last executing test programs: 2.401938583s ago: executing program 3 (id=1736): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 2.359345588s ago: executing program 3 (id=1738): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0xfc, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100}}}}) 2.274976576s ago: executing program 3 (id=1741): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) 2.225768131s ago: executing program 3 (id=1744): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) 2.096987363s ago: executing program 3 (id=1751): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000040)) 2.02916519s ago: executing program 3 (id=1756): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, 0x0) 1.069357245s ago: executing program 4 (id=1820): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xff00, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 923.784539ms ago: executing program 4 (id=1830): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 883.131223ms ago: executing program 4 (id=1832): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000041c0)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004180)={&(0x7f00000040c0)={0xa0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5f}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "675cdec6ce54b7cd862b1b1c2b24f96c7dc101cbd74e83a7"}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2004c001}, 0x8000) 833.058388ms ago: executing program 4 (id=1833): r0 = socket$phonet(0x23, 0x2, 0x1) bind(r0, &(0x7f0000000a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x1, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, 0x80) 812.30045ms ago: executing program 4 (id=1835): r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='async\x00', 0x0, 0x0) 759.857485ms ago: executing program 4 (id=1838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 651.381256ms ago: executing program 2 (id=1842): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) 567.282894ms ago: executing program 2 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) 519.701439ms ago: executing program 2 (id=1851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xffffffffffffffcf, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x1ea6b, 0x5922b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 494.475031ms ago: executing program 1 (id=1852): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x18) fallocate(r0, 0x11, 0x7, 0x8) 465.339474ms ago: executing program 1 (id=1854): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) 440.226446ms ago: executing program 1 (id=1855): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 242.298126ms ago: executing program 0 (id=1858): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) 228.046298ms ago: executing program 0 (id=1859): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000740)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, '\x0fo\x14WjjG\x84\x06\xebg\xb3@a\xff`\xf9\xa1\xee\xf6t\\\xf7\x01n\xa3\xb3\xc1swY\x88~\xa3\x0e\xa9\xddb\x9b8\xdc\x04\x1d\xef\x90\xba%\x11\xc3\xcd\xc5\xb6Gc\x90*Ja\xecu\x1e\x90^\x16/\xbe#\xc1\a\xc1:\x1f\xab\xd5\x95\xd8 \xdd\xff\xc3\x84\x90\xd4\xd6\xbd.\xb2(\x00\xa2\v\xae\xb7*\x19\xb4\xd3\xe9\xaa[\xd3t\x11\x18\xa7\xdaM>\x00\x83\xd4i\x96A\xd7\xb0T\xb1\xf7j\x9e4<\x1f~6\x01\xa4\xc0\xa8v\x91\xca\x80O\x9c\xf3\xe8\xc1\xa7\xeb\xbc4\x840e\xcb\xca\xac\xb3\xd9\xdc\xcf\xf36O\xf3K\xc0\xd6\x03T\x18?\xf3\x11}c^\xc0\x9c\xc4L\xaa\xa5\"\x8f\xb2\x94\\\xd2\xf6\xa2\xae\x04g\x86\x0emI/\xc2e\xd1w\x9b\x90\xb7\x8bV\xe3l\x85\xa1\xa3\xda\t\xff\xc8\xefp\x05\xc9~[1\t\xc5\xd4\xca\x97\x1b\x0e\xbc\n\x9f=%\x87\x98\x87\xdb\x06$e\xbc\xf4\x0e\xf1o\x89\xe6{#*\xf9-\xd6Z\x86b\xf5\x9c\xa1\xef\xdcN\x8f', 0x3a, '', 0x3a, './file0'}, 0x129) 212.161209ms ago: executing program 1 (id=1860): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x2, 0x0, 0x0, @time={0xc, 0x5}, {}, {}, @raw32={[0x0, 0x80000]}}], 0x1c) 209.18534ms ago: executing program 0 (id=1861): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) 195.030701ms ago: executing program 2 (id=1862): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f00000000c0)=@random={'btrfs.', '\x00'}) 187.350502ms ago: executing program 0 (id=1863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 168.330784ms ago: executing program 1 (id=1864): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000880)="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", 0x1fc, r0) 104.39655ms ago: executing program 2 (id=1865): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x4040000}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x6}]}}}]}, 0x40}}, 0x0) 98.314141ms ago: executing program 0 (id=1866): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) process_mrelease(0xffffffffffffffff, 0x0) 81.118152ms ago: executing program 0 (id=1867): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNISCRNMAP(r0, 0x4b52, &(0x7f00000000c0)=""/110) 54.319765ms ago: executing program 1 (id=1868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffd3b703000008000000b704000002000000850000008200000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0xff6, &(0x7f0000001e00)=""/4086, 0x41100, 0x6}, 0x94) 0s ago: executing program 2 (id=1869): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 35.386902][ T29] audit: type=1400 audit(1761499808.672:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.417069][ T29] audit: type=1400 audit(1761499808.702:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.418155][ T3305] cgroup: Unknown subsys name 'net' [ 35.453451][ T29] audit: type=1400 audit(1761499808.732:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.597577][ T3305] cgroup: Unknown subsys name 'cpuset' [ 35.605861][ T3305] cgroup: Unknown subsys name 'rlimit' [ 35.716347][ T29] audit: type=1400 audit(1761499808.992:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.747523][ T29] audit: type=1400 audit(1761499809.002:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.772820][ T29] audit: type=1400 audit(1761499809.002:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.782447][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.797467][ T29] audit: type=1400 audit(1761499809.002:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.830649][ T29] audit: type=1400 audit(1761499809.002:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.840448][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.858888][ T29] audit: type=1400 audit(1761499809.002:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.895368][ T29] audit: type=1400 audit(1761499809.092:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.655041][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 37.725909][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 37.754704][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.780997][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 37.802688][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.811250][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.819841][ T3319] bridge_slave_0: entered allmulticast mode [ 37.827330][ T3319] bridge_slave_0: entered promiscuous mode [ 37.847781][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.856233][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.864796][ T3319] bridge_slave_1: entered allmulticast mode [ 37.872076][ T3319] bridge_slave_1: entered promiscuous mode [ 37.912386][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 37.949859][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.962540][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.973466][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.981688][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.989750][ T3315] bridge_slave_0: entered allmulticast mode [ 37.996678][ T3315] bridge_slave_0: entered promiscuous mode [ 38.019353][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.026831][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.034385][ T3315] bridge_slave_1: entered allmulticast mode [ 38.041485][ T3315] bridge_slave_1: entered promiscuous mode [ 38.079370][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.087105][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.095194][ T3323] bridge_slave_0: entered allmulticast mode [ 38.102270][ T3323] bridge_slave_0: entered promiscuous mode [ 38.112079][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.119443][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.127096][ T3316] bridge_slave_0: entered allmulticast mode [ 38.134322][ T3316] bridge_slave_0: entered promiscuous mode [ 38.141973][ T3319] team0: Port device team_slave_0 added [ 38.154219][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.164807][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.172699][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.180879][ T3323] bridge_slave_1: entered allmulticast mode [ 38.187618][ T3323] bridge_slave_1: entered promiscuous mode [ 38.197309][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.205010][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.212740][ T3316] bridge_slave_1: entered allmulticast mode [ 38.220134][ T3316] bridge_slave_1: entered promiscuous mode [ 38.228094][ T3319] team0: Port device team_slave_1 added [ 38.240873][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.289469][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.306650][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.317940][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.332609][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.340351][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.370426][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.384772][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.396740][ T3315] team0: Port device team_slave_0 added [ 38.413791][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.422002][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.429722][ T3329] bridge_slave_0: entered allmulticast mode [ 38.436881][ T3329] bridge_slave_0: entered promiscuous mode [ 38.444483][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.452118][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.481119][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.493435][ T3315] team0: Port device team_slave_1 added [ 38.509213][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.517058][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.526288][ T3329] bridge_slave_1: entered allmulticast mode [ 38.534107][ T3329] bridge_slave_1: entered promiscuous mode [ 38.555865][ T3316] team0: Port device team_slave_0 added [ 38.563087][ T3323] team0: Port device team_slave_0 added [ 38.586940][ T3316] team0: Port device team_slave_1 added [ 38.594052][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.601968][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.631124][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.643206][ T3323] team0: Port device team_slave_1 added [ 38.657464][ T3319] hsr_slave_0: entered promiscuous mode [ 38.664427][ T3319] hsr_slave_1: entered promiscuous mode [ 38.683827][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.691442][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.720088][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.738660][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.749691][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.767125][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.775055][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.803764][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.823367][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.830880][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.860977][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.883412][ T3329] team0: Port device team_slave_0 added [ 38.889717][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.897868][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.926591][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.946383][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.954149][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.984166][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.005000][ T3329] team0: Port device team_slave_1 added [ 39.033563][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.040950][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.070142][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.083442][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.092146][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.119478][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.137386][ T3315] hsr_slave_0: entered promiscuous mode [ 39.143653][ T3315] hsr_slave_1: entered promiscuous mode [ 39.149913][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 39.155993][ T3315] Cannot create hsr debugfs directory [ 39.193368][ T3323] hsr_slave_0: entered promiscuous mode [ 39.199653][ T3323] hsr_slave_1: entered promiscuous mode [ 39.206225][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 39.212560][ T3323] Cannot create hsr debugfs directory [ 39.230770][ T3316] hsr_slave_0: entered promiscuous mode [ 39.237535][ T3316] hsr_slave_1: entered promiscuous mode [ 39.243731][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 39.249714][ T3316] Cannot create hsr debugfs directory [ 39.271043][ T3329] hsr_slave_0: entered promiscuous mode [ 39.277730][ T3329] hsr_slave_1: entered promiscuous mode [ 39.284375][ T3329] debugfs: 'hsr0' already exists in 'hsr' [ 39.290919][ T3329] Cannot create hsr debugfs directory [ 39.482495][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.492583][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.506468][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.515787][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.549730][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.560104][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.574360][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.596606][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.605839][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.615703][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.625345][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.640899][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.678271][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.695446][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.705154][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.723056][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.732219][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.778121][ T3329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.789452][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.802083][ T3329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.812597][ T3329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.829076][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.837105][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.846852][ T3329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.861564][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.869641][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.890725][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.909891][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.925432][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.941066][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.950693][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.968654][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.977109][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.987206][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.011098][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.019049][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.037519][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.045948][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.092886][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.115362][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.139295][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.167050][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.180416][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.201105][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.209348][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.226664][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.239849][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.247519][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.278145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.286246][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.311167][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.318584][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.333791][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.360752][ T3329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.371767][ T3329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.429568][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.495401][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.514027][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.544674][ T3316] veth0_vlan: entered promiscuous mode [ 40.565276][ T3316] veth1_vlan: entered promiscuous mode [ 40.615532][ T3315] veth0_vlan: entered promiscuous mode [ 40.642077][ T3319] veth0_vlan: entered promiscuous mode [ 40.651646][ T3315] veth1_vlan: entered promiscuous mode [ 40.666075][ T3316] veth0_macvtap: entered promiscuous mode [ 40.675647][ T3316] veth1_macvtap: entered promiscuous mode [ 40.686230][ T3319] veth1_vlan: entered promiscuous mode [ 40.706662][ T3323] veth0_vlan: entered promiscuous mode [ 40.729378][ T3323] veth1_vlan: entered promiscuous mode [ 40.745623][ T3319] veth0_macvtap: entered promiscuous mode [ 40.755484][ T3319] veth1_macvtap: entered promiscuous mode [ 40.763256][ T3329] veth0_vlan: entered promiscuous mode [ 40.771489][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.784731][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.795926][ T3329] veth1_vlan: entered promiscuous mode [ 40.811822][ T3323] veth0_macvtap: entered promiscuous mode [ 40.824828][ T3315] veth0_macvtap: entered promiscuous mode [ 40.835650][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.846029][ T3323] veth1_macvtap: entered promiscuous mode [ 40.859728][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.870743][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.880127][ T3315] veth1_macvtap: entered promiscuous mode [ 40.892554][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.902431][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.910497][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.929567][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.937841][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.947182][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.961075][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.970972][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.988878][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.988894][ T29] audit: type=1400 audit(1761499814.272:81): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.UZbhWM/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.020562][ T29] audit: type=1400 audit(1761499814.272:82): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.043178][ T29] audit: type=1400 audit(1761499814.272:83): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.UZbhWM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.069788][ T29] audit: type=1400 audit(1761499814.272:84): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.093326][ T29] audit: type=1400 audit(1761499814.272:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.UZbhWM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.121125][ T29] audit: type=1400 audit(1761499814.272:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.UZbhWM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.149847][ T29] audit: type=1400 audit(1761499814.272:87): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.170515][ T29] audit: type=1400 audit(1761499814.302:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.172123][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.194186][ T29] audit: type=1400 audit(1761499814.302:89): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=4867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.208454][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.237057][ T3329] veth0_macvtap: entered promiscuous mode [ 41.245076][ T3329] veth1_macvtap: entered promiscuous mode [ 41.247031][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.253952][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.282507][ T29] audit: type=1400 audit(1761499814.562:90): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.318779][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.340312][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.354760][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.365377][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.383649][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.391862][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.440623][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.484948][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.532781][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.555239][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.580980][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.623468][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.648100][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 41.658441][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.674614][ T3509] netlink: 'syz.2.12': attribute type 10 has an invalid length. [ 41.687247][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.110171][ T3577] veth0_to_bridge: entered promiscuous mode [ 42.141886][ T3577] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 42.343948][ T3607] loop0: detected capacity change from 0 to 512 [ 42.379031][ T3607] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 42.411823][ T3607] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.445495][ T3607] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.59: Failed to acquire dquot type 1 [ 42.537600][ T3607] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.59: bg 0: block 40: padding at end of block bitmap is not set [ 42.557988][ T3634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.71'. [ 42.568770][ T3634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 42.585765][ T3607] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 42.602223][ T3607] EXT4-fs (loop0): 1 truncate cleaned up [ 42.622510][ T3607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.664391][ T3644] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 42.704060][ T3607] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 42.730153][ T3651] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 42.759433][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.941315][ T3671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 43.129922][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 43.139839][ T3692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.98'. [ 43.149563][ T3692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.98'. [ 43.409488][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 43.858727][ T3761] bond1: option downdelay: invalid value (18446744073709551615) [ 43.867861][ T3761] bond1: option downdelay: allowed values 0 - 2147483647 [ 43.880458][ T3761] bond1 (unregistering): Released all slaves [ 43.952788][ T3771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.132'. [ 44.323883][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 44.425012][ T3821] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 44.503482][ T3829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.160'. [ 44.512931][ T3829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.160'. [ 44.558760][ T3832] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 44.945504][ T3880] loop4: detected capacity change from 0 to 512 [ 44.994113][ T3880] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.184: inode has both inline data and extents flags [ 45.071544][ T3880] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.184: couldn't read orphan inode 15 (err -117) [ 45.100388][ T3886] loop0: detected capacity change from 0 to 512 [ 45.123662][ T3880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.147062][ T3890] xt_TPROXY: Can be used only with -p tcp or -p udp [ 45.165790][ T3886] ------------[ cut here ]------------ [ 45.172159][ T3886] EA inode 11 i_nlink=2 [ 45.172471][ T3886] WARNING: CPU: 1 PID: 3886 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 45.188456][ T3886] Modules linked in: [ 45.192614][ T3886] CPU: 1 UID: 0 PID: 3886 Comm: syz.0.186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.203746][ T3886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 45.215117][ T3886] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 45.223001][ T3886] Code: 90 49 8d 7e 40 e8 76 fd b8 ff 4d 8b 6e 40 4c 89 e7 e8 8a f8 b8 ff 41 8b 56 48 48 c7 c7 87 c7 55 86 4c 89 ee e8 87 fb 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 c9 b5 03 0f 1f 84 00 00 00 00 00 [ 45.243571][ T3886] RSP: 0018:ffffc9000f8b35a0 EFLAGS: 00010246 [ 45.250109][ T3886] RAX: b13092c632b35300 RBX: ffff8881099a01a8 RCX: 0000000000080000 [ 45.258436][ T3886] RDX: ffffc90001fe9000 RSI: 000000000000408c RDI: 000000000000408d [ 45.266693][ T3886] RBP: 0000000000000002 R08: 0001c9000f8b3427 R09: 0000000000000000 [ 45.275277][ T3886] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881099a0158 [ 45.283722][ T3886] R13: 000000000000000b R14: ffff8881099a0110 R15: 0000000000000001 [ 45.292376][ T3886] FS: 00007fd89fccf6c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 45.301854][ T3886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.309472][ T3886] CR2: 00002000000f8000 CR3: 000000011a7a2000 CR4: 00000000003506f0 [ 45.319192][ T3886] Call Trace: [ 45.323536][ T3886] [ 45.326883][ T3886] ext4_xattr_set_entry+0x77f/0x1020 [ 45.332838][ T3886] ext4_xattr_ibody_set+0x184/0x3c0 [ 45.339249][ T3886] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 45.346178][ T3886] __ext4_expand_extra_isize+0x246/0x280 [ 45.353561][ T3886] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 45.359773][ T3886] ext4_evict_inode+0x80e/0xd90 [ 45.365854][ T3886] ? __pfx_ext4_evict_inode+0x10/0x10 [ 45.372629][ T3886] evict+0x2e3/0x550 [ 45.377654][ T3886] ? __dquot_initialize+0x146/0x7c0 [ 45.384883][ T3886] iput+0x4ed/0x650 [ 45.389415][ T3886] ext4_process_orphan+0x1a9/0x1c0 [ 45.395166][ T3886] ext4_orphan_cleanup+0x6a8/0xa00 [ 45.400854][ T3886] ext4_fill_super+0x3483/0x3810 [ 45.407334][ T3886] ? snprintf+0x86/0xb0 [ 45.412607][ T3886] ? set_blocksize+0x1a8/0x310 [ 45.417903][ T3886] ? sb_set_blocksize+0xe3/0x100 [ 45.423382][ T3886] ? setup_bdev_super+0x30e/0x370 [ 45.429481][ T3886] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.435146][ T3886] get_tree_bdev_flags+0x291/0x300 [ 45.440668][ T3886] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.446464][ T3886] get_tree_bdev+0x1f/0x30 [ 45.451673][ T3886] ext4_get_tree+0x1c/0x30 [ 45.456265][ T3886] vfs_get_tree+0x57/0x1d0 [ 45.461427][ T3886] do_new_mount+0x24d/0x660 [ 45.466703][ T3886] path_mount+0x4a5/0xb70 [ 45.471928][ T3886] ? user_path_at+0x109/0x130 [ 45.477093][ T3886] __se_sys_mount+0x28c/0x2e0 [ 45.482257][ T3886] __x64_sys_mount+0x67/0x80 [ 45.487519][ T3886] x64_sys_call+0x2b51/0x3000 [ 45.493190][ T3886] do_syscall_64+0xd2/0x200 [ 45.497884][ T3886] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.504607][ T3886] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 45.510850][ T3886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.517409][ T3886] RIP: 0033:0x7fd8a127076a [ 45.522664][ T3886] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.543382][ T3886] RSP: 002b:00007fd89fccee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.552774][ T3886] RAX: ffffffffffffffda RBX: 00007fd89fcceef0 RCX: 00007fd8a127076a [ 45.562086][ T3886] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd89fcceeb0 [ 45.570670][ T3886] RBP: 0000200000000180 R08: 00007fd89fcceef0 R09: 0000000001a08700 [ 45.579086][ T3886] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 45.587299][ T3886] R13: 00007fd89fcceeb0 R14: 0000000000000470 R15: 0000200000000700 [ 45.595646][ T3886] [ 45.598812][ T3886] ---[ end trace 0000000000000000 ]--- [ 45.605578][ T3886] EXT4-fs (loop0): 1 orphan inode deleted [ 45.607432][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.611822][ T3886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.678641][ T3908] sctp: [Deprecated]: syz.4.191 (pid 3908) Use of int in max_burst socket option deprecated. [ 45.678641][ T3908] Use struct sctp_assoc_value instead [ 45.697311][ T3886] syz.0.186 (3886) used greatest stack depth: 10680 bytes left [ 45.760481][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.872769][ T3927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.023332][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 46.023350][ T29] audit: type=1400 audit(1761499819.302:208): avc: denied { setopt } for pid=3951 comm="syz.4.219" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.102352][ T3959] netlink: 'syz.1.221': attribute type 39 has an invalid length. [ 46.221609][ T3974] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 46.357134][ T29] audit: type=1400 audit(1761499819.642:209): avc: denied { write } for pid=3987 comm="syz.1.236" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.408035][ T3991] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.236' sets config #-1 [ 46.408600][ T3998] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 46.449487][ T29] audit: type=1400 audit(1761499819.722:210): avc: denied { create } for pid=4000 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.465286][ T3998] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 46.470374][ T29] audit: type=1400 audit(1761499819.732:211): avc: denied { setopt } for pid=4000 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.576942][ T29] audit: type=1400 audit(1761499819.852:212): avc: denied { create } for pid=4012 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.581751][ T4015] netlink: 'syz.3.247': attribute type 5 has an invalid length. [ 46.621765][ T29] audit: type=1400 audit(1761499819.892:213): avc: denied { write } for pid=4012 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.704278][ T29] audit: type=1400 audit(1761499819.942:214): avc: denied { read write } for pid=4023 comm="syz.0.251" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.730402][ T29] audit: type=1400 audit(1761499819.942:215): avc: denied { open } for pid=4023 comm="syz.0.251" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.768831][ T4034] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 46.794726][ T29] audit: type=1400 audit(1761499819.982:216): avc: denied { getopt } for pid=4030 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.814067][ T4038] netlink: 'syz.3.258': attribute type 1 has an invalid length. [ 46.823012][ T4038] __nla_validate_parse: 3 callbacks suppressed [ 46.823026][ T4038] netlink: 224 bytes leftover after parsing attributes in process `syz.3.258'. [ 46.886903][ T4043] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.261'. [ 46.933049][ T4048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.263'. [ 46.936880][ T29] audit: type=1326 audit(1761499820.072:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4035 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f59d6efc9 code=0x7ffc0000 [ 47.039725][ T4063] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 47.116790][ T4071] netlink: 'syz.1.272': attribute type 2 has an invalid length. [ 47.124957][ T4071] netlink: 51 bytes leftover after parsing attributes in process `syz.1.272'. [ 47.176511][ T4080] bond1: Removing last ns target with arp_interval on [ 47.539244][ T4122] netlink: 'syz.1.297': attribute type 46 has an invalid length. [ 47.552241][ T4119] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.650886][ T4134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 47.661120][ T4134] netlink: 'syz.1.302': attribute type 1 has an invalid length. [ 47.776096][ T4154] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.777986][ T4155] netlink: 'syz.4.313': attribute type 13 has an invalid length. [ 47.873298][ T4165] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.317'. [ 48.055624][ T4182] loop1: detected capacity change from 0 to 1764 [ 48.121072][ T4182] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 48.191842][ T4204] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 48.231026][ T4208] netlink: 'syz.0.338': attribute type 27 has an invalid length. [ 48.270724][ T4212] IPv6: NLM_F_REPLACE set, but no existing node found! [ 48.358103][ T4226] ipvlan1: entered promiscuous mode [ 48.363948][ T4226] ipvlan1: entered allmulticast mode [ 48.370277][ T4226] veth0_vlan: entered allmulticast mode [ 48.581438][ T4258] netlink: 'syz.3.364': attribute type 2 has an invalid length. [ 48.678514][ T4270] ip6t_REJECT: ECHOREPLY is not supported [ 48.751351][ T4284] No such timeout policy "syz0" [ 48.871703][ T4300] loop0: detected capacity change from 0 to 1024 [ 48.900378][ T4308] program syz.4.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.915546][ T4300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.945715][ T4314] netlink: 'syz.3.391': attribute type 10 has an invalid length. [ 48.965589][ T4300] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 48.977443][ T4300] System zones: 0-1, 3-36 [ 48.994173][ T4300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.011130][ T4312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.027541][ T4314] team0: Device dummy0 is up. Set it down before adding it as a team port [ 49.075619][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.076419][ T4324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.395'. [ 49.111381][ T4326] loop1: detected capacity change from 0 to 512 [ 49.167503][ T4326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.183184][ T4326] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.204972][ T4326] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.397: corrupted xattr block 6: invalid header [ 49.235476][ T4326] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 49.259600][ T4326] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.397: corrupted xattr block 6: invalid header [ 49.267564][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 49.283708][ T4326] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 49.285135][ T4343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 49.304836][ T4326] EXT4-fs error (device loop1): ext4_xattr_block_find:1874: inode #12: comm syz.1.397: corrupted xattr block 6: invalid header [ 49.362498][ T4350] Cannot find add_set index 2 as target [ 49.382528][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.385223][ T4354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.409'. [ 49.484365][ T4368] xt_hashlimit: overflow, rate too high: 0 [ 49.518761][ T4374] 0{X: renamed from gretap0 (while UP) [ 49.531768][ T4374] 0{X: entered allmulticast mode [ 49.543774][ T4374] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 50.153701][ T4457] netlink: 'syz.4.459': attribute type 21 has an invalid length. [ 50.276022][ T4471] loop3: detected capacity change from 0 to 256 [ 50.299619][ T4471] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.357123][ T4471] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.390150][ T2968] IPVS: starting estimator thread 0... [ 50.443885][ T4486] loop0: detected capacity change from 0 to 512 [ 50.473015][ T4492] loop2: detected capacity change from 0 to 128 [ 50.486918][ T4484] IPVS: using max 2352 ests per chain, 117600 per kthread [ 50.506572][ T4492] FAT-fs (loop2): Directory bread(block 414) failed [ 50.519478][ T4492] FAT-fs (loop2): Directory bread(block 415) failed [ 50.534003][ T4486] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 50.546600][ T4492] FAT-fs (loop2): Directory bread(block 416) failed [ 50.565135][ T4492] FAT-fs (loop2): Directory bread(block 417) failed [ 50.575647][ T4486] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.585872][ T4492] FAT-fs (loop2): Directory bread(block 418) failed [ 50.593535][ T4492] FAT-fs (loop2): Directory bread(block 419) failed [ 50.600998][ T4492] FAT-fs (loop2): Directory bread(block 420) failed [ 50.608284][ T4492] FAT-fs (loop2): Directory bread(block 421) failed [ 50.611194][ T4486] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 50.642921][ T4492] FAT-fs (loop2): Directory bread(block 414) failed [ 50.655956][ T4492] FAT-fs (loop2): Directory bread(block 415) failed [ 50.669873][ T4486] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 50.699914][ T4486] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.470: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 50.736752][ T4503] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 50.737762][ T4486] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.470: couldn't read orphan inode 13 (err -117) [ 50.762629][ T4486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.781250][ T4503] SELinux: failed to load policy [ 50.847843][ T4486] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.470: deleted inode referenced: 12 [ 50.953412][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.000928][ T4527] xt_TCPMSS: Only works on TCP SYN packets [ 51.115559][ T4541] capability: warning: `syz.3.497' uses deprecated v2 capabilities in a way that may be insecure [ 51.173416][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 51.173431][ T29] audit: type=1400 audit(1761499824.452:275): avc: denied { execmem } for pid=4544 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.222093][ T29] audit: type=1400 audit(1761499824.503:276): avc: denied { bind } for pid=4551 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.246860][ T29] audit: type=1400 audit(1761499824.503:277): avc: denied { name_bind } for pid=4551 comm="syz.1.501" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.271385][ T29] audit: type=1400 audit(1761499824.503:278): avc: denied { node_bind } for pid=4551 comm="syz.1.501" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 51.356403][ T4557] ip6erspan0: entered promiscuous mode [ 51.375487][ T29] audit: type=1400 audit(1761499824.653:279): avc: denied { search } for pid=3044 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.404762][ T29] audit: type=1400 audit(1761499824.653:280): avc: denied { search } for pid=3044 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.428846][ T29] audit: type=1400 audit(1761499824.653:281): avc: denied { search } for pid=3044 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.453687][ T29] audit: type=1400 audit(1761499824.653:282): avc: denied { read } for pid=3044 comm="dhcpcd" name="n25" dev="tmpfs" ino=2424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.479193][ T29] audit: type=1400 audit(1761499824.653:283): avc: denied { open } for pid=3044 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.505523][ T29] audit: type=1400 audit(1761499824.653:284): avc: denied { getattr } for pid=3044 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=2424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.752950][ T4601] loop3: detected capacity change from 0 to 512 [ 51.803945][ T4601] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.844074][ T4601] EXT4-fs (loop3): failed to initialize system zone (-117) [ 51.867464][ T4601] EXT4-fs (loop3): mount failed [ 52.302880][ T4677] veth0_macvtap: left promiscuous mode [ 52.417472][ T4692] validate_nla: 1 callbacks suppressed [ 52.417512][ T4692] netlink: 'syz.2.553': attribute type 1 has an invalid length. [ 52.432095][ T4692] netlink: 'syz.2.553': attribute type 2 has an invalid length. [ 52.473523][ T4692] __nla_validate_parse: 7 callbacks suppressed [ 52.473613][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 52.496303][ T4702] netlink: 'syz.0.559': attribute type 10 has an invalid length. [ 52.523955][ T4702] ipvlan0: entered allmulticast mode [ 52.530020][ T4702] veth0_vlan: entered allmulticast mode [ 52.577216][ T4706] loop2: detected capacity change from 0 to 256 [ 52.587534][ T4702] team0: Device ipvlan0 failed to register rx_handler [ 52.611822][ T4702] syz.0.559 (4702) used greatest stack depth: 10640 bytes left [ 53.082276][ T4767] futex_wake_op: syz.3.589 tries to shift op by -1; fix this program [ 53.124975][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 53.185870][ T4778] bridge1: entered promiscuous mode [ 53.244418][ T4786] loop3: detected capacity change from 0 to 512 [ 53.248199][ T4787] netlink: 2 bytes leftover after parsing attributes in process `syz.0.603'. [ 53.264074][ T4789] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.604'. [ 53.274646][ T4789] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 53.318565][ T4794] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 53.409053][ T4809] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 53.751394][ T4859] netlink: 'syz.1.637': attribute type 10 has an invalid length. [ 53.787489][ T4859] team0: Device dummy0 is up. Set it down before adding it as a team port [ 53.827720][ T4869] SELinux: Context Y7j [ 53.827720][ T4869] u/$2Sٟ2'ks2- vjd #,N< [ 53.827720][ T4869] :E]Y\?ͼ=ً1KIk{kL^0}4nr}pįNwyxiu?+H~F1Wjm &8UۂVN2)GxV%5xeRM4r4cJsHU&'p2EMMk&cbU,,f@8bD%$f=8@kI|w Ox&KCH;x-Ko4i!Oi%ڂ2 F"2E,P] k? is not valid (left unmapped). [ 53.902520][ T4869] SELinux: Context *mkXI$hx4۫KM is not valid (left unmapped). [ 53.932102][ T4869] SELinux: Context KM*,hcIǾû̋y+.+y0[pr;JA9Iq jǼ=7)oM{nF=XmnxrD㑉垳4TW}t%ȖY^slFB53hm5};JXom%~"~9mM~alʺLI8i&Zw8 lX&D;td BIݛ~L [ 54.042176][ T4869] uSċkxIRI$4"lX7f9٬bB|72*kNM is not valid (left unmapped). [ 54.042325][ T4869] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeoQ[aSI> is not valid (left unmapped). [ 54.244510][ T4916] netlink: 200 bytes leftover after parsing attributes in process `syz.4.662'. [ 54.320047][ T4924] netlink: 'syz.1.666': attribute type 17 has an invalid length. [ 54.341601][ T4926] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 54.353906][ T4926] bond2 (unregistering): Released all slaves [ 54.371611][ T4924] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 54.499810][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 54.513457][ T4945] tmpfs: Bad value for 'mpol' [ 54.555888][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 54.562143][ T4954] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 54.655465][ T4965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.686'. [ 54.691902][ T4967] netlink: 'syz.3.688': attribute type 12 has an invalid length. [ 54.700355][ T4967] netlink: 132 bytes leftover after parsing attributes in process `syz.3.688'. [ 54.915065][ T5000] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.704' sets config #1 [ 55.029696][ T5015] xt_hashlimit: max too large, truncated to 1048576 [ 55.043257][ T5015] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.108268][ T5032] loop3: detected capacity change from 0 to 128 [ 55.166575][ T5037] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 55.385950][ T5071] netlink: 'syz.1.738': attribute type 21 has an invalid length. [ 55.416242][ T5071] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 55.537728][ T3417] IPVS: starting estimator thread 0... [ 55.636627][ T5096] IPVS: using max 2016 ests per chain, 100800 per kthread [ 55.649971][ T5112] netlink: 'syz.2.758': attribute type 21 has an invalid length. [ 55.750233][ T5127] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.765'. [ 55.797108][ T5127] netlink: zone id is out of range [ 55.802982][ T5127] netlink: zone id is out of range [ 55.844440][ T5127] netlink: del zone limit has 8 unknown bytes [ 55.865595][ T5143] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.906095][ T5143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.915749][ T5143] IPv6: NLM_F_CREATE should be set when creating new route [ 55.941096][ T5153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.006368][ T5159] loop1: detected capacity change from 0 to 512 [ 56.028442][ T5159] EXT4-fs: Ignoring removed bh option [ 56.045343][ T5164] bridge2: entered promiscuous mode [ 56.051711][ T5164] bridge2: entered allmulticast mode [ 56.070705][ T5159] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.085567][ T5159] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.096149][ T5159] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 56.117174][ T5159] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 56.130903][ T5159] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 56.161995][ T5159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.233262][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.248004][ T5187] ip6erspan0: entered promiscuous mode [ 56.386394][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 56.386411][ T29] audit: type=1400 audit(1761499829.495:350): avc: denied { name_bind } for pid=5210 comm="syz.3.806" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 56.429668][ T5214] loop2: detected capacity change from 0 to 512 [ 56.454469][ T5217] 9p: Unknown Cache mode or invalid value mfap [ 56.454895][ T5214] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 56.527546][ T5214] EXT4-fs (loop2): invalid journal inode [ 56.534301][ T5214] EXT4-fs (loop2): can't get journal size [ 56.548433][ T5214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 56.561755][ T29] audit: type=1400 audit(1761499829.654:351): avc: denied { write } for pid=5227 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.597330][ T5214] System zones: 1-12, 13-13 [ 56.609435][ T5214] EXT4-fs (loop2): 1 truncate cleaned up [ 56.621423][ T5214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.666710][ T5214] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.808: bg 0: block 255: padding at end of block bitmap is not set [ 56.682316][ T29] audit: type=1400 audit(1761499829.757:352): avc: denied { remove_name } for pid=5213 comm="syz.2.808" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.702014][ T5245] Cannot find del_set index 16384 as target [ 56.705959][ T29] audit: type=1400 audit(1761499829.757:353): avc: denied { rename } for pid=5213 comm="syz.2.808" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.738519][ T29] audit: type=1400 audit(1761499829.757:354): avc: denied { add_name } for pid=5213 comm="syz.2.808" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.765986][ T29] audit: type=1400 audit(1761499829.757:355): avc: denied { unlink } for pid=5213 comm="syz.2.808" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.798621][ T5214] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 56.876456][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.971771][ T5275] IPv6: Can't replace route, no match found [ 57.044255][ T5281] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 57.068472][ T5281] gretap1: entered allmulticast mode [ 57.213903][ T5305] tc_dump_action: action bad kind [ 57.323589][ T29] audit: type=1400 audit(1761499830.365:356): avc: denied { write } for pid=5315 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.513172][ T29] audit: type=1400 audit(1761499830.534:357): avc: denied { module_load } for pid=5340 comm="syz.0.869" path="/sys/kernel/notes" dev="sysfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 57.672056][ T5365] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 57.757332][ T5375] __nla_validate_parse: 9 callbacks suppressed [ 57.757348][ T5375] netlink: 324 bytes leftover after parsing attributes in process `syz.0.885'. [ 57.922874][ T5385] netlink: 48 bytes leftover after parsing attributes in process `syz.0.889'. [ 57.967561][ T5385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'. [ 57.979459][ T5385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'. [ 57.996954][ T29] audit: type=1400 audit(1761499830.974:358): avc: denied { setcheckreqprot } for pid=5388 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.125042][ T29] audit: type=1400 audit(1761499831.114:359): avc: denied { append } for pid=5403 comm="syz.4.900" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.141490][ T5408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.199491][ T5414] capability: warning: `syz.0.903' uses 32-bit capabilities (legacy support in use) [ 58.436421][ T5447] loop0: detected capacity change from 0 to 128 [ 58.467380][ T5447] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.503085][ T5447] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.562569][ T5456] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.924'. [ 58.572497][ T5456] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 58.587748][ T5461] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 6, id = 0 [ 58.608988][ T5447] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.919: No space for directory leaf checksum. Please run e2fsck -D. [ 58.625400][ T5447] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.919: checksumming directory block 0 [ 58.695814][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.713303][ T5469] sctp: [Deprecated]: syz.3.930 (pid 5469) Use of int in maxseg socket option. [ 58.713303][ T5469] Use struct sctp_assoc_value instead [ 58.806427][ T5480] ieee802154 phy1 wpan1: encryption failed: -22 [ 58.904657][ T5490] geneve2: entered promiscuous mode [ 58.910729][ T5490] geneve2: entered allmulticast mode [ 58.972694][ T179] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 58.990422][ T179] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.013252][ T115] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.043776][ T115] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.151011][ T5523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.208151][ T5536] netlink: 60 bytes leftover after parsing attributes in process `syz.1.963'. [ 59.245913][ T5538] usb usb1: usbfs: process 5538 (syz.4.965) did not claim interface 0 before use [ 59.312165][ T5547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.970'. [ 59.329315][ T5553] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 59.603568][ T5597] netlink: 'syz.2.993': attribute type 12 has an invalid length. [ 59.612132][ T5597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.993'. [ 59.743391][ T5617] xt_limit: Overflow, try lower: 0/0 [ 59.869957][ T5633] loop3: detected capacity change from 0 to 1764 [ 59.931306][ T5645] netlink: 'syz.2.1016': attribute type 1 has an invalid length. [ 59.939479][ T5645] netlink: 'syz.2.1016': attribute type 2 has an invalid length. [ 59.994930][ T5653] loop0: detected capacity change from 0 to 128 [ 60.138579][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 60.148656][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 60.167459][ T5679] vti0: entered promiscuous mode [ 60.173330][ T5679] vti0: entered allmulticast mode [ 60.193882][ T5682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5682 comm=syz.1.1035 [ 60.216626][ T5686] netlink: 'syz.0.1036': attribute type 21 has an invalid length. [ 60.224733][ T5686] netlink: 'syz.0.1036': attribute type 4 has an invalid length. [ 60.264934][ T5692] xt_TCPMSS: Only works on TCP SYN packets [ 60.301709][ T5696] program syz.2.1043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.676067][ T5752] loop0: detected capacity change from 0 to 512 [ 60.704894][ T5752] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.757006][ T5752] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 60.852036][ T5779] random: crng reseeded on system resumption [ 60.860146][ T5778] 9p: Unknown Cache mode or invalid value mfa [ 60.873583][ T5781] loop2: detected capacity change from 0 to 1024 [ 60.905819][ T5781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.932268][ T5781] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 42: comm syz.2.1083: bad entry in directory: rec_len % 4 != 0 - offset=10240, inode=0, rec_len=151, size=1024 fake=0 [ 61.025512][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.164273][ T5829] netlink: zone id is out of range [ 61.167645][ T5830] ip6erspan0: entered promiscuous mode [ 61.170629][ T5829] netlink: zone id is out of range [ 61.182996][ T5829] netlink: del zone limit has 8 unknown bytes [ 61.193840][ T5832] netlink: 'syz.2.1100': attribute type 4 has an invalid length. [ 61.226914][ T5832] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 61.542572][ T5886] Cannot find del_set index 16384 as target [ 61.591530][ T5894] netlink: 'syz.3.1129': attribute type 39 has an invalid length. [ 61.655262][ T5902] netlink: 'syz.4.1135': attribute type 2 has an invalid length. [ 61.769480][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 61.769499][ T29] audit: type=1326 audit(1761499834.531:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f59d6efc9 code=0x7ffc0000 [ 61.770284][ T5922] syz.4.1144 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.807562][ T29] audit: type=1326 audit(1761499834.531:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f0f59d6efc9 code=0x7ffc0000 [ 61.889109][ T29] audit: type=1326 audit(1761499834.615:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f59d6efc9 code=0x7ffc0000 [ 61.918048][ T29] audit: type=1326 audit(1761499834.615:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f59d6efc9 code=0x7ffc0000 [ 62.042587][ T5945] SET target dimension over the limit! [ 62.232962][ T5976] netlink: 'syz.1.1170': attribute type 4 has an invalid length. [ 62.270974][ T5976] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 62.376965][ T29] audit: type=1400 audit(1761499835.092:404): avc: denied { mount } for pid=5996 comm="syz.3.1181" name="/" dev="configfs" ino=1988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 62.747261][ T6053] loop1: detected capacity change from 0 to 128 [ 62.793191][ T6053] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.813675][ T6053] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.840803][ T6068] netlink: 'syz.3.1216': attribute type 30 has an invalid length. [ 62.852080][ T6053] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.1210: No space for directory leaf checksum. Please run e2fsck -D. [ 62.869590][ T6053] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.1210: checksumming directory block 0 [ 62.892436][ T6068] bond1: option arp_missed_max: invalid value (0) [ 62.899814][ T6068] bond1: option arp_missed_max: allowed values 1 - 255 [ 62.933071][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.945350][ T6068] bond1 (unregistering): Released all slaves [ 63.001788][ T6083] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 63.202583][ T6116] __nla_validate_parse: 12 callbacks suppressed [ 63.202599][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1236'. [ 63.219230][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1236'. [ 63.229568][ T6116] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1236'. [ 63.229989][ T6110] xt_CT: No such helper "snmp_trap" [ 63.377091][ T6136] ieee802154 phy1 wpan1: encryption failed: -22 [ 63.402720][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 63.446261][ T6141] vlan0: entered allmulticast mode [ 63.451733][ T6141] veth0_vlan: entered allmulticast mode [ 63.466768][ T29] audit: type=1400 audit(1761499836.112:405): avc: granted { setsecparam } for pid=6149 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 63.552556][ T6160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1262'. [ 63.553789][ T6162] C: renamed from team_slave_0 (while UP) [ 63.576295][ T6162] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1259'. [ 63.596151][ T6162] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 63.701169][ T29] audit: type=1400 audit(1761499836.337:406): avc: denied { audit_control } for pid=6177 comm="syz.3.1271" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.769725][ T6188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1275'. [ 63.779405][ T6188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1275'. [ 63.792404][ T6190] loop0: detected capacity change from 0 to 512 [ 63.820305][ T29] audit: type=1400 audit(1761499836.449:407): avc: denied { ioctl } for pid=6194 comm="syz.4.1278" path="socket:[13186]" dev="sockfs" ino=13186 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.820339][ T6190] ======================================================= [ 63.820339][ T6190] WARNING: The mand mount option has been deprecated and [ 63.820339][ T6190] and is ignored by this kernel. Remove the mand [ 63.820339][ T6190] option from the mount to silence this warning. [ 63.820339][ T6190] ======================================================= [ 63.854207][ T6188] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 63.901897][ T6188] bond1 (unregistering): Released all slaves [ 63.970874][ T6199] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.1280'. [ 64.001012][ T29] audit: type=1400 audit(1761499836.627:408): avc: denied { wake_alarm } for pid=6203 comm="syz.2.1282" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.064507][ T6209] IPv6: sit1: Disabled Multicast RS [ 64.147811][ T6221] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.171068][ T29] audit: type=1400 audit(1761499836.777:409): avc: denied { read } for pid=6220 comm="syz.4.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 64.199044][ T6227] loop0: detected capacity change from 0 to 512 [ 64.238960][ T6233] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1297'. [ 64.289769][ T6227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.310793][ T6227] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.370671][ T6227] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1294: bg 0: block 201: padding at end of block bitmap is not set [ 64.386983][ T6227] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1294: Failed to acquire dquot type 1 [ 64.434368][ T6227] syz.0.1294 (6227) used greatest stack depth: 10456 bytes left [ 64.450069][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.676901][ T6298] xt_TCPMSS: Only works on TCP SYN packets [ 65.178866][ T6377] validate_nla: 5 callbacks suppressed [ 65.178884][ T6377] netlink: 'syz.4.1361': attribute type 1 has an invalid length. [ 65.403578][ T6411] 9p: Unknown Cache mode or invalid value mfa [ 65.699703][ T6453] loop1: detected capacity change from 0 to 1024 [ 65.745849][ T6453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.795931][ T6453] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 42: comm syz.1.1397: bad entry in directory: rec_len % 4 != 0 - offset=10240, inode=0, rec_len=151, size=1024 fake=0 [ 65.846140][ T6480] netlink: 'syz.3.1410': attribute type 2 has an invalid length. [ 65.854395][ T6480] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 65.884401][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.026842][ T6506] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 66.213840][ T6539] netlink: 'syz.4.1436': attribute type 2 has an invalid length. [ 66.533393][ T6587] netlink: 'syz.2.1459': attribute type 4 has an invalid length. [ 66.944581][ T6656] netlink: 'syz.2.1494': attribute type 21 has an invalid length. [ 66.970865][ T6656] netlink: 'syz.2.1494': attribute type 4 has an invalid length. [ 66.978989][ T6656] netlink: 'syz.2.1494': attribute type 5 has an invalid length. [ 67.210308][ T6693] netlink: 'syz.0.1513': attribute type 5 has an invalid length. [ 67.274719][ T6700] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 67.282869][ T6700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.291601][ T6700] vhci_hcd vhci_hcd.0: Device attached [ 67.310761][ T6705] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 67.346058][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 67.346116][ T29] audit: type=1400 audit(1761499839.754:436): avc: denied { cpu } for pid=6709 comm="syz.2.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 67.422422][ T6716] loop2: detected capacity change from 0 to 512 [ 67.534071][ T6730] netlink: 'syz.2.1528': attribute type 30 has an invalid length. [ 67.547808][ T3417] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 67.593151][ T6730] bond2: option arp_missed_max: invalid value (0) [ 67.600169][ T6730] bond2: option arp_missed_max: allowed values 1 - 255 [ 67.613089][ T6730] bond2 (unregistering): Released all slaves [ 67.776791][ T6754] loop2: detected capacity change from 0 to 512 [ 67.799515][ T6754] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.868094][ T6760] loop4: detected capacity change from 0 to 512 [ 67.901676][ T6754] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1542: bad orphan inode 131083 [ 67.913332][ T6760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.922431][ T6754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.938344][ T6760] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.956637][ T29] audit: type=1400 audit(1761499840.325:437): avc: denied { create } for pid=6759 comm="syz.4.1545" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 67.988244][ T29] audit: type=1400 audit(1761499840.353:438): avc: denied { setattr } for pid=6753 comm="syz.2.1542" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.032932][ T6701] vhci_hcd: connection reset by peer [ 68.050322][ T37] vhci_hcd: stop threads [ 68.053315][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.054901][ T37] vhci_hcd: release socket [ 68.054971][ T37] vhci_hcd: disconnect device [ 68.092916][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.293604][ T29] audit: type=1400 audit(1761499840.633:439): avc: denied { create } for pid=6805 comm="syz.2.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.363385][ T29] audit: type=1400 audit(1761499840.662:440): avc: denied { ioctl } for pid=6805 comm="syz.2.1565" path="socket:[15300]" dev="sockfs" ino=15300 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.434511][ T29] audit: type=1400 audit(1761499840.746:441): avc: denied { write } for pid=6812 comm="syz.3.1570" name="file0" dev="tmpfs" ino=1614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.460298][ T29] audit: type=1400 audit(1761499840.746:442): avc: denied { open } for pid=6812 comm="syz.3.1570" path="/318/file0" dev="tmpfs" ino=1614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.485254][ T29] audit: type=1400 audit(1761499840.755:443): avc: denied { unlink } for pid=3329 comm="syz-executor" name="file0" dev="tmpfs" ino=1614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.547625][ T29] audit: type=1400 audit(1761499840.821:444): avc: denied { create } for pid=6824 comm="syz.0.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.567815][ T29] audit: type=1400 audit(1761499840.821:445): avc: denied { bind } for pid=6824 comm="syz.0.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.629008][ T6846] __nla_validate_parse: 14 callbacks suppressed [ 68.629027][ T6846] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1585'. [ 68.648524][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1586'. [ 69.002942][ T6905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.010605][ T6905] IPv6: NLM_F_CREATE should be set when creating new route [ 69.018159][ T6905] IPv6: NLM_F_CREATE should be set when creating new route [ 69.453853][ T6979] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1652'. [ 69.525260][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'. [ 69.685750][ T7014] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 69.872059][ T7042] nft_compat: unsupported protocol 5 [ 69.881363][ T7044] netlink: 723 bytes leftover after parsing attributes in process `syz.3.1683'. [ 69.949562][ T7056] x_tables: unsorted entry at hook 2 [ 70.058572][ T7070] xt_TCPMSS: Only works on TCP SYN packets [ 70.087089][ T7076] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1700'. [ 70.112321][ T7078] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1702'. [ 70.139755][ T7076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.183881][ T7086] xt_hashlimit: max too large, truncated to 1048576 [ 70.196507][ T7086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.247364][ T7096] loop3: detected capacity change from 0 to 128 [ 70.328522][ T7106] loop0: detected capacity change from 0 to 512 [ 70.358870][ T7106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 70.372880][ T7106] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.387306][ T7112] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1718'. [ 70.401725][ T7106] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.1715: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 70.440962][ T7106] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1715: couldn't read orphan inode 13 (err -117) [ 70.456299][ T7106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.482428][ T7127] ipt_ECN: cannot use operation on non-tcp rule [ 70.514348][ T7106] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 70.558873][ T7139] validate_nla: 5 callbacks suppressed [ 70.558890][ T7139] netlink: 'syz.2.1728': attribute type 46 has an invalid length. [ 70.573272][ T7106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 70.602047][ T7106] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 70.625388][ T7106] ext4 filesystem being remounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.679748][ T7154] bond1: option min_links: invalid value (18446744073709551608) [ 70.687735][ T7154] bond1: option min_links: allowed values 0 - 2147483647 [ 70.701676][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.717307][ T7154] bond1 (unregistering): Released all slaves [ 70.735180][ T7157] $H: renamed from bond0 (while UP) [ 70.744705][ T7157] $H: entered promiscuous mode [ 70.749933][ T7157] bond_slave_0: entered promiscuous mode [ 70.756325][ T7157] bond_slave_1: entered promiscuous mode [ 70.776817][ T7166] batadv1: entered promiscuous mode [ 70.782078][ T7166] batadv1: entered allmulticast mode [ 70.915410][ T7184] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1748'. [ 70.996006][ T7190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1752'. [ 71.365826][ T7250] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 71.383182][ T7251] bond0: entered allmulticast mode [ 71.408752][ T7256] loop0: detected capacity change from 0 to 764 [ 71.438401][ T7259] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 71.525609][ T7264] veth4: entered promiscuous mode [ 71.530958][ T7264] veth4: entered allmulticast mode [ 71.538025][ T7266] loop0: detected capacity change from 0 to 512 [ 71.596322][ T7266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.618753][ T7266] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.644562][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.027042][ T7333] netlink: 'syz.4.1820': attribute type 10 has an invalid length. [ 72.044720][ T7333] dummy0: entered promiscuous mode [ 72.067860][ T7333] bridge0: port 3(dummy0) entered blocking state [ 72.074305][ T7333] bridge0: port 3(dummy0) entered disabled state [ 72.077607][ T7341] netlink: 'syz.1.1821': attribute type 3 has an invalid length. [ 72.089101][ T7333] dummy0: entered allmulticast mode [ 72.099386][ T7333] bridge0: port 3(dummy0) entered blocking state [ 72.105835][ T7333] bridge0: port 3(dummy0) entered forwarding state [ 72.698399][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 72.698416][ T29] audit: type=1326 audit(1761499844.761:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a126efc9 code=0x7ffc0000 [ 72.729062][ T29] audit: type=1326 audit(1761499844.761:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fd8a126efc9 code=0x7ffc0000 [ 72.754769][ T29] audit: type=1326 audit(1761499844.761:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a126efc9 code=0x7ffc0000 [ 72.780170][ T29] audit: type=1326 audit(1761499844.761:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a126efc9 code=0x7ffc0000 [ 72.902352][ T3417] usb 1-1: enqueue for inactive port 0 [ 72.907951][ T3417] usb 1-1: enqueue for inactive port 0 [ 72.916139][ T29] audit: type=1400 audit(1761499844.930:479): avc: denied { setattr } for pid=7417 comm="syz.2.1862" name="" dev="pipefs" ino=17545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 72.959269][ T7423] Invalid option length (0) for dns_resolver key [ 72.998599][ T3417] vhci_hcd: vhci_device speed not set [ 73.022002][ T3005] ================================================================== [ 73.032098][ T3005] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 73.039257][ T3005] [ 73.041876][ T3005] read-write to 0xffff8881098990c0 of 4 bytes by task 3984 on cpu 0: [ 73.050942][ T3005] dont_mount+0x2a/0x40 [ 73.055710][ T3005] vfs_unlink+0x28f/0x420 [ 73.060150][ T3005] do_unlinkat+0x24e/0x480 [ 73.064911][ T3005] __x64_sys_unlink+0x2e/0x40 [ 73.069924][ T3005] x64_sys_call+0x2dcf/0x3000 [ 73.074986][ T3005] do_syscall_64+0xd2/0x200 [ 73.079679][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.086488][ T3005] [ 73.089032][ T3005] read to 0xffff8881098990c0 of 4 bytes by task 3005 on cpu 1: [ 73.097414][ T3005] lookup_fast+0xf0/0x320 [ 73.101797][ T3005] walk_component+0x3f/0x220 [ 73.106939][ T3005] path_lookupat+0xfe/0x2a0 [ 73.111828][ T3005] filename_lookup+0x147/0x340 [ 73.116617][ T3005] do_readlinkat+0x7d/0x320 [ 73.121129][ T3005] __x64_sys_readlink+0x47/0x60 [ 73.125993][ T3005] x64_sys_call+0x28de/0x3000 [ 73.130773][ T3005] do_syscall_64+0xd2/0x200 [ 73.135306][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.141211][ T3005] [ 73.143554][ T3005] value changed: 0x00300080 -> 0x00004080 [ 73.149363][ T3005] [ 73.151708][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 73.158322][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.169546][ T3005] Tainted: [W]=WARN [ 73.173387][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.183826][ T3005] ================================================================== [ 73.210375][ T7433] netlink: 'syz.2.1869': attribute type 10 has an invalid length. [ 73.226368][ T7433] macvlan1: entered promiscuous mode [ 73.232289][ T7433] macvlan1: entered allmulticast mode [ 73.252413][ T7433] veth1_vlan: entered allmulticast mode [ 73.260119][ T7433] bond0: (slave macvlan1): Enslaving as an active interface with an up link