last executing test programs: 2.294054683s ago: executing program 0 (id=250): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x15c, &(0x7f0000000340)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000180)=0x400) 1.482164143s ago: executing program 0 (id=273): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.048061384s ago: executing program 4 (id=289): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000400)=0x4, 0x4) 1.020864545s ago: executing program 4 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000048c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.007744685s ago: executing program 2 (id=291): r0 = epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0xa0000009}) ppoll(&(0x7f0000000000)=[{r0, 0xd408}, {r1, 0x2003}], 0x2, 0x0, 0x0, 0x0) 958.079296ms ago: executing program 4 (id=292): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setpgid(r0, r0) waitid(0x2, r0, 0x0, 0x4, 0x0) 866.712729ms ago: executing program 1 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/29, 0x1d) 841.769719ms ago: executing program 1 (id=296): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x3, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000280)=""/135, 0x87) 806.48432ms ago: executing program 2 (id=297): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getegid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) 776.321071ms ago: executing program 1 (id=298): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0xb, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 763.573931ms ago: executing program 4 (id=299): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00f8403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a7364664b62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1cde2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3000000f9ffffffffffffff000000"], 0x9, 0x242, &(0x7f00000008c0)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="747275738b65642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) 758.422281ms ago: executing program 2 (id=300): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x100002, 0x20000}, 0x112065, 0x0, 0x4, 0x3, 0x7, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000030d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 699.149063ms ago: executing program 1 (id=302): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(camellia)\x00'}, 0x80, "1a000b000000366a6a849a7390450024"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) 621.443525ms ago: executing program 4 (id=303): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 608.873445ms ago: executing program 0 (id=304): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000001500)=""/229, &(0x7f0000000000)=0xe5) 582.265066ms ago: executing program 3 (id=305): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x24004840) 560.432637ms ago: executing program 0 (id=306): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x1, 0x4) 357.469411ms ago: executing program 0 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0xf}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x2, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 301.956773ms ago: executing program 1 (id=308): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 299.171713ms ago: executing program 3 (id=309): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 266.534874ms ago: executing program 3 (id=310): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x10) 235.560445ms ago: executing program 3 (id=311): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000003c0)=""/27, 0x1b}, {0x0}], 0x2}, 0x4}], 0x2, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 232.338525ms ago: executing program 0 (id=312): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x3) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x10c98, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 207.409495ms ago: executing program 4 (id=313): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x135, 0x6, 0x5, 0x9, 0xd582343, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@nolazytime}, {@lazytime}, {@nodiscard}, {@inlinecrypt}, {@noblock_validity}, {@debug}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0xd}}, {@norecovery}]}, 0x1, 0x477, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000400)='./file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 182.424466ms ago: executing program 2 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="ac01028038000100240001006e6f746966795f70656572735f636f756e740010000000000000000000000000050003004300000008"], 0x1c8}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) 143.452577ms ago: executing program 2 (id=315): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESHEX, @ANYRESDEC], 0x8b) 106.455528ms ago: executing program 2 (id=316): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x505, &(0x7f0000001f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) 42.216109ms ago: executing program 1 (id=317): r0 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x728, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x4}, 0xa080, 0x1224, 0x0, 0x8, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) 736.45µs ago: executing program 3 (id=318): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000004c0)={r2}, &(0x7f0000000580)=0x8) 0s ago: executing program 3 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}}, 0x8044) kernel console output (not intermixed with test programs): [ 24.696728][ T28] audit: type=1400 audit(1784953491.161:103): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.718855][ T28] audit: type=1400 audit(1784953491.161:104): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 30.860161][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 30.860180][ T28] audit: type=1400 audit(1784953497.331:126): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.889682][ T28] audit: type=1400 audit(1784953497.361:127): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.892110][ T3283] cgroup: Unknown subsys name 'net' [ 30.917527][ T28] audit: type=1400 audit(1784953497.391:128): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.049743][ T3283] cgroup: Unknown subsys name 'cpuset' [ 31.055986][ T3283] cgroup: Unknown subsys name 'rlimit' [ 31.148533][ T28] audit: type=1400 audit(1784953497.611:129): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.184812][ T28] audit: type=1400 audit(1784953497.621:130): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.205439][ T28] audit: type=1400 audit(1784953497.621:131): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.226077][ T28] audit: type=1400 audit(1784953497.621:132): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.246308][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.246804][ T28] audit: type=1400 audit(1784953497.631:133): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.280015][ T28] audit: type=1400 audit(1784953497.631:134): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.303590][ T28] audit: type=1400 audit(1784953497.641:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.333222][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.204853][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.212015][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.219293][ T3296] bridge_slave_0: entered allmulticast mode [ 33.225833][ T3296] bridge_slave_0: entered promiscuous mode [ 33.254087][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.261365][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.268556][ T3296] bridge_slave_1: entered allmulticast mode [ 33.275055][ T3296] bridge_slave_1: entered promiscuous mode [ 33.325382][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.339846][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.346937][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.354195][ T3301] bridge_slave_0: entered allmulticast mode [ 33.360715][ T3301] bridge_slave_0: entered promiscuous mode [ 33.370840][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.387591][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.394821][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.402005][ T3301] bridge_slave_1: entered allmulticast mode [ 33.408392][ T3301] bridge_slave_1: entered promiscuous mode [ 33.443198][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.450310][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.457486][ T3300] bridge_slave_0: entered allmulticast mode [ 33.464065][ T3300] bridge_slave_0: entered promiscuous mode [ 33.485441][ T3296] team0: Port device team_slave_0 added [ 33.491225][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.498289][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.505540][ T3300] bridge_slave_1: entered allmulticast mode [ 33.512019][ T3300] bridge_slave_1: entered promiscuous mode [ 33.518577][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.525821][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.533154][ T3302] bridge_slave_0: entered allmulticast mode [ 33.539610][ T3302] bridge_slave_0: entered promiscuous mode [ 33.547223][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.562265][ T3296] team0: Port device team_slave_1 added [ 33.572665][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.579808][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.587087][ T3302] bridge_slave_1: entered allmulticast mode [ 33.593565][ T3302] bridge_slave_1: entered promiscuous mode [ 33.601117][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.615308][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.622454][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.629595][ T3297] bridge_slave_0: entered allmulticast mode [ 33.636207][ T3297] bridge_slave_0: entered promiscuous mode [ 33.662215][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.669357][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.676464][ T3297] bridge_slave_1: entered allmulticast mode [ 33.683027][ T3297] bridge_slave_1: entered promiscuous mode [ 33.695676][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.710772][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.720682][ T3301] team0: Port device team_slave_0 added [ 33.731409][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.738416][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.764385][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.776506][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.786752][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.801595][ T3301] team0: Port device team_slave_1 added [ 33.812884][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.820014][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.845989][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.872836][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.885711][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.900615][ T3300] team0: Port device team_slave_0 added [ 33.912310][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.919449][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.945426][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.961731][ T3302] team0: Port device team_slave_0 added [ 33.968377][ T3302] team0: Port device team_slave_1 added [ 33.974765][ T3300] team0: Port device team_slave_1 added [ 33.990990][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.998024][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.024073][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.049938][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.056933][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.083030][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.097380][ T3297] team0: Port device team_slave_0 added [ 34.118760][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.125736][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.151752][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.166646][ T3297] team0: Port device team_slave_1 added [ 34.177354][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.184365][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.210392][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.223726][ T3296] hsr_slave_0: entered promiscuous mode [ 34.229916][ T3296] hsr_slave_1: entered promiscuous mode [ 34.248529][ T3301] hsr_slave_0: entered promiscuous mode [ 34.254683][ T3301] hsr_slave_1: entered promiscuous mode [ 34.260648][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.266376][ T3301] Cannot create hsr debugfs directory [ 34.276788][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.283909][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.309879][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.334781][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.341785][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.367890][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.393790][ T3300] hsr_slave_0: entered promiscuous mode [ 34.400165][ T3300] hsr_slave_1: entered promiscuous mode [ 34.406177][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 34.411990][ T3300] Cannot create hsr debugfs directory [ 34.417873][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.424878][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.450840][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.487186][ T3302] hsr_slave_0: entered promiscuous mode [ 34.493309][ T3302] hsr_slave_1: entered promiscuous mode [ 34.499141][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.504879][ T3302] Cannot create hsr debugfs directory [ 34.560206][ T3297] hsr_slave_0: entered promiscuous mode [ 34.566423][ T3297] hsr_slave_1: entered promiscuous mode [ 34.572455][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 34.578210][ T3297] Cannot create hsr debugfs directory [ 34.746188][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.754986][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.762982][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.771655][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.779250][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.788039][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.800852][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.809537][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.828455][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.836779][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.844714][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.853608][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.861553][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.870843][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.878545][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.887414][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.916972][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.926159][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.938017][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.946931][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.954893][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.964299][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.972425][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.980988][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.019540][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.028069][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.035651][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.044445][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.052279][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.060889][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.068736][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.077645][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.120790][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.129606][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.138722][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.147747][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.156971][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.166506][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.175529][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.193661][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.202530][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.215034][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.234189][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.241371][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.250002][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.257081][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.278657][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.294100][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.316444][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.333702][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.340794][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.366206][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.375341][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.392801][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.400029][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.411187][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.418361][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.427055][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.434116][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.462897][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.477288][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.484418][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.493335][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.500457][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.516373][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.556611][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.567168][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.574273][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.606083][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.613289][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.668381][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.760988][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.863462][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.883975][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.922619][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.950929][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.984330][ T3296] veth0_vlan: entered promiscuous mode [ 36.009959][ T3296] veth1_vlan: entered promiscuous mode [ 36.057824][ T3296] veth0_macvtap: entered promiscuous mode [ 36.081973][ T3296] veth1_macvtap: entered promiscuous mode [ 36.098657][ T3301] veth0_vlan: entered promiscuous mode [ 36.114878][ T3297] veth0_vlan: entered promiscuous mode [ 36.129557][ T3301] veth1_vlan: entered promiscuous mode [ 36.140879][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.149463][ T3302] veth0_vlan: entered promiscuous mode [ 36.160568][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.174371][ T3302] veth1_vlan: entered promiscuous mode [ 36.180669][ T311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.189700][ T311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.200152][ T3297] veth1_vlan: entered promiscuous mode [ 36.212157][ T311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.221089][ T311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.258957][ T3302] veth0_macvtap: entered promiscuous mode [ 36.271178][ T3297] veth0_macvtap: entered promiscuous mode [ 36.278192][ T3301] veth0_macvtap: entered promiscuous mode [ 36.286159][ T3301] veth1_macvtap: entered promiscuous mode [ 36.293611][ T3302] veth1_macvtap: entered promiscuous mode [ 36.304660][ T3297] veth1_macvtap: entered promiscuous mode [ 36.320984][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 36.320999][ T28] audit: type=1400 audit(1784953502.781:146): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.aBat68/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.335033][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.362190][ T28] audit: type=1400 audit(1784953502.791:147): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.384802][ T28] audit: type=1400 audit(1784953502.831:148): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.aBat68/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.411349][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.419720][ T28] audit: type=1400 audit(1784953502.831:149): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.425533][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.452936][ T28] audit: type=1400 audit(1784953502.831:150): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.aBat68/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.454971][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.481785][ T28] audit: type=1400 audit(1784953502.831:151): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.aBat68/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.497436][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.523616][ T28] audit: type=1400 audit(1784953502.841:152): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.549525][ T28] audit: type=1400 audit(1784953502.851:153): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.552569][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.575623][ T28] audit: type=1400 audit(1784953502.861:154): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="gadgetfs" ino=4656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.613457][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.618581][ T28] audit: type=1400 audit(1784953503.081:155): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.645038][ T311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.654692][ T311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.677664][ T311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.686745][ T311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.708420][ T3503] loop3: detected capacity change from 0 to 128 [ 36.717334][ T311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.719210][ T3503] ======================================================= [ 36.719210][ T3503] WARNING: The mand mount option has been deprecated and [ 36.719210][ T3503] and is ignored by this kernel. Remove the mand [ 36.719210][ T3503] option from the mount to silence this warning. [ 36.719210][ T3503] ======================================================= [ 36.761496][ T311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.770354][ T3503] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.776204][ T3300] veth0_vlan: entered promiscuous mode [ 36.784691][ T3503] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.803281][ T311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.812748][ T311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.833987][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.839545][ T311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.852470][ T311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.882996][ T311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.900967][ T311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.917635][ T3300] veth1_vlan: entered promiscuous mode [ 36.969551][ T3300] veth0_macvtap: entered promiscuous mode [ 36.995328][ T3514] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 36.995731][ T3300] veth1_macvtap: entered promiscuous mode [ 37.048768][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.070958][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.085555][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.102744][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.143124][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.154134][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.211132][ T3527] netlink: 176 bytes leftover after parsing attributes in process `syz.0.12'. [ 37.332968][ T3541] loop4: detected capacity change from 0 to 512 [ 37.351070][ T3541] EXT4-fs: Ignoring removed oldalloc option [ 37.370622][ T3541] EXT4-fs (loop4): 1 truncate cleaned up [ 37.381523][ T3541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.408013][ T3541] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.18: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 37.432285][ T3541] EXT4-fs (loop4): Remounting filesystem read-only [ 37.492473][ T3550] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 37.517587][ T3554] loop3: detected capacity change from 0 to 1024 [ 37.541097][ T3554] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.548117][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.549791][ T3554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.603968][ T3554] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.633961][ T3554] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.22: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 37.665832][ T3554] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.667338][ T3554] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.22: couldn't read orphan inode 11 (err -117) [ 37.676534][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 37.676551][ C1] EXT4-fs (loop3): initial error at time 1784953504: ext4_ext_check_inode:521: inode 11 [ 37.676579][ C1] EXT4-fs (loop3): last error at time 1784953504: ext4_ext_check_inode:521: inode 11 [ 37.714799][ T3554] loop3: lost filesystem error report for type 5 error -117 [ 37.716996][ T3554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.765945][ T3554] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.22: Invalid block bitmap block 0 in block_group 0 [ 37.830530][ T3554] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.22: Failed to acquire dquot type 0 [ 37.886556][ T3572] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.22: Invalid inode bitmap blk 137438953472 in block_group 0 [ 37.943345][ T3554] syz.3.22 (3554) used greatest stack depth: 10240 bytes left [ 37.996259][ T311] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm kworker/u8:5: Invalid inode table block 8589934593 in block_group 0 [ 38.031385][ T3577] capability: warning: `syz.0.33' uses 32-bit capabilities (legacy support in use) [ 38.071475][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.129041][ T3589] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 38.153980][ T3589] netlink: 'syz.3.31': attribute type 2 has an invalid length. [ 38.435523][ T3621] loop3: detected capacity change from 0 to 1024 [ 38.464872][ T3621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.505078][ T3628] netlink: 25 bytes leftover after parsing attributes in process `syz.1.54'. [ 38.542440][ T3621] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.607438][ T3621] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm syz.3.51: lblock 8 mapped to illegal pblock 8 (length 8) [ 38.668517][ T3621] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.51: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 38.690393][ T3634] capability: warning: `syz.4.57' uses deprecated v2 capabilities in a way that may be insecure [ 39.330394][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.865135][ T3685] loop4: detected capacity change from 0 to 512 [ 39.890785][ T3685] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.78: Failed to acquire dquot type 1 [ 39.902292][ T3685] loop4: lost filesystem error report for type 5 error -117 [ 39.902514][ T3685] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.78: Failed to acquire dquot type 1 [ 39.909858][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 39.909888][ C0] EXT4-fs (loop4): last error at time 1784953506: ext4_acquire_dquot:7041 [ 39.936028][ T3685] loop4: lost filesystem error report for type 5 error -117 [ 39.936466][ T3685] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.78: bg 0: block 248: padding at end of block bitmap is not set [ 39.957976][ T3685] loop4: lost filesystem error report for type 5 error -117 [ 39.958244][ T3685] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 39.974961][ T3685] loop4: lost filesystem error report for type 5 error -117 [ 39.975283][ T3685] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.78: Failed to acquire dquot type 1 [ 39.994173][ T3685] loop4: lost filesystem error report for type 5 error -117 [ 39.994430][ T3685] EXT4-fs (loop4): 1 orphan inode deleted [ 40.007969][ T3685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.020608][ T3685] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.035428][ T3685] EXT4-fs (loop4): shut down requested (2) [ 40.320119][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.464981][ T3702] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 40.513802][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 40.573861][ T3714] loop2: detected capacity change from 0 to 512 [ 40.598500][ T3714] ------------[ cut here ]------------ [ 40.598842][ T3716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 40.604066][ T3714] EA inode 11 i_nlink=0 [ 40.604086][ T3714] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.2.91/3714 [ 40.627907][ T3714] Modules linked in: [ 40.632163][ T3714] CPU: 0 UID: 0 PID: 3714 Comm: syz.2.91 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.641418][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 40.651768][ T3714] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 40.658554][ T3714] Code: 56 c2 96 ff 49 8d 7e 40 4c 8d 2d bb a0 5a 05 e8 a6 a6 b5 ff 49 8b 6e 40 4c 89 e7 e8 da a1 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 d1 e9 d9 03 90 90 90 90 90 90 90 [ 40.678256][ T3714] RSP: 0018:ffffc90002b5f7f8 EFLAGS: 00010246 [ 40.684387][ T3714] RAX: ffff88810465f2b0 RBX: ffff888107251648 RCX: ffffffff81c29576 [ 40.692584][ T3714] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3620 [ 40.701120][ T3714] RBP: 000000000000000b R08: 00018881072515fb R09: 0000000000000000 [ 40.709557][ T3714] R10: ffffc90002b5f728 R11: 0001c90002b5f728 R12: ffff8881072515f8 [ 40.717585][ T3714] R13: ffffffff871d3620 R14: ffff8881072515b0 R15: 0000000000000001 [ 40.725672][ T3714] FS: 00007f1dfbab76c0(0000) GS:ffff8882ae8cc000(0000) knlGS:0000000000000000 [ 40.734739][ T3714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.741386][ T3714] CR2: 00007f1dfd10cc6b CR3: 000000011af18000 CR4: 00000000003506f0 [ 40.749437][ T3714] Call Trace: [ 40.752754][ T3714] [ 40.755719][ T3714] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 40.761707][ T3714] ext4_xattr_delete_inode+0x6b5/0x790 [ 40.767220][ T3714] ext4_evict_inode+0xb18/0xdf0 [ 40.772169][ T3714] ? __pfx_ext4_evict_inode+0x10/0x10 [ 40.777664][ T3714] evict+0x2a5/0x510 [ 40.782057][ T3714] iput+0x430/0x5a0 [ 40.786406][ T3714] ext4_process_orphan+0x1a4/0x1c0 [ 40.791640][ T3714] ext4_orphan_cleanup+0x6a6/0xa10 [ 40.796864][ T3714] ? ext4_register_li_request+0x14c/0x440 [ 40.802727][ T3714] ext4_fill_super+0x33ab/0x3760 [ 40.807723][ T3714] ? set_blocksize+0x14c/0x270 [ 40.812691][ T3714] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.818045][ T3714] get_tree_bdev_flags+0x291/0x300 [ 40.823280][ T3714] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.828640][ T3714] get_tree_bdev+0x1f/0x30 [ 40.833118][ T3714] ext4_get_tree+0x1c/0x30 [ 40.837602][ T3714] vfs_get_tree+0x57/0x1d0 [ 40.842196][ T3714] do_new_mount+0x288/0x8d0 [ 40.846950][ T3714] path_mount+0x4ad/0xb90 [ 40.851375][ T3714] __se_sys_mount+0x28c/0x2e0 [ 40.856127][ T3714] __x64_sys_mount+0x67/0x80 [ 40.864042][ T3714] x64_sys_call+0x2d61/0x3020 [ 40.868813][ T3714] do_syscall_64+0x136/0x3c0 [ 40.873824][ T3714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.879790][ T3714] RIP: 0033:0x7f1dfd05f10a [ 40.884237][ T3714] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.903994][ T3714] RSP: 002b:00007f1dfbab6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.912721][ T3714] RAX: ffffffffffffffda RBX: 00007f1dfbab6ee0 RCX: 00007f1dfd05f10a [ 40.920822][ T3714] RDX: 0000200000000180 RSI: 00002000000003c0 RDI: 00007f1dfbab6ea0 [ 40.928829][ T3714] RBP: 0000200000000180 R08: 00007f1dfbab6ee0 R09: 0000000000800700 [ 40.936885][ T3714] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000003c0 [ 40.941036][ T3721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 40.946190][ T3714] R13: 00007f1dfbab6ea0 R14: 0000000000000470 R15: 000000000000002c [ 40.962032][ T3714] [ 40.965075][ T3714] ---[ end trace 0000000000000000 ]--- [ 40.977254][ T3727] loop3: detected capacity change from 0 to 512 [ 40.983763][ T3714] EXT4-fs (loop2): 1 orphan inode deleted [ 40.990082][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.017012][ T3729] vxcan1: tx drop: invalid da for name 0x0000000000000015 [ 41.040907][ T3714] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.91: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 41.094378][ T3714] EXT4-fs (loop2): Remounting filesystem read-only [ 41.136596][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.166363][ T3740] loop4: detected capacity change from 0 to 164 [ 41.338007][ T28] kauditd_printk_skb: 358 callbacks suppressed [ 41.338027][ T28] audit: type=1400 audit(1784953507.801:506): avc: denied { mmap_zero } for pid=3756 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 41.347861][ T3761] netlink: 9 bytes leftover after parsing attributes in process `syz.2.111'. [ 41.410929][ T3761] netlink: 9 bytes leftover after parsing attributes in process `syz.2.111'. [ 41.455931][ T28] audit: type=1400 audit(1784953507.921:507): avc: denied { setopt } for pid=3764 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.524483][ T3769] loop3: detected capacity change from 0 to 512 [ 41.543108][ T3769] EXT4-fs: Ignoring removed orlov option [ 41.561660][ T3769] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.582803][ T3769] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.116: corrupted in-inode xattr: e_value size too large [ 41.601810][ T3769] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.606097][ T3769] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.116: couldn't read orphan inode 15 (err -117) [ 41.615418][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 41.615434][ C1] EXT4-fs (loop3): initial error at time 1784953508: ext4_iget_extra_inode:5180: inode 15 [ 41.615471][ C1] EXT4-fs (loop3): last error at time 1784953508: ext4_iget_extra_inode:5180: inode 15 [ 41.653645][ T3769] loop3: lost filesystem error report for type 5 error -117 [ 41.655268][ T3769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.714079][ T28] audit: type=1400 audit(1784953508.181:508): avc: denied { getopt } for pid=3776 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.752461][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.788787][ T28] audit: type=1400 audit(1784953508.241:509): avc: denied { shutdown } for pid=3776 comm="syz.2.119" laddr=fe80::14 lport=52466 faddr=fe80::40 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.879136][ T28] audit: type=1400 audit(1784953508.351:510): avc: denied { name_connect } for pid=3785 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 41.941264][ T28] audit: type=1400 audit(1784953508.411:511): avc: denied { read } for pid=3791 comm="syz.4.125" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.965768][ T28] audit: type=1400 audit(1784953508.411:512): avc: denied { open } for pid=3791 comm="syz.4.125" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.017733][ T3796] loop2: detected capacity change from 0 to 512 [ 42.050293][ T3796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.090664][ T3796] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.169892][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.192130][ T28] audit: type=1400 audit(1784953508.661:513): avc: denied { read write } for pid=3791 comm="syz.4.125" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.217962][ T28] audit: type=1400 audit(1784953508.661:514): avc: denied { open } for pid=3791 comm="syz.4.125" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.243819][ T28] audit: type=1400 audit(1784953508.661:515): avc: denied { ioctl } for pid=3791 comm="syz.4.125" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.291415][ T3809] Zero length message leads to an empty skb [ 42.354348][ T3819] netlink: 176 bytes leftover after parsing attributes in process `syz.3.138'. [ 42.374307][ T3819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 42.546155][ T3826] bond1: Removing last ns target with arp_interval on [ 42.642867][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.741602][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.827386][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.905116][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 42.922650][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.069579][ T12] bridge_slave_1: left promiscuous mode [ 43.076131][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.113708][ T12] bridge_slave_0: left allmulticast mode [ 43.125003][ T12] bridge_slave_0: left promiscuous mode [ 43.136151][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.273872][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.300009][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.309507][ T3862] loop2: detected capacity change from 0 to 512 [ 43.320092][ T12] bond0 (unregistering): Released all slaves [ 43.357014][ T3862] EXT4-fs: inline encryption not supported [ 43.364419][ T3862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.384102][ T3862] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 43.421708][ T12] hsr_slave_0: left promiscuous mode [ 43.428968][ T12] hsr_slave_1: left promiscuous mode [ 43.436433][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.458584][ T3862] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -ENXIO [ 43.460677][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.509211][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.516821][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.545323][ T12] veth1_macvtap: left promiscuous mode [ 43.558106][ T12] veth0_macvtap: left promiscuous mode [ 43.579931][ T12] veth1_vlan: left promiscuous mode [ 43.592209][ T3872] loop2: detected capacity change from 0 to 1024 [ 43.594009][ T12] veth0_vlan: left promiscuous mode [ 43.616755][ T3872] EXT4-fs: Ignoring removed bh option [ 43.641935][ T3872] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 43.676575][ T3872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.753536][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.801414][ T12] team0 (unregistering): Port device team_slave_1 removed [ 43.836839][ T12] team0 (unregistering): Port device team_slave_0 removed [ 44.142408][ T3902] tun0: tun_chr_ioctl cmd 2147767511 [ 44.284495][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.325929][ T3841] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.359191][ T3841] bridge_slave_0: entered allmulticast mode [ 44.383961][ T3841] bridge_slave_0: entered promiscuous mode [ 44.411337][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 44.419394][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.442530][ T3841] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.462646][ T3841] bridge_slave_1: entered allmulticast mode [ 44.474456][ T3841] bridge_slave_1: entered promiscuous mode [ 44.536528][ T3841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.551926][ T3931] loop4: detected capacity change from 0 to 256 [ 44.566601][ T3841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.642915][ T3841] team0: Port device team_slave_0 added [ 44.651027][ T3841] team0: Port device team_slave_1 added [ 44.697310][ T3943] loop4: detected capacity change from 0 to 512 [ 44.708441][ T3841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.730223][ T3841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.760854][ T3943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.780157][ T3943] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.796904][ T3841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.824444][ T3841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.840453][ T3841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.892680][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.913811][ T3841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.948147][ T3956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.178'. [ 44.979491][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 45.060941][ T3841] hsr_slave_0: entered promiscuous mode [ 45.074548][ T3841] hsr_slave_1: entered promiscuous mode [ 45.092228][ T3841] debugfs: 'hsr0' already exists in 'hsr' [ 45.111729][ T3841] Cannot create hsr debugfs directory [ 45.120502][ T3966] program syz.2.182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.470624][ T3996] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.565425][ T3841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.573851][ T4009] netlink: 'syz.0.194': attribute type 3 has an invalid length. [ 45.585108][ T3841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.600080][ T4009] netlink: 72 bytes leftover after parsing attributes in process `syz.0.194'. [ 45.604481][ T3841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.631986][ T3841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.640128][ T3841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.649606][ T3841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.668960][ T3841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.684346][ T3841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.694812][ T4017] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 45.694812][ T4017] program syz.0.197 not setting count and/or reply_len properly [ 45.774377][ T3841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.798196][ T3841] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.812896][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.820027][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.833006][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.840148][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.064614][ T3841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.181070][ T3841] veth0_vlan: entered promiscuous mode [ 46.196243][ T3841] veth1_vlan: entered promiscuous mode [ 46.234132][ T3841] veth0_macvtap: entered promiscuous mode [ 46.245169][ T3841] veth1_macvtap: entered promiscuous mode [ 46.256958][ T3841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.268527][ T3841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.285989][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.295426][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.311208][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.321137][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.396014][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 46.396034][ T28] audit: type=1400 audit(1784953512.861:572): avc: denied { create } for pid=4090 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 46.437052][ T28] audit: type=1400 audit(1784953512.901:573): avc: denied { sys_admin } for pid=4090 comm="syz.2.202" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 46.458321][ T28] audit: type=1400 audit(1784953512.901:574): avc: denied { name_bind } for pid=4094 comm="syz.1.204" src=24100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.519226][ T28] audit: type=1400 audit(1784953512.901:575): avc: denied { node_bind } for pid=4094 comm="syz.1.204" saddr=172.20.20.187 src=24100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.577526][ T28] audit: type=1400 audit(1784953513.041:576): avc: denied { read } for pid=4107 comm="syz.0.209" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.640037][ T28] audit: type=1400 audit(1784953513.041:577): avc: denied { open } for pid=4107 comm="syz.0.209" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.702619][ T28] audit: type=1400 audit(1784953513.081:578): avc: denied { ioctl } for pid=4107 comm="syz.0.209" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.737304][ T4118] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.212' sets config #0 [ 46.762256][ T28] audit: type=1400 audit(1784953513.221:579): avc: denied { mount } for pid=4119 comm="syz.1.215" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 49.642157][ T4127] process 'syz.1.218' launched '/dev/fd/4' with NULL argv: empty string added [ 49.644129][ T28] audit: type=1400 audit(1784953516.111:580): avc: denied { execute } for pid=4126 comm="syz.1.218" dev="tmpfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.678249][ T28] audit: type=1400 audit(1784953516.131:581): avc: denied { nosuid_transition } for pid=4126 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 50.266552][ T4167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 50.868211][ T4182] loop2: detected capacity change from 0 to 512 [ 50.898176][ T4182] EXT4-fs (loop2): 1 truncate cleaned up [ 50.910159][ T4182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.930634][ T4182] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.243: bg 0: block 465: padding at end of block bitmap is not set [ 50.952399][ T4182] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.965223][ T4182] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.965223][ T4182] [ 50.975528][ T4182] EXT4-fs (loop2): Total free blocks count 0 [ 50.982095][ T4182] EXT4-fs (loop2): Free/Dirty block details [ 51.003243][ T4182] EXT4-fs (loop2): free_blocks=0 [ 51.008300][ T4182] EXT4-fs (loop2): dirty_blocks=65 [ 51.013792][ T4182] EXT4-fs (loop2): Block reservation details [ 51.020392][ T4182] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 51.032714][ T4182] syz.2.243 (4182) used greatest stack depth: 10104 bytes left [ 51.073619][ T3301] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 51.089514][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.133022][ T4205] program syz.2.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.147263][ T4195] loop3: detected capacity change from 0 to 1024 [ 51.168762][ T4207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 51.177915][ T4207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 51.187375][ T4207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'. [ 51.201725][ T4195] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.232083][ T4209] loop2: detected capacity change from 0 to 512 [ 51.241226][ T4209] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 51.246558][ T4195] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.247: Invalid block bitmap block 0 in block_group 0 [ 51.265082][ T4195] loop3: lost filesystem error report for type 5 error -117 [ 51.267675][ T4195] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.247: Failed to acquire dquot type 0 [ 51.275662][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 51.275815][ C0] EXT4-fs (loop3): initial error at time 1784953517: ext4_read_block_bitmap_nowait:483 [ 51.275875][ C0] EXT4-fs (loop3): last error at time 1784953517: ext4_read_block_bitmap_nowait:483 [ 51.305574][ T4201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.315726][ T4195] loop3: lost filesystem error report for type 5 error -117 [ 51.325907][ T4201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.346070][ T4195] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.247: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.361410][ T4195] loop3: lost filesystem error report for type 5 error -117 [ 51.362908][ T4195] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.247: Invalid inode bitmap blk 0 in block_group 0 [ 51.383623][ T4195] loop3: lost filesystem error report for type 5 error -117 [ 51.383644][ T311] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 51.383676][ T311] loop3: lost filesystem error report for type 5 error -117 [ 51.403935][ T4195] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 51.420459][ T4195] loop3: lost filesystem error report for type 5 error -117 [ 51.421467][ T4195] EXT4-fs (loop3): 1 orphan inode deleted [ 51.477760][ T4195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.512216][ T4195] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.247: Invalid block bitmap block 0 in block_group 0 [ 51.536303][ T4195] syz.3.247 (4195) used greatest stack depth: 9440 bytes left [ 51.544731][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.580683][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 51.580701][ T28] audit: type=1400 audit(1784953518.051:596): avc: denied { mounton } for pid=4221 comm="syz.1.259" path="/" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 51.648156][ T28] audit: type=1400 audit(1784953518.111:597): avc: denied { write } for pid=4228 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.762471][ T28] audit: type=1400 audit(1784953518.231:598): avc: denied { bind } for pid=4240 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.820358][ T28] audit: type=1400 audit(1784953518.231:599): avc: denied { name_bind } for pid=4240 comm="syz.2.268" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 51.842397][ T28] audit: type=1400 audit(1784953518.231:600): avc: denied { node_bind } for pid=4240 comm="syz.2.268" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 51.935203][ T28] audit: type=1400 audit(1784953518.401:601): avc: denied { connect } for pid=4248 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.956128][ T4257] netlink: 'syz.3.274': attribute type 2 has an invalid length. [ 51.963855][ T4257] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 52.030636][ T4260] loop3: detected capacity change from 0 to 512 [ 52.066886][ T4260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.098962][ T28] audit: type=1400 audit(1784953518.561:602): avc: denied { setattr } for pid=4259 comm="syz.3.276" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.122009][ T28] audit: type=1400 audit(1784953518.591:603): avc: denied { remount } for pid=4259 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.142259][ T4260] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 52.165880][ T28] audit: type=1400 audit(1784953518.621:604): avc: denied { cpu } for pid=4269 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 52.199669][ T28] audit: type=1400 audit(1784953518.631:605): avc: denied { write } for pid=4259 comm="syz.3.276" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.231703][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.281277][ T4284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.288'. [ 52.303242][ T4284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.288'. [ 52.622925][ T4311] loop4: detected capacity change from 0 to 512 [ 52.647431][ T4315] loop3: detected capacity change from 0 to 512 [ 52.654657][ T4315] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.671266][ T4315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.687076][ T4315] EXT4-fs (loop3): 1 truncate cleaned up [ 52.697921][ T4315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.027383][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.085742][ T4348] loop1: detected capacity change from 0 to 128 [ 53.119314][ T4348] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.169944][ T4348] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.188871][ T4357] loop4: detected capacity change from 0 to 512 [ 53.196078][ T4359] netlink: 368 bytes leftover after parsing attributes in process `syz.2.314'. [ 53.215055][ T4357] EXT4-fs: inline encryption not supported [ 53.229284][ T4357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 53.242181][ T4357] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.313: corrupted in-inode xattr: e_value size too large [ 53.266195][ T4357] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.268909][ T4357] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.313: couldn't read orphan inode 15 (err -117) [ 53.268996][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 53.272555][ T3841] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.278212][ C0] EXT4-fs (loop4): initial error at time 1784953519: ext4_iget_extra_inode:5180: inode 15 [ 53.315417][ C0] EXT4-fs (loop4): last error at time 1784953519: ext4_iget_extra_inode:5180: inode 15 [ 53.327533][ T4357] loop4: lost filesystem error report for type 5 error -117 [ 53.332325][ T4357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.355779][ T4365] loop2: detected capacity change from 0 to 512 [ 53.373667][ T4369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 53.383405][ T4365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.391293][ T4369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 53.404999][ T3642] ================================================================== [ 53.413114][ T3642] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 53.420170][ T3642] [ 53.422521][ T3642] read-write to 0xffff888237c2a8e4 of 4 bytes by task 9 on cpu 0: [ 53.430325][ T3642] wq_worker_running+0x9b/0x120 [ 53.435190][ T3642] synchronize_rcu_expedited+0x5f8/0x770 [ 53.440827][ T3642] try_check_zero+0x189/0x260 [ 53.445538][ T3642] process_srcu+0x1ea/0xd90 [ 53.450059][ T3642] process_scheduled_works+0x4d4/0x9a0 [ 53.455544][ T3642] worker_thread+0x569/0x750 [ 53.460144][ T3642] kthread+0x221/0x270 [ 53.464233][ T3642] ret_from_fork+0x146/0x330 [ 53.468840][ T3642] ret_from_fork_asm+0x1a/0x30 [ 53.473612][ T3642] [ 53.475940][ T3642] read to 0xffff888237c2a8e4 of 4 bytes by task 3642 on cpu 1: [ 53.483482][ T3642] kick_pool+0x49/0x2d0 [ 53.487653][ T3642] __queue_work+0x8e9/0xb90 [ 53.492168][ T3642] queue_work_on+0xa9/0x140 [ 53.496685][ T3642] process_srcu+0xa39/0xd90 [ 53.501204][ T3642] process_scheduled_works+0x4d4/0x9a0 [ 53.506674][ T3642] worker_thread+0x569/0x750 [ 53.511276][ T3642] kthread+0x221/0x270 [ 53.515360][ T3642] ret_from_fork+0x146/0x330 [ 53.519967][ T3642] ret_from_fork_asm+0x1a/0x30 [ 53.524745][ T3642] [ 53.527075][ T3642] value changed: 0x00000000 -> 0x00000001 [ 53.532794][ T3642] [ 53.535119][ T3642] Reported by Kernel Concurrency Sanitizer on: [ 53.541269][ T3642] CPU: 1 UID: 0 PID: 3642 Comm: kworker/1:7 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 53.552210][ T3642] Tainted: [W]=WARN [ 53.556014][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 53.566071][ T3642] Workqueue: rcu_gp process_srcu SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 53.571028][ T3642] ================================================================== [ 53.632355][ T4365] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.316: iget: bad i_size value: 38620345925642 [ 53.644947][ T4365] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.645146][ T4365] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.316: couldn't read orphan inode 15 (err -117) [ 53.654381][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 53.654419][ C0] EXT4-fs (loop2): initial error at time 1784953520: ext4_orphan_get:1399: inode 15 [ 53.654451][ C0] EXT4-fs (loop2): last error at time 1784953520: ext4_orphan_get:1399: inode 15 [ 53.693020][ T4365] loop2: lost filesystem error report for type 5 error -117 [ 53.693671][ T4365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.742251][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.754954][ T4365] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.942342][ T311] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.001987][ T311] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.061787][ T311] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.122169][ T311] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.202038][ T311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.252236][ T311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.318693][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 54.328906][ T311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.381977][ T311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.444943][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 54.472534][ T311] bridge_slave_1: left allmulticast mode [ 54.480890][ T311] bridge_slave_1: left promiscuous mode [ 54.486617][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.494961][ T311] bridge_slave_0: left allmulticast mode [ 54.500776][ T311] bridge_slave_0: left promiscuous mode [ 54.506537][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.516649][ T311] bridge_slave_1: left allmulticast mode [ 54.522679][ T311] bridge_slave_1: left promiscuous mode [ 54.528490][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.536686][ T311] bridge_slave_0: left allmulticast mode [ 54.542628][ T311] bridge_slave_0: left promiscuous mode [ 54.548327][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.634403][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.644685][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.654229][ T311] bond0 (unregistering): Released all slaves [ 54.680077][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.690422][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.700605][ T311] bond0 (unregistering): Released all slaves [ 54.708398][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.744886][ T311] hsr_slave_0: left promiscuous mode [ 54.750645][ T311] hsr_slave_1: left promiscuous mode [ 54.756266][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.764048][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.771866][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.779855][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.790228][ T311] hsr_slave_0: left promiscuous mode [ 54.796010][ T311] hsr_slave_1: left promiscuous mode [ 54.801990][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.810085][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.817703][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.826191][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.840298][ T311] veth1_macvtap: left promiscuous mode [ 54.845848][ T311] veth0_macvtap: left promiscuous mode [ 54.851759][ T311] veth1_vlan: left promiscuous mode [ 54.857113][ T311] veth0_vlan: left promiscuous mode [ 54.863447][ T311] veth1_macvtap: left promiscuous mode [ 54.869017][ T311] veth0_macvtap: left promiscuous mode [ 54.874673][ T311] veth1_vlan: left promiscuous mode [ 54.880270][ T311] veth0_vlan: left promiscuous mode [ 54.979362][ T311] team0 (unregistering): Port device team_slave_1 removed [ 54.989309][ T311] team0 (unregistering): Port device team_slave_0 removed [ 55.055187][ T311] team0 (unregistering): Port device team_slave_1 removed [ 55.065864][ T311] team0 (unregistering): Port device team_slave_0 removed [ 55.101939][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 55.223256][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.329519][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 55.446128][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 55.551918][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 55.604438][ T311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.652284][ T311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.741634][ T311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.792516][ T311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.863315][ T311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.922425][ T311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.972131][ T311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.985027][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 56.033517][ T311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.111284][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 56.124050][ T311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.192502][ T311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.242246][ T311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.254308][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 56.301802][ T311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.383582][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 56.398262][ T311] bridge_slave_1: left allmulticast mode [ 56.408013][ T311] bridge_slave_1: left promiscuous mode [ 56.413835][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.421760][ T311] bridge_slave_0: left allmulticast mode [ 56.427461][ T311] bridge_slave_0: left promiscuous mode [ 56.433232][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.442623][ T311] bridge_slave_1: left allmulticast mode [ 56.448300][ T311] bridge_slave_1: left promiscuous mode [ 56.453997][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.461784][ T311] bridge_slave_0: left allmulticast mode [ 56.467433][ T311] bridge_slave_0: left promiscuous mode [ 56.473140][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.483060][ T311] bridge_slave_1: left promiscuous mode [ 56.488768][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.496556][ T311] bridge_slave_0: left allmulticast mode [ 56.502262][ T311] bridge_slave_0: left promiscuous mode [ 56.508013][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.595894][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.605777][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.616701][ T311] bond0 (unregistering): Released all slaves [ 56.624630][ T311] bond1 (unregistering): Released all slaves [ 56.651706][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.661913][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.671344][ T311] bond0 (unregistering): Released all slaves [ 56.698352][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.708497][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.718304][ T311] bond0 (unregistering): Released all slaves [ 56.768142][ T311] hsr_slave_0: left promiscuous mode [ 56.773941][ T311] hsr_slave_1: left promiscuous mode [ 56.779967][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.787440][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.795635][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.803301][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.813776][ T311] hsr_slave_0: left promiscuous mode [ 56.819756][ T311] hsr_slave_1: left promiscuous mode [ 56.825572][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.833216][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.841229][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.848674][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.857614][ T311] hsr_slave_0: left promiscuous mode [ 56.863453][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 56.863470][ T28] audit: type=1400 audit(1784953523.331:662): avc: denied { write } for pid=4554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.893151][ T311] hsr_slave_1: left promiscuous mode [ 56.898837][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.906820][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.914367][ T28] audit: type=1400 audit(1784953523.381:663): avc: denied { write } for pid=4565 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.936733][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.944812][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.959460][ T311] veth1_macvtap: left promiscuous mode [ 56.965009][ T311] veth0_macvtap: left promiscuous mode [ 56.970715][ T311] veth1_vlan: left promiscuous mode [ 56.976098][ T311] veth0_vlan: left promiscuous mode [ 56.982044][ T311] veth1_macvtap: left promiscuous mode [ 56.987535][ T311] veth0_macvtap: left promiscuous mode [ 56.993211][ T311] veth1_vlan: left promiscuous mode [ 56.998551][ T311] veth0_vlan: left promiscuous mode [ 57.004610][ T311] veth1_macvtap: left promiscuous mode [ 57.010152][ T311] veth0_macvtap: left promiscuous mode [ 57.130138][ T311] team0 (unregistering): Port device team_slave_1 removed [ 57.139983][ T311] team0 (unregistering): Port device team_slave_0 removed [ 57.199333][ T311] team0 (unregistering): Port device team_slave_1 removed [ 57.210310][ T311] team0 (unregistering): Port device team_slave_0 removed [ 57.259824][ T311] team0 (unregistering): Port device team_slave_1 removed [ 57.269996][ T311] team0 (unregistering): Port device team_slave_0 removed [ 57.306016][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 57.402552][ T28] audit: type=1400 audit(1784953523.871:664): avc: denied { write } for pid=4572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.434496][ T28] audit: type=1400 audit(1784953523.901:665): avc: denied { write } for pid=4583 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.467676][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 57.545092][ T28] audit: type=1400 audit(1784953524.011:666): avc: denied { write } for pid=4586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.576720][ T28] audit: type=1400 audit(1784953524.041:667): avc: denied { write } for pid=4597 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.610340][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 57.699964][ T28] audit: type=1400 audit(1784953524.171:668): avc: denied { write } for pid=4603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.731875][ T28] audit: type=1400 audit(1784953524.201:669): avc: denied { write } for pid=4614 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.765945][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 57.843523][ T28] audit: type=1400 audit(1784953524.311:670): avc: denied { write } for pid=4617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.875998][ T28] audit: type=1400 audit(1784953524.341:671): avc: denied { write } for pid=4628 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.909167][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 58.028742][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 58.134236][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 58.243845][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20