last executing test programs: 8.194205088s ago: executing program 1 (id=489): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 8.069094182s ago: executing program 1 (id=492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 7.171816263s ago: executing program 1 (id=507): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.797059466s ago: executing program 1 (id=511): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e) 6.701212389s ago: executing program 1 (id=512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000002e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000000000), 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 6.260298805s ago: executing program 1 (id=527): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5}, 0x94) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 6.210732486s ago: executing program 32 (id=527): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5}, 0x94) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 5.733597763s ago: executing program 2 (id=535): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x2) 5.682368254s ago: executing program 2 (id=536): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x14, 0x0, 0xb, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4044014) 5.494826601s ago: executing program 2 (id=539): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="20040000f403000129bd"], 0x420}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffefef7b, 0x0, 0x2, 0x10, "1b09000040000000000000e678000000101000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 4.916886521s ago: executing program 2 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4.861343493s ago: executing program 2 (id=546): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000240)=[{r1, 0x610a}, {r1, 0x1600}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.446305767s ago: executing program 2 (id=553): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003f40), 0xfe, 0x28c, &(0x7f0000004240)="$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") creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 4.427995788s ago: executing program 33 (id=553): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003f40), 0xfe, 0x28c, &(0x7f0000004240)="$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") creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 2.226149934s ago: executing program 4 (id=564): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80c4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) nanosleep(0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x7f, 0x4) 2.187881205s ago: executing program 4 (id=565): unshare(0x2a020400) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) 1.279900886s ago: executing program 4 (id=573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa95aa86dd608a37f200142c00fe8000000000000000000000000000bbff0f"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.218985618s ago: executing program 5 (id=574): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.030258375s ago: executing program 3 (id=576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="91818de6d49a", @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@generic={0x9200}}}, 0x0) 1.007800865s ago: executing program 3 (id=577): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000180)={[{@nombcache}, {@errors_remount}, {@inlinecrypt}, {@norecovery}, {@nodioread_nolock}, {@debug}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 1.005318336s ago: executing program 4 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 928.851039ms ago: executing program 5 (id=579): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 791.792093ms ago: executing program 4 (id=580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 742.438935ms ago: executing program 4 (id=581): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x7}, {0x6, 0x2}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 631.497349ms ago: executing program 6 (id=554): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000680)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000006c0)="49e9", 0x2}], 0x1}, 0x4000000) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @local}}, 0x8003, 0xbffc, 0xe652, 0x1, 0x134, 0x48, 0x7}, 0x9c) 572.157981ms ago: executing program 0 (id=583): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001000030425bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="000500000000b7000a00010059"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) 529.158352ms ago: executing program 5 (id=584): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') getdents64(r2, 0x0, 0x0) 484.717574ms ago: executing program 5 (id=585): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0x6}, {0x10, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x10000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 454.636565ms ago: executing program 5 (id=586): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0xfffffffffffffd36}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 407.762537ms ago: executing program 0 (id=587): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 389.727737ms ago: executing program 0 (id=588): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x4000200a}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580)) 360.225478ms ago: executing program 0 (id=589): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002dc0)=[{&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)="e7", 0x1}], 0x1, &(0x7f0000000880)=[@sndrcv={0x30, 0x84, 0x1, {0xfd0e, 0x7, 0x2, 0x7, 0x5, 0x3, 0x4, 0x0, r3}}], 0x30, 0x24040800}], 0x1, 0x40080) 359.395068ms ago: executing program 5 (id=590): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) 341.584989ms ago: executing program 0 (id=591): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 291.49469ms ago: executing program 0 (id=592): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) 130.873256ms ago: executing program 3 (id=593): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85def352b66e12df"}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 100.718947ms ago: executing program 3 (id=594): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xf, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 66.560028ms ago: executing program 3 (id=595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0x10d, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0xc05, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x5}, {0x5, 0xfff1}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x20044084) 0s ago: executing program 3 (id=596): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): [ 19.331807][ T28] audit: type=1400 audit(1775126030.545:62): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.353966][ T28] audit: type=1400 audit(1775126030.545:63): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.377134][ T28] audit: type=1400 audit(1775126030.545:64): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.400678][ T28] audit: type=1400 audit(1775126030.545:65): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.424121][ T28] audit: type=1400 audit(1775126030.555:66): avc: denied { read open } for pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 25.634260][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 25.634277][ T28] audit: type=1400 audit(1775126036.855:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.664465][ T28] audit: type=1400 audit(1775126036.885:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.665189][ T3299] cgroup: Unknown subsys name 'net' [ 25.692590][ T28] audit: type=1400 audit(1775126036.915:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.862772][ T3299] cgroup: Unknown subsys name 'cpuset' [ 25.869122][ T3299] cgroup: Unknown subsys name 'rlimit' [ 25.969231][ T28] audit: type=1400 audit(1775126037.185:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.992952][ T28] audit: type=1400 audit(1775126037.185:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.014732][ T28] audit: type=1400 audit(1775126037.185:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.035488][ T28] audit: type=1400 audit(1775126037.185:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.056572][ T28] audit: type=1400 audit(1775126037.185:77): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.078828][ T28] audit: type=1400 audit(1775126037.185:78): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.085618][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.104265][ T28] audit: type=1400 audit(1775126037.185:79): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.156810][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.284266][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.300169][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.326642][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.351716][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 27.418194][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.453757][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.461102][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.468552][ T3311] bridge_slave_0: entered allmulticast mode [ 27.475158][ T3311] bridge_slave_0: entered promiscuous mode [ 27.486365][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.493767][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.501247][ T3311] bridge_slave_1: entered allmulticast mode [ 27.507801][ T3311] bridge_slave_1: entered promiscuous mode [ 27.522607][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.529857][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.537249][ T3313] bridge_slave_0: entered allmulticast mode [ 27.543722][ T3313] bridge_slave_0: entered promiscuous mode [ 27.569276][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.576433][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.583659][ T3313] bridge_slave_1: entered allmulticast mode [ 27.590092][ T3313] bridge_slave_1: entered promiscuous mode [ 27.605031][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.612320][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.619696][ T3318] bridge_slave_0: entered allmulticast mode [ 27.626337][ T3318] bridge_slave_0: entered promiscuous mode [ 27.636130][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.645612][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.652940][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.660230][ T3322] bridge_slave_0: entered allmulticast mode [ 27.666861][ T3322] bridge_slave_0: entered promiscuous mode [ 27.678038][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.685191][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.692518][ T3322] bridge_slave_1: entered allmulticast mode [ 27.699096][ T3322] bridge_slave_1: entered promiscuous mode [ 27.705591][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.712983][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.720399][ T3318] bridge_slave_1: entered allmulticast mode [ 27.727037][ T3318] bridge_slave_1: entered promiscuous mode [ 27.736582][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.746991][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.774241][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.797463][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.820131][ T3311] team0: Port device team_slave_0 added [ 27.826856][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.837038][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.846647][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.854015][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.861235][ T3316] bridge_slave_0: entered allmulticast mode [ 27.867806][ T3316] bridge_slave_0: entered promiscuous mode [ 27.875422][ T3311] team0: Port device team_slave_1 added [ 27.881060][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.888197][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.895465][ T3316] bridge_slave_1: entered allmulticast mode [ 27.901903][ T3316] bridge_slave_1: entered promiscuous mode [ 27.909290][ T3313] team0: Port device team_slave_0 added [ 27.919631][ T3313] team0: Port device team_slave_1 added [ 27.926525][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.971718][ T3322] team0: Port device team_slave_0 added [ 27.978565][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.992451][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.999498][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.026055][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.037853][ T3318] team0: Port device team_slave_0 added [ 28.044273][ T3322] team0: Port device team_slave_1 added [ 28.050806][ T3318] team0: Port device team_slave_1 added [ 28.057354][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.066838][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.073952][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.100159][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.111318][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.118557][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.145521][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.173233][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.180648][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.208569][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.244444][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.251421][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.279388][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.296757][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.304598][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.337652][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.349598][ T3316] team0: Port device team_slave_0 added [ 28.356712][ T3316] team0: Port device team_slave_1 added [ 28.371583][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.379909][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.408083][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.421737][ T3311] hsr_slave_0: entered promiscuous mode [ 28.428005][ T3311] hsr_slave_1: entered promiscuous mode [ 28.439869][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.447366][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.475230][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.486773][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.493761][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.521107][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.533269][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.540610][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.567216][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.607107][ T3316] hsr_slave_0: entered promiscuous mode [ 28.613241][ T3316] hsr_slave_1: entered promiscuous mode [ 28.619207][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.625178][ T3316] Cannot create hsr debugfs directory [ 28.649399][ T3313] hsr_slave_0: entered promiscuous mode [ 28.655488][ T3313] hsr_slave_1: entered promiscuous mode [ 28.661708][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 28.667591][ T3313] Cannot create hsr debugfs directory [ 28.711826][ T3322] hsr_slave_0: entered promiscuous mode [ 28.718153][ T3322] hsr_slave_1: entered promiscuous mode [ 28.724233][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 28.730056][ T3322] Cannot create hsr debugfs directory [ 28.748404][ T3318] hsr_slave_0: entered promiscuous mode [ 28.754591][ T3318] hsr_slave_1: entered promiscuous mode [ 28.760409][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 28.766377][ T3318] Cannot create hsr debugfs directory [ 28.913304][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.922210][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.943158][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.954424][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.986898][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.996678][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.007167][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.019284][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.058698][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.070055][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.079900][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.089359][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.122903][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.133053][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.149140][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.156773][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.165710][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.199731][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.210964][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.220474][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.229613][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.247398][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.258744][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.276667][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.283991][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.294702][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.301908][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.321230][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.343006][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.350838][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.380199][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.389424][ T1647] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.397491][ T1647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.420539][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.442849][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.457078][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.488570][ T1647] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.497067][ T1647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.509233][ T1647] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.516339][ T1647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.530931][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.547995][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.555294][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.573843][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.582944][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.590235][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.608773][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.635928][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.644916][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.651982][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.661098][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.668219][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.717492][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.786671][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.833608][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.849177][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.879800][ T3311] veth0_vlan: entered promiscuous mode [ 29.901986][ T3311] veth1_vlan: entered promiscuous mode [ 29.938362][ T3316] veth0_vlan: entered promiscuous mode [ 29.964134][ T3311] veth0_macvtap: entered promiscuous mode [ 29.983112][ T3311] veth1_macvtap: entered promiscuous mode [ 30.003533][ T3316] veth1_vlan: entered promiscuous mode [ 30.013940][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.045968][ T3313] veth0_vlan: entered promiscuous mode [ 30.056318][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.069849][ T3313] veth1_vlan: entered promiscuous mode [ 30.081372][ T3316] veth0_macvtap: entered promiscuous mode [ 30.096287][ T3318] veth0_vlan: entered promiscuous mode [ 30.103504][ T3316] veth1_macvtap: entered promiscuous mode [ 30.115700][ T149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.128758][ T149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.140080][ T149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.155022][ T149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.168995][ T3318] veth1_vlan: entered promiscuous mode [ 30.176113][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.196013][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.212895][ T3322] veth0_vlan: entered promiscuous mode [ 30.233342][ T1647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.242277][ T1647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.254261][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.257695][ T3322] veth1_vlan: entered promiscuous mode [ 30.276497][ T3313] veth0_macvtap: entered promiscuous mode [ 30.284209][ T1647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.293509][ T1647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.327007][ T3313] veth1_macvtap: entered promiscuous mode [ 30.338992][ T3318] veth0_macvtap: entered promiscuous mode [ 30.358630][ T3322] veth0_macvtap: entered promiscuous mode [ 30.371202][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.379846][ T3318] veth1_macvtap: entered promiscuous mode [ 30.405070][ T3322] veth1_macvtap: entered promiscuous mode [ 30.415500][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.429429][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.445709][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.460472][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.470208][ T1647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.479620][ T1647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.495231][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.510304][ T1647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.525468][ T1647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.545761][ T1647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.562893][ T1647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.571840][ T1647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.623792][ T1647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.651639][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 30.651657][ T28] audit: type=1400 audit(1775126041.865:136): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.683095][ T1647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.693339][ T1647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.710303][ T1647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.735355][ T1647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.804458][ T3502] loop3: detected capacity change from 0 to 256 [ 30.825269][ T3502] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.841716][ C1] hrtimer: interrupt took 35571 ns [ 30.852039][ T28] audit: type=1400 audit(1775126042.065:137): avc: denied { mount } for pid=3501 comm="syz.3.4" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.888241][ T28] audit: type=1400 audit(1775126042.105:138): avc: denied { remount } for pid=3501 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.961647][ T28] audit: type=1400 audit(1775126042.155:139): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.126220][ T28] audit: type=1400 audit(1775126042.345:140): avc: denied { name_bind } for pid=3514 comm="syz.0.14" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.207892][ T28] audit: type=1400 audit(1775126042.345:141): avc: denied { node_bind } for pid=3514 comm="syz.0.14" saddr=::ffff:127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.299774][ T28] audit: type=1400 audit(1775126042.505:142): avc: denied { map } for pid=3526 comm="syz.0.19" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=3896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.361930][ T3530] loop0: detected capacity change from 0 to 512 [ 31.389589][ T3530] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.416611][ T28] audit: type=1400 audit(1775126042.505:143): avc: denied { read write } for pid=3526 comm="syz.0.19" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=3896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.507687][ T28] audit: type=1400 audit(1775126042.505:144): avc: denied { ioctl } for pid=3526 comm="syz.0.19" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=3896 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.546855][ T28] audit: type=1400 audit(1775126042.725:145): avc: denied { create } for pid=3533 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.586648][ T3530] EXT4-fs (loop0): 1 orphan inode deleted [ 31.610612][ T1647] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 1 [ 31.638557][ T3530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.663327][ T3530] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.882803][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.045662][ T3541] loop3: detected capacity change from 0 to 512 [ 32.098045][ T3541] EXT4-fs (loop3): 1 truncate cleaned up [ 32.130205][ T3541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.261866][ T3548] loop1: detected capacity change from 0 to 512 [ 32.289303][ T3549] mmap: syz.3.24 (3549) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.314621][ T3548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.332443][ T3548] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.488377][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.515033][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.771344][ T3574] loop1: detected capacity change from 0 to 4096 [ 32.799159][ T3574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.869400][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.178634][ T3587] pim6reg1: entered allmulticast mode [ 33.245845][ T3577] loop2: detected capacity change from 0 to 32768 [ 33.411608][ T3595] netlink: 56 bytes leftover after parsing attributes in process `syz.4.45'. [ 33.492165][ T3595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 33.814917][ T3614] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 33.866029][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.873791][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.904374][ T3615] bridge0: entered allmulticast mode [ 33.917365][ T3613] bridge_slave_1: left allmulticast mode [ 33.941925][ T3613] bridge_slave_1: left promiscuous mode [ 33.964050][ T3613] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.979579][ T3613] bridge_slave_0: left allmulticast mode [ 33.988106][ T3613] bridge_slave_0: left promiscuous mode [ 33.994964][ T3613] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.544108][ T3666] Illegal XDP return value 4294967294 on prog (id 24) dev syz_tun, expect packet loss! [ 34.604535][ T3669] loop2: detected capacity change from 0 to 512 [ 34.644235][ T3669] EXT4-fs: Ignoring removed nobh option [ 34.679335][ T3669] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.732066][ T3669] EXT4-fs (loop2): 1 truncate cleaned up [ 34.738206][ T3669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.770401][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.063004][ T3688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 35.093222][ T3688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.81'. [ 35.246978][ T3688] vxlan0: entered promiscuous mode [ 35.255472][ T3688] vxlan0: entered allmulticast mode [ 35.292299][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.301139][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.315054][ T3688] syz.3.81 (3688) used greatest stack depth: 9544 bytes left [ 35.335574][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.347451][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.410462][ T3700] geneve2: entered promiscuous mode [ 35.420044][ T3700] geneve2: entered allmulticast mode [ 35.427608][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 35.448288][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 35.485387][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 35.498988][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 35.906640][ T3713] loop2: detected capacity change from 0 to 512 [ 35.936868][ T3713] ======================================================= [ 35.936868][ T3713] WARNING: The mand mount option has been deprecated and [ 35.936868][ T3713] and is ignored by this kernel. Remove the mand [ 35.936868][ T3713] option from the mount to silence this warning. [ 35.936868][ T3713] ======================================================= [ 35.982353][ T3713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.017526][ T3713] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.93: corrupted inode contents [ 36.063974][ T3713] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.064133][ T3713] EXT4-fs (loop2): Remounting filesystem read-only [ 36.073684][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 36.073703][ C1] EXT4-fs (loop2): initial error at time 1775126047: ext4_do_update_inode:5602: inode 15 [ 36.073746][ C1] EXT4-fs (loop2): last error at time 1775126047: ext4_do_update_inode:5602: inode 15 [ 36.204578][ T3713] EXT4-fs (loop2): 1 orphan inode deleted [ 36.224921][ T3713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.227933][ T3717] loop4: detected capacity change from 0 to 128 [ 36.361373][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.394907][ T3720] syz.4.94: attempt to access beyond end of device [ 36.394907][ T3720] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 36.462178][ T3720] syz.4.94: attempt to access beyond end of device [ 36.462178][ T3720] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 36.497546][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 36.497563][ T28] audit: type=1400 audit(1775126047.715:192): avc: denied { name_bind } for pid=3724 comm="syz.2.96" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.557224][ T3720] syz.4.94: attempt to access beyond end of device [ 36.557224][ T3720] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 36.573042][ T28] audit: type=1400 audit(1775126047.775:193): avc: denied { name_bind } for pid=3727 comm="syz.0.97" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 36.637471][ T3732] loop3: detected capacity change from 0 to 512 [ 36.648273][ T3732] EXT4-fs: Ignoring removed nobh option [ 36.658508][ T3720] syz.4.94: attempt to access beyond end of device [ 36.658508][ T3720] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 36.680139][ T3732] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.694954][ T28] audit: type=1400 audit(1775126047.855:194): avc: denied { read write } for pid=3730 comm="syz.0.100" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 36.727994][ T3735] loop2: detected capacity change from 0 to 1764 [ 36.737851][ T3732] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.753509][ T3720] syz.4.94: attempt to access beyond end of device [ 36.753509][ T3720] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 36.774389][ T28] audit: type=1400 audit(1775126047.855:195): avc: denied { open } for pid=3730 comm="syz.0.100" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 36.789835][ T3735] iso9660: Unknown parameter 'ÿ' [ 36.804601][ T3720] syz.4.94: attempt to access beyond end of device [ 36.804601][ T3720] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 36.835040][ T3732] EXT4-fs (loop3): 1 truncate cleaned up [ 36.841327][ T3732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.855756][ T3720] syz.4.94: attempt to access beyond end of device [ 36.855756][ T3720] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 36.879542][ T3739] netlink: 27 bytes leftover after parsing attributes in process `syz.0.102'. [ 36.912436][ T3720] syz.4.94: attempt to access beyond end of device [ 36.912436][ T3720] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 36.944099][ T3720] syz.4.94: attempt to access beyond end of device [ 36.944099][ T3720] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 37.004107][ T3720] syz.4.94: attempt to access beyond end of device [ 37.004107][ T3720] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 37.163162][ T28] audit: type=1400 audit(1775126048.375:196): avc: denied { create } for pid=3747 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.237685][ T28] audit: type=1400 audit(1775126048.375:197): avc: denied { setopt } for pid=3747 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.375079][ T3750] loop1: detected capacity change from 0 to 128 [ 37.385057][ T3749] syz.4.107 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 37.403717][ T3749] CPU: 1 UID: 0 PID: 3749 Comm: syz.4.107 Not tainted syzkaller #0 PREEMPT(full) [ 37.403819][ T3749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.403833][ T3749] Call Trace: [ 37.403840][ T3749] [ 37.403849][ T3749] __dump_stack+0x1d/0x30 [ 37.403952][ T3749] dump_stack_lvl+0x95/0xd0 [ 37.403992][ T3749] dump_stack+0x15/0x1b [ 37.404019][ T3749] dump_header+0x80/0x240 [ 37.404114][ T3749] oom_kill_process+0x295/0x350 [ 37.404180][ T3749] out_of_memory+0x97d/0xb80 [ 37.404205][ T3749] try_charge_memcg+0x62e/0xa10 [ 37.404275][ T3749] obj_cgroup_charge_pages+0x23/0xc0 [ 37.404372][ T3749] __memcg_kmem_charge_page+0x9e/0x170 [ 37.404453][ T3749] __alloc_frozen_pages_noprof+0x18a/0x360 [ 37.404554][ T3749] alloc_pages_bulk_noprof+0x4aa/0x530 [ 37.404612][ T3749] ? policy_nodemask+0x417/0x5e0 [ 37.404645][ T3749] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 37.404681][ T3749] alloc_pages_bulk_mempolicy_noprof+0x35b/0xeb0 [ 37.404770][ T3749] ? alloc_pages_mpol+0x217/0x260 [ 37.404804][ T3749] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 37.404840][ T3749] __kvmalloc_node_noprof+0x3d4/0x650 [ 37.404890][ T3749] ? futex_hash_allocate+0x190/0x9d0 [ 37.404923][ T3749] ? futex_hash_allocate+0x190/0x9d0 [ 37.405019][ T3749] futex_hash_allocate+0x190/0x9d0 [ 37.405055][ T3749] ? cap_task_prctl+0x13f/0x6e0 [ 37.405080][ T3749] futex_hash_prctl+0xd8/0xf0 [ 37.405105][ T3749] __se_sys_prctl+0xa3d/0x13f0 [ 37.405138][ T3749] __x64_sys_prctl+0x67/0x80 [ 37.405170][ T3749] x64_sys_call+0x2533/0x3020 [ 37.405261][ T3749] do_syscall_64+0x12c/0x370 [ 37.405295][ T3749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.405321][ T3749] RIP: 0033:0x7fb64003c819 [ 37.405342][ T3749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.405362][ T3749] RSP: 002b:00007fb63ea8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 37.405467][ T3749] RAX: ffffffffffffffda RBX: 00007fb6402b5fa0 RCX: 00007fb64003c819 [ 37.405483][ T3749] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 37.405495][ T3749] RBP: 00007fb6400d2c91 R08: 0000000000000000 R09: 0000000000000000 [ 37.405579][ T3749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.405592][ T3749] R13: 00007fb6402b6038 R14: 00007fb6402b5fa0 R15: 00007ffef2ddbf28 [ 37.405614][ T3749] [ 37.662076][ T28] audit: type=1400 audit(1775126048.375:198): avc: denied { connect } for pid=3747 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.674723][ T3756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.110'. [ 37.685473][ T28] audit: type=1326 audit(1775126048.475:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaea0c819 code=0x7ffc0000 [ 37.717102][ T3749] memory: usage 289780kB, limit 307200kB, failcnt 56 [ 37.724209][ T3749] memory+swap: usage 289780kB, limit 9007199254740988kB, failcnt 0 [ 37.734265][ T3749] kmem: usage 289296kB, limit 9007199254740988kB, failcnt 0 [ 37.742068][ T28] audit: type=1326 audit(1775126048.475:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaea0c819 code=0x7ffc0000 [ 37.767133][ T28] audit: type=1326 audit(1775126048.475:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3751 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaea0c819 code=0x7ffc0000 [ 37.767453][ T3749] Memory cgroup stats for /syz4: [ 37.874276][ T3749] cache 114688 [ 37.913310][ T3749] rss 184320 [ 37.928490][ T3749] shmem 0 [ 37.933861][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.942129][ T3749] mapped_file 114688 [ 37.953309][ T3749] dirty 114688 [ 37.975689][ T3749] writeback 0 [ 38.115296][ T3749] workingset_refault_anon 0 [ 38.159724][ T3749] workingset_refault_file 0 [ 38.169007][ T3749] swap 0 [ 38.179077][ T3749] swapcached 0 [ 38.186223][ T3749] pgpgin 4111 [ 38.199712][ T3749] pgpgout 4038 [ 38.222158][ T3749] pgfault 8987 [ 38.233154][ T3775] loop0: detected capacity change from 0 to 2048 [ 38.234586][ T3749] pgmajfault 2 [ 38.255193][ T3749] inactive_anon 184320 [ 38.259785][ T3749] active_anon 0 [ 38.264597][ T3749] inactive_file 0 [ 38.269512][ T3749] active_file 114688 [ 38.279801][ T3775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.282736][ T3749] unevictable 0 [ 38.304612][ T3749] hierarchical_memory_limit 314572800 [ 38.315986][ T3749] hierarchical_memsw_limit 9223372036854771712 [ 38.330167][ T3749] total_cache 114688 [ 38.334402][ T3749] total_rss 184320 [ 38.338554][ T3749] total_shmem 0 [ 38.344341][ T3749] total_mapped_file 114688 [ 38.348878][ T3749] total_dirty 114688 [ 38.353195][ T3749] total_writeback 0 [ 38.357082][ T3749] total_workingset_refault_anon 0 [ 38.363068][ T3749] total_workingset_refault_file 0 [ 38.368158][ T3749] total_swap 0 [ 38.371685][ T3749] total_swapcached 0 [ 38.375880][ T3749] total_pgpgin 4111 [ 38.379762][ T3749] total_pgpgout 4038 [ 38.384058][ T3749] total_pgfault 8987 [ 38.388221][ T3749] total_pgmajfault 2 [ 38.392338][ T3749] total_inactive_anon 184320 [ 38.397195][ T3749] total_active_anon 0 [ 38.401472][ T3749] total_inactive_file 0 [ 38.405825][ T3749] total_active_file 114688 [ 38.410568][ T3749] total_unevictable 0 [ 38.414684][ T3749] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.107,pid=3747,uid=0 [ 38.429589][ T3749] Memory cgroup out of memory: Killed process 3749 (syz.4.107) total-vm:96080kB, anon-rss:1404kB, file-rss:22252kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 38.463216][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.606184][ T3791] tipc: Started in network mode [ 38.622097][ T3791] tipc: Node identity 4, cluster identity 4711 [ 38.632114][ T3791] tipc: Node number set to 4 [ 38.763874][ T3802] loop1: detected capacity change from 0 to 512 [ 38.851239][ T3802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.876201][ T3802] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.127: iget: bad i_size value: 38620345925642 [ 38.889470][ T3802] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.889636][ T3802] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.127: couldn't read orphan inode 15 (err -117) [ 38.900801][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 38.900827][ C0] EXT4-fs (loop1): initial error at time 1775126050: ext4_orphan_get:1397: inode 15 [ 38.900855][ C0] EXT4-fs (loop1): last error at time 1775126050: ext4_orphan_get:1397: inode 15 [ 38.938936][ T3802] loop1: lost filesystem error report for type 5 error -117 [ 38.946512][ T3802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.124814][ T3813] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.127: bg 0: block 5: invalid block bitmap [ 39.158733][ T3816] loop3: detected capacity change from 0 to 256 [ 39.178969][ T3813] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 592 with error 28 [ 39.182297][ T3816] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.202083][ T3813] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.202083][ T3813] [ 39.238633][ T3813] EXT4-fs (loop1): Total free blocks count 0 [ 39.265580][ T3813] EXT4-fs (loop1): Free/Dirty block details [ 39.271702][ T3813] EXT4-fs (loop1): free_blocks=0 [ 39.297372][ T3813] EXT4-fs (loop1): dirty_blocks=592 [ 39.307471][ T3813] EXT4-fs (loop1): Block reservation details [ 39.348745][ T3813] EXT4-fs (loop1): i_reserved_data_blocks=592 [ 39.442227][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.665504][ T3826] loop3: detected capacity change from 0 to 256 [ 39.783180][ T3826] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.695059][ T3953] batman_adv: batadv0: Adding interface: dummy0 [ 40.703708][ T3953] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.730233][ T3953] batman_adv: batadv0: Interface activated: dummy0 [ 40.743096][ T3963] batadv0: mtu less than device minimum [ 40.749892][ T3963] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.761413][ T3963] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.773245][ T3963] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.785772][ T3963] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.797751][ T3963] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.808947][ T3963] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.820085][ T3963] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.831043][ T3963] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.842747][ T3963] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.856628][ T3975] loop2: detected capacity change from 0 to 256 [ 40.871230][ T3975] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.954219][ T3978] netlink: 100 bytes leftover after parsing attributes in process `syz.4.147'. [ 40.992601][ T3980] netlink: 52 bytes leftover after parsing attributes in process `syz.1.148'. [ 41.005652][ T3980] netlink: 52 bytes leftover after parsing attributes in process `syz.1.148'. [ 41.015559][ T3985] loop3: detected capacity change from 0 to 4096 [ 41.033395][ T3985] ext3: Unknown parameter 'obj_type' [ 41.182865][ T4006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.237718][ T4006] netlink: 'syz.0.156': attribute type 12 has an invalid length. [ 41.285759][ T4006] netlink: 'syz.0.156': attribute type 29 has an invalid length. [ 41.309184][ T4006] netlink: 148 bytes leftover after parsing attributes in process `syz.0.156'. [ 41.342238][ T4006] Zero length message leads to an empty skb [ 41.841550][ T3993] syz.4.153 (3993) used greatest stack depth: 9336 bytes left [ 42.094803][ T4056] netlink: 39 bytes leftover after parsing attributes in process `syz.0.173'. [ 42.148686][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 42.148771][ T28] audit: type=1400 audit(1775126053.365:267): avc: denied { ioctl } for pid=4057 comm="syz.4.175" path="socket:[6563]" dev="sockfs" ino=6563 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 42.229394][ T28] audit: type=1400 audit(1775126053.395:268): avc: denied { write } for pid=4057 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 42.279016][ T28] audit: type=1400 audit(1775126053.445:269): avc: denied { read } for pid=4059 comm="syz.0.178" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.305372][ T28] audit: type=1400 audit(1775126053.445:270): avc: denied { open } for pid=4059 comm="syz.0.178" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.316438][ T4066] loop4: detected capacity change from 0 to 136 [ 42.375683][ T4066] Attempt to read inode for relocated directory [ 42.390782][ T28] audit: type=1400 audit(1775126053.605:271): avc: denied { mount } for pid=4061 comm="syz.4.177" name="/" dev="loop4" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.525842][ T28] audit: type=1400 audit(1775126053.715:272): avc: denied { create } for pid=4068 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.645024][ T28] audit: type=1400 audit(1775126053.785:273): avc: denied { mount } for pid=4071 comm="syz.2.181" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 42.827285][ T28] audit: type=1400 audit(1775126054.045:274): avc: denied { read write } for pid=4090 comm="syz.1.189" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.864602][ T4093] loop2: detected capacity change from 0 to 512 [ 42.865107][ T3494] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.908815][ T3494] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.927583][ T4093] EXT4-fs (loop2): 1 truncate cleaned up [ 42.935258][ T4093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.946490][ T28] audit: type=1400 audit(1775126054.045:275): avc: denied { open } for pid=4090 comm="syz.1.189" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.993334][ T4093] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.190: bg 0: block 465: padding at end of block bitmap is not set [ 42.993866][ T28] audit: type=1400 audit(1775126054.205:276): avc: denied { remove_name } for pid=4092 comm="syz.2.190" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.100791][ T4093] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 43.232074][ T4093] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.232074][ T4093] [ 43.263649][ T4093] EXT4-fs (loop2): Total free blocks count 0 [ 43.280206][ T4093] EXT4-fs (loop2): Free/Dirty block details [ 43.312050][ T4093] EXT4-fs (loop2): free_blocks=0 [ 43.332142][ T4093] EXT4-fs (loop2): dirty_blocks=9 [ 43.357338][ T4093] EXT4-fs (loop2): Block reservation details [ 43.382087][ T4093] EXT4-fs (loop2): i_reserved_data_blocks=9 [ 43.388656][ T4101] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.190: invalid indirect mapped block 234881024 (level 0) [ 43.453562][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.510783][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 43.544141][ T4111] loop0: detected capacity change from 0 to 512 [ 43.550448][ T4106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.194'. [ 43.566090][ T4112] loop1: detected capacity change from 0 to 512 [ 43.582760][ T4111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.612523][ T4112] EXT4-fs: Ignoring removed nobh option [ 43.624619][ T4111] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.196: iget: bad i_size value: 38620345925642 [ 43.707367][ T4112] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.722720][ T4111] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.723000][ T4111] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.196: couldn't read orphan inode 15 (err -117) [ 43.732348][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 43.732368][ C1] EXT4-fs (loop0): initial error at time 1775126054: ext4_orphan_get:1397: inode 15 [ 43.732410][ C1] EXT4-fs (loop0): last error at time 1775126054: ext4_orphan_get:1397: inode 15 [ 43.798818][ T4112] EXT4-fs (loop1): 1 truncate cleaned up [ 43.825722][ T4111] loop0: lost filesystem error report for type 5 error -117 [ 43.826544][ T4111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.852505][ T4112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.013757][ T4106] vxlan0: entered promiscuous mode [ 44.029170][ T4153] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.196: bg 0: block 5: invalid block bitmap [ 44.092483][ T4153] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 604 with error 28 [ 44.102577][ T4106] vxlan0: entered allmulticast mode [ 44.154802][ T4153] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.154802][ T4153] [ 44.206927][ T4153] EXT4-fs (loop0): Total free blocks count 0 [ 44.230342][ T4153] EXT4-fs (loop0): Free/Dirty block details [ 44.230334][ T3910] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.256068][ T4153] EXT4-fs (loop0): free_blocks=0 [ 44.277331][ T4153] EXT4-fs (loop0): dirty_blocks=604 [ 44.294374][ T4153] EXT4-fs (loop0): Block reservation details [ 44.316580][ T3910] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.317023][ T4153] EXT4-fs (loop0): i_reserved_data_blocks=604 [ 44.345371][ T3910] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.384487][ T3910] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.429587][ T4178] loop4: detected capacity change from 0 to 512 [ 44.443438][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.468031][ T4178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.495430][ T4178] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.525064][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.546580][ T4178] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 44.564367][ T4178] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 44.731605][ T4178] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.731605][ T4178] [ 44.775073][ T3100] IPVS: starting estimator thread 0... [ 44.786300][ T4178] EXT4-fs (loop4): Total free blocks count 0 [ 44.809506][ T4178] EXT4-fs (loop4): Free/Dirty block details [ 44.839110][ T4178] EXT4-fs (loop4): free_blocks=65280 [ 44.866905][ T4178] EXT4-fs (loop4): dirty_blocks=2 [ 44.872217][ T4233] veth1_to_bond: entered allmulticast mode [ 44.887265][ T4178] EXT4-fs (loop4): Block reservation details [ 44.901436][ T4178] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 44.902414][ T4224] IPVS: using max 2544 ests per chain, 127200 per kthread [ 44.921405][ T4178] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 44.984340][ T4238] veth1_to_bond: left allmulticast mode [ 45.005168][ T3322] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 45.005601][ T4234] loop1: detected capacity change from 0 to 136 [ 45.025011][ T4234] Attempt to read inode for relocated directory [ 45.208958][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 45.227608][ T4246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.212'. [ 45.373656][ T4246] vxlan0: entered promiscuous mode [ 45.382686][ T4246] vxlan0: entered allmulticast mode [ 45.413149][ T3921] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.426797][ T3921] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.457391][ T3921] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.510175][ T3921] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.535033][ T4253] loop4: detected capacity change from 0 to 256 [ 45.585196][ T4253] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.631074][ T4253] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.016181][ T4276] netlink: 36 bytes leftover after parsing attributes in process `syz.3.223'. [ 46.136558][ T4282] loop4: detected capacity change from 0 to 1024 [ 46.197786][ T4282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.223252][ T4290] veth1_to_bond: entered allmulticast mode [ 46.240515][ T4287] veth1_to_bond: left allmulticast mode [ 46.278015][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 46.303587][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.420612][ T4301] loop4: detected capacity change from 0 to 764 [ 46.429111][ T4301] rock: directory entry would overflow storage [ 46.435817][ T4301] rock: sig=0x4654, size=5, remaining=4 [ 46.803038][ T4321] loop4: detected capacity change from 0 to 512 [ 46.810428][ T4321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.820282][ T4321] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.243: iget: bad i_size value: 38620345925642 [ 46.833792][ T4321] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.833995][ T4321] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.243: couldn't read orphan inode 15 (err -117) [ 46.843259][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 46.843280][ C0] EXT4-fs (loop4): initial error at time 1775126058: ext4_orphan_get:1397: inode 15 [ 46.843325][ C0] EXT4-fs (loop4): last error at time 1775126058: ext4_orphan_get:1397: inode 15 [ 46.881515][ T4321] loop4: lost filesystem error report for type 5 error -117 [ 46.882402][ T4321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.001716][ T4321] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.243: bg 0: block 5: invalid block bitmap [ 47.015805][ T4321] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 47.030018][ T4321] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.030018][ T4321] [ 47.039862][ T4321] EXT4-fs (loop4): Total free blocks count 0 [ 47.045980][ T4321] EXT4-fs (loop4): Free/Dirty block details [ 47.052048][ T4321] EXT4-fs (loop4): free_blocks=0 [ 47.057120][ T4321] EXT4-fs (loop4): dirty_blocks=2292 [ 47.063150][ T4321] EXT4-fs (loop4): Block reservation details [ 47.069411][ T4321] EXT4-fs (loop4): i_reserved_data_blocks=2292 [ 47.091269][ T3926] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 236 with error 28 [ 47.196156][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 47.196176][ T28] audit: type=1400 audit(1775126058.415:295): avc: denied { block_suspend } for pid=4339 comm="syz.1.251" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.339293][ T28] audit: type=1400 audit(1775126058.555:296): avc: denied { bind } for pid=4351 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.384995][ T4358] netlink: 'syz.1.256': attribute type 10 has an invalid length. [ 47.397855][ T28] audit: type=1400 audit(1775126058.555:297): avc: denied { name_bind } for pid=4351 comm="syz.0.257" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 47.425098][ T28] audit: type=1400 audit(1775126058.555:298): avc: denied { node_bind } for pid=4351 comm="syz.0.257" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 47.449164][ T28] audit: type=1400 audit(1775126058.575:299): avc: denied { write } for pid=4351 comm="syz.0.257" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.470082][ T4358] team0: Device vxcan1 is of different type [ 47.511284][ T4364] loop2: detected capacity change from 0 to 512 [ 47.540681][ T4364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.564180][ T4367] loop1: detected capacity change from 0 to 128 [ 47.573895][ T4364] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.260: iget: bad i_size value: 38620345925642 [ 47.594184][ T4364] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.595268][ T4364] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.260: couldn't read orphan inode 15 (err -117) [ 47.612084][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 47.625030][ C1] EXT4-fs (loop2): initial error at time 1775126058: ext4_orphan_get:1397: inode 15 [ 47.630193][ T4364] loop2: lost filesystem error report for type 5 error -117 [ 47.634468][ C1] EXT4-fs (loop2): last error at time 1775126058: ext4_orphan_get:1397: inode 15 [ 47.644455][ T4362] loop0: detected capacity change from 0 to 256 [ 47.660581][ T4364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.715523][ T4362] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.815724][ T4364] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.260: bg 0: block 5: invalid block bitmap [ 47.829312][ T4364] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1872 with error 28 [ 47.842067][ T4364] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.842067][ T4364] [ 47.852391][ T4364] EXT4-fs (loop2): Total free blocks count 0 [ 47.858783][ T4364] EXT4-fs (loop2): Free/Dirty block details [ 47.865194][ T4364] EXT4-fs (loop2): free_blocks=0 [ 47.870827][ T4364] EXT4-fs (loop2): dirty_blocks=1872 [ 47.877804][ T4364] EXT4-fs (loop2): Block reservation details [ 47.883885][ T4364] EXT4-fs (loop2): i_reserved_data_blocks=1872 [ 47.930600][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.061424][ T4381] loop3: detected capacity change from 0 to 4096 [ 48.080527][ T4381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.105614][ T28] audit: type=1400 audit(1775126059.315:300): avc: denied { bind } for pid=4382 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.134051][ T28] audit: type=1400 audit(1775126059.315:301): avc: denied { setopt } for pid=4382 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.155014][ T43] Bluetooth: hci0: sending frame failed (-49) [ 48.162151][ T3582] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 48.214847][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.297217][ T4391] netlink: 'syz.2.281': attribute type 10 has an invalid length. [ 48.404486][ T4391] team0: Device vxcan1 is of different type [ 48.498575][ T4391] syz.2.281 (4391) used greatest stack depth: 9032 bytes left [ 48.609078][ T4405] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 48.809381][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.279'. [ 48.916304][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 48.926907][ T4421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.280'. [ 49.082677][ T4405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.127440][ T4412] bond1: (slave gretap1): making interface the new active one [ 49.166663][ T4412] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 49.247684][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 49.268855][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 49.270452][ T4431] netlink: 'syz.4.285': attribute type 10 has an invalid length. [ 49.302365][ T3494] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.315486][ T3494] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.373659][ T4421] vxlan0: entered promiscuous mode [ 49.382398][ T4421] vxlan0: entered allmulticast mode [ 49.455988][ T4431] team0: Device vxcan1 is of different type [ 49.482636][ T3921] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.492275][ T4437] netlink: 148 bytes leftover after parsing attributes in process `syz.1.287'. [ 49.524004][ T3921] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.542066][ T3921] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.561459][ T3921] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.596490][ T4442] ipip0: entered promiscuous mode [ 49.703008][ T4453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.293'. [ 50.317184][ T4467] loop3: detected capacity change from 0 to 128 [ 50.366477][ T4467] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.401287][ T4467] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.420581][ T4469] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 50.441947][ T28] audit: type=1400 audit(1775126061.655:302): avc: denied { read } for pid=4466 comm="syz.3.300" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.482251][ T28] audit: type=1400 audit(1775126061.655:303): avc: denied { open } for pid=4466 comm="syz.3.300" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.496596][ T4469] team0: Device vxcan1 is of different type [ 50.513669][ T28] audit: type=1400 audit(1775126061.685:304): avc: denied { ioctl } for pid=4466 comm="syz.3.300" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.638795][ T4478] syz.1.304 uses obsolete (PF_INET,SOCK_PACKET) [ 51.067168][ T4516] loop1: detected capacity change from 0 to 1024 [ 51.154940][ T4476] syz.0.302 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 51.176535][ T4476] CPU: 1 UID: 0 PID: 4476 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(full) [ 51.176623][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.176636][ T4476] Call Trace: [ 51.176642][ T4476] [ 51.176651][ T4476] __dump_stack+0x1d/0x30 [ 51.176684][ T4476] dump_stack_lvl+0x95/0xd0 [ 51.176706][ T4476] dump_stack+0x15/0x1b [ 51.176772][ T4476] dump_header+0x80/0x240 [ 51.176854][ T4476] oom_kill_process+0x295/0x350 [ 51.176883][ T4476] out_of_memory+0x97d/0xb80 [ 51.176912][ T4476] try_charge_memcg+0x62e/0xa10 [ 51.176964][ T4476] obj_cgroup_charge_pages+0x23/0xc0 [ 51.176999][ T4476] __memcg_kmem_charge_page+0x9e/0x170 [ 51.177067][ T4516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.177073][ T4476] __alloc_frozen_pages_noprof+0x18a/0x360 [ 51.177111][ T4476] alloc_pages_mpol+0xb3/0x260 [ 51.177144][ T4476] alloc_pages_noprof+0x8f/0x140 [ 51.177253][ T4476] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 51.177293][ T4476] __kvmalloc_node_noprof+0x3d4/0x650 [ 51.177320][ T4476] ? futex_hash_allocate+0x190/0x9d0 [ 51.177403][ T4476] ? futex_hash_allocate+0x190/0x9d0 [ 51.177434][ T4476] futex_hash_allocate+0x190/0x9d0 [ 51.177491][ T4476] ? cap_task_prctl+0x13f/0x6e0 [ 51.177519][ T4476] futex_hash_prctl+0xd8/0xf0 [ 51.177565][ T4476] __se_sys_prctl+0xa3d/0x13f0 [ 51.177595][ T4476] __x64_sys_prctl+0x67/0x80 [ 51.177629][ T4476] x64_sys_call+0x2533/0x3020 [ 51.177657][ T4476] do_syscall_64+0x12c/0x370 [ 51.177702][ T4476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.177725][ T4476] RIP: 0033:0x7fe8f45fc819 [ 51.177743][ T4476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.177842][ T4476] RSP: 002b:00007fe8f3057028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 51.177881][ T4476] RAX: ffffffffffffffda RBX: 00007fe8f4875fa0 RCX: 00007fe8f45fc819 [ 51.177896][ T4476] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 51.177911][ T4476] RBP: 00007fe8f4692c91 R08: 0000000000000000 R09: 0000000000000000 [ 51.177924][ T4476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.177938][ T4476] R13: 00007fe8f4876038 R14: 00007fe8f4875fa0 R15: 00007fff6f476a68 [ 51.177958][ T4476] [ 51.177965][ T4476] memory: usage 307200kB, limit 307200kB, failcnt 61 [ 51.427625][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.562236][ T4476] memory+swap: usage 234392kB, limit 9007199254740988kB, failcnt 0 [ 51.571367][ T4476] kmem: usage 233516kB, limit 9007199254740988kB, failcnt 0 [ 51.655246][ T4566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.312'. [ 51.692056][ T4476] Memory cgroup stats for /syz0: [ 51.692327][ T4476] cache 532480 [ 51.701128][ T4476] rss 184320 [ 51.749624][ T4476] shmem 0 [ 51.754584][ T4476] mapped_file 53248 [ 51.758505][ T4476] dirty 20480 [ 51.780977][ T4476] writeback 0 [ 51.791067][ T4476] workingset_refault_anon 0 [ 51.811556][ T4476] workingset_refault_file 117 [ 51.832408][ T4476] swap 0 [ 51.835694][ T4476] swapcached 0 [ 51.852089][ T4476] pgpgin 9631 [ 51.855428][ T4476] pgpgout 9456 [ 51.903209][ T4476] pgfault 12789 [ 51.914877][ T4476] pgmajfault 41 [ 51.918479][ T4476] inactive_anon 184320 [ 51.943055][ T4581] netlink: 'syz.3.321': attribute type 29 has an invalid length. [ 51.946285][ T4476] active_anon 0 [ 51.972587][ T4581] netlink: 'syz.3.321': attribute type 29 has an invalid length. [ 52.005088][ T4476] inactive_file 0 [ 52.011315][ T4476] active_file 532480 [ 52.017450][ T4581] netlink: 500 bytes leftover after parsing attributes in process `syz.3.321'. [ 52.017676][ T4476] unevictable 0 [ 52.040984][ T4476] hierarchical_memory_limit 314572800 [ 52.047338][ T4476] hierarchical_memsw_limit 9223372036854771712 [ 52.053826][ T4476] total_cache 532480 [ 52.058503][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 52.073466][ T4476] total_rss 184320 [ 52.077372][ T4476] total_shmem 0 [ 52.083122][ T4588] vxlan0: entered promiscuous mode [ 52.090668][ T4476] total_mapped_file 53248 [ 52.097024][ T1647] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.114337][ T1647] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.123485][ T4476] total_dirty 20480 [ 52.127399][ T4476] total_writeback 0 [ 52.131388][ T4476] total_workingset_refault_anon 0 [ 52.148429][ T1647] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.161930][ T4476] total_workingset_refault_file 117 [ 52.169405][ T1647] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.182118][ T4476] total_swap 0 [ 52.189952][ T4476] total_swapcached 0 [ 52.199561][ T4476] total_pgpgin 9631 [ 52.208088][ T4476] total_pgpgout 9456 [ 52.220583][ T4476] total_pgfault 12789 [ 52.233328][ T4476] total_pgmajfault 41 [ 52.242157][ T4476] total_inactive_anon 184320 [ 52.252216][ T4476] total_active_anon 0 [ 52.260649][ T4476] total_inactive_file 0 [ 52.270521][ T4476] total_active_file 532480 [ 52.280184][ T4476] total_unevictable 0 [ 52.289044][ T4476] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.302,pid=4474,uid=0 [ 52.333041][ T4476] Memory cgroup out of memory: Killed process 4476 (syz.0.302) total-vm:96080kB, anon-rss:1404kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 52.458684][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 52.458700][ T28] audit: type=1400 audit(1775126063.675:308): avc: denied { setopt } for pid=4593 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.495456][ T28] audit: type=1400 audit(1775126063.675:309): avc: denied { write } for pid=4593 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.583438][ T28] audit: type=1400 audit(1775126063.795:310): avc: denied { read } for pid=4593 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.641288][ T28] audit: type=1400 audit(1775126063.855:311): avc: denied { read } for pid=4600 comm="syz.0.329" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.017373][ T28] audit: type=1400 audit(1775126064.235:312): avc: denied { mount } for pid=4612 comm="syz.3.333" name="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 53.047183][ T28] audit: type=1400 audit(1775126064.235:313): avc: denied { search } for pid=4612 comm="syz.3.333" name="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.070063][ T28] audit: type=1400 audit(1775126064.235:314): avc: denied { search } for pid=4612 comm="syz.3.333" name="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.093163][ T28] audit: type=1400 audit(1775126064.235:315): avc: denied { read open } for pid=4612 comm="syz.3.333" path="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.118876][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 53.243220][ T4619] loop3: detected capacity change from 0 to 8192 [ 53.336270][ T4622] netlink: 76 bytes leftover after parsing attributes in process `syz.4.336'. [ 53.752193][ T28] audit: type=1326 audit(1775126064.965:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e10e6c819 code=0x7ffc0000 [ 53.830716][ T28] audit: type=1326 audit(1775126064.965:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e10e6c819 code=0x7ffc0000 [ 53.875182][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 53.878016][ T4643] loop4: detected capacity change from 0 to 128 [ 54.008764][ T4646] bio_check_eod: 107 callbacks suppressed [ 54.008781][ T4646] syz.4.345: attempt to access beyond end of device [ 54.008781][ T4646] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 54.032099][ T4646] syz.4.345: attempt to access beyond end of device [ 54.032099][ T4646] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 54.045711][ T4646] syz.4.345: attempt to access beyond end of device [ 54.045711][ T4646] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 54.064919][ T4646] syz.4.345: attempt to access beyond end of device [ 54.064919][ T4646] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 54.079867][ T4646] syz.4.345: attempt to access beyond end of device [ 54.079867][ T4646] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 54.141763][ T4646] syz.4.345: attempt to access beyond end of device [ 54.141763][ T4646] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 54.155746][ T4646] syz.4.345: attempt to access beyond end of device [ 54.155746][ T4646] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 54.201316][ T4646] syz.4.345: attempt to access beyond end of device [ 54.201316][ T4646] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 54.251742][ T4646] syz.4.345: attempt to access beyond end of device [ 54.251742][ T4646] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 54.267269][ T4646] syz.4.345: attempt to access beyond end of device [ 54.267269][ T4646] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 54.285700][ T4653] netlink: 'syz.0.350': attribute type 12 has an invalid length. [ 54.293535][ T4653] netlink: 'syz.0.350': attribute type 29 has an invalid length. [ 54.301462][ T4653] netlink: 148 bytes leftover after parsing attributes in process `syz.0.350'. [ 54.352424][ T4653] netlink: 'syz.0.350': attribute type 2 has an invalid length. [ 54.376353][ T4653] netlink: 'syz.0.350': attribute type 3 has an invalid length. [ 54.407507][ T4653] netlink: 11 bytes leftover after parsing attributes in process `syz.0.350'. [ 54.548943][ T3494] IPVS: starting estimator thread 0... [ 54.565670][ T4670] loop2: detected capacity change from 0 to 128 [ 54.642192][ T4680] IPVS: using max 2112 ests per chain, 105600 per kthread [ 55.415621][ T4707] loop2: detected capacity change from 0 to 512 [ 55.477066][ T4707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.524231][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 55.549332][ T4715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 55.862790][ T4729] loop3: detected capacity change from 0 to 128 [ 56.062807][ T4732] process 'syz.4.380' launched './file0' with NULL argv: empty string added [ 56.088579][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.171450][ T4735] netlink: 'syz.4.382': attribute type 10 has an invalid length. [ 56.197161][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.229873][ T4735] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.470921][ T4746] gtp0: entered promiscuous mode [ 56.693325][ T4765] __nla_validate_parse: 5 callbacks suppressed [ 56.693582][ T4765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 57.009118][ T4777] loop3: detected capacity change from 0 to 1024 [ 57.026871][ T4773] loop4: detected capacity change from 0 to 8192 [ 57.041608][ T4777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.082411][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.127712][ T4830] netlink: 172 bytes leftover after parsing attributes in process `syz.1.420'. [ 58.137143][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 58.146767][ T4830] netlink: 172 bytes leftover after parsing attributes in process `syz.1.420'. [ 58.156309][ T4830] netlink: 100 bytes leftover after parsing attributes in process `syz.1.420'. [ 58.166194][ T4830] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 58.678345][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 58.732260][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 58.732331][ T28] audit: type=1400 audit(1775126325.956:379): avc: denied { wake_alarm } for pid=4847 comm="syz.1.429" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.814671][ T4852] loop1: detected capacity change from 0 to 128 [ 58.824336][ T28] audit: type=1400 audit(1775126326.046:380): avc: denied { listen } for pid=4849 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.947390][ T28] audit: type=1400 audit(1775126326.166:381): avc: denied { create } for pid=4860 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.986064][ T28] audit: type=1400 audit(1775126326.186:382): avc: denied { read } for pid=4860 comm="syz.4.434" path="socket:[7821]" dev="sockfs" ino=7821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 59.025599][ T4852] bio_check_eod: 169 callbacks suppressed [ 59.025620][ T4852] syz.1.430: attempt to access beyond end of device [ 59.025620][ T4852] loop1: rw=524288, sector=145, nr_sectors = 16 limit=128 [ 59.049665][ T4852] syz.1.430: attempt to access beyond end of device [ 59.049665][ T4852] loop1: rw=524288, sector=169, nr_sectors = 8 limit=128 [ 59.066875][ T4863] netlink: 'syz.4.435': attribute type 3 has an invalid length. [ 59.077423][ T4863] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 59.085452][ T4852] syz.1.430: attempt to access beyond end of device [ 59.085452][ T4852] loop1: rw=524288, sector=185, nr_sectors = 8 limit=128 [ 59.099776][ T4863] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.435'. [ 59.109379][ T4852] syz.1.430: attempt to access beyond end of device [ 59.109379][ T4852] loop1: rw=524288, sector=201, nr_sectors = 8 limit=128 [ 59.125629][ T4852] syz.1.430: attempt to access beyond end of device [ 59.125629][ T4852] loop1: rw=524288, sector=217, nr_sectors = 8 limit=128 [ 59.139455][ T4852] syz.1.430: attempt to access beyond end of device [ 59.139455][ T4852] loop1: rw=524288, sector=233, nr_sectors = 8 limit=128 [ 59.153940][ T4852] syz.1.430: attempt to access beyond end of device [ 59.153940][ T4852] loop1: rw=524288, sector=249, nr_sectors = 8 limit=128 [ 59.168030][ T4852] syz.1.430: attempt to access beyond end of device [ 59.168030][ T4852] loop1: rw=524288, sector=265, nr_sectors = 8 limit=128 [ 59.193474][ T4852] syz.1.430: attempt to access beyond end of device [ 59.193474][ T4852] loop1: rw=524288, sector=281, nr_sectors = 8 limit=128 [ 59.219653][ T4852] syz.1.430: attempt to access beyond end of device [ 59.219653][ T4852] loop1: rw=524288, sector=297, nr_sectors = 8 limit=128 [ 59.251056][ T4869] loop2: detected capacity change from 0 to 128 [ 59.321758][ T4869] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.353475][ T4869] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.443939][ T28] audit: type=1400 audit(1775126326.666:383): avc: denied { create } for pid=4868 comm="syz.2.438" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 59.468709][ T4880] loop4: detected capacity change from 0 to 2048 [ 59.485259][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.514503][ T4880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.525497][ T28] audit: type=1400 audit(1775126326.696:384): avc: denied { create } for pid=4868 comm="syz.2.438" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 59.578058][ T4880] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.741639][ T4894] loop2: detected capacity change from 0 to 128 [ 59.770000][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.782974][ T4894] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.796923][ T4894] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.984468][ T4903] loop1: detected capacity change from 0 to 512 [ 60.017108][ T28] audit: type=1400 audit(1775126327.226:385): avc: denied { mounton } for pid=4898 comm="syz.4.449" path="/file0" dev="bpf" ino=8624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 60.040461][ T4903] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.057309][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.072927][ T4903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.086737][ T4903] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.137414][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.226884][ T4922] loop4: detected capacity change from 0 to 512 [ 60.243586][ T4922] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.262087][ T28] audit: type=1400 audit(1775126327.476:386): avc: denied { name_bind } for pid=4923 comm="syz.0.460" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.285408][ T4922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.316195][ T4897] syz.3.448 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 60.316246][ T4897] CPU: 1 UID: 0 PID: 4897 Comm: syz.3.448 Not tainted syzkaller #0 PREEMPT(full) [ 60.316324][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.316341][ T4897] Call Trace: [ 60.316349][ T4897] [ 60.316358][ T4897] __dump_stack+0x1d/0x30 [ 60.316389][ T4897] dump_stack_lvl+0x95/0xd0 [ 60.316417][ T4897] dump_stack+0x15/0x1b [ 60.316443][ T4897] dump_header+0x80/0x240 [ 60.316526][ T4897] oom_kill_process+0x295/0x350 [ 60.316554][ T4897] out_of_memory+0x97d/0xb80 [ 60.316662][ T4897] try_charge_memcg+0x62e/0xa10 [ 60.316736][ T4897] obj_cgroup_charge_pages+0x23/0xc0 [ 60.316845][ T4897] __memcg_kmem_charge_page+0x9e/0x170 [ 60.316875][ T4897] __alloc_frozen_pages_noprof+0x18a/0x360 [ 60.316954][ T4897] alloc_pages_mpol+0xb3/0x260 [ 60.316986][ T4897] alloc_pages_noprof+0x8f/0x140 [ 60.317020][ T4897] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 60.317064][ T4897] __kvmalloc_node_noprof+0x3d4/0x650 [ 60.317171][ T4897] ? futex_hash_allocate+0x190/0x9d0 [ 60.317286][ T4897] ? futex_hash_allocate+0x190/0x9d0 [ 60.317321][ T4897] futex_hash_allocate+0x190/0x9d0 [ 60.317418][ T4897] ? cap_task_prctl+0x13f/0x6e0 [ 60.317451][ T4897] futex_hash_prctl+0xd8/0xf0 [ 60.317483][ T4897] __se_sys_prctl+0xa3d/0x13f0 [ 60.317566][ T4897] __x64_sys_prctl+0x67/0x80 [ 60.317639][ T4897] x64_sys_call+0x2533/0x3020 [ 60.317731][ T4897] do_syscall_64+0x12c/0x370 [ 60.317763][ T4897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.317788][ T4897] RIP: 0033:0x7f5e10e6c819 [ 60.317807][ T4897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.317847][ T4897] RSP: 002b:00007f5e0f8c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 60.317873][ T4897] RAX: ffffffffffffffda RBX: 00007f5e110e5fa0 RCX: 00007f5e10e6c819 [ 60.317889][ T4897] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 60.317905][ T4897] RBP: 00007f5e10f02c91 R08: 0000000000000000 R09: 0000000000000000 [ 60.317920][ T4897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.317936][ T4897] R13: 00007f5e110e6038 R14: 00007f5e110e5fa0 R15: 00007ffe2cfd0c38 [ 60.317992][ T4897] [ 60.318032][ T4897] memory: usage 307200kB, limit 307200kB, failcnt 71 [ 60.318048][ T4897] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 60.318064][ T4897] kmem: usage 306840kB, limit 9007199254740988kB, failcnt 0 [ 60.318078][ T4897] Memory cgroup stats for /syz3: [ 60.318328][ T4897] cache 81920 [ 60.318339][ T4897] rss 286720 [ 60.318346][ T4897] shmem 0 [ 60.318365][ T4897] mapped_file 81920 [ 60.318373][ T4897] dirty 81920 [ 60.318393][ T4897] writeback 0 [ 60.318401][ T4897] workingset_refault_anon 0 [ 60.318410][ T4897] workingset_refault_file 0 [ 60.318420][ T4897] swap 0 [ 60.318427][ T4897] swapcached 0 [ 60.318434][ T4897] pgpgin 41232 [ 60.318450][ T4897] pgpgout 41142 [ 60.318458][ T4897] pgfault 20713 [ 60.318472][ T4897] pgmajfault 32 [ 60.318481][ T4897] inactive_anon 286720 [ 60.318497][ T4897] active_anon 0 [ 60.318505][ T4897] inactive_file 0 [ 60.318512][ T4897] active_file 81920 [ 60.318525][ T4897] unevictable 0 [ 60.318532][ T4897] hierarchical_memory_limit 314572800 [ 60.318543][ T4897] hierarchical_memsw_limit 9223372036854771712 [ 60.318554][ T4897] total_cache 81920 [ 60.318562][ T4897] total_rss 286720 [ 60.318646][ T4897] total_shmem 0 [ 60.318655][ T4897] total_mapped_file 81920 [ 60.318664][ T4897] total_dirty 81920 [ 60.318672][ T4897] total_writeback 0 [ 60.318681][ T4897] total_workingset_refault_anon 0 [ 60.318692][ T4897] total_workingset_refault_file 0 [ 60.318700][ T4897] total_swap 0 [ 60.318709][ T4897] total_swapcached 0 [ 60.318718][ T4897] total_pgpgin 41232 [ 60.318726][ T4897] total_pgpgout 41142 [ 60.318768][ T4897] total_pgfault 20713 [ 60.318777][ T4897] total_pgmajfault 32 [ 60.318785][ T4897] total_inactive_anon 286720 [ 60.318809][ T4897] total_active_anon 0 [ 60.318819][ T4897] total_inactive_file 0 [ 60.318826][ T4897] total_active_file 81920 [ 60.318836][ T4897] total_unevictable 0 [ 60.318845][ T4897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.448,pid=4896,uid=0 [ 60.318980][ T4897] Memory cgroup out of memory: Killed process 4896 (syz.3.448) total-vm:96080kB, anon-rss:1400kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 60.368790][ T4922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.368875][ T4922] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.372846][ T4922] EXT4-fs (loop4): shut down requested (2) [ 60.395865][ T28] audit: type=1400 audit(1775126327.476:387): avc: denied { listen } for pid=4923 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.395951][ T28] audit: type=1400 audit(1775126327.596:388): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 60.398289][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.088183][ T4954] loop4: detected capacity change from 0 to 4096 [ 61.202875][ T4954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.276732][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.795785][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 61.842105][ T4978] netlink: 48 bytes leftover after parsing attributes in process `syz.1.483'. [ 62.106190][ T4999] loop1: detected capacity change from 0 to 512 [ 62.134813][ T4999] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.157402][ T4999] EXT4-fs (loop1): 1 truncate cleaned up [ 62.165837][ T4999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.172449][ T4996] loop2: detected capacity change from 0 to 8192 [ 62.205385][ T4996] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.230907][ T4996] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.311738][ T5013] tipc: Failed to remove unknown binding: 66,1,1/4:2939214601/2939214603 [ 62.320906][ T5013] tipc: Failed to remove unknown binding: 66,1,1/4:2939214601/2939214603 [ 62.336588][ T4996] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.361139][ T4996] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.379973][ T5007] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.400868][ T5007] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.409572][ T4996] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.423821][ T4996] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.438366][ T4996] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.447506][ T4996] Buffer I/O error on dev loop2, logical block 57847, async page read [ 62.623040][ T5031] loop4: detected capacity change from 0 to 128 [ 62.630680][ T5031] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.647652][ T5031] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.988528][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.011880][ T5037] netlink: 172 bytes leftover after parsing attributes in process `syz.3.505'. [ 63.030225][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 63.039953][ T5037] netlink: 172 bytes leftover after parsing attributes in process `syz.3.505'. [ 63.050200][ T5037] netlink: 100 bytes leftover after parsing attributes in process `syz.3.505'. [ 63.059457][ T5037] netlink: 32 bytes leftover after parsing attributes in process `syz.3.505'. [ 63.177064][ T5041] xt_hashlimit: size too large, truncated to 1048576 [ 63.820466][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.844925][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.860254][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 63.860271][ T28] audit: type=1400 audit(1775126331.076:400): avc: denied { setopt } for pid=5082 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.940248][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.961978][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.042481][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.072932][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.157717][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.186966][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.265550][ T5103] bridge_slave_0: left allmulticast mode [ 64.271420][ T5103] bridge_slave_0: left promiscuous mode [ 64.285026][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.310251][ T5103] bridge_slave_1: left allmulticast mode [ 64.316209][ T5103] bridge_slave_1: left promiscuous mode [ 64.337674][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.367407][ T5103] bond0: (slave bond_slave_0): Releasing backup interface [ 64.383503][ T5103] bond0: (slave bond_slave_1): Releasing backup interface [ 64.414661][ T5103] team0: Port device team_slave_0 removed [ 64.424423][ T5103] team0: Port device team_slave_1 removed [ 64.431606][ T5103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.440745][ T5103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.449973][ T5103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.458009][ T5103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.479423][ T5103] net_ratelimit: 11 callbacks suppressed [ 64.479512][ T5103] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.726551][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.743500][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.801599][ T58] bond0 (unregistering): Released all slaves [ 64.859618][ T28] audit: type=1400 audit(1775126332.066:401): avc: denied { read } for pid=3039 comm="dhcpcd" name="n25" dev="tmpfs" ino=3255 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.889780][ T28] audit: type=1400 audit(1775126332.066:402): avc: denied { open } for pid=3039 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3255 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.918520][ T28] audit: type=1400 audit(1775126332.066:403): avc: denied { getattr } for pid=3039 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3255 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.944957][ T58] hsr_slave_0: left promiscuous mode [ 64.951634][ T58] hsr_slave_1: left promiscuous mode [ 64.970342][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.982114][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.015807][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.046926][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.156831][ T58] veth1_macvtap: left promiscuous mode [ 65.179043][ T58] veth0_macvtap: left promiscuous mode [ 65.184778][ T28] audit: type=1400 audit(1775126332.406:404): avc: denied { create } for pid=5131 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.207395][ T58] veth1_vlan: left promiscuous mode [ 65.217553][ T58] veth0_vlan: left promiscuous mode [ 65.232229][ T28] audit: type=1400 audit(1775126332.406:405): avc: denied { write } for pid=5131 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3269 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.337167][ T28] audit: type=1400 audit(1775126332.406:406): avc: denied { append } for pid=5131 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3269 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.367395][ T28] audit: type=1400 audit(1775126332.506:407): avc: denied { unlink } for pid=5147 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3269 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.401867][ T28] audit: type=1400 audit(1775126332.546:408): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.462544][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 65.475929][ T28] audit: type=1400 audit(1775126332.656:409): avc: denied { execute } for pid=5157 comm="syz.3.547" name="file1" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.502664][ T58] team0 (unregistering): Port device team_slave_1 removed [ 65.515233][ T58] team0 (unregistering): Port device team_slave_0 removed [ 65.605322][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 65.659667][ T5172] xt_hashlimit: size too large, truncated to 1048576 [ 65.690734][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.738095][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.747055][ T5091] bridge_slave_0: entered allmulticast mode [ 65.753996][ T5091] bridge_slave_0: entered promiscuous mode [ 65.770262][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.779306][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.786672][ T5091] bridge_slave_1: entered allmulticast mode [ 65.793824][ T5091] bridge_slave_1: entered promiscuous mode [ 65.846673][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.858376][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.911439][ T5091] team0: Port device team_slave_0 added [ 65.919128][ T5091] team0: Port device team_slave_1 added [ 65.952332][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.980621][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.015005][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.036810][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.048227][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.087568][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.141584][ T5091] hsr_slave_0: entered promiscuous mode [ 66.152643][ T5091] hsr_slave_1: entered promiscuous mode [ 66.168898][ T5091] debugfs: 'hsr0' already exists in 'hsr' [ 66.175081][ T5091] Cannot create hsr debugfs directory [ 66.183702][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.194620][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.289525][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.312159][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.375074][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.385849][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.493206][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.511420][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.524046][ T5234] syzkaller1: entered promiscuous mode [ 66.530206][ T5234] syzkaller1: entered allmulticast mode [ 66.540617][ T5195] chnl_net:caif_netlink_parms(): no params data found [ 66.627830][ T5091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.645097][ T5091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.659285][ T58] bridge_slave_1: left allmulticast mode [ 66.665481][ T58] bridge_slave_1: left promiscuous mode [ 66.671326][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.682153][ T58] bridge_slave_0: left allmulticast mode [ 66.688080][ T58] bridge_slave_0: left promiscuous mode [ 66.694200][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.794514][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.805192][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.815148][ T58] bond0 (unregistering): Released all slaves [ 66.823523][ T5091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.842075][ T5091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.856955][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.865054][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.873006][ T5195] bridge_slave_0: entered allmulticast mode [ 66.880688][ T5195] bridge_slave_0: entered promiscuous mode [ 66.899997][ T58] hsr_slave_0: left promiscuous mode [ 66.905801][ T58] hsr_slave_1: left promiscuous mode [ 66.914188][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.921658][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.931826][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.946813][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.967179][ T58] veth1_macvtap: left promiscuous mode [ 66.974588][ T58] veth0_macvtap: left promiscuous mode [ 66.980393][ T58] veth1_vlan: left promiscuous mode [ 66.986601][ T58] veth0_vlan: left promiscuous mode [ 67.102874][ T58] team0 (unregistering): Port device team_slave_1 removed [ 67.119388][ T58] team0 (unregistering): Port device team_slave_0 removed [ 67.173970][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.190765][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.199047][ T5195] bridge_slave_1: entered allmulticast mode [ 67.206001][ T5195] bridge_slave_1: entered promiscuous mode [ 67.286879][ T5195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.301968][ T5195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.332787][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.364858][ T5195] team0: Port device team_slave_0 added [ 67.372642][ T5195] team0: Port device team_slave_1 added [ 67.387985][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.406351][ T3910] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.413871][ T3910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.435816][ T3910] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.443175][ T3910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.457583][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.484454][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.518088][ T5195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.557502][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.564788][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.592500][ T5195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.761625][ T5195] hsr_slave_0: entered promiscuous mode [ 67.821881][ T5195] hsr_slave_1: entered promiscuous mode [ 67.860165][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.033798][ T5379] set_capacity_and_notify: 1 callbacks suppressed [ 68.033818][ T5379] loop4: detected capacity change from 0 to 512 [ 68.068085][ T5363] bridge1: entered promiscuous mode [ 68.086656][ T5363] bridge1: entered allmulticast mode [ 68.105837][ T5379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.161023][ T5379] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.225361][ T5195] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.238215][ T5195] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.249484][ T5195] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.270740][ T5195] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.364221][ T5195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.386099][ T5195] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.399510][ T5091] veth0_vlan: entered promiscuous mode [ 68.410769][ T5426] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.421654][ T5426] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.433688][ T5426] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.447761][ T3918] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.454965][ T3918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.468502][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.475883][ T3918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.487135][ T5091] veth1_vlan: entered promiscuous mode [ 68.525194][ T5091] veth0_macvtap: entered promiscuous mode [ 68.536109][ T5426] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.547796][ T5426] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.558330][ T5426] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.573757][ T5091] veth1_macvtap: entered promiscuous mode [ 68.588928][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.602635][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.616123][ T5426] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.626917][ T5426] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.638065][ T5426] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.655424][ T3918] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.675153][ T3918] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.685144][ T3918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.694760][ T3918] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.709387][ T5426] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.720772][ T5426] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.731320][ T5426] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.754920][ T5195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.806333][ T3932] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.821453][ T3932] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 68.830347][ T3932] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 68.850676][ T3932] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.861847][ T5379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.876465][ T3932] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 68.887606][ T3932] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 68.898059][ T5461] loop5: detected capacity change from 0 to 128 [ 68.926989][ T58] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.951819][ T58] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 68.977349][ T58] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 69.000194][ T3918] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.011218][ T3918] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 69.026032][ T5467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 69.037125][ T3918] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 69.151772][ T5195] veth0_vlan: entered promiscuous mode [ 69.194184][ T5195] veth1_vlan: entered promiscuous mode [ 69.229573][ T5195] veth0_macvtap: entered promiscuous mode [ 69.278453][ T5195] veth1_macvtap: entered promiscuous mode [ 69.303713][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.327909][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.350993][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.374756][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.389380][ T5484] loop5: detected capacity change from 0 to 8192 [ 69.424466][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.481757][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 69.481774][ T28] audit: type=1326 audit(1775126336.696:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.4.581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb64003c819 code=0x0 [ 69.511967][ T3921] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.629524][ T5503] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 69.697613][ T5503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.747138][ T5515] netlink: 28 bytes leftover after parsing attributes in process `syz.5.586'. [ 69.760994][ T5515] netlink: 28 bytes leftover after parsing attributes in process `syz.5.586'. [ 69.856549][ T28] audit: type=1400 audit(1775126337.076:418): avc: denied { setopt } for pid=5524 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.876777][ T28] audit: type=1400 audit(1775126337.076:419): avc: denied { connect } for pid=5524 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.918408][ T28] audit: type=1326 audit(1775126337.136:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5527 comm="syz.0.592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8f45fc819 code=0x0 [ 70.096250][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 70.105744][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 70.275968][ T5540] ================================================================== [ 70.284938][ T5540] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 70.293925][ T5540] [ 70.296304][ T5540] write to 0xffff888131a7d0a8 of 8 bytes by task 5541 on cpu 1: [ 70.304293][ T5540] shmem_file_splice_read+0x470/0x600 [ 70.309899][ T5540] splice_direct_to_actor+0x26e/0x670 [ 70.315650][ T5540] do_splice_direct+0x119/0x1a0 [ 70.320743][ T5540] do_sendfile+0x382/0x650 [ 70.325370][ T5540] __x64_sys_sendfile64+0x105/0x150 [ 70.330785][ T5540] x64_sys_call+0x2dc4/0x3020 [ 70.335708][ T5540] do_syscall_64+0x12c/0x370 [ 70.340399][ T5540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.346384][ T5540] [ 70.348815][ T5540] write to 0xffff888131a7d0a8 of 8 bytes by task 5540 on cpu 0: [ 70.356804][ T5540] shmem_file_splice_read+0x470/0x600 [ 70.362288][ T5540] splice_direct_to_actor+0x26e/0x670 [ 70.367840][ T5540] do_splice_direct+0x119/0x1a0 [ 70.372792][ T5540] do_sendfile+0x382/0x650 [ 70.377215][ T5540] __x64_sys_sendfile64+0x105/0x150 [ 70.382680][ T5540] x64_sys_call+0x2dc4/0x3020 [ 70.387559][ T5540] do_syscall_64+0x12c/0x370 [ 70.392258][ T5540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.398418][ T5540] [ 70.400845][ T5540] value changed: 0x0000000000001113 -> 0x0000000000001119 [ 70.408756][ T5540] [ 70.411095][ T5540] Reported by Kernel Concurrency Sanitizer on: [ 70.417337][ T5540] CPU: 0 UID: 0 PID: 5540 Comm: syz.3.596 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 70.426552][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.437661][ T5540] ================================================================== [ 70.796676][ T3910] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.807564][ T3910] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.864690][ T3910] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.875455][ T3910] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.934889][ T3910] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.945509][ T3910] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.003583][ T3910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.014144][ T3910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.213488][ T3910] bond0 (unregistering): Released all slaves [ 71.256069][ T3910] hsr_slave_0: left promiscuous mode [ 71.262279][ T3910] hsr_slave_1: left promiscuous mode [ 71.271537][ T3910] veth1_macvtap: left promiscuous mode [ 71.277387][ T3910] veth0_macvtap: left promiscuous mode [ 71.283089][ T3910] veth1_vlan: left promiscuous mode [ 71.288467][ T3910] veth0_vlan: left promiscuous mode [ 71.676037][ T3910] IPVS: stop unused estimator thread 0... [ 71.706733][ T3910] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.764683][ T3910] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.805202][ T3910] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.844928][ T3910] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.925715][ T3910] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.936378][ T3910] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.988410][ T3910] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.003325][ T3910] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.065381][ T3910] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.076381][ T3910] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.127782][ T3910] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.138279][ T3910] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.201483][ T3910] bridge_slave_1: left allmulticast mode [ 72.208112][ T3910] bridge_slave_1: left promiscuous mode [ 72.214157][ T3910] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.222808][ T3910] bridge_slave_0: left allmulticast mode [ 72.229044][ T3910] bridge_slave_0: left promiscuous mode [ 72.235251][ T3910] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.244126][ T3910] bridge_slave_1: left allmulticast mode [ 72.249765][ T3910] bridge_slave_1: left promiscuous mode [ 72.255495][ T3910] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.263467][ T3910] bridge_slave_0: left allmulticast mode [ 72.269298][ T3910] bridge_slave_0: left promiscuous mode [ 72.275361][ T3910] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.354133][ T3910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.364369][ T3910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.374234][ T3910] bond0 (unregistering): Released all slaves [ 72.392307][ T3910] bond1 (unregistering): (slave gretap1): Releasing active interface [ 72.464265][ T3910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.474460][ T3910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.485154][ T3910] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 72.494114][ T3910] bond0 (unregistering): Released all slaves [ 72.502610][ T3910] bond1 (unregistering): Released all slaves [ 72.535892][ T3910] tipc: Left network mode [ 72.543919][ T3910] hsr_slave_0: left promiscuous mode [ 72.549854][ T3910] hsr_slave_1: left promiscuous mode [ 72.556215][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.565015][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.573106][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.580534][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.591032][ T3910] hsr_slave_0: left promiscuous mode [ 72.597398][ T3910] hsr_slave_1: left promiscuous mode [ 72.603411][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.610840][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.618679][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.626681][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.639680][ T3910] veth1_macvtap: left promiscuous mode [ 72.645591][ T3910] veth0_macvtap: left promiscuous mode [ 72.651921][ T3910] veth1_vlan: left promiscuous mode [ 72.657466][ T3910] veth0_vlan: left promiscuous mode [ 72.664089][ T3910] veth1_macvtap: left promiscuous mode [ 72.669819][ T3910] veth0_macvtap: left promiscuous mode [ 72.676324][ T3910] veth1_vlan: left promiscuous mode [ 72.682353][ T3910] veth0_vlan: left promiscuous mode [ 72.774579][ T3910] team0 (unregistering): Port device team_slave_1 removed [ 72.784493][ T3910] team0 (unregistering): Port device team_slave_0 removed [ 72.838076][ T3910] team0 (unregistering): Port device team_slave_1 removed [ 72.849120][ T3910] team0 (unregistering): Port device team_slave_0 removed [ 73.337627][ T3910] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.385360][ T3910] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.435704][ T3910] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.488452][ T3910] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.555042][ T3910] bridge_slave_1: left allmulticast mode [ 73.560972][ T3910] bridge_slave_1: left promiscuous mode [ 73.566925][ T3910] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.575076][ T3910] bridge_slave_0: left allmulticast mode [ 73.580930][ T3910] bridge_slave_0: left promiscuous mode [ 73.587312][ T3910] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.636972][ T3910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.646969][ T3910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.656861][ T3910] bond0 (unregistering): Released all slaves [ 73.676946][ T3910] hsr_slave_0: left promiscuous mode [ 73.683424][ T3910] hsr_slave_1: left promiscuous mode [ 73.689164][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.696991][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.705005][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.712729][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.723364][ T3910] veth1_macvtap: left promiscuous mode [ 73.729507][ T3910] veth0_macvtap: left promiscuous mode [ 73.735933][ T3910] veth1_vlan: left promiscuous mode [ 73.741319][ T3910] veth0_vlan: left promiscuous mode [ 73.818295][ T3910] team0 (unregistering): Port device team_slave_1 removed [ 73.828789][ T3910] team0 (unregistering): Port device team_slave_0 removed [ 74.124831][ T3910] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.134700][ T3910] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 74.144814][ T3910] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 74.196476][ T3910] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.207308][ T3910] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 74.217935][ T3910] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 74.263697][ T3910] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.273710][ T3910] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 74.283821][ T3910] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 74.333813][ T3910] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.344484][ T3910] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 74.354696][ T3910] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 74.447389][ T3910] bridge_slave_1: left allmulticast mode [ 74.453274][ T3910] bridge_slave_1: left promiscuous mode [ 74.459136][ T3910] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.467083][ T3910] bridge_slave_0: left allmulticast mode [ 74.472891][ T3910] bridge_slave_0: left promiscuous mode [ 74.478613][ T3910] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.574034][ T3910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.584016][ T3910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.595958][ T3910] bond0 (unregistering): Released all slaves [ 74.603946][ T3910] bond1 (unregistering): Released all slaves [ 74.626866][ T3910] hsr_slave_0: left promiscuous mode [ 74.633093][ T3910] hsr_slave_1: left promiscuous mode [ 74.639063][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.647033][ T3910] batadv0: mtu less than device minimum [ 74.653470][ T3910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.665294][ T3910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.677007][ T3910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.688597][ T3910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.699985][ T3910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.711701][ T3910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.723821][ T3910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.735461][ T3910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.746938][ T3910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.762571][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.770457][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.787277][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.795563][ T3910] batman_adv: batadv0: Interface deactivated: dummy0 [ 74.803428][ T3910] batman_adv: batadv0: Removing interface: dummy0 [ 74.812640][ T3910] veth1_macvtap: left promiscuous mode [ 74.818720][ T3910] veth0_macvtap: left promiscuous mode [ 74.824995][ T3910] veth1_vlan: left promiscuous mode [ 74.830896][ T3910] veth0_vlan: left promiscuous mode [ 74.890342][ T3910] team0 (unregistering): Port device team_slave_1 removed [ 74.900437][ T3910] team0 (unregistering): Port device team_slave_0 removed [ 75.235647][ T3910] IPVS: stop unused estimator thread 0...