last executing test programs: 1.192398414s ago: executing program 3 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r0) 1.056272275s ago: executing program 3 (id=317): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004"], 0x122}}, 0x4008090) 1.00222391s ago: executing program 2 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffcd, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1.001920899s ago: executing program 2 (id=320): r0 = socket$inet6(0xa, 0x802, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 991.93065ms ago: executing program 3 (id=321): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xee01, 0xee01) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, 0x0) 940.354484ms ago: executing program 3 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r1, @ANYBLOB="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"], 0x8c8}}, 0x0) 870.32003ms ago: executing program 3 (id=329): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x800086, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 870.0789ms ago: executing program 2 (id=330): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}]}, @typed={0x4, 0x3d}]}, 0x24}], 0x1}, 0x0) 806.433315ms ago: executing program 2 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 763.339768ms ago: executing program 2 (id=337): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) 494.99574ms ago: executing program 1 (id=350): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000002200)=[{0x84, 0x77, 0x0, 0x0, @tick=0x8af, {0xfd}, {0x7}, @raw32={[0x2, 0xfffffffd, 0x8000400]}}, {0x0, 0x0, 0x0, 0x83, @time={0x4, 0x2}, {0xfd}, {0x0, 0xfe}, @raw8={"52efcf58120e1b4294b524e2"}}, {0x0, 0x4, 0x0, 0x1, @tick=0x6, {}, {0x0, 0x83}, @ext={0x0, 0x0}}], 0x54) 440.274264ms ago: executing program 1 (id=353): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 416.767486ms ago: executing program 1 (id=355): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0) 367.20299ms ago: executing program 1 (id=357): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 345.646192ms ago: executing program 4 (id=359): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x80000000) 333.255163ms ago: executing program 0 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 308.395115ms ago: executing program 4 (id=361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socket(0x10, 0x5, 0x4) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 290.686837ms ago: executing program 0 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\a\x00\x00\x00\b'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000c00), 0x2, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, r0}, 0x38) 271.460998ms ago: executing program 0 (id=363): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x80) 269.600298ms ago: executing program 4 (id=364): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) 243.25564ms ago: executing program 0 (id=365): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x8d14, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 210.124733ms ago: executing program 4 (id=366): syz_io_uring_setup(0x1104, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 169.892236ms ago: executing program 4 (id=367): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) 164.662087ms ago: executing program 0 (id=368): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="c7", 0x1}], 0x1}, 0x24048811) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x40010003, &(0x7f0000005f40)={0x0, 0x3938700}) 145.706308ms ago: executing program 1 (id=369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r1, 0xfffffffc}, 0x63) 118.16272ms ago: executing program 0 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 73.818624ms ago: executing program 1 (id=371): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) getpeername$packet(r1, 0x0, 0x0) 73.514684ms ago: executing program 4 (id=372): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}}, 0x24}}, 0x40440c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) 46.685486ms ago: executing program 2 (id=373): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={0x0}) 0s ago: executing program 3 (id=374): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005640), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd29, 0x8, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x6}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x240400c2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 21.786020][ T29] audit: type=1400 audit(1754817188.397:62): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.786843][ T3286] cgroup: Unknown subsys name 'net' [ 21.808722][ T29] audit: type=1400 audit(1754817188.397:63): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.836042][ T29] audit: type=1400 audit(1754817188.427:64): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.989883][ T3286] cgroup: Unknown subsys name 'cpuset' [ 21.995976][ T3286] cgroup: Unknown subsys name 'rlimit' [ 22.164486][ T29] audit: type=1400 audit(1754817188.777:65): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.187775][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.187779][ T29] audit: type=1400 audit(1754817188.777:66): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.216770][ T29] audit: type=1400 audit(1754817188.777:67): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.237093][ T29] audit: type=1400 audit(1754817188.777:68): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.247112][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.257323][ T29] audit: type=1400 audit(1754817188.787:69): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.290731][ T29] audit: type=1400 audit(1754817188.787:70): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.314021][ T29] audit: type=1400 audit(1754817188.817:71): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.873378][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 23.943838][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.950989][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.958210][ T3299] bridge_slave_0: entered allmulticast mode [ 23.964626][ T3299] bridge_slave_0: entered promiscuous mode [ 23.978796][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.985883][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.993032][ T3299] bridge_slave_1: entered allmulticast mode [ 23.999528][ T3299] bridge_slave_1: entered promiscuous mode [ 24.024696][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 24.049247][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.072893][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 24.082523][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.112972][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 24.138316][ T3299] team0: Port device team_slave_0 added [ 24.149307][ T3299] team0: Port device team_slave_1 added [ 24.171501][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 24.198910][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.206024][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.213215][ T3300] bridge_slave_0: entered allmulticast mode [ 24.219746][ T3300] bridge_slave_0: entered promiscuous mode [ 24.228362][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.235312][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.261239][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.274554][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.281518][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.307424][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.322408][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.329544][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.336675][ T3300] bridge_slave_1: entered allmulticast mode [ 24.343115][ T3300] bridge_slave_1: entered promiscuous mode [ 24.367561][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.374741][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.381913][ T3308] bridge_slave_0: entered allmulticast mode [ 24.388288][ T3308] bridge_slave_0: entered promiscuous mode [ 24.400873][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.414438][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.421572][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.428646][ T3303] bridge_slave_0: entered allmulticast mode [ 24.434903][ T3303] bridge_slave_0: entered promiscuous mode [ 24.443203][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.450261][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.457396][ T3308] bridge_slave_1: entered allmulticast mode [ 24.463884][ T3308] bridge_slave_1: entered promiscuous mode [ 24.471031][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.485339][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.492422][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.499511][ T3303] bridge_slave_1: entered allmulticast mode [ 24.505862][ T3303] bridge_slave_1: entered promiscuous mode [ 24.542937][ T3300] team0: Port device team_slave_0 added [ 24.550441][ T3299] hsr_slave_0: entered promiscuous mode [ 24.556481][ T3299] hsr_slave_1: entered promiscuous mode [ 24.571907][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.581504][ T3300] team0: Port device team_slave_1 added [ 24.592973][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.602249][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.609298][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.616463][ T3305] bridge_slave_0: entered allmulticast mode [ 24.622903][ T3305] bridge_slave_0: entered promiscuous mode [ 24.630623][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.639768][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.646800][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.653959][ T3305] bridge_slave_1: entered allmulticast mode [ 24.660385][ T3305] bridge_slave_1: entered promiscuous mode [ 24.671959][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.698040][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.705029][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.731014][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.752337][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.766434][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.773423][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.799417][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.815202][ T3308] team0: Port device team_slave_0 added [ 24.821934][ T3308] team0: Port device team_slave_1 added [ 24.828475][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.851386][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.858328][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.884256][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.895565][ T3303] team0: Port device team_slave_0 added [ 24.902071][ T3303] team0: Port device team_slave_1 added [ 24.926813][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.933780][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.959746][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.982807][ T3305] team0: Port device team_slave_0 added [ 25.003861][ T3305] team0: Port device team_slave_1 added [ 25.023024][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.030106][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.055994][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.076688][ T3300] hsr_slave_0: entered promiscuous mode [ 25.083394][ T3300] hsr_slave_1: entered promiscuous mode [ 25.089625][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 25.095328][ T3300] Cannot create hsr debugfs directory [ 25.108528][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.115580][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.141463][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.156871][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.163895][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.189791][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.217866][ T3308] hsr_slave_0: entered promiscuous mode [ 25.223876][ T3308] hsr_slave_1: entered promiscuous mode [ 25.229865][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 25.235586][ T3308] Cannot create hsr debugfs directory [ 25.241305][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.248278][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.274246][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.298670][ T3303] hsr_slave_0: entered promiscuous mode [ 25.304647][ T3303] hsr_slave_1: entered promiscuous mode [ 25.310482][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 25.316199][ T3303] Cannot create hsr debugfs directory [ 25.335975][ T3305] hsr_slave_0: entered promiscuous mode [ 25.341880][ T3305] hsr_slave_1: entered promiscuous mode [ 25.347633][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 25.353353][ T3305] Cannot create hsr debugfs directory [ 25.444844][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.468813][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.477364][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.494767][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.541498][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.551200][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.561972][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.572517][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.593864][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.604897][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.613396][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.623402][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.654313][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.673797][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.682829][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.692483][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.715626][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.724694][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.739552][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.754604][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.768231][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.794617][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.815025][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.825524][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.839409][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.846444][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.854710][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.861802][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.882633][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.912310][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.921004][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.933897][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.941038][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.964756][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.971842][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.983285][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.991767][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.003313][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.020976][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.028059][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.039381][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.046511][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.059084][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.069458][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.081572][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.088652][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.097428][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.104516][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.121747][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.132918][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.177109][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.194885][ T2598] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.201987][ T2598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.232953][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.240034][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.261127][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.294684][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.307634][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.323240][ T3299] veth0_vlan: entered promiscuous mode [ 26.344781][ T3299] veth1_vlan: entered promiscuous mode [ 26.373232][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.392080][ T3299] veth0_macvtap: entered promiscuous mode [ 26.406413][ T3299] veth1_macvtap: entered promiscuous mode [ 26.435499][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.448665][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.469931][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.495185][ T3303] veth0_vlan: entered promiscuous mode [ 26.502158][ T122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.520226][ T3303] veth1_vlan: entered promiscuous mode [ 26.534801][ T122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.565885][ T122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.585249][ T3303] veth0_macvtap: entered promiscuous mode [ 26.591739][ T122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.608695][ T3305] veth0_vlan: entered promiscuous mode [ 26.625105][ T3300] veth0_vlan: entered promiscuous mode [ 26.631831][ T3305] veth1_vlan: entered promiscuous mode [ 26.640465][ T3308] veth0_vlan: entered promiscuous mode [ 26.651684][ T3303] veth1_macvtap: entered promiscuous mode [ 26.658390][ T3300] veth1_vlan: entered promiscuous mode [ 26.676187][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.679830][ T3305] veth0_macvtap: entered promiscuous mode [ 26.698018][ T3308] veth1_vlan: entered promiscuous mode [ 26.706602][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.719470][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.745792][ T3300] veth0_macvtap: entered promiscuous mode [ 26.753355][ T3300] veth1_macvtap: entered promiscuous mode [ 26.760456][ T3305] veth1_macvtap: entered promiscuous mode [ 26.771103][ T149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.780908][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.792733][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.808055][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 26.808068][ T29] audit: type=1400 audit(1754817193.417:93): avc: denied { open } for pid=3470 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.834560][ T29] audit: type=1400 audit(1754817193.417:94): avc: denied { perfmon } for pid=3470 comm="syz.1.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.836529][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.855166][ T29] audit: type=1400 audit(1754817193.417:95): avc: denied { kernel } for pid=3470 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.887600][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.894902][ T149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.903901][ T3308] veth0_macvtap: entered promiscuous mode [ 26.911703][ T3308] veth1_macvtap: entered promiscuous mode [ 26.932841][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.944062][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.951376][ T122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.965610][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.976280][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.988904][ T122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.011165][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.011302][ T29] audit: type=1400 audit(1754817193.617:96): avc: denied { write } for pid=3475 comm="syz.0.1" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.060404][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.090161][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.097574][ T29] audit: type=1400 audit(1754817193.697:97): avc: denied { prog_load } for pid=3477 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.117626][ T29] audit: type=1400 audit(1754817193.697:98): avc: denied { bpf } for pid=3477 comm="syz.0.7" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.146318][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.156212][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.167237][ T29] audit: type=1400 audit(1754817193.767:99): avc: denied { prog_run } for pid=3477 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.196647][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.209617][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.234158][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.284352][ T3493] loop4: detected capacity change from 0 to 512 [ 27.293857][ T3479] loop0: detected capacity change from 0 to 512 [ 27.294756][ T29] audit: type=1400 audit(1754817193.887:100): avc: denied { tracepoint } for pid=3492 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 27.325223][ T3479] journal_path: Lookup failure for './file0/../file0' [ 27.332105][ T3479] EXT4-fs: error: could not find journal device path [ 27.340581][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.366447][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.376684][ T29] audit: type=1400 audit(1754817193.967:101): avc: denied { create } for pid=3501 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.386932][ T3493] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 27.421902][ T3507] loop1: detected capacity change from 0 to 164 [ 27.438055][ T3493] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 27.458834][ T3493] EXT4-fs (loop4): mount failed [ 27.464383][ T3507] Unable to read rock-ridge attributes [ 27.474872][ T3507] ISOFS: unable to read i-node block [ 27.556882][ T3514] vhci_hcd: invalid port number 96 [ 27.562047][ T3514] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 27.616836][ T3524] netlink: 'syz.1.24': attribute type 298 has an invalid length. [ 27.758978][ T3545] loop4: detected capacity change from 0 to 512 [ 27.760218][ C1] hrtimer: interrupt took 27893 ns [ 27.810763][ T3545] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 27.831048][ T3545] EXT4-fs (loop4): mount failed [ 27.842133][ T3559] loop0: detected capacity change from 0 to 256 [ 28.015374][ T3583] capability: warning: `syz.2.49' uses deprecated v2 capabilities in a way that may be insecure [ 28.019240][ T3580] loop4: detected capacity change from 0 to 512 [ 28.063835][ T3580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.094270][ T3580] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.117153][ T3580] EXT4-fs: Ignoring removed orlov option [ 28.123056][ T3580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 28.137283][ T3580] EXT4-fs (loop4): can't enable nombcache during remount [ 28.177326][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.356274][ T3615] futex_wake_op: syz.3.64 tries to shift op by 36; fix this program [ 28.471197][ T3628] loop3: detected capacity change from 0 to 512 [ 28.501232][ T3628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.528218][ T3628] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.553646][ T3628] syz.3.69 (3628) used greatest stack depth: 10920 bytes left [ 28.594472][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.667894][ T3656] tmpfs: Unknown parameter 'mpo' [ 29.050248][ T3693] support for the xor transformation has been removed. [ 29.095272][ T3699] loop3: detected capacity change from 0 to 512 [ 29.108177][ T3699] EXT4-fs: Ignoring removed i_version option [ 29.114340][ T3699] EXT4-fs: Ignoring removed bh option [ 29.147844][ T3699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 29.160757][ T3699] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.176599][ T3708] loop4: detected capacity change from 0 to 256 [ 29.179037][ T3699] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.101: Failed to acquire dquot type 1 [ 29.183798][ T3708] ======================================================= [ 29.183798][ T3708] WARNING: The mand mount option has been deprecated and [ 29.183798][ T3708] and is ignored by this kernel. Remove the mand [ 29.183798][ T3708] option from the mount to silence this warning. [ 29.183798][ T3708] ======================================================= [ 29.244078][ T3708] FAT-fs (loop4): Directory bread(block 64) failed [ 29.251978][ T3708] FAT-fs (loop4): Directory bread(block 65) failed [ 29.260687][ T3708] FAT-fs (loop4): Directory bread(block 66) failed [ 29.267532][ T3708] FAT-fs (loop4): Directory bread(block 67) failed [ 29.275469][ T3708] FAT-fs (loop4): Directory bread(block 68) failed [ 29.276679][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 29.282269][ T3708] FAT-fs (loop4): Directory bread(block 69) failed [ 29.297828][ T3708] FAT-fs (loop4): Directory bread(block 70) failed [ 29.304581][ T3708] FAT-fs (loop4): Directory bread(block 71) failed [ 29.311423][ T3708] FAT-fs (loop4): Directory bread(block 72) failed [ 29.318106][ T3708] FAT-fs (loop4): Directory bread(block 73) failed [ 29.460011][ T3730] netlink: 11 bytes leftover after parsing attributes in process `syz.4.115'. [ 29.651187][ T3761] loop2: detected capacity change from 0 to 736 [ 29.709593][ T3771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'. [ 29.718516][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 29.727344][ T3771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'. [ 29.822833][ T3785] loop3: detected capacity change from 0 to 512 [ 29.831116][ T3784] loop0: detected capacity change from 0 to 256 [ 29.852143][ T3785] EXT4-fs: Ignoring removed oldalloc option [ 29.853709][ T3791] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.144'. [ 29.877680][ T3785] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.142: Parent and EA inode have the same ino 15 [ 29.892776][ T3784] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 29.901522][ T3784] FAT-fs (loop0): Filesystem has been set read-only [ 29.912418][ T3791] netlink: zone id is out of range [ 29.917608][ T3791] netlink: zone id is out of range [ 29.922761][ T3791] netlink: zone id is out of range [ 29.927924][ T3791] netlink: zone id is out of range [ 29.933101][ T3791] netlink: zone id is out of range [ 29.950976][ T3791] netlink: zone id is out of range [ 29.956148][ T3791] netlink: zone id is out of range [ 29.961281][ T3791] netlink: zone id is out of range [ 29.970477][ T3785] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.990575][ T3785] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.142: Parent and EA inode have the same ino 15 [ 30.010823][ T3798] netlink: 64 bytes leftover after parsing attributes in process `syz.1.148'. [ 30.069089][ T3791] netlink: zone id is out of range [ 30.074235][ T3791] netlink: zone id is out of range [ 30.091009][ T3785] EXT4-fs (loop3): 1 orphan inode deleted [ 30.101517][ T3785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.167118][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.393405][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 30.412360][ T3849] netlink: 'syz.2.172': attribute type 5 has an invalid length. [ 30.438392][ T3853] tipc: Started in network mode [ 30.443294][ T3853] tipc: Node identity ., cluster identity 4711 [ 30.449483][ T3853] tipc: Enabling of bearer rejected, failed to enable media [ 30.524805][ T3867] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 30.532495][ T3867] netlink: 'syz.0.181': attribute type 2 has an invalid length. [ 30.541465][ T3867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 30.606836][ T3881] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 30.614569][ T3881] SELinux: failed to load policy [ 30.676400][ T3891] loop2: detected capacity change from 0 to 512 [ 30.691265][ T3891] EXT4-fs (loop2): too many log groups per flexible block group [ 30.698968][ T3891] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 30.705805][ T3891] EXT4-fs (loop2): mount failed [ 30.793537][ T3907] IPVS: Error connecting to the multicast addr [ 30.801913][ T3909] loop0: detected capacity change from 0 to 1024 [ 30.820680][ T3909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.833609][ T3909] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.859643][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.893765][ T3919] netlink: 32 bytes leftover after parsing attributes in process `syz.0.204'. [ 31.071821][ T3941] loop0: detected capacity change from 0 to 512 [ 31.085769][ T3941] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 31.094283][ T3941] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.215: iget: bad i_size value: 12154757448730 [ 31.107211][ T3941] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.215: couldn't read orphan inode 13 (err -117) [ 31.120776][ T3941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.137802][ T3941] EXT4-fs warning (device loop0): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 31.152104][ T3941] EXT4-fs warning (device loop0): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 31.178736][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.218472][ T3950] process 'syz.4.220' launched '/dev/fd/4' with NULL argv: empty string added [ 31.232950][ T3953] program syz.0.218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 31.243021][ T3954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 31.243653][ T3956] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 31.293155][ T3960] loop3: detected capacity change from 0 to 128 [ 31.321388][ T3962] loop2: detected capacity change from 0 to 2048 [ 31.335707][ T3960] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 31.343652][ T3960] FAT-fs (loop3): Filesystem has been set read-only [ 31.356148][ T3960] syz.3.225: attempt to access beyond end of device [ 31.356148][ T3960] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 31.371166][ T3960] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 31.379049][ T3960] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 31.406830][ T3960] syz.3.225: attempt to access beyond end of device [ 31.406830][ T3960] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.425591][ T3960] syz.3.225: attempt to access beyond end of device [ 31.425591][ T3960] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 31.516175][ T3984] loop3: detected capacity change from 0 to 512 [ 31.545063][ T3984] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.558692][ T3984] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.614742][ T3984] EXT4-fs (loop3): 1 truncate cleaned up [ 31.625747][ T3984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.643791][ T4004] usb usb8: usbfs: process 4004 (syz.1.244) did not claim interface 0 before use [ 31.673738][ T4010] loop2: detected capacity change from 0 to 1024 [ 31.704972][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.716108][ T4010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.765150][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.880056][ T4043] usb usb8: usbfs: process 4043 (syz.4.263) did not claim interface 0 before use [ 32.307882][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 32.307895][ T29] audit: type=1326 audit(1754817210.917:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e865ebe9 code=0x7ffc0000 [ 32.376230][ T29] audit: type=1326 audit(1754817210.917:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e865ebe9 code=0x7ffc0000 [ 32.399526][ T29] audit: type=1326 audit(1754817210.917:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f82e865ebe9 code=0x7ffc0000 [ 32.422765][ T29] audit: type=1326 audit(1754817210.917:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e865ebe9 code=0x7ffc0000 [ 32.445992][ T29] audit: type=1326 audit(1754817210.917:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e865ebe9 code=0x7ffc0000 [ 32.487605][ T4113] loop4: detected capacity change from 0 to 128 [ 32.552736][ T4123] capability: warning: `syz.2.301' uses 32-bit capabilities (legacy support in use) [ 32.606294][ T29] audit: type=1326 audit(1754817211.217:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e865ebe9 code=0x7ffc0000 [ 32.629570][ T29] audit: type=1326 audit(1754817211.217:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e865ebe9 code=0x7ffc0000 [ 32.652828][ T29] audit: type=1326 audit(1754817211.217:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82e865d550 code=0x7ffc0000 [ 32.676052][ T29] audit: type=1326 audit(1754817211.217:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f82e8660417 code=0x7ffc0000 [ 32.699351][ T29] audit: type=1326 audit(1754817211.217:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82e865ebe9 code=0x7ffc0000 [ 32.796375][ T4143] loop4: detected capacity change from 0 to 512 [ 32.805664][ T4143] EXT4-fs: Ignoring removed oldalloc option [ 32.819264][ T4143] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.311: Parent and EA inode have the same ino 15 [ 32.833090][ T4143] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.311: Parent and EA inode have the same ino 15 [ 32.846676][ T4143] EXT4-fs (loop4): 1 orphan inode deleted [ 32.855883][ T4143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.879435][ T4151] loop1: detected capacity change from 0 to 512 [ 32.904712][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.934738][ T4151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.971058][ T4151] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.029803][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.081175][ T4182] loop4: detected capacity change from 0 to 512 [ 33.111708][ T4182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.141205][ T4182] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.162894][ T4182] syz.4.327 (4182) used greatest stack depth: 10680 bytes left [ 33.174666][ T4196] loop0: detected capacity change from 0 to 164 [ 33.219236][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.279105][ T4210] loop0: detected capacity change from 0 to 128 [ 33.315222][ T4215] netlink: 'syz.1.343': attribute type 2 has an invalid length. [ 33.322956][ T4215] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 33.369249][ T4219] loop4: detected capacity change from 0 to 128 [ 33.405062][ T4219] FAT-fs (loop4): error, corrupted directory (invalid i_start) [ 33.412657][ T4219] FAT-fs (loop4): Filesystem has been set read-only [ 33.546926][ T4238] ramfs: Bad value for 'mode' [ 33.655233][ T4246] loop1: detected capacity change from 0 to 2048 [ 33.737222][ T4246] Alternate GPT is invalid, using primary GPT. [ 33.743625][ T4246] loop1: p2 p3 p7 [ 33.847153][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 33.847682][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 33.858649][ T3575] udevd[3575]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 33.889527][ T4271] netlink: 'syz.0.370': attribute type 15 has an invalid length. [ 33.925103][ T3292] ================================================================== [ 33.933200][ T3292] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink [ 33.940227][ T3292] [ 33.942536][ T3292] write to 0xffff88810319382c of 4 bytes by task 3575 on cpu 0: [ 33.950146][ T3292] shmem_unlink+0x13c/0x170 [ 33.954637][ T3292] shmem_rename2+0x1a1/0x290 [ 33.959219][ T3292] vfs_rename+0x7f3/0xa40 [ 33.963543][ T3292] do_renameat2+0x557/0xa10 [ 33.968032][ T3292] __x64_sys_rename+0x58/0x70 [ 33.972699][ T3292] x64_sys_call+0x1f9/0x2ff0 [ 33.977274][ T3292] do_syscall_64+0xd2/0x200 [ 33.981767][ T3292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.987682][ T3292] [ 33.989989][ T3292] read to 0xffff88810319382c of 4 bytes by task 3292 on cpu 1: [ 33.997514][ T3292] fill_mg_cmtime+0x5b/0x260 [ 34.002092][ T3292] generic_fillattr+0x24a/0x340 [ 34.006931][ T3292] shmem_getattr+0x181/0x200 [ 34.011508][ T3292] vfs_getattr_nosec+0x143/0x1e0 [ 34.016435][ T3292] vfs_statx+0x113/0x390 [ 34.020669][ T3292] vfs_fstatat+0x115/0x170 [ 34.025073][ T3292] __se_sys_newfstatat+0x55/0x260 [ 34.030087][ T3292] __x64_sys_newfstatat+0x55/0x70 [ 34.035100][ T3292] x64_sys_call+0x135a/0x2ff0 [ 34.039762][ T3292] do_syscall_64+0xd2/0x200 [ 34.044254][ T3292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.050129][ T3292] [ 34.052433][ T3292] value changed: 0x20060e03 -> 0x209130ff [ 34.058133][ T3292] [ 34.060445][ T3292] Reported by Kernel Concurrency Sanitizer on: [ 34.066605][ T3292] CPU: 1 UID: 0 PID: 3292 Comm: udevd Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 34.078220][ T3292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.088263][ T3292] ==================================================================