last executing test programs: 785.314504ms ago: executing program 2 (id=336): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x8100, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) 661.011931ms ago: executing program 2 (id=343): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000080)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x3}}}], 0x18}, 0xc000) 591.128296ms ago: executing program 2 (id=347): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) 557.197287ms ago: executing program 2 (id=349): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000040)=""/195}, 0x94) 496.287881ms ago: executing program 1 (id=354): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x3, 0x0, 0x80, 0xffffffffffffffff}) 463.526893ms ago: executing program 2 (id=356): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12) 457.607183ms ago: executing program 3 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbff, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0xffffffffffffff95}, {0x3}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 443.706134ms ago: executing program 0 (id=359): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 432.215435ms ago: executing program 1 (id=360): r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x4, 0x10001, 0x8cff}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x2a}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x8000, 0x7, 0x207, 0x4, 0x0, 0xd, 0x9, 0x5}}, @authinfo={0x12, 0x84, 0x6, {0x1e}}], 0x98, 0x8004084}, 0x4041) 370.172029ms ago: executing program 2 (id=361): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x4}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4065, 0x36, 0xfe1, 0x1}, 0x28) 366.173099ms ago: executing program 1 (id=362): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 356.09912ms ago: executing program 0 (id=363): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f00000000c0)) 330.801661ms ago: executing program 4 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 318.757912ms ago: executing program 3 (id=365): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) 289.708804ms ago: executing program 1 (id=366): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, 0x0, 0x0) 283.114364ms ago: executing program 0 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x20000000) 280.838394ms ago: executing program 3 (id=368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x40, 0x1a, 0xa}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 259.841025ms ago: executing program 4 (id=369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 226.224807ms ago: executing program 1 (id=370): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006120a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d36a80, 0x0, 0x0) 212.308548ms ago: executing program 0 (id=371): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000002100)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000100)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) 200.917768ms ago: executing program 4 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 191.121669ms ago: executing program 3 (id=373): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x200, @remote, 0x800002}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x38, 0x29, 0x5, {0x3b, 0x4, 0x2, 0xb3, 0x0, [@remote, @local]}}}], 0x38}, 0x850) 156.861641ms ago: executing program 4 (id=374): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 145.984382ms ago: executing program 0 (id=375): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="d5f2b3ed5200", 0x6}], 0x1, &(0x7f0000000240)=[@sndrcv={0x30, 0x84, 0x1, {0xfff5, 0x88, 0x2, 0x13d, 0x2, 0x8, 0x800, 0x7}}], 0x30, 0x4855}, 0x80) 139.373082ms ago: executing program 1 (id=376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000020101010000000000000000020000002400018014000180080001"], 0x44}}, 0x0) 137.376583ms ago: executing program 3 (id=377): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 114.298283ms ago: executing program 4 (id=378): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x0) 73.800566ms ago: executing program 0 (id=379): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed0f", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 73.642496ms ago: executing program 4 (id=380): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x700, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=381): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f8000400000000000000a000000000000000000080008000100000000ff", 0x24) kernel console output (not intermixed with test programs): [ 23.526901][ T29] audit: type=1400 audit(1770327984.892:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.549116][ T29] audit: type=1400 audit(1770327984.892:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.571861][ T29] audit: type=1400 audit(1770327984.892:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.594771][ T29] audit: type=1400 audit(1770327984.892:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.617760][ T29] audit: type=1400 audit(1770327984.892:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 29.366025][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 29.366041][ T29] audit: type=1400 audit(1770327990.732:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.395102][ T29] audit: type=1400 audit(1770327990.752:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.397558][ T3298] cgroup: Unknown subsys name 'net' [ 29.423048][ T29] audit: type=1400 audit(1770327990.782:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.536736][ T3298] cgroup: Unknown subsys name 'cpuset' [ 29.543008][ T3298] cgroup: Unknown subsys name 'rlimit' [ 29.635468][ T29] audit: type=1400 audit(1770327990.992:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.671999][ T29] audit: type=1400 audit(1770327991.002:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.692506][ T29] audit: type=1400 audit(1770327991.002:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.712942][ T29] audit: type=1400 audit(1770327991.002:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.733396][ T29] audit: type=1400 audit(1770327991.012:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.733916][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.758290][ T29] audit: type=1400 audit(1770327991.012:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.790056][ T29] audit: type=1400 audit(1770327991.022:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.841104][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.090345][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 31.167628][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.212369][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 31.221511][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.228710][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.235937][ T3317] bridge_slave_0: entered allmulticast mode [ 31.242411][ T3317] bridge_slave_0: entered promiscuous mode [ 31.253666][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.260803][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.268091][ T3317] bridge_slave_1: entered allmulticast mode [ 31.274560][ T3317] bridge_slave_1: entered promiscuous mode [ 31.303086][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.318613][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.356424][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.400445][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.407569][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.414716][ T3315] bridge_slave_0: entered allmulticast mode [ 31.421279][ T3315] bridge_slave_0: entered promiscuous mode [ 31.428810][ T3317] team0: Port device team_slave_0 added [ 31.434435][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.441719][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.448918][ T3315] bridge_slave_1: entered allmulticast mode [ 31.455551][ T3315] bridge_slave_1: entered promiscuous mode [ 31.472018][ T3317] team0: Port device team_slave_1 added [ 31.495804][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 31.509812][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.516934][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.524100][ T3310] bridge_slave_0: entered allmulticast mode [ 31.530614][ T3310] bridge_slave_0: entered promiscuous mode [ 31.541754][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.548927][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.556217][ T3310] bridge_slave_1: entered allmulticast mode [ 31.562681][ T3310] bridge_slave_1: entered promiscuous mode [ 31.581224][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.588275][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.614280][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.626360][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.644500][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.651632][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.659033][ T3314] bridge_slave_0: entered allmulticast mode [ 31.665577][ T3314] bridge_slave_0: entered promiscuous mode [ 31.676518][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.683485][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.709531][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.721680][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.734558][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.743731][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.750847][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.758048][ T3314] bridge_slave_1: entered allmulticast mode [ 31.764535][ T3314] bridge_slave_1: entered promiscuous mode [ 31.791404][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.806410][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.819241][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.835455][ T3315] team0: Port device team_slave_0 added [ 31.857816][ T3315] team0: Port device team_slave_1 added [ 31.869221][ T3314] team0: Port device team_slave_0 added [ 31.877193][ T3317] hsr_slave_0: entered promiscuous mode [ 31.883335][ T3317] hsr_slave_1: entered promiscuous mode [ 31.902174][ T3314] team0: Port device team_slave_1 added [ 31.913698][ T3310] team0: Port device team_slave_0 added [ 31.933618][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.940712][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.966654][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.978048][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.985018][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.010970][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.022861][ T3310] team0: Port device team_slave_1 added [ 32.033530][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.040665][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.048099][ T3311] bridge_slave_0: entered allmulticast mode [ 32.054462][ T3311] bridge_slave_0: entered promiscuous mode [ 32.071809][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.078794][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.104818][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.130366][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.137556][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.144877][ T3311] bridge_slave_1: entered allmulticast mode [ 32.151347][ T3311] bridge_slave_1: entered promiscuous mode [ 32.158117][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.165089][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.191038][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.208351][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.215483][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.241560][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.267787][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.278779][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.288355][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.295317][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.321382][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.373737][ T3315] hsr_slave_0: entered promiscuous mode [ 32.379793][ T3315] hsr_slave_1: entered promiscuous mode [ 32.385586][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.391380][ T3315] Cannot create hsr debugfs directory [ 32.409275][ T3314] hsr_slave_0: entered promiscuous mode [ 32.415493][ T3314] hsr_slave_1: entered promiscuous mode [ 32.421567][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 32.427365][ T3314] Cannot create hsr debugfs directory [ 32.437097][ T3311] team0: Port device team_slave_0 added [ 32.445040][ T3310] hsr_slave_0: entered promiscuous mode [ 32.451058][ T3310] hsr_slave_1: entered promiscuous mode [ 32.457036][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 32.462759][ T3310] Cannot create hsr debugfs directory [ 32.477943][ T3311] team0: Port device team_slave_1 added [ 32.557918][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.564908][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.591347][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.617597][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.624668][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.650635][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.730164][ T3311] hsr_slave_0: entered promiscuous mode [ 32.736418][ T3311] hsr_slave_1: entered promiscuous mode [ 32.742472][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 32.748240][ T3311] Cannot create hsr debugfs directory [ 32.781222][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.792721][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.801577][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.817981][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.870781][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.885361][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.898151][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.909633][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.934890][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.944196][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.961766][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.973446][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.992731][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.001599][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.024163][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.040251][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.058298][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.069079][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.078267][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.087329][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.102247][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.147718][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.173720][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.188359][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.195455][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.213838][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.221042][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.248608][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.258587][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.278843][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.286022][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.304725][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.315704][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.322817][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.346970][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.360208][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.369387][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.400252][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.414073][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.421218][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.432638][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.439938][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.449786][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.456939][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.466121][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.473273][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.497353][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.528467][ T2464] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.535916][ T2464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.550942][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.558064][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.582551][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.644148][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.674851][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.757202][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.794356][ T3317] veth0_vlan: entered promiscuous mode [ 33.820162][ T3317] veth1_vlan: entered promiscuous mode [ 33.829005][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.839441][ T3314] veth0_vlan: entered promiscuous mode [ 33.858464][ T3317] veth0_macvtap: entered promiscuous mode [ 33.873203][ T3314] veth1_vlan: entered promiscuous mode [ 33.881527][ T3317] veth1_macvtap: entered promiscuous mode [ 33.902093][ T3314] veth0_macvtap: entered promiscuous mode [ 33.918628][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.933411][ T3314] veth1_macvtap: entered promiscuous mode [ 33.940803][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.958230][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.971860][ T3315] veth0_vlan: entered promiscuous mode [ 33.981277][ T2464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.000630][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.008534][ T2464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.026914][ T2464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.061410][ T2464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.082778][ T3310] veth0_vlan: entered promiscuous mode [ 34.093747][ T3315] veth1_vlan: entered promiscuous mode [ 34.103293][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.118293][ T2464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.153147][ T3310] veth1_vlan: entered promiscuous mode [ 34.174859][ T2464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.198365][ T3310] veth0_macvtap: entered promiscuous mode [ 34.218279][ T3310] veth1_macvtap: entered promiscuous mode [ 34.224883][ T2464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.241393][ T3315] veth0_macvtap: entered promiscuous mode [ 34.258129][ T2464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.270283][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.302409][ T3315] veth1_macvtap: entered promiscuous mode [ 34.332292][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.359289][ T3311] veth0_vlan: entered promiscuous mode [ 34.366133][ T3449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.386526][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 34.386544][ T29] audit: type=1326 audit(1770327995.752:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bc1aeb9 code=0x7ff00000 [ 34.418009][ T3311] veth1_vlan: entered promiscuous mode [ 34.425349][ T29] audit: type=1326 audit(1770327995.752:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bc1aeb9 code=0x7ff00000 [ 34.448634][ T29] audit: type=1326 audit(1770327995.752:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bc1aeb9 code=0x7ff00000 [ 34.450146][ T3449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.472521][ T29] audit: type=1326 audit(1770327995.752:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bc1aeb9 code=0x7ff00000 [ 34.472550][ T29] audit: type=1326 audit(1770327995.752:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bc1aeb9 code=0x7ff00000 [ 34.489371][ T3449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.504970][ T29] audit: type=1326 audit(1770327995.752:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bc1aeb9 code=0x7ff00000 [ 34.532444][ T3449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.538201][ T29] audit: type=1326 audit(1770327995.752:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bc1aeb9 code=0x7ff00000 [ 34.538238][ T29] audit: type=1326 audit(1770327995.752:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bc1aeb9 code=0x7ff00000 [ 34.605478][ T3497] syz.1.11 (3497): /proc/3496/oom_adj is deprecated, please use /proc/3496/oom_score_adj instead. [ 34.616391][ T29] audit: type=1326 audit(1770327995.752:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bc1aeb9 code=0x7ff00000 [ 34.650192][ T29] audit: type=1326 audit(1770327995.752:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3492 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe84bc1aeb9 code=0x7ff00000 [ 34.688077][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.711867][ T3311] veth0_macvtap: entered promiscuous mode [ 34.720486][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.760167][ T3311] veth1_macvtap: entered promiscuous mode [ 34.769588][ T2464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.790150][ T2464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.835341][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.856219][ T2464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.869548][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.891632][ T2464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.933919][ T2464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.953268][ T3517] capability: warning: `syz.0.18' uses deprecated v2 capabilities in a way that may be insecure [ 34.997087][ T2464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.026988][ T2464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.039446][ T2464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.102136][ T3528] bond1: down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 35.111580][ T3528] bond1: peer notification delay (3) is not a multiple of miimon (7), value rounded to 0 ms [ 35.121884][ T3528] bond1: entered allmulticast mode [ 35.199223][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 35.257496][ T3541] loop1: detected capacity change from 0 to 512 [ 35.277211][ T3545] netlink: 36 bytes leftover after parsing attributes in process `syz.3.30'. [ 35.359416][ T3556] gtp0: entered promiscuous mode [ 35.364450][ T3556] gtp0: entered allmulticast mode [ 35.376243][ T3541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.406273][ T3541] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.487320][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.533056][ T3580] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 35.542424][ T3580] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 35.617660][ T3586] netlink: 'syz.2.49': attribute type 32 has an invalid length. [ 35.625359][ T3586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.49'. [ 35.672673][ T3593] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 35.765838][ T3598] loop1: detected capacity change from 0 to 512 [ 35.843446][ T3608] netlink: 'syz.3.61': attribute type 21 has an invalid length. [ 35.852149][ T3598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.910116][ T3598] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.966456][ T3598] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.55: corrupted xattr block 33: invalid ea_ino [ 36.017909][ T3598] EXT4-fs (loop1): Remounting filesystem read-only [ 36.024573][ T3598] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 36.057272][ T3635] netlink: 'syz.4.72': attribute type 10 has an invalid length. [ 36.065146][ T3635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.72'. [ 36.082167][ T3598] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 36.108505][ T3639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 36.129650][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.434472][ T3678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.87'. [ 36.443499][ T3678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.87'. [ 36.585854][ T3695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 36.594794][ T3695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 36.603724][ T3695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 36.726806][ T3708] Cannot find add_set index 0 as target [ 36.744094][ T3710] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 36.751902][ T3710] netlink: 'syz.0.101': attribute type 2 has an invalid length. [ 36.908070][ T3734] vlan0: entered promiscuous mode [ 36.968786][ T3740] netlink: 'syz.0.116': attribute type 8 has an invalid length. [ 37.180180][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.187485][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.280649][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.295475][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.358489][ T2464] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.385798][ T2464] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.402456][ T2464] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.425835][ T2464] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.564606][ T3815] netlink: 'syz.2.152': attribute type 13 has an invalid length. [ 37.600915][ T3815] gretap0: refused to change device tx_queue_len [ 37.607377][ T3815] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 37.683200][ T3830] syz.3.160 uses obsolete (PF_INET,SOCK_PACKET) [ 37.893779][ T3860] netlink: 'syz.1.174': attribute type 25 has an invalid length. [ 37.893801][ T3860] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 37.893840][ T3860] bridge0: port 1(bridge_slave_0) entered learning state [ 37.968013][ T3869] netlink: 'syz.1.179': attribute type 3 has an invalid length. [ 38.142482][ T3898] xfrm0: entered promiscuous mode [ 38.147673][ T3898] xfrm0: entered allmulticast mode [ 38.215301][ T3908] vlan0: entered promiscuous mode [ 38.332054][ T3927] loop1: detected capacity change from 0 to 512 [ 38.375269][ T3927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.417820][ T3927] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.523941][ T3927] 9p: Could not find request transport: xen [ 38.598043][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.880819][ T4017] bridge_slave_1: default FDB implementation only supports local addresses [ 38.965110][ T4027] vhci_hcd vhci_hcd.0: invalid port number 23 [ 38.973736][ T4026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.997830][ T4026] Cannot find del_set index 4 as target [ 39.022109][ T4031] bond1: entered allmulticast mode [ 39.423929][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 39.423945][ T29] audit: type=1400 audit(1770328000.782:422): avc: denied { setopt } for pid=4086 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.556897][ T29] audit: type=1326 audit(1770328000.922:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe96b7aeb9 code=0x7ffc0000 [ 39.631220][ T4112] loop1: detected capacity change from 0 to 764 [ 39.644442][ T29] audit: type=1326 audit(1770328000.922:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7efe96b7aeb9 code=0x7ffc0000 [ 39.667845][ T29] audit: type=1326 audit(1770328000.922:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe96b7aeb9 code=0x7ffc0000 [ 39.691191][ T29] audit: type=1326 audit(1770328000.922:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4105 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe96b7aeb9 code=0x7ffc0000 [ 39.714589][ T29] audit: type=1400 audit(1770328000.922:427): avc: denied { read } for pid=4103 comm="syz.0.280" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 39.738221][ T29] audit: type=1400 audit(1770328000.922:428): avc: denied { open } for pid=4103 comm="syz.0.280" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 39.762156][ T29] audit: type=1400 audit(1770328000.922:429): avc: denied { ioctl } for pid=4103 comm="syz.0.280" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 39.805055][ T29] audit: type=1400 audit(1770328001.162:430): avc: denied { mount } for pid=4110 comm="syz.1.282" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 39.891103][ T29] audit: type=1400 audit(1770328001.252:431): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 39.990140][ T4160] loop4: detected capacity change from 0 to 512 [ 40.014439][ T4160] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.027642][ T4160] ------------[ cut here ]------------ [ 40.033167][ T4160] EA inode 11 i_nlink=2 [ 40.033193][ T4160] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.298/4160 [ 40.048643][ T4160] Modules linked in: [ 40.052597][ T4160] CPU: 1 UID: 0 PID: 4160 Comm: syz.4.298 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.062331][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.072509][ T4160] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 40.079532][ T4160] Code: a4 e5 9a ff 4c 8d 2d ed 20 3e 05 49 8d 7e 40 e8 b4 cf b6 ff 49 8b 6e 40 4c 89 e7 e8 e8 ca b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 0f e1 d0 03 66 66 66 66 66 66 2e [ 40.099740][ T4160] RSP: 0018:ffffc90010ee3778 EFLAGS: 00010246 [ 40.105931][ T4160] RAX: ffff88811aa0ed90 RBX: ffff888107633688 RCX: ffffffff81be1a38 [ 40.113939][ T4160] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 40.122159][ T4160] RBP: 000000000000000b R08: 000188810763363b R09: 0000000000000000 [ 40.130357][ T4160] R10: ffffc90010ee36a8 R11: 0001c90010ee36a8 R12: ffff888107633638 [ 40.138481][ T4160] R13: ffffffff86fc3b10 R14: ffff8881076335f0 R15: 0000000000000001 [ 40.146610][ T4160] FS: 00007efe955cf6c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 40.155770][ T4160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.162400][ T4160] CR2: 00007f04b69f6ff8 CR3: 000000011adde000 CR4: 00000000003506f0 [ 40.170704][ T4160] Call Trace: [ 40.174149][ T4160] [ 40.177147][ T4160] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 40.183185][ T4160] ? errseq_check+0x2c/0x50 [ 40.187773][ T4160] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 40.193299][ T4160] ? ext4_truncate+0x92b/0xad0 [ 40.198211][ T4160] ext4_evict_inode+0xa1f/0xd40 [ 40.203204][ T4160] ? __pfx_ext4_evict_inode+0x10/0x10 [ 40.208728][ T4160] evict+0x2af/0x510 [ 40.212720][ T4160] ? __dquot_initialize+0x146/0x7c0 [ 40.218021][ T4160] iput+0x4b9/0x650 [ 40.222119][ T4160] ext4_process_orphan+0x1a9/0x1c0 [ 40.227358][ T4160] ext4_orphan_cleanup+0x6a8/0xa00 [ 40.232528][ T4160] ext4_fill_super+0x3476/0x3800 [ 40.237613][ T4160] ? set_blocksize+0x1a3/0x310 [ 40.242449][ T4160] ? setup_bdev_super+0x30e/0x370 [ 40.247674][ T4160] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.253076][ T4160] get_tree_bdev_flags+0x291/0x300 [ 40.258244][ T4160] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.263817][ T4160] get_tree_bdev+0x1f/0x30 [ 40.268324][ T4160] ext4_get_tree+0x1c/0x30 [ 40.272860][ T4160] vfs_get_tree+0x57/0x1d0 [ 40.277584][ T4160] do_new_mount+0x288/0x700 [ 40.282554][ T4160] path_mount+0x4d0/0xbc0 [ 40.287103][ T4160] ? user_path_at+0xbf/0x130 [ 40.291758][ T4160] __se_sys_mount+0x28c/0x2e0 [ 40.296591][ T4160] __x64_sys_mount+0x67/0x80 [ 40.301215][ T4160] x64_sys_call+0x2cca/0x3000 [ 40.306104][ T4160] do_syscall_64+0xc0/0x2a0 [ 40.310772][ T4160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.316734][ T4160] RIP: 0033:0x7efe96b7c14a [ 40.321262][ T4160] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.340963][ T4160] RSP: 002b:00007efe955cee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.349461][ T4160] RAX: ffffffffffffffda RBX: 00007efe955ceee0 RCX: 00007efe96b7c14a [ 40.357587][ T4160] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007efe955ceea0 [ 40.365860][ T4160] RBP: 00002000000009c0 R08: 00007efe955ceee0 R09: 0000000000800718 [ 40.374241][ T4160] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 40.382397][ T4160] R13: 00007efe955ceea0 R14: 000000000000048d R15: 0000200000000200 [ 40.390441][ T4160] [ 40.393520][ T4160] ---[ end trace 0000000000000000 ]--- [ 40.401966][ T4160] EXT4-fs (loop4): 1 orphan inode deleted [ 40.408253][ T4160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.475664][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.581724][ T4221] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.790378][ T4258] validate_nla: 6 callbacks suppressed [ 40.790393][ T4258] netlink: 'syz.0.322': attribute type 3 has an invalid length. [ 40.804045][ T4258] __nla_validate_parse: 16 callbacks suppressed [ 40.804083][ T4258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.322'. [ 40.954396][ T4290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 41.064382][ T4312] netlink: 156 bytes leftover after parsing attributes in process `syz.2.336'. [ 41.143404][ T4324] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 41.200655][ T4341] mmap: syz.4.344 (4341) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.212101][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'. [ 41.370014][ T4379] netlink: 32 bytes leftover after parsing attributes in process `syz.3.357'. [ 41.379018][ T4379] netlink: 32 bytes leftover after parsing attributes in process `syz.3.357'. [ 41.398247][ T4385] x_tables: unsorted underflow at hook 2 [ 41.418206][ T4389] netlink: 2 bytes leftover after parsing attributes in process `syz.4.358'. [ 41.464306][ T4396] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 41.472086][ T4396] netlink: 224 bytes leftover after parsing attributes in process `syz.1.362'. [ 41.714100][ T4443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 41.719565][ C1] hrtimer: interrupt took 52837 ns [ 41.745147][ T4443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 41.765119][ T3000] ================================================================== [ 41.773269][ T3000] BUG: KCSAN: data-race in d_make_discardable / lookup_fast [ 41.780602][ T3000] [ 41.782951][ T3000] write to 0xffff88811a05f540 of 4 bytes by task 3302 on cpu 1: [ 41.790606][ T3000] d_make_discardable+0x4f/0xa0 [ 41.795502][ T3000] simple_unlink+0x68/0x80 [ 41.799964][ T3000] shmem_unlink+0x12d/0x140 [ 41.804493][ T3000] vfs_unlink+0x28b/0x440 [ 41.808852][ T3000] do_unlinkat+0x1e2/0x4b0 [ 41.813314][ T3000] __x64_sys_unlink+0x2e/0x40 [ 41.818030][ T3000] x64_sys_call+0x2f48/0x3000 [ 41.822749][ T3000] do_syscall_64+0xc0/0x2a0 [ 41.827283][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.833197][ T3000] [ 41.835531][ T3000] read to 0xffff88811a05f540 of 4 bytes by task 3000 on cpu 0: [ 41.843094][ T3000] lookup_fast+0xf0/0x320 [ 41.847460][ T3000] path_lookupat+0x15c/0x500 [ 41.852084][ T3000] filename_lookup+0x190/0x390 [ 41.856872][ T3000] do_readlinkat+0x7d/0x340 [ 41.861421][ T3000] __x64_sys_readlink+0x47/0x60 [ 41.866308][ T3000] x64_sys_call+0x2af1/0x3000 [ 41.871011][ T3000] do_syscall_64+0xc0/0x2a0 [ 41.875546][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.881462][ T3000] [ 41.883795][ T3000] value changed: 0x08300080 -> 0x00004080 [ 41.889522][ T3000] [ 41.891969][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 41.898139][ T3000] CPU: 0 UID: 0 PID: 3000 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 41.909015][ T3000] Tainted: [W]=WARN [ 41.912833][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.922918][ T3000] ================================================================== [ 41.957416][ T4451] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 48.436756][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state