last executing test programs: 2.133348029s ago: executing program 0 (id=235): io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x1a1081, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f0000000100)}]) 2.027338639s ago: executing program 0 (id=237): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 1.967715905s ago: executing program 0 (id=238): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 1.967396295s ago: executing program 0 (id=240): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) shutdown(r0, 0x0) 1.681919552s ago: executing program 0 (id=252): semget$private(0x0, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000340)=[{0x2, 0x8000}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 804.853614ms ago: executing program 0 (id=287): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 720.805882ms ago: executing program 4 (id=290): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, 0x0, 0x0, 0xc002a0, 0x0) 603.529074ms ago: executing program 4 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) 503.143043ms ago: executing program 4 (id=301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) semop(0x0, &(0x7f00000002c0)=[{0x3}], 0x1) 403.442712ms ago: executing program 4 (id=304): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 398.903043ms ago: executing program 2 (id=307): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 311.779121ms ago: executing program 3 (id=309): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000dc0)={@local, @random="7d321a25982f", @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, 'c', "e28a63", 0x0, "8facd075b14746fcac"}}}}}, 0x0) 311.144611ms ago: executing program 2 (id=310): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5452, 0x20001412) 305.274142ms ago: executing program 3 (id=311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x320c81c, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c686964652c6e6f726f636b2c636865636b3d72656c617865642c6e6f6a6f6c6965742c6d6f64653d3078303030303030303030303030303030302c626c6f636b3d3078303030303030303030303030303430302c00ef49cf86458fe7d77ad665fd54ecde2920ecf341fdc99e3dd3bbb43add61fbd65ef0936a80c2f39e63"], 0x1, 0x545, &(0x7f0000000ac0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x0) 281.822924ms ago: executing program 4 (id=313): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea0040330020010000000000000000000000000000ff020000000000000000000000000001"], 0x0) 223.758479ms ago: executing program 1 (id=314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x130, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x104, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30a89db}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x5c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd26b}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcaf1783}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x130}}, 0x0) 223.580549ms ago: executing program 2 (id=315): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9) 223.245539ms ago: executing program 1 (id=316): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x200888c5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x18, 0x4) 205.204711ms ago: executing program 3 (id=317): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101b01) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x5f, 0x0, 0x0}) 202.495261ms ago: executing program 2 (id=318): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) 190.932203ms ago: executing program 4 (id=319): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)) 127.837738ms ago: executing program 1 (id=320): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 127.561238ms ago: executing program 2 (id=321): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001900)=ANY=[@ANYBLOB="400700006800010000000000000000000a00000000000000060007000300000008000500", @ANYRES32=r1, @ANYBLOB="18070880140701"], 0x740}}, 0x0) 127.389288ms ago: executing program 1 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x23}, 0x69) 123.892199ms ago: executing program 3 (id=323): epoll_create(0x20000002) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) 69.946593ms ago: executing program 2 (id=324): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 69.414384ms ago: executing program 1 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc) 11.657459ms ago: executing program 3 (id=325): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@random="5b1a073f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xff, 0x11, 0x0, @empty, @multicast1}, {0x18, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5}}}}}}, 0x0) 11.044639ms ago: executing program 1 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 3 (id=327): r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/238}, 0xf6, 0x3, 0x0) msgsnd(r0, &(0x7f0000000180)={0x3}, 0x8, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 18.282259][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 18.282278][ T29] audit: type=1400 audit(1726935641.802:76): avc: denied { transition } for pid=3142 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.289131][ T29] audit: type=1400 audit(1726935641.802:77): avc: denied { noatsecure } for pid=3142 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.292719][ T29] audit: type=1400 audit(1726935641.802:78): avc: denied { write } for pid=3142 comm="sh" path="pipe:[680]" dev="pipefs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 18.296150][ T29] audit: type=1400 audit(1726935641.802:79): avc: denied { rlimitinh } for pid=3142 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.298948][ T29] audit: type=1400 audit(1726935641.802:80): avc: denied { siginh } for pid=3142 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.590164][ T29] audit: type=1400 audit(1726935645.112:81): avc: denied { read } for pid=2947 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 26.638627][ T29] audit: type=1400 audit(1726935650.162:82): avc: denied { mounton } for pid=3251 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.640066][ T3251] cgroup: Unknown subsys name 'net' [ 26.664708][ T29] audit: type=1400 audit(1726935650.162:83): avc: denied { mount } for pid=3251 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.698772][ T29] audit: type=1400 audit(1726935650.202:84): avc: denied { unmount } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.837797][ T3251] cgroup: Unknown subsys name 'cpuset' [ 26.844157][ T3251] cgroup: Unknown subsys name 'rlimit' [ 26.972950][ T29] audit: type=1400 audit(1726935650.492:85): avc: denied { setattr } for pid=3251 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.998688][ T29] audit: type=1400 audit(1726935650.492:86): avc: denied { create } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.009972][ T3255] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.019377][ T29] audit: type=1400 audit(1726935650.492:87): avc: denied { write } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.048306][ T29] audit: type=1400 audit(1726935650.492:88): avc: denied { read } for pid=3251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.068709][ T29] audit: type=1400 audit(1726935650.502:89): avc: denied { mounton } for pid=3251 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.093504][ T29] audit: type=1400 audit(1726935650.502:90): avc: denied { mount } for pid=3251 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.116834][ T29] audit: type=1400 audit(1726935650.552:91): avc: denied { relabelto } for pid=3255 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.160206][ T3251] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.779558][ T3273] chnl_net:caif_netlink_parms(): no params data found [ 28.828888][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 28.883260][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 28.955987][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.963126][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.970448][ T3263] bridge_slave_0: entered allmulticast mode [ 28.976963][ T3263] bridge_slave_0: entered promiscuous mode [ 28.983484][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.990565][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.997937][ T3273] bridge_slave_0: entered allmulticast mode [ 29.004590][ T3273] bridge_slave_0: entered promiscuous mode [ 29.023623][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.030758][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.038152][ T3263] bridge_slave_1: entered allmulticast mode [ 29.044775][ T3263] bridge_slave_1: entered promiscuous mode [ 29.051005][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.058113][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.065194][ T3273] bridge_slave_1: entered allmulticast mode [ 29.071680][ T3273] bridge_slave_1: entered promiscuous mode [ 29.098116][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 29.109950][ T3273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.132814][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.154149][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.185015][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.194177][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.201302][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.208517][ T3265] bridge_slave_0: entered allmulticast mode [ 29.214994][ T3265] bridge_slave_0: entered promiscuous mode [ 29.221674][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 29.231485][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.240175][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.249624][ T3265] bridge_slave_1: entered allmulticast mode [ 29.256612][ T3265] bridge_slave_1: entered promiscuous mode [ 29.263814][ T3273] team0: Port device team_slave_0 added [ 29.272553][ T3273] team0: Port device team_slave_1 added [ 29.308786][ T3263] team0: Port device team_slave_0 added [ 29.327607][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.341282][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.348334][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.374453][ T3273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.391640][ T3263] team0: Port device team_slave_1 added [ 29.412877][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.428724][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.436523][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.443881][ T3268] bridge_slave_0: entered allmulticast mode [ 29.450350][ T3268] bridge_slave_0: entered promiscuous mode [ 29.457242][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.464533][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.473129][ T3268] bridge_slave_1: entered allmulticast mode [ 29.480598][ T3268] bridge_slave_1: entered promiscuous mode [ 29.487868][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.495318][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.522076][ T3273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.559159][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.566433][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.594474][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.610220][ T3265] team0: Port device team_slave_0 added [ 29.623661][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.637178][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.644827][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.674526][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.695164][ T3265] team0: Port device team_slave_1 added [ 29.702392][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.722528][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.729873][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.737521][ T3262] bridge_slave_0: entered allmulticast mode [ 29.744620][ T3262] bridge_slave_0: entered promiscuous mode [ 29.762749][ T3268] team0: Port device team_slave_0 added [ 29.769155][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.777276][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.786887][ T3262] bridge_slave_1: entered allmulticast mode [ 29.795246][ T3262] bridge_slave_1: entered promiscuous mode [ 29.814167][ T3273] hsr_slave_0: entered promiscuous mode [ 29.820466][ T3273] hsr_slave_1: entered promiscuous mode [ 29.827310][ T3268] team0: Port device team_slave_1 added [ 29.849652][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.856631][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.882655][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.912561][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.919551][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.945473][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.963212][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.970219][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.996176][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.012887][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.023712][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.034603][ T3263] hsr_slave_0: entered promiscuous mode [ 30.041115][ T3263] hsr_slave_1: entered promiscuous mode [ 30.047082][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.054637][ T3263] Cannot create hsr debugfs directory [ 30.060516][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.067508][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.093531][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.137088][ T3262] team0: Port device team_slave_0 added [ 30.153381][ T3265] hsr_slave_0: entered promiscuous mode [ 30.163862][ T3265] hsr_slave_1: entered promiscuous mode [ 30.172217][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.180385][ T3265] Cannot create hsr debugfs directory [ 30.192676][ T3262] team0: Port device team_slave_1 added [ 30.206203][ T3268] hsr_slave_0: entered promiscuous mode [ 30.214584][ T3268] hsr_slave_1: entered promiscuous mode [ 30.220596][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.228602][ T3268] Cannot create hsr debugfs directory [ 30.258909][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.265878][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.293127][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.310113][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.318646][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.351189][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.421635][ T3262] hsr_slave_0: entered promiscuous mode [ 30.427909][ T3262] hsr_slave_1: entered promiscuous mode [ 30.433878][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.441457][ T3262] Cannot create hsr debugfs directory [ 30.514547][ T3273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.537195][ T3273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.557202][ T3273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.579370][ T3273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.623848][ T3268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.633011][ T3268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.642675][ T3268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.657458][ T3268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.685442][ T3263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.702071][ T3263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.711212][ T3263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.720599][ T3263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.754062][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.764622][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.773825][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.785066][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.797498][ T3262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.811955][ T3262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.820787][ T3262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.830024][ T3262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.851026][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.887815][ T3273] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.933496][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.940769][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.949849][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.957784][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.978594][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.998701][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.017316][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.042598][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.049876][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.060735][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.070283][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.095157][ T3273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.130826][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.148568][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.158923][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.184059][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.198373][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.205477][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.219159][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.232649][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.239804][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.250135][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.257298][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.275887][ T3273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.286139][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.294135][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.306782][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.316715][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.329848][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.339212][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.346375][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.388788][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.426249][ T3262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.537557][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.561350][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.581336][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.611941][ T3268] veth0_vlan: entered promiscuous mode [ 31.629389][ T3273] veth0_vlan: entered promiscuous mode [ 31.649203][ T3268] veth1_vlan: entered promiscuous mode [ 31.669604][ T3273] veth1_vlan: entered promiscuous mode [ 31.690065][ T3268] veth0_macvtap: entered promiscuous mode [ 31.698982][ T3268] veth1_macvtap: entered promiscuous mode [ 31.713119][ T3273] veth0_macvtap: entered promiscuous mode [ 31.724841][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.735472][ T3273] veth1_macvtap: entered promiscuous mode [ 31.748091][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.758665][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.770477][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.789356][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.802379][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.812969][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.823601][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.834875][ T3263] veth0_vlan: entered promiscuous mode [ 31.842154][ T3268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.851022][ T3268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860115][ T3268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.868835][ T3268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.889155][ T3262] veth0_vlan: entered promiscuous mode [ 31.897632][ T3263] veth1_vlan: entered promiscuous mode [ 31.904699][ T3273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.913612][ T3273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.923149][ T3273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.932909][ T3273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949965][ T3265] veth0_vlan: entered promiscuous mode [ 31.960042][ T3262] veth1_vlan: entered promiscuous mode [ 31.973176][ T3265] veth1_vlan: entered promiscuous mode [ 31.999851][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.999869][ T29] audit: type=1400 audit(1726935655.522:110): avc: denied { mounton } for pid=3268 comm="syz-executor" path="/root/syzkaller.yWxqMz/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.030507][ T29] audit: type=1400 audit(1726935655.522:111): avc: denied { mount } for pid=3268 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.052758][ T29] audit: type=1400 audit(1726935655.522:112): avc: denied { mounton } for pid=3268 comm="syz-executor" path="/root/syzkaller.yWxqMz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.078189][ T29] audit: type=1400 audit(1726935655.522:113): avc: denied { mount } for pid=3268 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.100520][ T29] audit: type=1400 audit(1726935655.522:114): avc: denied { unmount } for pid=3268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.131273][ T29] audit: type=1400 audit(1726935655.552:115): avc: denied { mounton } for pid=3268 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.160336][ T3265] veth0_macvtap: entered promiscuous mode [ 32.169667][ T3268] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.177772][ T3265] veth1_macvtap: entered promiscuous mode [ 32.210637][ T3263] veth0_macvtap: entered promiscuous mode [ 32.218382][ T29] audit: type=1400 audit(1726935655.742:116): avc: denied { read write } for pid=3268 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.225023][ T3263] veth1_macvtap: entered promiscuous mode [ 32.257254][ T29] audit: type=1400 audit(1726935655.772:117): avc: denied { open } for pid=3268 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.259322][ T3262] veth0_macvtap: entered promiscuous mode [ 32.281440][ T29] audit: type=1400 audit(1726935655.772:118): avc: denied { ioctl } for pid=3268 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.323284][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.334197][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.342308][ T29] audit: type=1400 audit(1726935655.812:119): avc: denied { write } for pid=3401 comm="syz.3.4" name="route" dev="proc" ino=4026532611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.344600][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.378866][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.390074][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.404280][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.415102][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.425698][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.436181][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.446318][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.457493][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.469989][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.481635][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.492337][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.502273][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.513733][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.531781][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.558040][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.569237][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.580629][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.593197][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.603121][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.613564][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.641912][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.650336][ T3262] veth1_macvtap: entered promiscuous mode [ 32.668307][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.677343][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.686191][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.695134][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.742435][ T3263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.751446][ T3263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.760356][ T3263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.769469][ T3263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.801195][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.812378][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.822639][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.833252][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.844407][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.859219][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.870587][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.884291][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.907579][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.945504][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.956230][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.966103][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.976675][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.987085][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.999298][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.010366][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.021101][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.036210][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.045217][ T3262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.054021][ T3262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.062909][ T3262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.071712][ T3262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290154][ T3457] capability: warning: `syz.1.23' uses 32-bit capabilities (legacy support in use) [ 34.029906][ T3513] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3513 comm=syz.2.49 [ 34.074353][ T3516] loop4: detected capacity change from 0 to 512 [ 34.107856][ T3516] EXT4-fs: Ignoring removed oldalloc option [ 34.142165][ T3519] loop1: detected capacity change from 0 to 1024 [ 34.191008][ T3516] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.50: Parent and EA inode have the same ino 15 [ 34.208513][ T3519] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.220433][ T3520] loop2: detected capacity change from 0 to 4096 [ 34.260085][ T3520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.308078][ T3516] EXT4-fs (loop4): Remounting filesystem read-only [ 34.316296][ T3516] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.330130][ T3516] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 34.345682][ T3519] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 34.355006][ T3530] loop0: detected capacity change from 0 to 512 [ 34.365283][ T3519] EXT4-fs (loop1): too many log groups per flexible block group [ 34.373081][ T3519] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 34.391259][ T3530] EXT4-fs: Ignoring removed nobh option [ 34.411814][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.428427][ T3530] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 34.440733][ T3519] EXT4-fs (loop1): mount failed [ 34.447059][ T3516] EXT4-fs (loop4): 1 orphan inode deleted [ 34.453274][ T3516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.468049][ T3530] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #13: comm syz.0.54: casefold flag without casefold feature [ 34.482042][ T3516] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 34.521729][ T3530] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.54: couldn't read orphan inode 13 (err -117) [ 34.534133][ T3516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.548765][ T3530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.611756][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.677235][ T3543] can0: slcan on ttyS3. [ 34.776818][ T3542] can0 (unregistered): slcan off ttyS3. [ 35.232566][ T3589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.72'. [ 35.395639][ T3613] loop0: detected capacity change from 0 to 512 [ 35.435469][ T3613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.459848][ T3613] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.479042][ T3613] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.79: corrupted inode contents [ 35.522200][ T3613] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.79: mark_inode_dirty error [ 35.547892][ T3613] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.79: corrupted inode contents [ 35.604775][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.652356][ T3626] netlink: zone id is out of range [ 35.850470][ T3639] loop0: detected capacity change from 0 to 512 [ 35.880282][ T3639] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.87: invalid indirect mapped block 256 (level 2) [ 35.894993][ T3639] EXT4-fs (loop0): 2 truncates cleaned up [ 35.901611][ T3639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.935341][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.059668][ T3660] loop0: detected capacity change from 0 to 2048 [ 36.086300][ T3660] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 36.096233][ T3660] System zones: 0-7 [ 36.104611][ T3660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.126974][ T3660] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.143782][ T3674] loop2: detected capacity change from 0 to 1024 [ 36.156029][ T3660] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 3 with error 28 [ 36.171767][ T3660] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.171767][ T3660] [ 36.182916][ T3660] EXT4-fs (loop0): Total free blocks count 0 [ 36.189489][ T3660] EXT4-fs (loop0): Free/Dirty block details [ 36.193966][ T3674] EXT4-fs: dax option not supported [ 36.195463][ T3660] EXT4-fs (loop0): free_blocks=2415919104 [ 36.195485][ T3660] EXT4-fs (loop0): dirty_blocks=32 [ 36.212780][ T3660] EXT4-fs (loop0): Block reservation details [ 36.218845][ T3660] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 36.233864][ T3678] loop2: detected capacity change from 0 to 2048 [ 36.254231][ T3660] syz.0.95 (3660) used greatest stack depth: 9944 bytes left [ 36.263460][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.279155][ T3678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.293998][ T3678] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.337638][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.452596][ T3696] vhci_hcd: invalid port number 224 [ 36.554480][ T3713] syz.0.124[3713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.554617][ T3713] syz.0.124[3713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.556137][ T3714] loop2: detected capacity change from 0 to 512 [ 36.593674][ T3714] ======================================================= [ 36.593674][ T3714] WARNING: The mand mount option has been deprecated and [ 36.593674][ T3714] and is ignored by this kernel. Remove the mand [ 36.593674][ T3714] option from the mount to silence this warning. [ 36.593674][ T3714] ======================================================= [ 36.631722][ T3714] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.123: Invalid inode bitmap blk 4 in block_group 0 [ 36.645752][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.672723][ T3713] loop0: detected capacity change from 0 to 2048 [ 36.713166][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.756020][ T3713] Alternate GPT is invalid, using primary GPT. [ 36.762700][ T3713] loop0: p2 p3 p7 [ 36.847150][ T3253] udevd[3253]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 36.878151][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 36.889392][ T3745] loop4: detected capacity change from 0 to 128 [ 36.908387][ T3469] udevd[3469]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 36.927587][ T3745] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 37.000938][ T3762] loop1: detected capacity change from 0 to 512 [ 37.014181][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 37.014198][ T29] audit: type=1400 audit(1726935660.532:223): avc: denied { unmount } for pid=3273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.017175][ T3762] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.034268][ T3758] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.040391][ T3762] EXT4-fs (loop1): fragment/cluster size (8192) != block size (4096) [ 37.114509][ T3762] netlink: 'syz.1.146': attribute type 8 has an invalid length. [ 37.126900][ T3770] netlink: 72 bytes leftover after parsing attributes in process `syz.3.150'. [ 37.192442][ T3780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 37.230952][ T29] audit: type=1400 audit(1726935660.752:224): avc: denied { write } for pid=3783 comm="syz.4.156" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.258964][ T29] audit: type=1400 audit(1726935660.772:225): avc: denied { create } for pid=3785 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.278612][ T29] audit: type=1400 audit(1726935660.782:226): avc: denied { mounton } for pid=3788 comm="syz.1.158" path="/39/file0" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.302209][ T29] audit: type=1400 audit(1726935660.782:227): avc: denied { remount } for pid=3788 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.322908][ T29] audit: type=1400 audit(1726935660.792:228): avc: denied { unmount } for pid=3262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.341119][ T3793] loop4: detected capacity change from 0 to 512 [ 37.397514][ T29] audit: type=1326 audit(1726935660.922:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3798 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57abeadef9 code=0x7ffc0000 [ 37.425370][ T3803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 37.432964][ T29] audit: type=1326 audit(1726935660.942:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3798 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57abeadef9 code=0x7ffc0000 [ 37.457614][ T29] audit: type=1326 audit(1726935660.942:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3798 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f57abeadef9 code=0x7ffc0000 [ 37.481927][ T29] audit: type=1326 audit(1726935660.942:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3798 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57abeadef9 code=0x7ffc0000 [ 37.532301][ T3812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.169'. [ 37.548297][ T3793] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 37.560919][ T3793] EXT4-fs (loop4): 1 truncate cleaned up [ 37.570336][ T3817] netlink: 56 bytes leftover after parsing attributes in process `syz.2.171'. [ 37.579772][ T3793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.625595][ T3793] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 37.644724][ T3828] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.673065][ T3273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.863923][ T3855] loop1: detected capacity change from 0 to 2048 [ 37.889970][ T3855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.963279][ T3877] capability: warning: `syz.2.199' uses deprecated v2 capabilities in a way that may be insecure [ 38.042547][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.424203][ T3947] netlink: 'syz.0.231': attribute type 28 has an invalid length. [ 38.665171][ T3965] loop2: detected capacity change from 0 to 512 [ 38.682477][ T3965] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.705216][ T3965] EXT4-fs (loop2): 1 truncate cleaned up [ 38.711710][ T3965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.742084][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.954039][ T3972] netlink: 276 bytes leftover after parsing attributes in process `syz.2.243'. [ 39.294367][ T4008] loop1: detected capacity change from 0 to 2048 [ 39.319927][ T4012] loop2: detected capacity change from 0 to 2048 [ 39.331519][ T4008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.364924][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.384018][ T4012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.413134][ T4021] usb usb8: usbfs: process 4021 (syz.4.266) did not claim interface 0 before use [ 39.451256][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.484388][ T4032] loop4: detected capacity change from 0 to 512 [ 39.505980][ T4032] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 39.521250][ T4032] System zones: 0-2, 18-18, 34-34 [ 39.540088][ T4032] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.271: bg 0: block 248: padding at end of block bitmap is not set [ 39.570669][ T4032] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.271: Failed to acquire dquot type 1 [ 39.611208][ T4032] EXT4-fs (loop4): 1 truncate cleaned up [ 39.633022][ T4052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.279'. [ 39.637698][ T4032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.654673][ T4032] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.690329][ T4032] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.271: path /50/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=2164260880, rec_len=231, size=4096 fake=0 [ 39.850780][ T4070] can0: slcan on ttyS3. [ 39.855138][ T4032] syz.4.271 (4032) used greatest stack depth: 9376 bytes left [ 39.898196][ T3273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.917045][ T4070] can0 (unregistered): slcan off ttyS3. [ 40.003687][ T4092] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.291'. [ 40.058911][ T4081] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.291'. [ 40.210746][ T4127] can0: slcan on ttyS3. [ 40.286918][ T4127] can0 (unregistered): slcan off ttyS3. [ 40.335701][ T4146] loop3: detected capacity change from 0 to 164 [ 40.371535][ T4146] ISOFS: unable to read i-node block [ 40.377728][ T4153] mmap: syz.2.315 (4153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.502330][ T4167] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 40.577954][ T4173] can0: slcan on ttyS3. [ 40.624353][ T3754] ================================================================== [ 40.632535][ T3754] BUG: KCSAN: data-race in generic_fillattr / inode_set_ctime_current [ 40.640744][ T3754] [ 40.643091][ T3754] write to 0xffff8881040309b0 of 4 bytes by task 3253 on cpu 1: [ 40.650745][ T3754] inode_set_ctime_current+0x35/0x50 [ 40.656152][ T3754] shmem_mknod+0x117/0x180 [ 40.660615][ T3754] shmem_create+0x34/0x40 [ 40.664978][ T3754] path_openat+0xe92/0x1fa0 [ 40.669501][ T3754] do_filp_open+0xf7/0x200 [ 40.673936][ T3754] do_sys_openat2+0xab/0x120 [ 40.678542][ T3754] __x64_sys_openat+0xf3/0x120 [ 40.683336][ T3754] x64_sys_call+0x1025/0x2d60 [ 40.688226][ T3754] do_syscall_64+0xc9/0x1c0 [ 40.692862][ T3754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.699433][ T3754] [ 40.701800][ T3754] read to 0xffff8881040309b0 of 4 bytes by task 3754 on cpu 0: [ 40.711205][ T3754] generic_fillattr+0x1dd/0x2f0 [ 40.717085][ T3754] shmem_getattr+0x17b/0x200 [ 40.721705][ T3754] vfs_getattr+0x19b/0x1e0 [ 40.726494][ T3754] vfs_statx+0x134/0x2f0 [ 40.730871][ T3754] vfs_fstatat+0xec/0x110 [ 40.735346][ T3754] __se_sys_newfstatat+0x58/0x260 [ 40.741114][ T3754] __x64_sys_newfstatat+0x55/0x70 [ 40.746609][ T3754] x64_sys_call+0x141f/0x2d60 [ 40.751815][ T3754] do_syscall_64+0xc9/0x1c0 [ 40.756338][ T3754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.762357][ T3754] [ 40.764691][ T3754] value changed: 0x06b7e6fd -> 0x0881aa7e [ 40.771204][ T3754] [ 40.773527][ T3754] Reported by Kernel Concurrency Sanitizer on: [ 40.779778][ T3754] CPU: 0 UID: 0 PID: 3754 Comm: udevd Not tainted 6.11.0-syzkaller-07983-g7856a565416e #0 [ 40.789679][ T3754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 40.799738][ T3754] ================================================================== [ 40.816930][ T4173] can0 (unregistered): slcan off ttyS3.