last executing test programs: 10.727483295s ago: executing program 0 (id=232): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50, 0x0, 0x20000, 0xfffffffffffffffd, 0x5, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.685553046s ago: executing program 0 (id=236): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000030c0), 0x82200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000003100)=0x3) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x283}) 10.590003467s ago: executing program 0 (id=244): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x0, 0x2, 0xffdffffe, 0x0, 0x40, 0x2, 0x0, 0x0, 0x9}) close(r0) 10.560315068s ago: executing program 0 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x7fffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 10.484594009s ago: executing program 0 (id=253): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x200b414, 0x0, 0x40, 0x0, &(0x7f0000000480)) 10.45261759s ago: executing program 0 (id=254): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x3ff, 0x4) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10) 1.129595053s ago: executing program 1 (id=580): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000300)={@mcast1, 0x0, r1}) 1.069969114s ago: executing program 1 (id=583): r0 = semget$private(0x0, 0x4000000009, 0x42a) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}], 0x1) semop(r0, &(0x7f0000000200), 0x53) 535.473322ms ago: executing program 2 (id=607): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x98, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x10) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 339.892585ms ago: executing program 3 (id=612): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) 338.205645ms ago: executing program 2 (id=613): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) 336.092245ms ago: executing program 4 (id=614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000c50000000ea20000850000000e00000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 300.435386ms ago: executing program 4 (id=615): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) close(r0) 299.982945ms ago: executing program 3 (id=625): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x0, 0x2, 0xffdffffe, 0x0, 0x40, 0x2, 0x0, 0x0, 0x9}) close(r0) 249.952896ms ago: executing program 3 (id=616): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 249.829316ms ago: executing program 4 (id=617): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd28, 0x10000000, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000805}, 0x10) 224.757827ms ago: executing program 2 (id=618): open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 212.027277ms ago: executing program 1 (id=619): perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 185.088117ms ago: executing program 4 (id=620): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x18e420, &(0x7f0000000200)=ANY=[@ANYBLOB='mode=00']) 184.401027ms ago: executing program 3 (id=631): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x83, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x0, 0xf, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x70}], 0x1, 0x0, 0x0) 138.058308ms ago: executing program 2 (id=621): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x20004000) 136.696548ms ago: executing program 3 (id=622): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x1f, "bd1888e2d8aa44f6c9ddd54980f40c1123bfed713dca8fb053b6345307897c"}, &(0x7f0000000080)=0x27) 128.199218ms ago: executing program 1 (id=623): unshare(0x400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0xfffffffa, 0x804}, 0x3}, 0x10) 87.985149ms ago: executing program 1 (id=624): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xd1abe3ba0469eb16, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 87.623009ms ago: executing program 4 (id=626): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000a00)='syz0\x00', 0x1ff) 70.320169ms ago: executing program 2 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 70.205369ms ago: executing program 3 (id=628): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@init_itable}, {@orlov}, {@nomblk_io_submit}]}, 0xa, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0xee01, 0x0) 29.6023ms ago: executing program 1 (id=629): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000001640)={{}, {0x77359400}}, &(0x7f0000001680)) 29.32832ms ago: executing program 4 (id=630): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f00000004c0)}}], 0x2, 0x24040890) 0s ago: executing program 2 (id=632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): [ 25.347900][ T29] audit: type=1400 audit(1743473311.751:79): avc: denied { rlimitinh } for pid=3285 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.366871][ T29] audit: type=1400 audit(1743473311.751:80): avc: denied { siginh } for pid=3285 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 33.661598][ T29] audit: type=1400 audit(1743473320.141:81): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.662673][ T3295] cgroup: Unknown subsys name 'net' [ 33.687737][ T29] audit: type=1400 audit(1743473320.141:82): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.715241][ T29] audit: type=1400 audit(1743473320.171:83): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.735285][ T29] audit: type=1400 audit(1743473320.171:84): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.852327][ T3295] cgroup: Unknown subsys name 'cpuset' [ 33.858711][ T3295] cgroup: Unknown subsys name 'rlimit' [ 33.978935][ T29] audit: type=1400 audit(1743473320.451:85): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.003235][ T29] audit: type=1400 audit(1743473320.451:86): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.025496][ T29] audit: type=1400 audit(1743473320.451:87): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.033350][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.049024][ T29] audit: type=1400 audit(1743473320.451:88): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.078496][ T29] audit: type=1400 audit(1743473320.451:89): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.097056][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.103352][ T29] audit: type=1400 audit(1743473320.451:90): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.188875][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.254726][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.303929][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.318976][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.326909][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.334431][ T3305] bridge_slave_0: entered allmulticast mode [ 35.341063][ T3305] bridge_slave_0: entered promiscuous mode [ 35.357647][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.364925][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.372313][ T3305] bridge_slave_1: entered allmulticast mode [ 35.378969][ T3305] bridge_slave_1: entered promiscuous mode [ 35.410921][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.428219][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.449849][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.473761][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.482783][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.491829][ T3304] bridge_slave_0: entered allmulticast mode [ 35.501741][ T3304] bridge_slave_0: entered promiscuous mode [ 35.509840][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.550986][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.558714][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.565977][ T3304] bridge_slave_1: entered allmulticast mode [ 35.572846][ T3304] bridge_slave_1: entered promiscuous mode [ 35.583052][ T3305] team0: Port device team_slave_0 added [ 35.609728][ T3305] team0: Port device team_slave_1 added [ 35.626050][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.633348][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.640654][ T3312] bridge_slave_0: entered allmulticast mode [ 35.647367][ T3312] bridge_slave_0: entered promiscuous mode [ 35.668717][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.676000][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.683495][ T3312] bridge_slave_1: entered allmulticast mode [ 35.689957][ T3312] bridge_slave_1: entered promiscuous mode [ 35.697513][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.707185][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.715044][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.744236][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.768349][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.782919][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.790161][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.817081][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.847969][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.864463][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.871734][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.878931][ T3315] bridge_slave_0: entered allmulticast mode [ 35.885727][ T3315] bridge_slave_0: entered promiscuous mode [ 35.897946][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.913277][ T3304] team0: Port device team_slave_0 added [ 35.924864][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.932340][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.940023][ T3315] bridge_slave_1: entered allmulticast mode [ 35.947329][ T3315] bridge_slave_1: entered promiscuous mode [ 35.954015][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.962799][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.970836][ T3316] bridge_slave_0: entered allmulticast mode [ 35.978312][ T3316] bridge_slave_0: entered promiscuous mode [ 35.995158][ T3304] team0: Port device team_slave_1 added [ 36.003147][ T3305] hsr_slave_0: entered promiscuous mode [ 36.009313][ T3305] hsr_slave_1: entered promiscuous mode [ 36.016970][ T3312] team0: Port device team_slave_0 added [ 36.028472][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.036043][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.043921][ T3316] bridge_slave_1: entered allmulticast mode [ 36.053348][ T3316] bridge_slave_1: entered promiscuous mode [ 36.072561][ T3312] team0: Port device team_slave_1 added [ 36.089275][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.096483][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.123014][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.139931][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.159856][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.167259][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.196091][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.218820][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.234746][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.258027][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.265405][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.292081][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.306156][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.326639][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.333934][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.361149][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.390925][ T3315] team0: Port device team_slave_0 added [ 36.408153][ T3304] hsr_slave_0: entered promiscuous mode [ 36.414767][ T3304] hsr_slave_1: entered promiscuous mode [ 36.421329][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.429283][ T3304] Cannot create hsr debugfs directory [ 36.442189][ T3315] team0: Port device team_slave_1 added [ 36.449266][ T3316] team0: Port device team_slave_0 added [ 36.457959][ T3316] team0: Port device team_slave_1 added [ 36.501081][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.509065][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.535988][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.560070][ T3312] hsr_slave_0: entered promiscuous mode [ 36.567280][ T3312] hsr_slave_1: entered promiscuous mode [ 36.573573][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.582463][ T3312] Cannot create hsr debugfs directory [ 36.590954][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.598780][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.626841][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.641280][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.648501][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.676722][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.690094][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.697365][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.726504][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.807284][ T3315] hsr_slave_0: entered promiscuous mode [ 36.813611][ T3315] hsr_slave_1: entered promiscuous mode [ 36.819941][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.828213][ T3315] Cannot create hsr debugfs directory [ 36.842837][ T3316] hsr_slave_0: entered promiscuous mode [ 36.850872][ T3316] hsr_slave_1: entered promiscuous mode [ 36.857399][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.865971][ T3316] Cannot create hsr debugfs directory [ 36.918276][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.943023][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.952856][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.964002][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.034558][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.045738][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.068388][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.081530][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.104916][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.114211][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.124397][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.133654][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.175958][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.186132][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.196309][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.206553][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.247591][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.257642][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.272145][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.291268][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.318264][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.337782][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.350566][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.373905][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.381496][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.393241][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.404927][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.413549][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.436905][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.444764][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.465767][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.473334][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.500790][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.522823][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.541520][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.558997][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.566725][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.578181][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.591280][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.606812][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.614080][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.628739][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.637649][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.645028][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.654907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.662506][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.686527][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.694228][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.711637][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.718843][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.766282][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.775861][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.816339][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.885901][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.899957][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.919159][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.997957][ T3304] veth0_vlan: entered promiscuous mode [ 38.030409][ T3304] veth1_vlan: entered promiscuous mode [ 38.061440][ T3312] veth0_vlan: entered promiscuous mode [ 38.074379][ T3315] veth0_vlan: entered promiscuous mode [ 38.087292][ T3312] veth1_vlan: entered promiscuous mode [ 38.099475][ T3315] veth1_vlan: entered promiscuous mode [ 38.108699][ T3316] veth0_vlan: entered promiscuous mode [ 38.127743][ T3316] veth1_vlan: entered promiscuous mode [ 38.140423][ T3305] veth0_vlan: entered promiscuous mode [ 38.149829][ T3305] veth1_vlan: entered promiscuous mode [ 38.157730][ T3304] veth0_macvtap: entered promiscuous mode [ 38.168194][ T3304] veth1_macvtap: entered promiscuous mode [ 38.177310][ T3312] veth0_macvtap: entered promiscuous mode [ 38.189887][ T3312] veth1_macvtap: entered promiscuous mode [ 38.203796][ T3315] veth0_macvtap: entered promiscuous mode [ 38.212136][ T3315] veth1_macvtap: entered promiscuous mode [ 38.223494][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.238664][ T3305] veth0_macvtap: entered promiscuous mode [ 38.250092][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.258784][ T3305] veth1_macvtap: entered promiscuous mode [ 38.266826][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.277527][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.288831][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.297145][ T3316] veth0_macvtap: entered promiscuous mode [ 38.305079][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.316001][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.325700][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.334939][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.358154][ T3316] veth1_macvtap: entered promiscuous mode [ 38.365373][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.375881][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.385765][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.396888][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.409848][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.418580][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.429095][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.440457][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.456707][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.468132][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.478440][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.489051][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.502997][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.511362][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.522812][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.531855][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.541062][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.552194][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.555352][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.578015][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.588323][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.598952][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.608956][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.619675][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.630507][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.642687][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.651995][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.660912][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.670391][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.684253][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.695453][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.706404][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.708304][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 38.708333][ T29] audit: type=1400 audit(1743473325.191:116): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.717110][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.717129][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.717146][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.752879][ T29] audit: type=1400 audit(1743473325.201:117): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.768854][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.770319][ T29] audit: type=1400 audit(1743473325.201:118): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.838914][ T29] audit: type=1400 audit(1743473325.261:119): avc: denied { map_create } for pid=3443 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.842113][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.857917][ T29] audit: type=1400 audit(1743473325.261:120): avc: denied { map_read map_write } for pid=3443 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.857946][ T29] audit: type=1400 audit(1743473325.271:121): avc: denied { prog_load } for pid=3443 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.857966][ T29] audit: type=1400 audit(1743473325.271:122): avc: denied { bpf } for pid=3443 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.857987][ T29] audit: type=1400 audit(1743473325.271:123): avc: denied { perfmon } for pid=3443 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.868837][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.868854][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.930719][ T29] audit: type=1400 audit(1743473325.411:124): avc: denied { create } for pid=3447 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.949703][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.949720][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.972929][ T29] audit: type=1400 audit(1743473325.441:125): avc: denied { write } for pid=3447 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.991491][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.991510][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.991533][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.992797][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.089145][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.098235][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.107317][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.116672][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.140615][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.151363][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.161513][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.172083][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.182424][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.193544][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.203848][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.214604][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.225928][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.234479][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.243564][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.253228][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.262083][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.291158][ T3455] loop1: detected capacity change from 0 to 512 [ 39.300674][ T3455] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.312785][ T3455] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 39.362554][ T3455] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 39.379568][ T3455] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 39.417834][ T3465] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5'. [ 39.436817][ T3455] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.2: couldn't read orphan inode 13 (err -117) [ 39.453465][ T3455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.517276][ T3474] loop0: detected capacity change from 0 to 164 [ 39.529076][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.539531][ T3474] ======================================================= [ 39.539531][ T3474] WARNING: The mand mount option has been deprecated and [ 39.539531][ T3474] and is ignored by this kernel. Remove the mand [ 39.539531][ T3474] option from the mount to silence this warning. [ 39.539531][ T3474] ======================================================= [ 39.627591][ T3474] Unable to read rock-ridge attributes [ 39.666199][ T3474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 39.684952][ T3489] loop3: detected capacity change from 0 to 512 [ 39.721742][ T3489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.758969][ T3489] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 39.804747][ T3489] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 39.840646][ T3489] EXT4-fs (loop3): 1 truncate cleaned up [ 39.859572][ T3489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.887946][ T3489] EXT4-fs error (device loop3): ext4_map_blocks:672: inode #2: block 4: comm syz.3.19: lblock 0 mapped to illegal pblock 4 (length 1) [ 39.912712][ T3489] EXT4-fs (loop3): Remounting filesystem read-only [ 39.959227][ T3508] pim6reg9: entered allmulticast mode [ 39.960993][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.090494][ T3523] netlink: 48 bytes leftover after parsing attributes in process `syz.0.30'. [ 40.135103][ T3530] capability: warning: `syz.4.34' uses 32-bit capabilities (legacy support in use) [ 40.160139][ T3534] mmap: syz.1.29 (3534) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.227367][ T3546] loop4: detected capacity change from 0 to 256 [ 40.315918][ T3559] loop3: detected capacity change from 0 to 128 [ 40.325829][ T3561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 40.350124][ T3559] FAT-fs (loop3): Directory bread(block 162) failed [ 40.367903][ T3559] FAT-fs (loop3): Directory bread(block 163) failed [ 40.385063][ T3567] netlink: 48 bytes leftover after parsing attributes in process `syz.0.45'. [ 40.398277][ T3559] FAT-fs (loop3): Directory bread(block 164) failed [ 40.408273][ T3567] netlink: 44 bytes leftover after parsing attributes in process `syz.0.45'. [ 40.421513][ T3559] FAT-fs (loop3): Directory bread(block 165) failed [ 40.428260][ T3559] FAT-fs (loop3): Directory bread(block 166) failed [ 40.465807][ T3559] FAT-fs (loop3): Directory bread(block 167) failed [ 40.494279][ T3577] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 40.513295][ T3559] FAT-fs (loop3): Directory bread(block 168) failed [ 40.534381][ T3559] FAT-fs (loop3): Directory bread(block 169) failed [ 40.562450][ T3559] FAT-fs (loop3): Directory bread(block 162) failed [ 40.570268][ T3559] FAT-fs (loop3): Directory bread(block 163) failed [ 40.648866][ T3596] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.717822][ T3601] usb usb8: usbfs: process 3601 (syz.0.57) did not claim interface 0 before use [ 40.923216][ T3629] program syz.0.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.071270][ T3649] loop0: detected capacity change from 0 to 512 [ 41.128568][ T3649] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.179205][ T3649] EXT4-fs (loop0): 1 orphan inode deleted [ 41.183315][ T3665] netlink: 332 bytes leftover after parsing attributes in process `syz.1.89'. [ 41.191627][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 41.199928][ T3649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.224851][ T3665] netlink: 'syz.1.89': attribute type 9 has an invalid length. [ 41.224872][ T3665] netlink: 108 bytes leftover after parsing attributes in process `syz.1.89'. [ 41.224889][ T3665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.89'. [ 41.256805][ T3649] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.339934][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.529651][ T3701] netlink: 'syz.1.103': attribute type 5 has an invalid length. [ 41.618118][ T3718] capability: warning: `syz.2.109' uses deprecated v2 capabilities in a way that may be insecure [ 41.744006][ T3733] loop1: detected capacity change from 0 to 512 [ 41.788929][ T3733] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.116: casefold flag without casefold feature [ 41.843279][ T3733] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.116: couldn't read orphan inode 15 (err -117) [ 41.876029][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.892728][ T3750] syz.3.122 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.936579][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.128187][ T3779] SELinux: Context system_u:object_r:groupadd_exec_t:s0 is not valid (left unmapped). [ 42.176217][ T3783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 42.426962][ T3823] loop0: detected capacity change from 0 to 2048 [ 42.463253][ T3823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.467164][ T3825] loop2: detected capacity change from 0 to 2048 [ 42.529534][ T3825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.544957][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.564753][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.771656][ T3861] loop2: detected capacity change from 0 to 256 [ 43.048289][ T3900] ------------[ cut here ]------------ [ 43.054197][ T3900] Please remove unsupported % in format string [ 43.062792][ T3900] WARNING: CPU: 1 PID: 3900 at lib/vsprintf.c:2697 format_decode+0x526/0x540 [ 43.072292][ T3900] Modules linked in: [ 43.076662][ T3900] CPU: 1 UID: 0 PID: 3900 Comm: syz.3.195 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 43.089911][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.100433][ T3900] RIP: 0010:format_decode+0x526/0x540 [ 43.105998][ T3900] Code: 67 d3 86 e8 6c 33 0a fc c6 05 50 e2 6f 01 01 90 4c 89 e7 e8 cc 31 0a fc 41 0f b6 34 24 48 c7 c7 13 24 60 86 e8 5b 02 d1 fb 90 <0f> 0b 90 90 e9 cf fd ff ff e8 9c 17 f0 fb 4d 89 e6 e9 ab fc ff ff [ 43.126115][ T3900] RSP: 0018:ffffc9000fbafa58 EFLAGS: 00010246 [ 43.132673][ T3900] RAX: ed6b74a22c999b00 RBX: ffffc9000fbafad9 RCX: 0000000000080000 [ 43.133747][ T3903] loop2: detected capacity change from 0 to 512 [ 43.140886][ T3900] RDX: ffffc90004e2a000 RSI: 00000000000012b8 RDI: 00000000000012b9 [ 43.140907][ T3900] RBP: 0000000000000000 R08: ffffffff8134892b R09: 0000000000000000 [ 43.140921][ T3900] R10: 0001ffffffffffff R11: ffff88810172e300 R12: ffffc9000fbafbb4 [ 43.140937][ T3900] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000fbafad8 [ 43.150063][ T3903] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.156165][ T3900] FS: 00007f1f9037f6c0(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000 [ 43.156189][ T3900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.156205][ T3900] CR2: 0000000000000000 CR3: 0000000118744000 CR4: 00000000003506f0 [ 43.190682][ T3903] EXT4-fs (loop2): 1 truncate cleaned up [ 43.190990][ T3900] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.201311][ T3903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.207179][ T3900] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.207201][ T3900] Call Trace: [ 43.207210][ T3900] [ 43.207222][ T3900] bstr_printf+0xb4/0x6f0 [ 43.218174][ T3903] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.221421][ T3900] ? bpf_test_run+0x1d8/0x4a0 [ 43.276177][ T3900] bpf_trace_printk+0xbf/0x1e0 [ 43.280987][ T3900] ? find_stack+0x2c/0x170 [ 43.285766][ T3900] ? bpf_test_run+0x1d8/0x4a0 [ 43.290600][ T3900] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 43.296211][ T3900] bpf_test_run+0x1e7/0x4a0 [ 43.300806][ T3900] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 43.306971][ T3900] ? bpf_test_run+0x106/0x4a0 [ 43.311966][ T3900] bpf_prog_test_run_skb+0x857/0xbe0 [ 43.317401][ T3900] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 43.323353][ T3900] bpf_prog_test_run+0x20e/0x3a0 [ 43.328653][ T3900] __sys_bpf+0x440/0x800 [ 43.332952][ T3900] __x64_sys_bpf+0x43/0x50 [ 43.337602][ T3900] x64_sys_call+0x23da/0x2e10 [ 43.342345][ T3900] do_syscall_64+0xc9/0x1c0 [ 43.346871][ T3900] ? clear_bhb_loop+0x25/0x80 [ 43.351815][ T3900] ? clear_bhb_loop+0x25/0x80 [ 43.356660][ T3900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.362898][ T3900] RIP: 0033:0x7f1f91d1d169 [ 43.367447][ T3900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.387981][ T3900] RSP: 002b:00007f1f9037f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.396787][ T3900] RAX: ffffffffffffffda RBX: 00007f1f91f35fa0 RCX: 00007f1f91d1d169 [ 43.405596][ T3900] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 43.414604][ T3900] RBP: 00007f1f91d9e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 43.423370][ T3900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.431555][ T3900] R13: 0000000000000000 R14: 00007f1f91f35fa0 R15: 00007ffe3464c398 [ 43.439759][ T3900] [ 43.442972][ T3900] ---[ end trace 0000000000000000 ]--- [ 43.801214][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 43.801248][ T29] audit: type=1400 audit(1743473330.271:242): avc: denied { create } for pid=3950 comm="syz.1.219" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.824905][ T3954] loop2: detected capacity change from 0 to 256 [ 43.855814][ T29] audit: type=1400 audit(1743473330.291:243): avc: denied { read } for pid=3950 comm="syz.1.219" name="file2" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.880102][ T29] audit: type=1400 audit(1743473330.291:244): avc: denied { open } for pid=3950 comm="syz.1.219" path="/46/file2" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.904763][ T29] audit: type=1400 audit(1743473330.291:245): avc: denied { ioctl } for pid=3950 comm="syz.1.219" path="/46/file2" dev="tmpfs" ino=255 ioctlcmd=0x4c04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.950585][ T3961] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 43.970208][ T29] audit: type=1400 audit(1743473330.331:246): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file2" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.994152][ T29] audit: type=1400 audit(1743473330.381:247): avc: denied { append } for pid=3960 comm="syz.3.225" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.017268][ T29] audit: type=1400 audit(1743473330.421:248): avc: denied { create } for pid=3958 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=ieee802154_socket permissive=1 [ 44.077090][ T29] audit: type=1400 audit(1743473330.551:249): avc: denied { bind } for pid=3970 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.096727][ T29] audit: type=1400 audit(1743473330.551:250): avc: denied { name_bind } for pid=3970 comm="syz.0.230" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 44.118406][ T29] audit: type=1400 audit(1743473330.551:251): avc: denied { node_bind } for pid=3970 comm="syz.0.230" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 44.570660][ T4037] loop1: detected capacity change from 0 to 512 [ 44.627292][ T4037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.656169][ T4037] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.745310][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.859207][ T4066] loop3: detected capacity change from 0 to 512 [ 44.884585][ T4066] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.941762][ T4066] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.971539][ T4066] EXT4-fs (loop3): 1 truncate cleaned up [ 44.995596][ T4066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.999541][ T4084] tipc: Started in network mode [ 45.016377][ T4084] tipc: Node identity 00000000000000000000ffff7f000001, cluster identity 4711 [ 45.028166][ T4084] tipc: Enabling of bearer rejected, failed to enable media [ 45.082349][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.230844][ T23] IPVS: starting estimator thread 0... [ 45.293849][ T4099] loop2: detected capacity change from 0 to 2048 [ 45.331247][ T4097] IPVS: using max 2016 ests per chain, 100800 per kthread [ 45.339878][ T4099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.367543][ T4099] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.425847][ T4099] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.290: bg 0: block 345: padding at end of block bitmap is not set [ 45.470709][ T4099] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 45.484937][ T4099] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.484937][ T4099] [ 45.563981][ T4099] syz.2.290 (4099) used greatest stack depth: 9776 bytes left [ 45.586395][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.079811][ T4145] loop2: detected capacity change from 0 to 512 [ 46.121505][ T4145] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.153665][ T4145] EXT4-fs (loop2): 1 truncate cleaned up [ 46.174350][ T4145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.300370][ T4169] loop1: detected capacity change from 0 to 256 [ 46.326967][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.459524][ T4178] loop1: detected capacity change from 0 to 4096 [ 46.511837][ T4178] EXT4-fs: Ignoring removed orlov option [ 46.517686][ T4178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.550204][ T4178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.561048][ T4200] loop4: detected capacity change from 0 to 2048 [ 46.573519][ T4200] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.603923][ T4200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.626387][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.668983][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.949342][ T4247] loop2: detected capacity change from 0 to 2048 [ 46.971747][ T4247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.005884][ T4253] loop4: detected capacity change from 0 to 128 [ 47.029600][ T4247] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.129580][ T4259] netlink: 'syz.1.349': attribute type 5 has an invalid length. [ 47.143725][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.316401][ C0] hrtimer: interrupt took 35381 ns [ 47.525866][ T4304] loop4: detected capacity change from 0 to 1024 [ 47.552165][ T4296] loop2: detected capacity change from 0 to 8192 [ 47.605573][ T4304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.653774][ T4304] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.779585][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.810782][ T4326] tipc: Invalid UDP bearer configuration [ 47.810800][ T4326] tipc: Enabling of bearer rejected, failed to enable media [ 47.922967][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 47.932779][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 47.941924][ T4339] netlink: 'syz.1.387': attribute type 12 has an invalid length. [ 47.985511][ T4346] loop3: detected capacity change from 0 to 1024 [ 48.057256][ T4346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.088730][ T4346] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.188623][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.221171][ T4371] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 48.243819][ T4371] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 48.759905][ T4411] loop1: detected capacity change from 0 to 512 [ 48.803728][ T4411] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 48.849776][ T4411] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 48.882283][ T4411] EXT4-fs (loop1): 1 truncate cleaned up [ 48.888418][ T4411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.954397][ T4419] loop2: detected capacity change from 0 to 256 [ 48.987974][ T4419] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.011380][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 49.019394][ T29] audit: type=1400 audit(1743473335.481:329): avc: denied { remount } for pid=4410 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.041809][ T4411] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.095202][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.206491][ T4429] loop1: detected capacity change from 0 to 1024 [ 49.235655][ T4429] EXT4-fs: Ignoring removed bh option [ 49.288661][ T4429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.431667][ T4443] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4443 comm=syz.4.434 [ 49.444323][ T4443] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4443 comm=syz.4.434 [ 49.485592][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.565887][ T4451] netlink: 88 bytes leftover after parsing attributes in process `syz.3.439'. [ 49.587370][ T4456] loop4: detected capacity change from 0 to 1024 [ 49.605241][ T4456] EXT4-fs: Ignoring removed bh option [ 49.610711][ T4456] EXT4-fs: inline encryption not supported [ 49.616728][ T4456] EXT4-fs: Ignoring removed i_version option [ 49.642472][ T4456] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.683774][ T4456] EXT4-fs error (device loop4): ext4_map_blocks:672: inode #3: block 2: comm syz.4.440: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.741148][ T4456] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 49.769202][ T4456] EXT4-fs error (device loop4): ext4_map_blocks:672: inode #3: block 48: comm syz.4.440: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.855700][ T4456] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 49.864751][ T4456] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.440: Failed to acquire dquot type 0 [ 49.923169][ T4456] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 49.934183][ T4456] EXT4-fs error (device loop4): ext4_evict_inode:257: inode #11: comm syz.4.440: mark_inode_dirty error [ 49.957188][ T4480] loop3: detected capacity change from 0 to 1024 [ 49.972592][ T4456] EXT4-fs warning (device loop4): ext4_evict_inode:260: couldn't mark inode dirty (err -117) [ 49.988461][ T4482] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 49.991852][ T4456] EXT4-fs (loop4): 1 orphan inode deleted [ 49.996190][ T4482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.452'. [ 50.012049][ T4456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.024391][ T292] EXT4-fs error (device loop4): ext4_map_blocks:672: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.044504][ T292] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 50.053129][ T292] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 50.065853][ T4480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.088654][ T4480] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.121064][ T4456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.133037][ T29] audit: type=1400 audit(1743473336.611:330): avc: denied { map } for pid=4485 comm="syz.1.453" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.140897][ T4456] EXT4-fs error (device loop4): __ext4_get_inode_loc:4461: comm syz.4.440: Invalid inode table block 1 in block_group 0 [ 50.173165][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.184535][ T4456] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 50.205803][ T4488] loop1: detected capacity change from 0 to 512 [ 50.211374][ T4456] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.440: mark_inode_dirty error [ 50.230782][ T4488] EXT4-fs: Ignoring removed i_version option [ 50.259684][ T4488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.261810][ T29] audit: type=1400 audit(1743473336.731:331): avc: denied { ioctl } for pid=4489 comm="syz.3.454" path="socket:[7594]" dev="sockfs" ino=7594 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.309802][ T4488] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.361170][ T4498] loop3: detected capacity change from 0 to 1024 [ 50.396601][ T4488] EXT4-fs error (device loop1): ext4_get_first_dir_block:3527: inode #12: comm syz.1.455: Attempting to read directory block (0) that is past i_size (3) [ 50.426405][ T29] audit: type=1400 audit(1743473336.871:332): avc: denied { create } for pid=4487 comm="syz.1.455" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.435454][ T4502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.460'. [ 50.449796][ T29] audit: type=1400 audit(1743473336.871:333): avc: denied { write } for pid=4487 comm="syz.1.455" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.459251][ T4502] netlink: 43 bytes leftover after parsing attributes in process `syz.2.460'. [ 50.459273][ T4502] netlink: 'syz.2.460': attribute type 6 has an invalid length. [ 50.486926][ T29] audit: type=1400 audit(1743473336.871:334): avc: denied { rename } for pid=4487 comm="syz.1.455" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.495385][ T4502] netlink: 'syz.2.460': attribute type 5 has an invalid length. [ 50.495401][ T4502] netlink: 43 bytes leftover after parsing attributes in process `syz.2.460'. [ 50.545635][ T29] audit: type=1400 audit(1743473336.871:335): avc: denied { reparent } for pid=4487 comm="syz.1.455" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.576234][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.603549][ T4498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.635767][ T4498] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.653493][ T4509] tipc: Cannot configure node identity twice [ 50.703888][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.822700][ T4523] 9p: Unknown access argument „: -22 [ 50.964844][ T4538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 50.973931][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 51.219973][ T4557] loop1: detected capacity change from 0 to 512 [ 51.227186][ T4557] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 51.228855][ T4557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 51.229000][ T4557] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.234731][ T4557] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.485: attempt to clear invalid blocks 1024 len 1 [ 51.401181][ T4557] EXT4-fs (loop1): Remounting filesystem read-only [ 51.423452][ T4557] EXT4-fs (loop1): 1 truncate cleaned up [ 51.423998][ T4557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 51.473741][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 51.538584][ T4570] loop1: detected capacity change from 0 to 512 [ 51.538894][ T4570] EXT4-fs: Ignoring removed nobh option [ 51.554029][ T4570] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.491: invalid indirect mapped block 256 (level 2) [ 51.554280][ T4570] EXT4-fs (loop1): 2 truncates cleaned up [ 51.563173][ T4570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.735845][ T4577] loop2: detected capacity change from 0 to 512 [ 51.736082][ T4577] EXT4-fs: Ignoring removed nobh option [ 51.749433][ T4570] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.491: bg 0: block 5: invalid block bitmap [ 51.749944][ T4570] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 51.749973][ T4570] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.749973][ T4570] [ 51.749990][ T4570] EXT4-fs (loop1): Total free blocks count 0 [ 51.750001][ T4570] EXT4-fs (loop1): Free/Dirty block details [ 51.750011][ T4570] EXT4-fs (loop1): free_blocks=0 [ 51.750022][ T4570] EXT4-fs (loop1): dirty_blocks=2 [ 51.750032][ T4570] EXT4-fs (loop1): Block reservation details [ 51.750042][ T4570] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 51.751007][ T4570] syz.1.491 (4570) used greatest stack depth: 9440 bytes left [ 51.753828][ T4577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.790053][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.816595][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.870008][ T4583] netlink: 56 bytes leftover after parsing attributes in process `syz.3.506'. [ 52.117455][ T4606] loop1: detected capacity change from 0 to 512 [ 52.123869][ T4608] IPVS: ip_vs_edit_dest(): server weight less than zero [ 52.134764][ T23] IPVS: starting estimator thread 0... [ 52.153582][ T4606] EXT4-fs (loop1): too many log groups per flexible block group [ 52.161494][ T4606] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 52.172672][ T4606] EXT4-fs (loop1): mount failed [ 52.221784][ T4610] IPVS: using max 2496 ests per chain, 124800 per kthread [ 52.264636][ T4625] loop2: detected capacity change from 0 to 512 [ 52.286172][ T4625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.300876][ T4625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 52.309945][ T4625] System zones: 1-12 [ 52.320143][ T4625] EXT4-fs (loop2): 1 truncate cleaned up [ 52.330515][ T4625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.393919][ T4625] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 52.420441][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.480682][ T4646] loop2: detected capacity change from 0 to 512 [ 52.502134][ T4646] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.540338][ T4646] EXT4-fs (loop2): 1 orphan inode deleted [ 52.546302][ T4646] EXT4-fs (loop2): 1 truncate cleaned up [ 52.570902][ T4646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.586503][ T4646] EXT4-fs error (device loop2): ext4_search_dir:1476: inode #12: block 7: comm syz.2.522: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 52.609278][ T4646] EXT4-fs (loop2): Remounting filesystem read-only [ 52.644441][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.692766][ T4664] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 52.701015][ T4662] loop1: detected capacity change from 0 to 1024 [ 52.714823][ T4662] EXT4-fs: Ignoring removed nobh option [ 52.725780][ T4662] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.737853][ T4662] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.533: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 52.758595][ T4662] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.533: couldn't read orphan inode 11 (err -117) [ 52.773233][ T4662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.793090][ T4662] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.533: Invalid block bitmap block 0 in block_group 0 [ 52.807957][ T4662] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.533: Failed to acquire dquot type 0 [ 52.856801][ T1062] EXT4-fs error (device loop1): __ext4_get_inode_loc:4461: comm kworker/u8:6: Invalid inode table block 8589934593 in block_group 0 [ 52.874446][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.053935][ T4685] loop1: detected capacity change from 0 to 512 [ 53.090520][ T4685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.123011][ T4685] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.150299][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.262574][ T4704] loop2: detected capacity change from 0 to 164 [ 53.647687][ T4752] __nla_validate_parse: 1 callbacks suppressed [ 53.647706][ T4752] netlink: 277 bytes leftover after parsing attributes in process `syz.3.575'. [ 53.937450][ T4784] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 53.946469][ T4784] netlink: 92 bytes leftover after parsing attributes in process `syz.2.591'. [ 54.071220][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 54.071272][ T29] audit: type=1400 audit(1743473340.541:378): avc: denied { write } for pid=4791 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.272413][ T29] audit: type=1400 audit(1743473340.751:379): avc: denied { write } for pid=4811 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.313844][ T29] audit: type=1400 audit(1743473340.791:380): avc: denied { create } for pid=4813 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.337583][ T29] audit: type=1400 audit(1743473340.791:381): avc: denied { write } for pid=4813 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.362389][ T4818] loop2: detected capacity change from 0 to 512 [ 54.369674][ T4818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.384863][ T4818] EXT4-fs (loop2): 1 truncate cleaned up [ 54.401369][ T4818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.443793][ T29] audit: type=1400 audit(1743473340.921:382): avc: denied { getopt } for pid=4824 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 54.464127][ T29] audit: type=1400 audit(1743473340.931:383): avc: denied { create } for pid=4826 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.484916][ T29] audit: type=1400 audit(1743473340.951:384): avc: denied { write } for pid=4826 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.505815][ T29] audit: type=1400 audit(1743473340.951:385): avc: denied { read } for pid=4826 comm="syz.3.610" path="socket:[8061]" dev="sockfs" ino=8061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.562803][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.859641][ T4861] loop3: detected capacity change from 0 to 4096 [ 54.873121][ T4861] EXT4-fs: Ignoring removed orlov option [ 54.879309][ T4861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.903520][ T3298] ================================================================== [ 54.911679][ T3298] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 54.919096][ T3298] [ 54.921513][ T3298] write to 0xffff8881004c1d2e of 1 bytes by task 4861 on cpu 1: [ 54.929528][ T3298] set_blocksize+0x218/0x270 [ 54.934184][ T3298] sb_set_blocksize+0x7e/0x100 [ 54.938972][ T3298] ext4_fill_super+0x1345/0x3580 [ 54.945176][ T3298] get_tree_bdev_flags+0x2b4/0x330 [ 54.950754][ T3298] get_tree_bdev+0x1f/0x30 [ 54.955453][ T3298] ext4_get_tree+0x1c/0x30 [ 54.959910][ T3298] vfs_get_tree+0x56/0x1e0 [ 54.964790][ T3298] do_new_mount+0x246/0x6b0 [ 54.969671][ T3298] path_mount+0x49b/0xb30 [ 54.974056][ T3298] __se_sys_mount+0x28f/0x2e0 [ 54.979124][ T3298] __x64_sys_mount+0x67/0x80 [ 54.984181][ T3298] x64_sys_call+0xd11/0x2e10 [ 54.989679][ T3298] do_syscall_64+0xc9/0x1c0 [ 54.994237][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.000839][ T3298] [ 55.003644][ T3298] read to 0xffff8881004c1d2e of 1 bytes by task 3298 on cpu 0: [ 55.012992][ T3298] do_mpage_readpage+0x53/0xd60 [ 55.017974][ T3298] mpage_readahead+0x1af/0x2d0 [ 55.022776][ T3298] blkdev_readahead+0x1c/0x30 [ 55.027495][ T3298] read_pages+0xa1/0x470 [ 55.032197][ T3298] page_cache_ra_unbounded+0x30d/0x350 [ 55.038163][ T3298] page_cache_sync_ra+0x252/0x680 [ 55.043776][ T3298] filemap_get_pages+0x2ba/0x11b0 [ 55.048976][ T3298] filemap_read+0x231/0x8d0 [ 55.054115][ T3298] blkdev_read_iter+0x227/0x2d0 [ 55.059267][ T3298] vfs_read+0x5e6/0x710 [ 55.063451][ T3298] ksys_read+0xeb/0x1b0 [ 55.067875][ T3298] __x64_sys_read+0x42/0x50 [ 55.072769][ T3298] x64_sys_call+0x2a3b/0x2e10 [ 55.077723][ T3298] do_syscall_64+0xc9/0x1c0 [ 55.082596][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.088894][ T3298] [ 55.091227][ T3298] value changed: 0x0a -> 0x0c [ 55.096077][ T3298] [ 55.098489][ T3298] Reported by Kernel Concurrency Sanitizer on: [ 55.104934][ T3298] CPU: 0 UID: 0 PID: 3298 Comm: udevd Tainted: G W 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 55.118936][ T3298] Tainted: [W]=WARN [ 55.122970][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.134090][ T3298] ================================================================== [ 55.212573][ T4861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.263657][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.