last executing test programs: 642.015458ms ago: executing program 4 (id=506): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0xc008744c, &(0x7f00000000c0)={0x21, 0x1}) 512.171398ms ago: executing program 4 (id=517): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 449.683088ms ago: executing program 2 (id=521): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0xee2d}, 0x0, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 382.459118ms ago: executing program 2 (id=530): r0 = syz_io_uring_setup(0x58f2, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x1f82, 0x0, 0x0, 0x0, 0x0) 340.157269ms ago: executing program 2 (id=532): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x5, 0x0, 0x0, 0x1}, {0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffffffffc}]}) 258.016979ms ago: executing program 4 (id=539): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unlink(0x0) 203.52176ms ago: executing program 1 (id=542): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="a78700000000000000e020"], 0x14}}, 0x0) 203.42084ms ago: executing program 2 (id=543): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigsuspend(0x0, 0x0) 203.29145ms ago: executing program 4 (id=544): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000ffffff1f18230000", @ANYRES32=r0, @ANYBLOB="0000000000ce0d00b70500000800000085000000a5000000951e000000000000b75bb24cf8e4eccbf7a520994372046bca2db9e108bbfa12c884d3d0a1ceca059f3b795d1bff6841aad9b8ee773b9bd0b6bf0e7aa9ee"], &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 203.17913ms ago: executing program 1 (id=545): r0 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000940)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x41, 0x0, @fd, 0xc, 0x0, 0x7, 0x3}) io_uring_enter(r0, 0x2ded, 0x0, 0x0, 0x0, 0x0) 203.11115ms ago: executing program 3 (id=546): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0103000000000000000001"], 0x34}}, 0x0) 144.67072ms ago: executing program 3 (id=547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x3722, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 144.4329ms ago: executing program 1 (id=548): perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) 144.30526ms ago: executing program 4 (id=549): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x81, &(0x7f00000001c0)={0x40, 0x14, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 144.20553ms ago: executing program 0 (id=550): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 144.14058ms ago: executing program 3 (id=551): socket$nl_route(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) 144.02455ms ago: executing program 0 (id=552): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='numa_maps\x00') pread64(r0, &(0x7f0000002180)=""/4105, 0x1009, 0x0) 86.37053ms ago: executing program 1 (id=553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x480c0) 85.97149ms ago: executing program 0 (id=554): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x0, 0x0, 0x0}) 85.86327ms ago: executing program 3 (id=555): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x10000009}) 85.73048ms ago: executing program 0 (id=556): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)={0x1c, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x1c}}, 0x0) 85.62308ms ago: executing program 1 (id=557): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 76.46212ms ago: executing program 2 (id=558): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000cc0)="ad2fa4110050", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) 66.82343ms ago: executing program 1 (id=559): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0) 22.30226ms ago: executing program 0 (id=560): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x0, 0x4008053, r0, 0x80000000) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/177) 22.10222ms ago: executing program 3 (id=561): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c}, @NLBL_CIPSOV4_A_MLSCATLST={0x4, 0xc, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}}, 0x0) 21.94321ms ago: executing program 2 (id=562): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000440)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@mblk_io_submit}, {@data_err_abort}, {@sysvgroups}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) 454.85µs ago: executing program 4 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97d}, 0x50) 209.97µs ago: executing program 0 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a0000000000000000005f0000000000400000000000002d00000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) 0s ago: executing program 3 (id=565): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2e, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1fd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fchdir(0xffffffffffffffff) kernel console output (not intermixed with test programs): [ 18.461247][ T29] audit: type=1400 audit(1731497533.647:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 21.284231][ T29] audit: type=1400 audit(1731497536.467:82): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.285259][ T3301] cgroup: Unknown subsys name 'net' [ 21.306942][ T29] audit: type=1400 audit(1731497536.467:83): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.334273][ T29] audit: type=1400 audit(1731497536.497:84): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.474932][ T3301] cgroup: Unknown subsys name 'cpuset' [ 21.480884][ T3301] cgroup: Unknown subsys name 'rlimit' [ 21.607003][ T29] audit: type=1400 audit(1731497536.787:85): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.630214][ T29] audit: type=1400 audit(1731497536.787:86): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.650721][ T29] audit: type=1400 audit(1731497536.787:87): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.669053][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.671077][ T29] audit: type=1400 audit(1731497536.787:88): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.671095][ T29] audit: type=1400 audit(1731497536.797:89): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.709236][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.724703][ T29] audit: type=1400 audit(1731497536.797:90): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.756617][ T29] audit: type=1400 audit(1731497536.867:91): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.797691][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 22.809901][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 22.821694][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 22.876917][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 22.897898][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.905046][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.912110][ T3315] bridge_slave_0: entered allmulticast mode [ 22.918499][ T3315] bridge_slave_0: entered promiscuous mode [ 22.927399][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.934461][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.941594][ T3315] bridge_slave_1: entered allmulticast mode [ 22.947943][ T3315] bridge_slave_1: entered promiscuous mode [ 22.980620][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.987694][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.994807][ T3313] bridge_slave_0: entered allmulticast mode [ 23.001160][ T3313] bridge_slave_0: entered promiscuous mode [ 23.009552][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.016645][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.023720][ T3313] bridge_slave_1: entered allmulticast mode [ 23.030048][ T3313] bridge_slave_1: entered promiscuous mode [ 23.066545][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.073623][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.080850][ T3317] bridge_slave_0: entered allmulticast mode [ 23.087190][ T3317] bridge_slave_0: entered promiscuous mode [ 23.094555][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.104621][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.119526][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.126588][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.133838][ T3317] bridge_slave_1: entered allmulticast mode [ 23.140092][ T3317] bridge_slave_1: entered promiscuous mode [ 23.146797][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.156519][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.165638][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 23.200696][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.207862][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.215221][ T3321] bridge_slave_0: entered allmulticast mode [ 23.221483][ T3321] bridge_slave_0: entered promiscuous mode [ 23.236707][ T3313] team0: Port device team_slave_0 added [ 23.242897][ T3315] team0: Port device team_slave_0 added [ 23.251713][ T3315] team0: Port device team_slave_1 added [ 23.257433][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.264593][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.271934][ T3321] bridge_slave_1: entered allmulticast mode [ 23.278332][ T3321] bridge_slave_1: entered promiscuous mode [ 23.285559][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.299520][ T3313] team0: Port device team_slave_1 added [ 23.317984][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.327972][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.348194][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.357433][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.364468][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.390373][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.413617][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.420589][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.446486][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.461410][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.468384][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.494313][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.514167][ T3317] team0: Port device team_slave_0 added [ 23.519936][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.526924][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.552826][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.570495][ T3321] team0: Port device team_slave_0 added [ 23.577402][ T3321] team0: Port device team_slave_1 added [ 23.588287][ T3317] team0: Port device team_slave_1 added [ 23.616645][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.623588][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.649581][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.660701][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.667780][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.674942][ T3314] bridge_slave_0: entered allmulticast mode [ 23.681240][ T3314] bridge_slave_0: entered promiscuous mode [ 23.687905][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.694982][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.702118][ T3314] bridge_slave_1: entered allmulticast mode [ 23.708459][ T3314] bridge_slave_1: entered promiscuous mode [ 23.719101][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.726066][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.752039][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.763050][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.770028][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.795936][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.820762][ T3315] hsr_slave_0: entered promiscuous mode [ 23.826674][ T3315] hsr_slave_1: entered promiscuous mode [ 23.832729][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.839818][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.865914][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.888466][ T3313] hsr_slave_0: entered promiscuous mode [ 23.894469][ T3313] hsr_slave_1: entered promiscuous mode [ 23.900233][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.907799][ T3313] Cannot create hsr debugfs directory [ 23.918831][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.939478][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.988865][ T3314] team0: Port device team_slave_0 added [ 23.998451][ T3317] hsr_slave_0: entered promiscuous mode [ 24.004705][ T3317] hsr_slave_1: entered promiscuous mode [ 24.010484][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.018067][ T3317] Cannot create hsr debugfs directory [ 24.027302][ T3321] hsr_slave_0: entered promiscuous mode [ 24.033344][ T3321] hsr_slave_1: entered promiscuous mode [ 24.039243][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.046915][ T3321] Cannot create hsr debugfs directory [ 24.052917][ T3314] team0: Port device team_slave_1 added [ 24.082106][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.089126][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.115029][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.128033][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.135016][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.160977][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.225323][ T3314] hsr_slave_0: entered promiscuous mode [ 24.231322][ T3314] hsr_slave_1: entered promiscuous mode [ 24.237206][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.244797][ T3314] Cannot create hsr debugfs directory [ 24.330789][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.340857][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.351303][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.361524][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.397947][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.406812][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.415235][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.424461][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.448101][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.457926][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.466988][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.477599][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.504405][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.514047][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.523987][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.539617][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.561750][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.570764][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.586445][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.594811][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.621875][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.641708][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.667044][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.676330][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.683426][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.691921][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.702105][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.709218][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.721696][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.731897][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.738948][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.754153][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.764348][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.771435][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.789107][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.796189][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.814018][ T2157] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.821048][ T2157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.854325][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.871348][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.901843][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.918429][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.937670][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.951168][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.958234][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.969986][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.977085][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.991108][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.004123][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.020654][ T2157] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.027728][ T2157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.036170][ T2157] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.043261][ T2157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.055005][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.110629][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.158289][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.206483][ T3317] veth0_vlan: entered promiscuous mode [ 25.225475][ T3317] veth1_vlan: entered promiscuous mode [ 25.283292][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.300616][ T3317] veth0_macvtap: entered promiscuous mode [ 25.307371][ T3321] veth0_vlan: entered promiscuous mode [ 25.316348][ T3317] veth1_macvtap: entered promiscuous mode [ 25.325254][ T3321] veth1_vlan: entered promiscuous mode [ 25.333945][ T3313] veth0_vlan: entered promiscuous mode [ 25.346679][ T3315] veth0_vlan: entered promiscuous mode [ 25.363620][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.372040][ T3315] veth1_vlan: entered promiscuous mode [ 25.378380][ T3313] veth1_vlan: entered promiscuous mode [ 25.387365][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.400851][ T3321] veth0_macvtap: entered promiscuous mode [ 25.413611][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.422473][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.431210][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.439950][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.460678][ T3321] veth1_macvtap: entered promiscuous mode [ 25.470756][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.481389][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.491921][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.501252][ T3315] veth0_macvtap: entered promiscuous mode [ 25.515195][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.525650][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.536235][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.546109][ T3313] veth0_macvtap: entered promiscuous mode [ 25.558322][ T3315] veth1_macvtap: entered promiscuous mode [ 25.566058][ T3313] veth1_macvtap: entered promiscuous mode [ 25.578246][ T3314] veth0_vlan: entered promiscuous mode [ 25.585924][ T3321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.594814][ T3321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.603485][ T3321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.612238][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.624801][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.635296][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.645120][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.655542][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.667175][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.677060][ T3314] veth1_vlan: entered promiscuous mode [ 25.682947][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.693455][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.703354][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.704600][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.713841][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.713850][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.748625][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.759244][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.771377][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.781862][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.791677][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.802176][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.812801][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.820967][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.831488][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.841338][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.851863][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.861688][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.872132][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.883117][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.892093][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.900897][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.909787][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.918551][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.944944][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.953663][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.962440][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.971282][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.999710][ T3314] veth0_macvtap: entered promiscuous mode [ 26.022731][ T3314] veth1_macvtap: entered promiscuous mode [ 26.067053][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.077653][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.087557][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.098073][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.107895][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.118462][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.128309][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.138858][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.150442][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.158838][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.169373][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.179224][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.189668][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.199473][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.209930][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.219773][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.230191][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.240868][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.256221][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.264978][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.273839][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.282566][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.323739][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 26.323753][ T29] audit: type=1400 audit(1731497541.497:133): avc: denied { create } for pid=3481 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.352695][ T3482] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 26.355344][ T29] audit: type=1400 audit(1731497541.537:134): avc: denied { connect } for pid=3481 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.355368][ T29] audit: type=1400 audit(1731497541.537:135): avc: denied { bind } for pid=3481 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.389261][ T3485] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 26.464761][ T29] audit: type=1400 audit(1731497541.637:136): avc: denied { map_create } for pid=3491 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.464785][ T29] audit: type=1400 audit(1731497541.637:137): avc: denied { map_read map_write } for pid=3491 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.482756][ T3494] netlink: 'syz.1.2': attribute type 27 has an invalid length. [ 26.490699][ T29] audit: type=1400 audit(1731497541.677:138): avc: denied { create } for pid=3495 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.571486][ T29] audit: type=1400 audit(1731497541.747:139): avc: denied { write } for pid=3495 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.590777][ T29] audit: type=1400 audit(1731497541.747:140): avc: denied { read } for pid=3495 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.609949][ T29] audit: type=1400 audit(1731497541.747:141): avc: denied { setopt } for pid=3495 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.661246][ T29] audit: type=1400 audit(1731497541.837:142): avc: denied { write } for pid=3511 comm="syz.4.26" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.699373][ T3518] loop2: detected capacity change from 0 to 512 [ 26.722108][ T3518] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.29: corrupted in-inode xattr: invalid ea_ino [ 26.760197][ T3518] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.29: couldn't read orphan inode 15 (err -117) [ 26.776164][ T3524] loop4: detected capacity change from 0 to 512 [ 26.782898][ T3524] EXT4-fs: Ignoring removed nobh option [ 26.783607][ T3518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.812936][ T3518] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 3: comm syz.2.29: lblock 0 mapped to illegal pblock 3 (length 1) [ 26.826476][ T3524] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 26.830413][ T3530] netlink: 'syz.0.33': attribute type 27 has an invalid length. [ 26.836536][ T3524] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.31: attempt to clear invalid blocks 2 len 1 [ 26.842655][ T3518] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.29: error -117 reading directory block [ 26.857276][ T3524] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 26.882182][ T3524] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.31: invalid indirect mapped block 1819239214 (level 0) [ 26.915289][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.929699][ T3524] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.31: invalid indirect mapped block 1819239214 (level 1) [ 26.957066][ T3524] EXT4-fs (loop4): 1 truncate cleaned up [ 26.970414][ T3524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.008368][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.088733][ T3559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 27.102752][ T3561] netlink: 'syz.4.45': attribute type 27 has an invalid length. [ 27.251624][ T3578] loop1: detected capacity change from 0 to 512 [ 27.262097][ T3578] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 27.275048][ T3578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 27.282970][ T3578] System zones: 1-12 [ 27.287617][ T3578] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.55: corrupted in-inode xattr: e_value size too large [ 27.302299][ T3578] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.55: couldn't read orphan inode 15 (err -117) [ 27.336253][ T3586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.58'. [ 27.358202][ T3578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.453594][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.682398][ T3645] Cannot find add_set index 0 as target [ 27.789383][ T3663] netlink: 44 bytes leftover after parsing attributes in process `syz.1.94'. [ 28.006909][ T3700] loop0: detected capacity change from 0 to 128 [ 28.042479][ T3704] netlink: 'syz.4.113': attribute type 4 has an invalid length. [ 28.103838][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 28.226031][ T3728] netlink: 44 bytes leftover after parsing attributes in process `syz.0.125'. [ 28.243028][ T3728] netlink: 44 bytes leftover after parsing attributes in process `syz.0.125'. [ 28.254957][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 28.310126][ T3738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 28.327937][ T3740] netlink: 76 bytes leftover after parsing attributes in process `syz.4.131'. [ 28.424114][ T3751] loop4: detected capacity change from 0 to 2048 [ 28.463669][ T3757] tipc: Started in network mode [ 28.468586][ T3757] tipc: Node identity ., cluster identity 4711 [ 28.474810][ T3757] tipc: Enabling of bearer rejected, failed to enable media [ 28.485427][ T3751] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 28.490721][ T3751] loop4: partition table partially beyond EOD, truncated [ 28.505285][ T3751] loop4: p1 start 16777216 is beyond EOD, truncated [ 28.511896][ T3751] loop4: p2 start 16908800 is beyond EOD, truncated [ 28.522235][ T3759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 28.535967][ T3751] loop4: p4 start 11326 is beyond EOD, truncated [ 28.542390][ T3751] loop4: p5 start 16908800 is beyond EOD, truncated [ 28.549097][ T3751] loop4: p6 start 11326 is beyond EOD, truncated [ 28.562633][ T3016] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 28.567863][ T3016] loop4: partition table partially beyond EOD, truncated [ 28.576030][ T3016] loop4: p1 start 16777216 is beyond EOD, truncated [ 28.582634][ T3016] loop4: p2 start 16908800 is beyond EOD, truncated [ 28.592779][ T3016] loop4: p4 start 11326 is beyond EOD, truncated [ 28.599221][ T3016] loop4: p5 start 16908800 is beyond EOD, truncated [ 28.605960][ T3016] loop4: p6 start 11326 is beyond EOD, truncated [ 28.648992][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 28.697742][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 28.735459][ T3781] tmpfs: Cannot disable swap on remount [ 28.781341][ T3785] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 28.789599][ T3785] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 29.129536][ T3843] Zero length message leads to an empty skb [ 29.151839][ T3848] capability: warning: `syz.0.181' uses deprecated v2 capabilities in a way that may be insecure [ 29.180447][ T3845] loop4: detected capacity change from 0 to 1024 [ 29.206623][ T3845] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.180: Failed to acquire dquot type 0 [ 29.219730][ T3845] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 29.235418][ T3845] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #13: comm syz.4.180: corrupted inode contents [ 29.247905][ T3845] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #13: comm syz.4.180: mark_inode_dirty error [ 29.261918][ T3845] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #13: comm syz.4.180: corrupted inode contents [ 29.275087][ T3845] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.180: mark_inode_dirty error [ 29.286831][ T3845] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #13: comm syz.4.180: corrupted inode contents [ 29.300068][ T3845] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 29.309114][ T3845] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #13: comm syz.4.180: corrupted inode contents [ 29.322657][ T3845] EXT4-fs error (device loop4): ext4_truncate:4208: inode #13: comm syz.4.180: mark_inode_dirty error [ 29.335088][ T3845] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 29.336728][ T3865] raw_sendmsg: syz.3.188 forgot to set AF_INET. Fix it! [ 29.398354][ T3845] EXT4-fs (loop4): 1 truncate cleaned up [ 29.404295][ T3845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.433331][ T3845] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.180: Failed to acquire dquot type 0 [ 29.463554][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.480525][ T3882] loop3: detected capacity change from 0 to 1024 [ 29.503017][ T3888] netlink: 'syz.4.200': attribute type 29 has an invalid length. [ 29.506627][ T3888] netlink: 'syz.4.200': attribute type 29 has an invalid length. [ 29.514424][ T3882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.575493][ T3897] usb usb5: usbfs: process 3897 (syz.4.203) did not claim interface 0 before use [ 29.589437][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.756636][ T3922] SELinux: security policydb version 18 (MLS) not backwards compatible [ 29.765111][ T3922] SELinux: failed to load policy [ 29.782678][ T3925] loop3: detected capacity change from 0 to 128 [ 29.809331][ T3925] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.821770][ T3925] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.855587][ T3925] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.216: Directory block failed checksum [ 29.889051][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.112134][ T3959] loop0: detected capacity change from 0 to 2048 [ 30.169685][ T3959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.184238][ T3965] usb usb8: usbfs: process 3965 (syz.3.235) did not claim interface 0 before use [ 30.222542][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.428744][ T3997] syz.4.250 uses obsolete (PF_INET,SOCK_PACKET) [ 30.528015][ T4017] loop4: detected capacity change from 0 to 1024 [ 30.565554][ T4017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.579666][ T4017] EXT4-fs error (device loop4): ext4_lookup:1813: comm syz.4.260: inode #12: comm syz.4.260: iget: illegal inode # [ 30.594116][ T4017] EXT4-fs (loop4): Remounting filesystem read-only [ 30.607904][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.739735][ C0] hrtimer: interrupt took 47882 ns [ 30.981883][ T4042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.503706][ T4077] loop4: detected capacity change from 0 to 128 [ 31.511996][ T4077] ======================================================= [ 31.511996][ T4077] WARNING: The mand mount option has been deprecated and [ 31.511996][ T4077] and is ignored by this kernel. Remove the mand [ 31.511996][ T4077] option from the mount to silence this warning. [ 31.511996][ T4077] ======================================================= [ 31.563954][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 31.563967][ T29] audit: type=1400 audit(1731497546.737:240): avc: denied { read } for pid=4083 comm="syz.1.291" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 31.592578][ T29] audit: type=1400 audit(1731497546.737:241): avc: denied { open } for pid=4083 comm="syz.1.291" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 31.596116][ T4077] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.616052][ T29] audit: type=1400 audit(1731497546.737:242): avc: denied { write } for pid=4083 comm="syz.1.291" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 31.655284][ T4077] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.667572][ T29] audit: type=1400 audit(1731497546.837:243): avc: denied { map } for pid=4092 comm="syz.1.295" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.691598][ T29] audit: type=1400 audit(1731497546.837:244): avc: denied { read write } for pid=4092 comm="syz.1.295" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.716687][ T29] audit: type=1400 audit(1731497546.847:245): avc: denied { add_name } for pid=4076 comm="syz.4.288" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.720079][ T4097] loop0: detected capacity change from 0 to 164 [ 31.737517][ T29] audit: type=1400 audit(1731497546.847:246): avc: denied { create } for pid=4076 comm="syz.4.288" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.737542][ T29] audit: type=1400 audit(1731497546.847:247): avc: denied { read append open } for pid=4076 comm="syz.4.288" path="/71/file0/cpu.stat" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.737564][ T29] audit: type=1400 audit(1731497546.847:248): avc: denied { ioctl } for pid=4076 comm="syz.4.288" path="/71/file0/cpu.stat" dev="loop4" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.814549][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.828416][ T4097] ISOFS: unable to read i-node block [ 31.832123][ T4099] loop1: detected capacity change from 0 to 4096 [ 31.833756][ T4097] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 31.853277][ T4099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.865987][ T29] audit: type=1400 audit(1731497547.037:249): avc: denied { mount } for pid=4094 comm="syz.0.296" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 31.928019][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.166635][ T4157] loop4: detected capacity change from 0 to 2048 [ 32.201719][ T4157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.216814][ T4157] __find_get_block_slow() failed. block=288230376151711744, b_blocknr=0, b_state=0x00000019, b_size=2048, device loop4 blocksize: 2048 [ 32.232678][ T4157] grow_buffers: requested out-of-range block 288230376151711744 for device loop4 [ 32.241920][ T4157] EXT4-fs warning (device loop4): ext4_resize_fs:2019: can't read last block, resize aborted [ 32.262413][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.392143][ T4201] __nla_validate_parse: 3 callbacks suppressed [ 32.392153][ T4201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 32.740297][ T4217] program syz.2.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.009243][ T4233] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.038146][ T4235] bond1: entered promiscuous mode [ 33.043347][ T4235] bond1: entered allmulticast mode [ 33.048764][ T4235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.060721][ T4235] bond1 (unregistering): Released all slaves [ 33.097488][ T4242] loop1: detected capacity change from 0 to 512 [ 33.104790][ T4242] EXT4-fs: Ignoring removed oldalloc option [ 33.110997][ T4242] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.124155][ T4242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.135288][ T4242] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 33.148713][ T4242] EXT4-fs (loop1): 1 truncate cleaned up [ 33.154870][ T4242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.181965][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.203436][ T4249] netlink: 'syz.1.360': attribute type 2 has an invalid length. [ 33.274879][ T4259] loop4: detected capacity change from 0 to 4096 [ 33.281549][ T4259] EXT4-fs: Ignoring removed nobh option [ 33.287294][ T4259] EXT4-fs: Ignoring removed i_version option [ 33.320852][ T4259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.407412][ T4284] kernel profiling enabled (shift: 9) [ 33.420313][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.653024][ T4333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.401'. [ 33.705402][ T4349] 9pnet_fd: Insufficient options for proto=fd [ 33.705925][ T4347] loop3: detected capacity change from 0 to 256 [ 33.723763][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 33.729148][ T4347] FAT-fs (loop3): Directory bread(block 64) failed [ 33.732561][ T4343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 33.747041][ T4347] FAT-fs (loop3): Directory bread(block 65) failed [ 33.755421][ T4347] FAT-fs (loop3): Directory bread(block 66) failed [ 33.761941][ T4347] FAT-fs (loop3): Directory bread(block 67) failed [ 33.775636][ T4347] FAT-fs (loop3): Directory bread(block 68) failed [ 33.782216][ T4347] FAT-fs (loop3): Directory bread(block 69) failed [ 33.789182][ T4354] process 'syz.0.411' launched '/dev/fd/3' with NULL argv: empty string added [ 33.790510][ T4347] FAT-fs (loop3): Directory bread(block 70) failed [ 33.807811][ T4347] FAT-fs (loop3): Directory bread(block 71) failed [ 33.814417][ T4347] FAT-fs (loop3): Directory bread(block 72) failed [ 33.821043][ T4347] FAT-fs (loop3): Directory bread(block 73) failed [ 33.867296][ T4365] loop0: detected capacity change from 0 to 512 [ 33.874416][ T4365] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.907991][ T4365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002] [ 33.918814][ T4365] System zones: 1-12 [ 33.933614][ T4365] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.415: corrupted in-inode xattr: e_value size too large [ 33.939389][ T4365] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.415: couldn't read orphan inode 15 (err -117) [ 33.955120][ T4378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.960070][ T4365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.993283][ T4378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.994821][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.995239][ T4378] netlink: 'syz.4.423': attribute type 3 has an invalid length. [ 34.053326][ T4386] mmap: syz.0.425 (4386) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.128235][ T4401] loop0: detected capacity change from 0 to 764 [ 34.184535][ T4410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 34.193641][ T4410] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 34.256503][ T4422] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 34.326960][ T4436] loop3: detected capacity change from 0 to 164 [ 34.336993][ T4436] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 34.505186][ T4468] tmpfs: Unknown parameter 'mpo' [ 34.515642][ T4470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'. [ 34.578602][ T4483] loop4: detected capacity change from 0 to 512 [ 34.610016][ T4483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.628584][ T4483] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.657852][ T4497] can0: slcan on ttyS3. [ 34.707766][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.744054][ T4497] can0 (unregistered): slcan off ttyS3. [ 34.817440][ T4530] program syz.0.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.939162][ T4560] netlink: 332 bytes leftover after parsing attributes in process `syz.4.505'. [ 35.117054][ T4599] IPv6: sit1: Disabled Multicast RS [ 35.136102][ T4596] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 35.260560][ T4631] loop2: detected capacity change from 0 to 128 [ 35.287705][ T4631] EXT4-fs: Ignoring removed nobh option [ 35.305258][ T4631] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.321328][ T4635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.534'. [ 35.331329][ T4631] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.421455][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.549052][ T4687] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 35.556596][ T4687] vhci_hcd: default hub control req: 4014 v0002 i0000 l0 [ 35.605486][ T4694] loop2: detected capacity change from 0 to 1024 [ 35.628683][ T4694] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.635841][ T3016] ================================================================== [ 35.643919][ T3016] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 35.651113][ T3016] [ 35.653423][ T3016] write to 0xffff888106a2e270 of 8 bytes by task 3306 on cpu 0: [ 35.661038][ T3016] dentry_unlink_inode+0x65/0x260 [ 35.666057][ T3016] d_delete+0x7d/0x100 [ 35.670117][ T3016] d_delete_notify+0x34/0x100 [ 35.674788][ T3016] vfs_unlink+0x320/0x430 [ 35.679110][ T3016] do_unlinkat+0x236/0x4c0 [ 35.683519][ T3016] __x64_sys_unlink+0x2e/0x40 [ 35.688193][ T3016] x64_sys_call+0x280f/0x2d60 [ 35.692861][ T3016] do_syscall_64+0xc9/0x1c0 [ 35.697355][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.703245][ T3016] [ 35.705556][ T3016] read to 0xffff888106a2e270 of 8 bytes by task 3016 on cpu 1: [ 35.713085][ T3016] step_into+0x123/0x810 [ 35.717316][ T3016] walk_component+0x169/0x230 [ 35.721980][ T3016] path_lookupat+0x10a/0x2b0 [ 35.726560][ T3016] filename_lookup+0x127/0x300 [ 35.731316][ T3016] do_readlinkat+0x89/0x210 [ 35.735814][ T3016] __x64_sys_readlink+0x47/0x60 [ 35.740667][ T3016] x64_sys_call+0x13c3/0x2d60 [ 35.745346][ T3016] do_syscall_64+0xc9/0x1c0 [ 35.749843][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.755739][ T3016] [ 35.758054][ T3016] value changed: 0xffff888109ced1f0 -> 0x0000000000000000 [ 35.765143][ T3016] [ 35.767453][ T3016] Reported by Kernel Concurrency Sanitizer on: [ 35.773591][ T3016] CPU: 1 UID: 0 PID: 3016 Comm: udevd Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 35.783862][ T3016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.793913][ T3016] ================================================================== [ 35.805160][ T4700] tipc: Enabling of bearer rejected, failed to enable media [ 35.835099][ T4694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.861522][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.374494][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 37.374509][ T29] audit: type=1400 audit(1731497552.557:344): avc: denied { egress } for pid=40 comm="kworker/u8:2" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 37.404075][ T29] audit: type=1400 audit(1731497552.557:345): avc: denied { sendto } for pid=40 comm="kworker/u8:2" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1