last executing test programs: 1.239292971s ago: executing program 4 (id=473): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1800000013000100000000000000000008"], 0x18}], 0x1, 0x0, 0x0, 0x2004c044}, 0x40054) 1.171681423s ago: executing program 4 (id=478): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x4000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}, {@version_u}], [], 0x6b}}) 1.017756768s ago: executing program 4 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast2}]}, 0x34}}, 0x4000) 968.6677ms ago: executing program 4 (id=489): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000008, 0x204031, 0xffffffffffffffff, 0x42795000) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) 862.037223ms ago: executing program 4 (id=491): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 788.537726ms ago: executing program 4 (id=494): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000080)=[{r0, 0x8010}], 0x1, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 568.061513ms ago: executing program 3 (id=503): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 499.096464ms ago: executing program 2 (id=506): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) waitid(0x20, 0x0, 0x0, 0x4, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)) 478.492645ms ago: executing program 3 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 475.652536ms ago: executing program 2 (id=508): unshare(0x28000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000000400000008"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000000)="f2", 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 403.200778ms ago: executing program 2 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) 366.115789ms ago: executing program 2 (id=511): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 349.429299ms ago: executing program 3 (id=513): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 249.916902ms ago: executing program 1 (id=518): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) shutdown(r0, 0x2) 236.521973ms ago: executing program 0 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) 225.236363ms ago: executing program 1 (id=520): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x28, 0x5, 0x0) getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000040)=0x47) 200.706054ms ago: executing program 0 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) 200.319964ms ago: executing program 1 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r1, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) 186.399684ms ago: executing program 0 (id=523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x0) 172.825775ms ago: executing program 3 (id=524): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x1) getdents64(r0, 0x0, 0x22) 163.895665ms ago: executing program 1 (id=525): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 148.864686ms ago: executing program 0 (id=526): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 127.671436ms ago: executing program 3 (id=527): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x10026, 0x10003, 0xffedfff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000011, r0, 0x4000) 83.272458ms ago: executing program 0 (id=528): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 67.902748ms ago: executing program 1 (id=529): unshare(0x20000400) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) 55.023289ms ago: executing program 2 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 34.450539ms ago: executing program 0 (id=531): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 14.04841ms ago: executing program 1 (id=532): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 96.91µs ago: executing program 2 (id=533): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x20002, 0x2) 0s ago: executing program 3 (id=534): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x1, 0xb51b, 0x654, 0xfffff04b, 0x0, 0x8}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNISCRNMAP(r0, 0x4b52, 0x0) kernel console output (not intermixed with test programs): [ 21.621700][ T28] audit: type=1400 audit(1781582011.512:114): avc: denied { write } for pid=3270 comm="sh" path="pipe:[2423]" dev="pipefs" ino=2423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.649486][ T28] audit: type=1400 audit(1781582011.512:115): avc: denied { rlimitinh } for pid=3270 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 29.409581][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 29.409595][ T28] audit: type=1400 audit(1781582019.342:117): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.438667][ T28] audit: type=1400 audit(1781582019.372:118): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.439508][ T3285] cgroup: Unknown subsys name 'net' [ 29.466433][ T28] audit: type=1400 audit(1781582019.402:119): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.605488][ T3285] cgroup: Unknown subsys name 'cpuset' [ 29.611578][ T3285] cgroup: Unknown subsys name 'rlimit' [ 29.720972][ T28] audit: type=1400 audit(1781582019.652:120): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.744856][ T28] audit: type=1400 audit(1781582019.652:121): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.765584][ T28] audit: type=1400 audit(1781582019.652:122): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.772130][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.786280][ T28] audit: type=1400 audit(1781582019.652:123): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.815311][ T28] audit: type=1400 audit(1781582019.662:124): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.840231][ T28] audit: type=1400 audit(1781582019.662:125): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.864032][ T28] audit: type=1400 audit(1781582019.682:126): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.864369][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.020470][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.027652][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.034766][ T3297] bridge_slave_0: entered allmulticast mode [ 31.041227][ T3297] bridge_slave_0: entered promiscuous mode [ 31.064427][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.071585][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.078810][ T3297] bridge_slave_1: entered allmulticast mode [ 31.085224][ T3297] bridge_slave_1: entered promiscuous mode [ 31.126474][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.154774][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.179633][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.186806][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.193935][ T3298] bridge_slave_0: entered allmulticast mode [ 31.200390][ T3298] bridge_slave_0: entered promiscuous mode [ 31.224223][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.231348][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.238454][ T3298] bridge_slave_1: entered allmulticast mode [ 31.244938][ T3298] bridge_slave_1: entered promiscuous mode [ 31.275272][ T3297] team0: Port device team_slave_0 added [ 31.296637][ T3297] team0: Port device team_slave_1 added [ 31.310452][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.317613][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.325050][ T3303] bridge_slave_0: entered allmulticast mode [ 31.331408][ T3303] bridge_slave_0: entered promiscuous mode [ 31.342934][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.359094][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.366206][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.373295][ T3303] bridge_slave_1: entered allmulticast mode [ 31.379865][ T3303] bridge_slave_1: entered promiscuous mode [ 31.390951][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.400452][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.407430][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.433488][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.453111][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.460220][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.467418][ T3305] bridge_slave_0: entered allmulticast mode [ 31.473731][ T3305] bridge_slave_0: entered promiscuous mode [ 31.484581][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.491588][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.517624][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.539070][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.546249][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.553460][ T3305] bridge_slave_1: entered allmulticast mode [ 31.559835][ T3305] bridge_slave_1: entered promiscuous mode [ 31.572344][ T3298] team0: Port device team_slave_0 added [ 31.583202][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.593550][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.612605][ T3298] team0: Port device team_slave_1 added [ 31.623213][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.630377][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.637612][ T3306] bridge_slave_0: entered allmulticast mode [ 31.643968][ T3306] bridge_slave_0: entered promiscuous mode [ 31.659243][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.672319][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.679585][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.686848][ T3306] bridge_slave_1: entered allmulticast mode [ 31.693172][ T3306] bridge_slave_1: entered promiscuous mode [ 31.708309][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.717818][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.724853][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.750962][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.766632][ T3303] team0: Port device team_slave_0 added [ 31.774494][ T3297] hsr_slave_0: entered promiscuous mode [ 31.780444][ T3297] hsr_slave_1: entered promiscuous mode [ 31.791287][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.798291][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.824235][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.840201][ T3303] team0: Port device team_slave_1 added [ 31.858377][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.868573][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.882384][ T3305] team0: Port device team_slave_0 added [ 31.889620][ T3305] team0: Port device team_slave_1 added [ 31.904769][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.911855][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.937767][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.949261][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.956254][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.982358][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.027607][ T3306] team0: Port device team_slave_0 added [ 32.034140][ T3306] team0: Port device team_slave_1 added [ 32.046636][ T3298] hsr_slave_0: entered promiscuous mode [ 32.052823][ T3298] hsr_slave_1: entered promiscuous mode [ 32.058771][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 32.064481][ T3298] Cannot create hsr debugfs directory [ 32.070353][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.077362][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.103308][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.129688][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.136738][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.162698][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.187972][ T3303] hsr_slave_0: entered promiscuous mode [ 32.194187][ T3303] hsr_slave_1: entered promiscuous mode [ 32.200088][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 32.205819][ T3303] Cannot create hsr debugfs directory [ 32.217503][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.224482][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.250404][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.283091][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.290095][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.316015][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.345347][ T3305] hsr_slave_0: entered promiscuous mode [ 32.351381][ T3305] hsr_slave_1: entered promiscuous mode [ 32.357281][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 32.362999][ T3305] Cannot create hsr debugfs directory [ 32.413876][ T3306] hsr_slave_0: entered promiscuous mode [ 32.419954][ T3306] hsr_slave_1: entered promiscuous mode [ 32.425856][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 32.431564][ T3306] Cannot create hsr debugfs directory [ 32.533341][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.542041][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.559550][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.567931][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.575692][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.584213][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.598934][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.607456][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.635471][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.644300][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.652107][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.660676][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.668548][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.677044][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.684637][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.693368][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.723884][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.732436][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.740525][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.749594][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.763709][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.772425][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.789371][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.798049][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.812371][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.820991][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.828967][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.837173][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.844936][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.853247][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.861432][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.870017][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.902047][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.910844][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.918799][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.927500][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.943344][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.951866][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.960539][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.968823][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.988845][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.017293][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.037391][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.044742][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.063472][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.070585][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.081090][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.105183][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.121807][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.128889][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.138843][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.151725][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.158968][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.170909][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.183651][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.201601][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.209015][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.217785][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.224902][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.242745][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.251589][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.263308][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.270388][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.293885][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.300959][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.328542][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.342882][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.350073][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.374204][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.381402][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.513843][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.553066][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.629550][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.643570][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.662175][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.673216][ T3297] veth0_vlan: entered promiscuous mode [ 33.693108][ T3297] veth1_vlan: entered promiscuous mode [ 33.739757][ T3298] veth0_vlan: entered promiscuous mode [ 33.753715][ T3297] veth0_macvtap: entered promiscuous mode [ 33.763374][ T3298] veth1_vlan: entered promiscuous mode [ 33.774203][ T3297] veth1_macvtap: entered promiscuous mode [ 33.808078][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.822768][ T3306] veth0_vlan: entered promiscuous mode [ 33.834218][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.842392][ T3298] veth0_macvtap: entered promiscuous mode [ 33.859740][ T3298] veth1_macvtap: entered promiscuous mode [ 33.866977][ T3306] veth1_vlan: entered promiscuous mode [ 33.873842][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.882979][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.898343][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.908265][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.920218][ T3303] veth0_vlan: entered promiscuous mode [ 33.944891][ T3303] veth1_vlan: entered promiscuous mode [ 33.958269][ T3305] veth0_vlan: entered promiscuous mode [ 33.966951][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.979059][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.987895][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.989662][ T3305] veth1_vlan: entered promiscuous mode [ 34.019658][ T3306] veth0_macvtap: entered promiscuous mode [ 34.032375][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.041982][ T3505] loop1: detected capacity change from 0 to 1024 [ 34.042032][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.061992][ T3303] veth0_macvtap: entered promiscuous mode [ 34.071578][ T3306] veth1_macvtap: entered promiscuous mode [ 34.072431][ T3505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.086215][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.097510][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.106249][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.117134][ T3303] veth1_macvtap: entered promiscuous mode [ 34.127521][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.142513][ T3305] veth0_macvtap: entered promiscuous mode [ 34.154995][ T3305] veth1_macvtap: entered promiscuous mode [ 34.165547][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.194852][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.213449][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.225974][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.237321][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.246782][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.267408][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.286523][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.301976][ T361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.314703][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.336368][ T361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.347939][ T361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.370645][ T361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.400860][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.418736][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 34.418751][ T28] audit: type=1400 audit(1781582024.352:171): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.430526][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.451469][ T28] audit: type=1400 audit(1781582024.352:172): avc: denied { open } for pid=3298 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.485525][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.496445][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.500442][ T28] audit: type=1400 audit(1781582024.352:173): avc: denied { ioctl } for pid=3298 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.508692][ T3527] loop2: detected capacity change from 0 to 512 [ 34.619863][ T3527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.662620][ T28] audit: type=1400 audit(1781582024.592:174): avc: denied { allowed } for pid=3540 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.664344][ T3527] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.723734][ T28] audit: type=1400 audit(1781582024.592:175): avc: denied { sqpoll } for pid=3540 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.760913][ T28] audit: type=1400 audit(1781582024.592:176): avc: denied { create } for pid=3540 comm="syz.4.5" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.785879][ T28] audit: type=1400 audit(1781582024.652:177): avc: denied { write } for pid=3526 comm="syz.2.10" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.823609][ T28] audit: type=1400 audit(1781582024.652:178): avc: denied { add_name } for pid=3526 comm="syz.2.10" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.853773][ T28] audit: type=1400 audit(1781582024.652:179): avc: denied { create } for pid=3526 comm="syz.2.10" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.874707][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.882818][ T28] audit: type=1400 audit(1781582024.652:180): avc: denied { append } for pid=3526 comm="syz.2.10" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.916387][ T3565] loop4: detected capacity change from 0 to 512 [ 34.953136][ T3565] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 35.008526][ T3572] loop3: detected capacity change from 0 to 2048 [ 35.062684][ T3572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.096390][ T3572] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #12: block 2: comm syz.3.18: lblock 0 mapped to illegal pblock 2 (length 1) [ 35.139258][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.212772][ T3617] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 35.219475][ T3617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 35.311596][ T3648] loop1: detected capacity change from 0 to 512 [ 35.342966][ T3617] vhci_hcd vhci_hcd.0: Device attached [ 35.353819][ T3648] EXT4-fs: Ignoring removed nobh option [ 35.370484][ T3656] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 35.377029][ T3656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 35.394922][ T3648] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.405760][ T3661] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 35.415026][ T3661] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 35.434920][ T3661] vhci_hcd vhci_hcd.0: Device attached [ 35.455132][ T3648] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.492402][ T3671] pim6reg9: entered allmulticast mode [ 35.496637][ T3656] vhci_hcd vhci_hcd.0: Device attached [ 35.503604][ T3648] EXT4-fs (loop1): 1 truncate cleaned up [ 35.515388][ T3648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.533080][ T3662] vhci_hcd: connection closed [ 35.535926][ T3657] vhci_hcd: connection closed [ 35.540738][ T3642] vhci_hcd vhci_hcd.3: stop threads [ 35.551112][ T3618] vhci_hcd: connection closed [ 35.567315][ T3642] vhci_hcd vhci_hcd.3: release socket [ 35.585085][ T3392] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 35.593631][ T3628] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 35.603516][ T3676] loop4: detected capacity change from 0 to 512 [ 35.650017][ T3642] vhci_hcd vhci_hcd.3: disconnect device [ 35.668878][ T3676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.691262][ T3642] vhci_hcd vhci_hcd.3: stop threads [ 35.708132][ T3642] vhci_hcd vhci_hcd.3: release socket [ 35.721432][ T3642] vhci_hcd vhci_hcd.3: disconnect device [ 35.727430][ T3676] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.738011][ T3642] vhci_hcd vhci_hcd.3: stop threads [ 35.743357][ T3642] vhci_hcd vhci_hcd.3: release socket [ 35.749043][ T3642] vhci_hcd vhci_hcd.3: disconnect device [ 35.765104][ T3676] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 102 vs 96 free clusters [ 35.780971][ T3676] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.34: Failed to acquire dquot type 1 [ 35.802072][ T3676] syz.4.34 (3676) used greatest stack depth: 10448 bytes left [ 36.314257][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.326230][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.447499][ T3695] netlink: 'syz.1.42': attribute type 3 has an invalid length. [ 36.462471][ T3689] loop0: detected capacity change from 0 to 8192 [ 36.513529][ T3693] loop2: detected capacity change from 0 to 8192 [ 36.753649][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 36.829684][ T3728] netlink: 104 bytes leftover after parsing attributes in process `syz.0.57'. [ 36.847229][ T3732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 36.928459][ T3738] loop2: detected capacity change from 0 to 164 [ 36.950925][ T3705] loop4: detected capacity change from 0 to 764 [ 37.137797][ T3759] ======================================================= [ 37.137797][ T3759] WARNING: The mand mount option has been deprecated and [ 37.137797][ T3759] and is ignored by this kernel. Remove the mand [ 37.137797][ T3759] option from the mount to silence this warning. [ 37.137797][ T3759] ======================================================= [ 37.182196][ T3759] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 37.207559][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 37.233188][ T3759] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.72: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.260963][ T3759] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.261411][ T3759] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.72: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.262828][ T3772] sg_write: process 35 (syz.3.78) changed security contexts after opening file descriptor, this is not allowed. [ 37.270609][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 37.308289][ C1] EXT4-fs (loop0): initial error at time 1781582027: ext4_map_blocks:791: inode 3: block 2 [ 37.318541][ C1] EXT4-fs (loop0): last error at time 1781582027: ext4_map_blocks:791: inode 3: block 2 [ 37.328851][ T3759] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.330619][ T3759] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.72: Failed to acquire dquot type 0 [ 37.350936][ T3759] loop0: lost filesystem error report for type 5 error -117 [ 37.352336][ T3759] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 37.386686][ T3759] loop0: lost filesystem error report for type 5 error -117 [ 37.388511][ T3759] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.72: mark_inode_dirty error [ 37.407234][ T3759] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.407413][ T3759] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 37.428031][ T3759] EXT4-fs (loop0): 1 orphan inode deleted [ 37.445149][ T3759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.448564][ T3786] capability: warning: `syz.2.83' uses deprecated v2 capabilities in a way that may be insecure [ 37.473576][ T12] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.488481][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7068: comm kworker/u8:0: Failed to release dquot type 0 [ 37.500547][ T3759] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.72: Invalid inode table block 1 in block_group 0 [ 37.515660][ T3759] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 37.555442][ T3792] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 37.555442][ T3792] Please contact the netfilter-devel mailing list or update your nftables rules. [ 37.581393][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.604989][ T3303] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 37.630163][ T3303] loop0: lost filesystem error report for type 5 error -117 [ 37.631607][ T3303] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 37.640052][ T3798] program syz.1.90 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.654857][ T3303] loop0: lost filesystem error report for type 5 error -117 [ 37.671384][ T3303] EXT4-fs error (device loop0): ext4_quota_off:7316: inode #3: comm syz-executor: mark_inode_dirty error [ 37.724310][ T3303] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.934661][ T3838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 37.995860][ T3838] vlan2: entered promiscuous mode [ 38.001119][ T3838] bridge0: entered promiscuous mode [ 38.112716][ T3859] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 38.122457][ T3866] netlink: 48 bytes leftover after parsing attributes in process `syz.2.109'. [ 38.132867][ T3866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 38.167168][ T3866] bond1: option xmit_hash_policy: invalid value (64) [ 38.177492][ T3866] bond1 (unregistering): Released all slaves [ 38.246433][ T3875] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 38.275573][ T3879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'. [ 38.303146][ T3875] Symlink component flag not implemented [ 38.336404][ T3880] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 38.351334][ T3875] Symlink component flag not implemented (7) [ 38.386274][ T3890] xt_hashlimit: size too large, truncated to 1048576 [ 38.432867][ T3892] EXT4-fs: inline encryption not supported [ 38.444345][ T3892] EXT4-fs: inline encryption not supported [ 38.455919][ T3892] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.513563][ T3903] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.530080][ T3892] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 38.545070][ T3892] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.120: bg 0: block 248: padding at end of block bitmap is not set [ 38.561341][ T3892] loop1: lost filesystem error report for type 5 error -117 [ 38.561558][ T3903] EXT4-fs warning (device loop4): ext4_enable_quotas:7267: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.561579][ T3892] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.120: Failed to acquire dquot type 1 [ 38.568931][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 38.568950][ C0] EXT4-fs (loop1): last error at time 1781582028: ext4_validate_block_bitmap:441 [ 38.583713][ T3903] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 38.600261][ T3892] loop1: lost filesystem error report for type 5 error -28 [ 38.620394][ T3903] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.125: couldn't read orphan inode 26 (err -116) [ 38.622387][ T3911] Cannot find set identified by id 0 to match [ 38.631936][ T3903] loop4: lost filesystem error report for type 5 error -116 [ 38.641019][ T3892] EXT4-fs (loop1): 1 truncate cleaned up [ 38.654851][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 38.660195][ T3892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 38.665381][ C1] EXT4-fs (loop4): initial error at time 1781582028: ext4_orphan_get:1404 [ 38.665424][ C1] EXT4-fs (loop4): last error at time 1781582028: ext4_orphan_get:1404 [ 38.678854][ T3903] EXT4-fs (loop4): Remounting filesystem read-only [ 38.702172][ T3903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.769141][ T3892] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 38.802622][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.854424][ T3892] syz.1.120 (3892) used greatest stack depth: 9488 bytes left [ 38.876615][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 39.118346][ T3963] set_capacity_and_notify: 7 callbacks suppressed [ 39.118361][ T3963] loop2: detected capacity change from 0 to 512 [ 39.173551][ T3963] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 39.195446][ T3963] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.146: corrupted in-inode xattr: e_value size too large [ 39.210360][ T3963] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.214825][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 39.224193][ T3963] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.146: couldn't read orphan inode 15 (err -117) [ 39.230430][ C1] EXT4-fs (loop2): initial error at time 1781582029: ext4_iget_extra_inode:5128: inode 15 [ 39.252083][ C1] EXT4-fs (loop2): last error at time 1781582029: ext4_iget_extra_inode:5128: inode 15 [ 39.267963][ T3963] loop2: lost filesystem error report for type 5 error -117 [ 39.276620][ T3978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.153'. [ 39.279990][ T3963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.313672][ T3978] tipc: Failed to obtain node identity [ 39.319298][ T3978] tipc: Enabling of bearer rejected, failed to enable media [ 39.325191][ T3983] loop3: detected capacity change from 0 to 1024 [ 39.362092][ T3983] EXT4-fs: inline encryption not supported [ 39.373258][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.383468][ T3983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.421116][ T3983] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 39.446344][ T3983] System zones: 0-1, 3-36 [ 39.452491][ T3997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'. [ 39.460851][ T3983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.535552][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 39.535567][ T28] audit: type=1400 audit(1781582029.472:257): avc: denied { write } for pid=3981 comm="syz.3.156" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.553498][ T4007] loop2: detected capacity change from 0 to 512 [ 39.563277][ T28] audit: type=1400 audit(1781582029.472:258): avc: denied { create } for pid=3981 comm="syz.3.156" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.572992][ T4011] netem: change failed [ 39.613111][ T28] audit: type=1400 audit(1781582029.542:259): avc: denied { write } for pid=4013 comm="syz.4.169" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 39.637466][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.669583][ T28] audit: type=1400 audit(1781582029.542:260): avc: denied { open } for pid=4013 comm="syz.4.169" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 39.770758][ T4032] loop1: detected capacity change from 0 to 512 [ 39.781776][ T4032] EXT4-fs: Ignoring removed oldalloc option [ 39.811266][ T4032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.816618][ T28] audit: type=1400 audit(1781582029.742:261): avc: denied { ioctl } for pid=4038 comm="syz.2.179" path="socket:[5822]" dev="sockfs" ino=5822 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.861138][ T28] audit: type=1400 audit(1781582029.742:262): avc: denied { bind } for pid=4038 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.865026][ T4032] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.177: invalid indirect mapped block 83886080 (level 1) [ 39.920008][ T4032] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 39.924805][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 39.940425][ C1] EXT4-fs (loop1): initial error at time 1781582029: ext4_free_branches:1023: inode 16 [ 39.950050][ T28] audit: type=1400 audit(1781582029.872:263): avc: denied { bind } for pid=4048 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.969236][ C1] EXT4-fs (loop1): last error at time 1781582029: ext4_free_branches:1023: inode 16 [ 39.973285][ T4032] EXT4-fs (loop1): Remounting filesystem read-only [ 39.979349][ T4047] gtp0: entered promiscuous mode [ 39.990160][ T4047] gtp0: entered allmulticast mode [ 39.997823][ T28] audit: type=1400 audit(1781582029.932:264): avc: denied { ioctl } for pid=4050 comm="syz.2.184" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.008427][ T4032] EXT4-fs (loop1): 1 orphan inode deleted [ 40.036389][ T4032] EXT4-fs (loop1): 1 truncate cleaned up [ 40.047814][ T4032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.217073][ T4061] loop3: detected capacity change from 0 to 764 [ 40.600375][ T28] audit: type=1400 audit(1781582030.532:265): avc: denied { getopt } for pid=4064 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.640356][ T3392] usb 7-1: enqueue for inactive port 0 [ 40.650817][ T3392] usb 7-1: enqueue for inactive port 0 [ 40.659854][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.699944][ T4071] loop3: detected capacity change from 0 to 764 [ 40.725337][ T3392] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 40.766628][ T28] audit: type=1400 audit(1781582030.702:266): avc: denied { bind } for pid=4078 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 40.815712][ T4084] loop0: detected capacity change from 0 to 512 [ 40.841636][ T4084] EXT4-fs: Ignoring removed oldalloc option [ 40.866440][ T4084] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.885605][ T4084] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.200: invalid indirect mapped block 83886080 (level 1) [ 40.901964][ T4084] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.902172][ T4084] EXT4-fs (loop0): Remounting filesystem read-only [ 40.911346][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 40.911370][ C1] EXT4-fs (loop0): initial error at time 1781582030: ext4_free_branches:1023: inode 16 [ 40.911422][ C1] EXT4-fs (loop0): last error at time 1781582030: ext4_free_branches:1023: inode 16 [ 40.963468][ T4084] EXT4-fs (loop0): 1 orphan inode deleted [ 40.977950][ T4084] EXT4-fs (loop0): 1 truncate cleaned up [ 40.989971][ T4084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.622380][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.755021][ T4120] loop0: detected capacity change from 0 to 512 [ 41.790185][ T4120] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.218: inode has both inline data and extents flags [ 41.806112][ T4120] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.814383][ T4120] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.218: couldn't read orphan inode 15 (err -117) [ 41.823577][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 41.823596][ C0] EXT4-fs (loop0): initial error at time 1781582031: ext4_orphan_get:1399: inode 15 [ 41.823628][ C0] EXT4-fs (loop0): last error at time 1781582031: ext4_orphan_get:1399: inode 15 [ 41.861190][ T4120] loop0: lost filesystem error report for type 5 error -117 [ 41.863135][ T4120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.896991][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.921418][ T4138] capability: warning: `syz.3.225' uses 32-bit capabilities (legacy support in use) [ 42.030053][ T4156] __nla_validate_parse: 5 callbacks suppressed [ 42.030072][ T4156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 42.072124][ T4156] bridge_slave_1: left allmulticast mode [ 42.098977][ T4156] bridge_slave_1: left promiscuous mode [ 42.116698][ T4156] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.140575][ T4156] bridge_slave_0: left allmulticast mode [ 42.155782][ T4156] bridge_slave_0: left promiscuous mode [ 42.178664][ T4156] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.210874][ T4178] loop2: detected capacity change from 0 to 164 [ 42.282231][ T4184] loop3: detected capacity change from 0 to 512 [ 42.294875][ T4184] EXT4-fs: Ignoring removed bh option [ 42.325019][ T4184] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.3.248: corrupted xattr block 95: invalid header [ 42.342187][ T4184] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.342373][ T4184] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 42.351544][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 42.351566][ C0] EXT4-fs (loop3): initial error at time 1781582032: ext4_expand_extra_isize_ea:2810: inode 11 [ 42.351595][ C0] EXT4-fs (loop3): last error at time 1781582032: ext4_expand_extra_isize_ea:2810: inode 11 [ 42.391750][ T4184] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.248: bg 0: block 7: invalid block bitmap [ 42.405780][ T4184] loop3: lost filesystem error report for type 5 error -117 [ 42.405935][ T4184] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 42.455086][ T4184] loop3: lost filesystem error report for type 5 error -117 [ 42.457618][ T4184] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.248: corrupted xattr block 95: invalid header [ 42.477145][ T4198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.513826][ T4184] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.515330][ T4184] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 42.533921][ T4184] EXT4-fs (loop3): 1 orphan inode deleted [ 42.540717][ T4184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.553241][ T4198] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.577646][ T4198] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 42.616825][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.616998][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.641376][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.653890][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.682434][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.704243][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.769986][ T4258] usb usb7: usbfs: process 4258 (syz.4.282) did not claim interface 0 before use [ 43.906447][ T4281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 43.933244][ T4281] netlink: 56 bytes leftover after parsing attributes in process `syz.4.293'. [ 43.960389][ T4286] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.294: Directory hole found for htree index block 0 [ 43.986565][ T4286] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 43.986804][ T4286] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 43.996016][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 43.996035][ C1] EXT4-fs (loop2): initial error at time 1781582033: dx_probe:791: inode 2 [ 43.996088][ C1] EXT4-fs (loop2): last error at time 1781582033: dx_probe:791: inode 2 [ 44.028533][ T4286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.057328][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.194563][ T4319] netlink: 40 bytes leftover after parsing attributes in process `syz.4.310'. [ 44.313732][ T4339] netlink: 'syz.3.319': attribute type 2 has an invalid length. [ 44.404433][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 44.468156][ T4355] set_capacity_and_notify: 2 callbacks suppressed [ 44.468172][ T4355] loop0: detected capacity change from 0 to 512 [ 44.481915][ T4357] loop3: detected capacity change from 0 to 128 [ 44.493534][ T4357] EXT4-fs: Ignoring removed bh option [ 44.505830][ T4355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.523888][ T4355] EXT4-fs (loop0): 1 truncate cleaned up [ 44.531209][ T4357] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.537191][ T4355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.556457][ T4357] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.564213][ T4363] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 44.638902][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.653090][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.686863][ T4371] netlink: 'syz.4.335': attribute type 2 has an invalid length. [ 44.725278][ T4378] sch_fq: defrate 2 ignored. [ 44.811895][ T4393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.342'. [ 44.867739][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 44.867755][ T28] audit: type=1400 audit(1781582034.802:300): avc: denied { recv } for pid=3303 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=50078 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 44.954044][ T28] audit: type=1400 audit(1781582034.882:301): avc: denied { read } for pid=4405 comm="syz.2.351" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.977998][ T28] audit: type=1400 audit(1781582034.882:302): avc: denied { open } for pid=4405 comm="syz.2.351" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.004425][ T28] audit: type=1400 audit(1781582034.882:303): avc: denied { ioctl } for pid=4405 comm="syz.2.351" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.048304][ T4417] loop1: detected capacity change from 0 to 128 [ 45.070677][ T4421] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 45.090512][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 45.316468][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 45.337354][ T4446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 45.340051][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 45.371457][ T4442] netlink: 'syz.3.366': attribute type 6 has an invalid length. [ 45.408381][ T4453] tipc: Started in network mode [ 45.416491][ T4442] netlink: 'syz.3.366': attribute type 5 has an invalid length. [ 45.427609][ T4453] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 45.467291][ T4453] tipc: Enabling of bearer rejected, failed to enable media [ 45.544228][ T4461] netlink: 'syz.1.375': attribute type 4 has an invalid length. [ 45.593947][ T4458] loop2: detected capacity change from 0 to 764 [ 45.683869][ T28] audit: type=1326 audit(1781582035.612:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89501ce59 code=0x7ffc0000 [ 45.711774][ T28] audit: type=1326 audit(1781582035.612:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89501ce59 code=0x7ffc0000 [ 45.746375][ T28] audit: type=1326 audit(1781582035.642:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89501ce59 code=0x7ffc0000 [ 45.789985][ T28] audit: type=1326 audit(1781582035.642:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89501ce59 code=0x7ffc0000 [ 45.856648][ T4484] loop4: detected capacity change from 0 to 512 [ 45.880180][ T4488] loop0: detected capacity change from 0 to 512 [ 45.886914][ T4488] EXT4-fs: Ignoring removed i_version option [ 45.897353][ T4484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.914627][ T28] audit: type=1326 audit(1781582035.652:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc89501ce59 code=0x7ffc0000 [ 45.944704][ T4488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.960522][ T28] audit: type=1400 audit(1781582035.652:309): avc: denied { read write } for pid=4471 comm="syz.3.379" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.993110][ T4484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 45.994425][ T4488] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.388: invalid indirect mapped block 4294967295 (level 1) [ 46.007201][ T4484] System zones: [ 46.015821][ T4488] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.019586][ T4488] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.388: invalid indirect mapped block 4294967295 (level 1) [ 46.021073][ T4484] 1-12 [ 46.028757][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 46.028776][ C1] EXT4-fs (loop0): initial error at time 1781582035: ext4_free_branches:1023: inode 11 [ 46.061547][ C1] EXT4-fs (loop0): last error at time 1781582035: ext4_free_branches:1023: inode 11 [ 46.071364][ T4488] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.071446][ T4484] [ 46.083255][ T4488] EXT4-fs (loop0): 2 truncates cleaned up [ 46.085126][ T4484] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.386: bad orphan inode 131072 [ 46.089801][ T4488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.100434][ T4484] loop4: lost filesystem error report for type 5 error -117 [ 46.118893][ T4488] EXT4-fs error (device loop0): ext4_get_parent:1832: inode #11: comm syz.0.388: bad parent inode number: 3 [ 46.127104][ T4498] loop1: detected capacity change from 0 to 512 [ 46.144875][ T4484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.166235][ T4500] loop3: detected capacity change from 0 to 256 [ 46.173618][ T4498] EXT4-fs: Ignoring removed i_version option [ 46.184529][ T4498] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.192862][ T4498] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.392: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 46.196764][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.207893][ T4498] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.214818][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 46.229716][ T4500] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.232379][ C1] EXT4-fs (loop1): initial error at time 1781582036: ext4_xattr_inode_update_ref:1037: inode 11 [ 46.252747][ C1] EXT4-fs (loop1): last error at time 1781582036: ext4_xattr_inode_update_ref:1037: inode 11 [ 46.263781][ T4500] block device autoloading is deprecated and will be removed. [ 46.271291][ T4498] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.392: ea_inode dec ref err=-117 [ 46.271467][ T4498] EXT4-fs (loop1): 1 orphan inode deleted [ 46.292957][ T4498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.305978][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.306009][ T4498] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.376747][ T4505] loop3: detected capacity change from 0 to 256 [ 46.675314][ T4539] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 46.711261][ T4545] netlink: 'syz.1.414': attribute type 2 has an invalid length. [ 46.781916][ T4552] loop2: detected capacity change from 0 to 256 [ 46.975023][ T4571] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 47.035627][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 47.042114][ C1] EXT4-fs (loop4): initial error at time 1781582036: ext4_mb_generate_buddy:1317 [ 47.051359][ C1] EXT4-fs (loop4): last error at time 1781582036: ext4_mb_generate_buddy:1317 [ 47.051892][ T4571] EXT4-fs (loop4): Remounting filesystem read-only [ 47.080867][ T4571] EXT4-fs (loop4): 1 truncate cleaned up [ 47.086997][ T4571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.122600][ T4571] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 47.172800][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.280873][ T4582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.326179][ T4582] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.369960][ T4589] EXT4-fs: Ignoring removed nobh option [ 47.396126][ T4589] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 47.408122][ T4589] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.434: attempt to clear invalid blocks 1 len 1 [ 47.434103][ T4589] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.434389][ T4589] EXT4-fs (loop4): Remounting filesystem read-only [ 47.443683][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 47.443706][ C1] EXT4-fs (loop4): initial error at time 1781582037: ext4_clear_blocks:876: inode 13 [ 47.443739][ C1] EXT4-fs (loop4): last error at time 1781582037: ext4_clear_blocks:876: inode 13 [ 47.491840][ T4589] EXT4-fs (loop4): 1 truncate cleaned up [ 47.498163][ T4589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.077008][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.086630][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.250757][ T4619] __nla_validate_parse: 1 callbacks suppressed [ 48.250772][ T4619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.448'. [ 48.331428][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 48.363888][ T4631] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 48.383380][ T4637] vfat: Unknown parameter 'nnonumtail' [ 48.397415][ T4635] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.438836][ T4635] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 48.458197][ T4635] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 48.475106][ T4635] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.481635][ T4635] EXT4-fs warning (device loop1): ext4_enable_quotas:7267: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.496612][ T4635] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 48.509929][ T4635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.456: bg 0: block 40: padding at end of block bitmap is not set [ 48.536575][ T4635] loop1: lost filesystem error report for type 5 error -117 [ 48.538256][ T4635] EXT4-fs (loop1): Remounting filesystem read-only [ 48.545589][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 48.545611][ C0] EXT4-fs (loop1): initial error at time 1781582038: ext4_validate_block_bitmap:441 [ 48.545638][ C0] EXT4-fs (loop1): last error at time 1781582038: ext4_validate_block_bitmap:441 [ 48.559517][ T4656] random: crng reseeded on system resumption [ 48.568376][ T4635] EXT4-fs (loop1): 1 truncate cleaned up [ 48.589526][ T4635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.647037][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.693800][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 48.826572][ T4690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'. [ 48.837502][ T4690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'. [ 48.846922][ T4690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'. [ 48.889321][ T4697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.924653][ T4697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.974104][ T4697] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.019353][ T4697] EXT4-fs error (device loop3): ext4_generic_delete_entry:2673: inode #12: block 32: comm syz.3.486: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 49.106948][ T4697] EXT4-fs (loop3): Remounting filesystem read-only [ 49.189420][ T4739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4739 comm=syz.1.496 [ 49.207072][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.448124][ T4769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.463209][ T4769] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.491600][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.574526][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 49.583596][ T4785] tipc: Enabled bearer , priority 0 [ 49.596365][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.612582][ T4784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.630750][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.644060][ T4784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.774549][ T4811] set_capacity_and_notify: 10 callbacks suppressed [ 49.774566][ T4811] loop1: detected capacity change from 0 to 512 [ 49.794046][ T4811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.811494][ T4811] EXT4-fs (loop1): 1 truncate cleaned up [ 49.819592][ T4811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.851028][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.897543][ T4824] loop0: detected capacity change from 0 to 512 [ 49.921366][ T4824] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.939711][ T2980] ================================================================== [ 49.947824][ T2980] BUG: KCSAN: data-race in d_make_discardable / path_lookupat [ 49.955290][ T2980] [ 49.957601][ T2980] write to 0xffff888106b33cc0 of 4 bytes by task 3289 on cpu 1: [ 49.965238][ T2980] d_make_discardable+0x4f/0x90 [ 49.970094][ T2980] simple_unlink+0x68/0x80 [ 49.974502][ T2980] shmem_unlink+0x12d/0x140 [ 49.979005][ T2980] vfs_unlink+0x1c3/0x490 [ 49.983325][ T2980] filename_unlinkat+0x1dc/0x410 [ 49.988284][ T2980] __se_sys_unlink+0x2b/0xe0 [ 49.992876][ T2980] __x64_sys_unlink+0x1f/0x30 [ 49.997546][ T2980] x64_sys_call+0x2eb6/0x3020 [ 50.002248][ T2980] do_syscall_64+0x136/0x3c0 [ 50.006835][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.012721][ T2980] [ 50.015033][ T2980] read to 0xffff888106b33cc0 of 4 bytes by task 2980 on cpu 0: [ 50.022563][ T2980] path_lookupat+0x19b/0x4c0 [ 50.027154][ T2980] filename_lookup+0x18f/0x390 [ 50.031909][ T2980] do_readlinkat+0x74/0x2f0 [ 50.036412][ T2980] __x64_sys_readlink+0x47/0x60 [ 50.041273][ T2980] x64_sys_call+0x2b51/0x3020 [ 50.045959][ T2980] do_syscall_64+0x136/0x3c0 [ 50.050542][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.056427][ T2980] [ 50.058734][ T2980] value changed: 0x08300080 -> 0x00004080 [ 50.064432][ T2980] [ 50.066740][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 50.072897][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 50.081762][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 50.091809][ T2980] ================================================================== [ 50.116105][ T4824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.130486][ T4824] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.210786][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 50.210872][ T28] audit: type=1400 audit(1781582040.135:355): avc: denied { write } for pid=4826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.261967][ T28] audit: type=1400 audit(1781582040.185:356): avc: denied { write } for pid=4844 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.340830][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.448997][ T28] audit: type=1400 audit(1781582040.375:357): avc: denied { write } for pid=4847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.472521][ T28] audit: type=1400 audit(1781582040.375:358): avc: denied { write } for pid=4858 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.674829][ T11] tipc: Node number set to 4278255617