents flags [ 39.619219][ T3668] loop2: detected capacity change from 0 to 256 [ 39.644675][ T3664] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.644894][ T3664] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.58: couldn't read orphan inode 15 (err -117) [ 39.654353][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 39.654403][ C0] EXT4-fs (loop3): initial error at time 1776908282: ext4_orphan_get:1397: inode 15 [ 39.654450][ C0] EXT4-fs (loop3): last error at time 1776908282: ext4_orphan_get:1397: inode 15 [ 39.692269][ T3664] loop3: lost filesystem error report for type 5 error -117 [ 39.692862][ T3664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.848234][ T3668] FAT-fs (loop2): IO charset koi8-ru not found [ 39.932971][ T3677] loop0: detected capacity change from 0 to 512 [ 40.033816][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.044346][ T3677] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 41.450887][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 41.450905][ T28] audit: type=1400 audit(1776908284.634:139): avc: denied { name_bind } for pid=3700 comm="syz.3.70" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 41.513984][ T3691] ------------[ cut here ]------------ [ 41.519567][ T3691] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.1.65/3691 [ 41.529163][ T3691] Modules linked in: [ 41.533134][ T3691] CPU: 1 UID: 0 PID: 3691 Comm: syz.1.65 Not tainted syzkaller #0 PREEMPT(full) [ 41.542434][ T3691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.552544][ T3691] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 41.558225][ T3691] Code: 8b 05 f1 6b 19 08 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 94 e9 64 04 cc e8 7e 11 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 70 11 1e 00 90 0f 0b 90 e9 af fa ff ff [ 41.577930][ T3691] RSP: 0000:ffffc90002f63dd8 EFLAGS: 00010093 [ 41.584193][ T3691] RAX: ffffffff813b3452 RBX: ffff888105569100 RCX: ffff888105569100 [ 41.592214][ T3691] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 41.600223][ T3691] RBP: 0000000000000080 R08: ffff888105569bf8 R09: 0000000000000000 [ 41.608223][ T3691] R10: ffffc90002f63df0 R11: 0001c90002f63df0 R12: ffff888105569100 [ 41.616310][ T3691] R13: ffff888105569928 R14: ffff888102258910 R15: 0000000000000080 [ 41.624500][ T3691] FS: 0000000000000000(0000) GS:ffff8882ae7ca000(0000) knlGS:0000000000000000 [ 41.633467][ T3691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.640252][ T3691] CR2: 00007f941e4c56b8 CR3: 000000011bf86000 CR4: 00000000003506f0 [ 41.648263][ T3691] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.656278][ T3691] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 41.664298][ T3691] Call Trace: [ 41.667829][ T3691] [ 41.670822][ T3691] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 41.676254][ T3691] ? __list_add_valid_or_report+0x38/0xe0 [ 41.682035][ T3691] do_exit+0xc13/0x1530 [ 41.686347][ T3691] ? switch_fpu_return+0xe7/0x1b0 [ 41.691453][ T3691] __x64_sys_exit+0x1f/0x20 [ 41.696143][ T3691] x64_sys_call+0x301d/0x3020 [ 41.700942][ T3691] do_syscall_64+0x12c/0x3b0 [ 41.705598][ T3691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.711550][ T3691] RIP: 0033:0x7f7df6b3c819 [ 41.716150][ T3691] Code: Unable to access opcode bytes at 0x7f7df6b3c7ef. [ 41.723412][ T3691] RSP: 002b:00007f7df558efd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 41.731942][ T3691] RAX: ffffffffffffffda RBX: 00007f7df6db5fa0 RCX: 00007f7df6b3c819 [ 41.739953][ T3691] RDX: 00007f7df558f9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.748019][ T3691] RBP: 00007f7df6bd2c91 R08: 0000000000000000 R09: 0000000000000000 [ 41.756109][ T3691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.764284][ T3691] R13: 00007f7df6db6038 R14: 00007f7df6db5fa0 R15: 00007ffe1a966b78 [ 41.772379][ T3691] [ 41.775537][ T3691] ---[ end trace 0000000000000000 ]--- [ 41.904718][ T3712] SELinux: failed to load policy [ 41.905716][ T28] audit: type=1400 audit(1776908285.084:140): avc: denied { load_policy } for pid=3710 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 41.933921][ T3364] kernel read not supported for file /vcs (pid: 3364 comm: kworker/1:2) [ 42.010774][ T28] audit: type=1400 audit(1776908285.194:141): avc: denied { create } for pid=3713 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.038480][ T3714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.038578][ T3714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.056276][ T28] audit: type=1400 audit(1776908285.224:142): avc: denied { ioctl } for pid=3713 comm="syz.1.77" path="socket:[5417]" dev="sockfs" ino=5417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.056315][ T28] audit: type=1400 audit(1776908285.224:143): avc: denied { read write } for pid=3713 comm="syz.1.77" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.056340][ T28] audit: type=1400 audit(1776908285.224:144): avc: denied { open } for pid=3713 comm="syz.1.77" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.056377][ T28] audit: type=1400 audit(1776908285.224:145): avc: denied { ioctl } for pid=3713 comm="syz.1.77" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.273643][ T28] audit: type=1400 audit(1776908285.454:146): avc: denied { append } for pid=3723 comm="syz.2.81" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.348346][ T3726] syzkaller0: entered promiscuous mode [ 42.348428][ T3726] syzkaller0: entered allmulticast mode [ 42.495093][ T3733] loop0: detected capacity change from 0 to 512 [ 42.517379][ T3733] EXT4-fs: inline encryption not supported [ 42.537089][ T3733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.557842][ T3733] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.600256][ T3735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.618106][ T3733] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 1 [ 42.632425][ T3735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.648154][ T3733] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 42.664775][ T3733] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.84: Failed to acquire dquot type 1 [ 42.685924][ T3733] loop0: lost filesystem error report for type 5 error -5 [ 42.686107][ T3733] EXT4-fs (loop0): Remounting filesystem read-only [ 42.686187][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 42.686210][ C0] EXT4-fs (loop0): initial error at time 1776908285: ext4_acquire_dquot:7034 [ 42.686240][ C0] EXT4-fs (loop0): last error at time 1776908285: ext4_acquire_dquot:7034 [ 42.781730][ T3733] EXT4-fs (loop0): 1 truncate cleaned up [ 42.797663][ T3733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.878851][ T3623] syz.2.44 (3623) used greatest stack depth: 10240 bytes left [ 43.200788][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.419598][ T3415] hid-generic 0000:0000:0007.0001: unknown main item tag 0x0 [ 43.427926][ T3415] hid-generic 0000:0000:0007.0001: unknown main item tag 0x0 [ 43.436017][ T3415] hid-generic 0000:0000:0007.0001: unknown main item tag 0x0 [ 43.443874][ T3415] hid-generic 0000:0000:0007.0001: unknown main item tag 0x0 [ 43.453776][ T3415] hid-generic 0000:0000:0007.0001: unknown main item tag 0x0 [ 43.461468][ T3415] hid-generic 0000:0000:0007.0001: unknown main item tag 0x0 [ 43.470263][ T3415] hid-generic 0000:0000:0007.0001: unknown main item tag 0x0 [ 43.477976][ T3415] hid-generic 0000:0000:0007.0001: unknown main item tag 0x0 [ 43.485522][ T3415] hid-generic 0000:0000:0007.0001: unknown main item tag 0x0 [ 43.501572][ T3415] hid-generic 0000:0000:0007.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 43.562009][ T3753] fido_id[3753]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.792893][ T3767] loop3: detected capacity change from 0 to 1024 [ 43.809433][ T3770] loop0: detected capacity change from 0 to 512 [ 43.836393][ T3767] ======================================================= [ 43.836393][ T3767] WARNING: The mand mount option has been deprecated and [ 43.836393][ T3767] and is ignored by this kernel. Remove the mand [ 43.836393][ T3767] option from the mount to silence this warning. [ 43.836393][ T3767] ======================================================= [ 43.917942][ T3767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.941058][ T3767] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.978021][ T3767] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.92: Freeing blocks not in datazone - block = 0, count = 16 [ 44.117692][ T3786] loop0: detected capacity change from 0 to 1024 [ 44.141833][ T3786] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.156743][ T3786] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 44.156743][ T3786] [ 44.216416][ T3765] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.92: bg 0: block 112: padding at end of block bitmap is not set [ 44.265188][ T3765] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 44.304430][ T3765] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.304430][ T3765] [ 44.447661][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 896 with max blocks 4 with error 28 [ 44.464221][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.464221][ T30] [ 44.474272][ T30] EXT4-fs (loop3): Total free blocks count 0 [ 44.480598][ T30] EXT4-fs (loop3): Free/Dirty block details [ 44.486717][ T30] EXT4-fs (loop3): free_blocks=0 [ 44.491718][ T30] EXT4-fs (loop3): dirty_blocks=16 [ 44.497085][ T30] EXT4-fs (loop3): Block reservation details [ 44.503527][ T3319] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 44.523259][ T3791] Zero length message leads to an empty skb [ 44.735449][ T3813] capability: warning: `syz.2.109' uses deprecated v2 capabilities in a way that may be insecure [ 44.763954][ T3813] loop2: detected capacity change from 0 to 512 [ 44.800645][ T3813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.831015][ T3813] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.907812][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.936793][ T3824] syzkaller0: entered promiscuous mode [ 44.955096][ T3824] syzkaller0: entered allmulticast mode [ 44.973299][ T3828] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 45.000507][ T3835] loop0: detected capacity change from 0 to 512 [ 45.013146][ T3835] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.032763][ T3835] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 45.061662][ T3835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e840e028, mo2=0002] [ 45.072421][ T3835] System zones: 1-12 [ 45.077210][ T3835] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.083895][ T3835] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.118: bg 0: block 361: padding at end of block bitmap is not set [ 45.098611][ T3835] loop0: lost filesystem error report for type 5 error -117 [ 45.100307][ T3835] EXT4-fs (loop0): Remounting filesystem read-only [ 45.107677][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 45.107697][ C1] EXT4-fs (loop0): initial error at time 1776908288: ext4_validate_block_bitmap:441 [ 45.107730][ C1] EXT4-fs (loop0): last error at time 1776908288: ext4_validate_block_bitmap:441 [ 45.140564][ T3835] EXT4-fs (loop0): 1 truncate cleaned up [ 45.147010][ T3835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 45.161205][ T3835] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.118: error -117 reading directory block [ 45.266906][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 45.288655][ T3855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.292458][ T3856] netlink: 48 bytes leftover after parsing attributes in process `syz.4.128'. [ 45.311586][ T3855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.348936][ T3860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 45.370718][ T3862] process 'syz.4.131' launched './file0' with NULL argv: empty string added [ 45.410563][ T3866] netlink: 128 bytes leftover after parsing attributes in process `syz.0.133'. [ 45.465698][ T3868] loop4: detected capacity change from 0 to 4096 [ 45.482534][ T3872] loop0: detected capacity change from 0 to 256 [ 45.484879][ T3868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.533536][ T3878] loop1: detected capacity change from 0 to 128 [ 45.544011][ T3872] FAT-fs (loop0): codepage cp950 not found [ 45.568122][ T3878] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.582810][ T3878] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.600695][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.636447][ T3329] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.668496][ T3885] netlink: 9260 bytes leftover after parsing attributes in process `syz.3.143'. [ 45.678998][ T3883] loop0: detected capacity change from 0 to 4096 [ 45.695630][ T3883] EXT4-fs: inline encryption not supported [ 45.709167][ T3883] EXT4-fs: test_dummy_encryption option not supported [ 45.775222][ T3891] loop1: detected capacity change from 0 to 512 [ 45.790040][ T3891] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.806625][ T3891] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.816746][ T3893] loop3: detected capacity change from 0 to 512 [ 45.829204][ T3893] EXT4-fs (loop3): Invalid log cluster size: 4294967295 [ 45.847128][ T3895] loop0: detected capacity change from 0 to 256 [ 45.853772][ T3887] bridge0: port 3(ip6gretap0) entered blocking state [ 45.867564][ T3891] EXT4-fs (loop1): 1 truncate cleaned up [ 45.877588][ T3891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.895891][ T3895] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.923562][ T3887] bridge0: port 3(ip6gretap0) entered disabled state [ 45.936087][ T3887] ip6gretap0: entered allmulticast mode [ 45.947901][ T3895] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.966826][ T3901] loop2: detected capacity change from 0 to 2048 [ 45.995657][ T3887] ip6gretap0: entered promiscuous mode [ 46.040402][ T3887] bridge0: port 3(ip6gretap0) entered blocking state [ 46.049222][ T3887] bridge0: port 3(ip6gretap0) entered forwarding state [ 46.089037][ T3901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.116879][ T3901] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.156103][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.198321][ T3899] ip6gretap0: left allmulticast mode [ 46.309574][ T3899] ip6gretap0: left promiscuous mode [ 46.341243][ T3915] syz.0.153 uses obsolete (PF_INET,SOCK_PACKET) [ 46.349335][ T3899] bridge0: port 3(ip6gretap0) entered disabled state [ 46.682019][ T3921] FAT-fs (loop1): codepage cp863 not found [ 46.688875][ T3924] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.156: missing EA_INODE flag [ 46.705874][ T3924] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 46.706184][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 46.721942][ C1] EXT4-fs (loop4): initial error at time 1776908289: ext4_xattr_inode_iget:441: inode 12 [ 46.732022][ C1] EXT4-fs (loop4): last error at time 1776908289: ext4_xattr_inode_iget:441: inode 12 [ 46.738282][ T3924] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.156: error while reading EA inode 12 err=-117 [ 46.812525][ T3930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.821078][ T3924] loop4: lost filesystem error report for type 5 error -117 [ 46.822674][ T3924] EXT4-fs (loop4): 1 orphan inode deleted [ 46.834774][ T3928] syzkaller0: entered promiscuous mode [ 46.845509][ T3930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.852807][ T3924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.882628][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 46.882653][ T28] audit: type=1400 audit(1776908290.064:185): avc: denied { create } for pid=3932 comm="syz.0.159" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 46.910670][ T3928] syzkaller0: entered allmulticast mode [ 46.917980][ T28] audit: type=1400 audit(1776908290.104:186): avc: denied { read } for pid=3932 comm="syz.0.159" name="file0" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 46.949791][ T28] audit: type=1400 audit(1776908290.104:187): avc: denied { open } for pid=3932 comm="syz.0.159" path="/37/file0" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 46.972654][ T28] audit: type=1400 audit(1776908290.104:188): avc: denied { ioctl } for pid=3932 comm="syz.0.159" path="/37/file0" dev="tmpfs" ino=214 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.004752][ T28] audit: type=1400 audit(1776908290.184:189): avc: denied { setopt } for pid=3900 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.033645][ T28] audit: type=1400 audit(1776908290.184:190): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file0" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.093674][ T28] audit: type=1400 audit(1776908290.274:191): avc: denied { mount } for pid=3939 comm="syz.0.161" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.219413][ T28] audit: type=1400 audit(1776908290.404:192): avc: denied { create } for pid=3923 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 47.552020][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.637272][ T3957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.668325][ T28] audit: type=1400 audit(1776908290.844:193): avc: denied { read write } for pid=3962 comm="syz.0.171" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.694495][ T28] audit: type=1400 audit(1776908290.844:194): avc: denied { open } for pid=3962 comm="syz.0.171" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.727717][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.752331][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.778352][ T3969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.787887][ T3967] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.812559][ T3969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.815259][ T3973] FAT-fs (loop3): codepage cp862 not found [ 47.851988][ T3967] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.176: corrupted in-inode xattr: invalid ea_ino [ 47.882744][ T3981] netlink: 104 bytes leftover after parsing attributes in process `syz.4.177'. [ 47.896463][ T3967] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.898258][ T3967] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.176: couldn't read orphan inode 15 (err -117) [ 47.907575][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 47.907597][ C1] EXT4-fs (loop1): initial error at time 1776908291: ext4_iget_extra_inode:5128: inode 15 [ 47.907644][ C1] EXT4-fs (loop1): last error at time 1776908291: ext4_iget_extra_inode:5128: inode 15 [ 47.947402][ T3967] loop1: lost filesystem error report for type 5 error -117 [ 47.974664][ T3967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.998139][ T3967] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.176: invalid indirect mapped block 234881024 (level 0) [ 48.012603][ T3967] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 48.032236][ T3987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.056471][ T3987] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.071751][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.081756][ T3987] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.180: Failed to acquire dquot type 0 [ 48.115664][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.145662][ T3998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 48.172540][ T3998] vlan2: entered promiscuous mode [ 48.177719][ T3998] gretap0: entered promiscuous mode [ 48.263734][ T4011] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.190: iget: bad i_size value: 38620345925642 [ 48.288016][ T4011] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.296174][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 48.311902][ C1] EXT4-fs (loop1): initial error at time 1776908291: ext4_orphan_get:1397: inode 15 [ 48.321440][ C1] EXT4-fs (loop1): last error at time 1776908291: ext4_orphan_get:1397: inode 15 [ 48.331279][ T4011] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.190: couldn't read orphan inode 15 (err -117) [ 48.350526][ T4009] FAT-fs (loop3): Directory bread(block 64) failed [ 48.357216][ T4009] FAT-fs (loop3): Directory bread(block 65) failed [ 48.364019][ T4011] loop1: lost filesystem error report for type 5 error -117 [ 48.364788][ T4011] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.392704][ T4009] FAT-fs (loop3): Directory bread(block 66) failed [ 48.402281][ T4009] FAT-fs (loop3): Directory bread(block 67) failed [ 48.410562][ T4009] FAT-fs (loop3): Directory bread(block 68) failed [ 48.417418][ T4009] FAT-fs (loop3): Directory bread(block 69) failed [ 48.424152][ T4009] FAT-fs (loop3): Directory bread(block 70) failed [ 48.430877][ T4009] FAT-fs (loop3): Directory bread(block 71) failed [ 48.438840][ T4009] FAT-fs (loop3): Directory bread(block 72) failed [ 48.445645][ T4009] FAT-fs (loop3): Directory bread(block 73) failed [ 48.461989][ T4009] syz.3.189: attempt to access beyond end of device [ 48.461989][ T4009] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 48.471858][ T4013] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 48.506097][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 48.690604][ T4053] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 48.720448][ T4057] netlink: 44 bytes leftover after parsing attributes in process `syz.1.205'. [ 48.741367][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 48.887817][ T4066] FAT-fs (loop1): codepage cp855 not found [ 48.897915][ T4073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.911574][ T4073] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.019361][ T4077] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 49.843367][ T4083] netlink: 44 bytes leftover after parsing attributes in process `syz.2.215'. [ 49.875962][ T4085] set_capacity_and_notify: 11 callbacks suppressed [ 49.876008][ T4085] loop2: detected capacity change from 0 to 128 [ 49.890507][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.900600][ T4085] EXT4-fs: test_dummy_encryption option not supported [ 50.896244][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.063122][ T4100] loop4: detected capacity change from 0 to 512 [ 51.105178][ T4106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.133242][ T4106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.150220][ T4100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.224102][ T4100] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.274014][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.296459][ T4112] loop1: detected capacity change from 0 to 4096 [ 51.339691][ T4112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.398921][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.489411][ T4135] loop4: detected capacity change from 0 to 256 [ 52.508961][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 52.508976][ T28] audit: type=1400 audit(1776908295.694:243): avc: denied { watch } for pid=4134 comm="syz.4.234" path="/46/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 52.692981][ T4145] hub 8-0:1.0: USB hub found [ 52.698044][ T4145] hub 8-0:1.0: 8 ports detected [ 52.775144][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 53.220527][ T4147] bond0: (slave bond_slave_0): Releasing backup interface [ 54.051539][ T4153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.243'. [ 54.186193][ T28] audit: type=1400 audit(1776908297.364:244): avc: denied { write } for pid=4156 comm="syz.4.244" name="file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.263121][ T4159] tmpfs: Bad value for 'nr_inodes' [ 55.180146][ T28] audit: type=1326 audit(1776908298.364:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4169 comm="syz.0.249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3b1c819 code=0x0 [ 55.392716][ T28] audit: type=1400 audit(1776908298.574:246): avc: denied { create } for pid=4184 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 55.440641][ T28] audit: type=1400 audit(1776908298.614:247): avc: denied { read } for pid=4187 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.521847][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 55.553385][ T4197] loop3: detected capacity change from 0 to 256 [ 55.561113][ T4197] msdos: Bad value for 'check' [ 55.617154][ T4199] loop2: detected capacity change from 0 to 1024 [ 55.625844][ T4199] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.649907][ T4199] JBD2: no valid journal superblock found [ 55.659672][ T4199] EXT4-fs (loop2): Could not load journal inode [ 55.730515][ T28] audit: type=1400 audit(1776908298.914:248): avc: denied { mount } for pid=4204 comm="syz.2.264" name="/" dev="configfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.753403][ T28] audit: type=1400 audit(1776908298.914:249): avc: denied { search } for pid=4204 comm="syz.2.264" name="/" dev="configfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.775630][ T28] audit: type=1400 audit(1776908298.914:250): avc: denied { search } for pid=4204 comm="syz.2.264" name="/" dev="configfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.797699][ T28] audit: type=1400 audit(1776908298.914:251): avc: denied { read open } for pid=4204 comm="syz.2.264" path="/" dev="configfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.506713][ T3008] ================================================================== [ 56.514873][ T3008] BUG: KCSAN: data-race in __dentry_kill / path_lookupat [ 56.521959][ T3008] [ 56.524306][ T3008] read-write to 0xffff888107e4b900 of 4 bytes by task 3307 on cpu 0: [ 56.532389][ T3008] __dentry_kill+0x1ed/0x4d0 [ 56.536996][ T3008] finish_dput+0x2b/0x200 [ 56.541356][ T3008] dput+0x52/0x60 [ 56.545049][ T3008] filename_unlinkat+0x217/0x410 [ 56.550008][ T3008] __se_sys_unlink+0x2b/0xe0 [ 56.554639][ T3008] __x64_sys_unlink+0x1f/0x30 [ 56.559341][ T3008] x64_sys_call+0x2eb6/0x3020 [ 56.564069][ T3008] do_syscall_64+0x12c/0x3b0 [ 56.568688][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.574691][ T3008] [ 56.577049][ T3008] read to 0xffff888107e4b900 of 4 bytes by task 3008 on cpu 1: [ 56.584870][ T3008] path_lookupat+0x1d8/0x500 [ 56.589484][ T3008] filename_lookup+0x190/0x390 [ 56.594278][ T3008] do_readlinkat+0x74/0x2f0 [ 56.598814][ T3008] __x64_sys_readlink+0x47/0x60 [ 56.603691][ T3008] x64_sys_call+0x2b51/0x3020 [ 56.608397][ T3008] do_syscall_64+0x12c/0x3b0 [ 56.613021][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.618937][ T3008] [ 56.621384][ T3008] value changed: 0x00300080 -> 0x00004080 [ 56.627152][ T3008] [ 56.629493][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 56.635668][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 56.646112][ T3008] Tainted: [W]=WARN [ 56.649929][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 56.660115][ T3008] ================================================================== [ 56.732493][ T28] audit: type=1400 audit(1776908299.914:252): avc: denied { mount } for pid=4221 comm="syz.0.272" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 58.191082][ T28] audit: type=1400 audit(1776908301.374:253): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 58.211345][ T28] audit: type=1400 audit(1776908301.374:254): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1