last executing test programs: 4.442711054s ago: executing program 2 (id=830): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0xa0, 0x0, 0x80, 0x3d, 0x0, 0x4, 0x0}) 4.354441354s ago: executing program 2 (id=848): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb301000000dbb7d553b4e92155", 0x39}], 0x1}, 0x40000) 4.304866584s ago: executing program 2 (id=851): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create1(0x80000) 4.234079805s ago: executing program 2 (id=843): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4.164679525s ago: executing program 2 (id=845): socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000001d40)=""/4101, 0x1005}], 0x2, 0x0, 0xfffffffc) 3.978311776s ago: executing program 2 (id=855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5}, 0x20}}, 0x0) 3.978234726s ago: executing program 32 (id=855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5}, 0x20}}, 0x0) 2.160319442s ago: executing program 1 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 779.506327ms ago: executing program 1 (id=908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) 686.423437ms ago: executing program 0 (id=900): r0 = open(&(0x7f0000000180)='./bus\x00', 0x1492fe, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000840)=0x4) 659.956377ms ago: executing program 0 (id=903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 471.691418ms ago: executing program 3 (id=909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/9) 449.395018ms ago: executing program 5 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r1}, 0x9) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]}) 448.925378ms ago: executing program 1 (id=920): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008082, &(0x7f0000000800)={[{@noload}]}, 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 415.667258ms ago: executing program 0 (id=911): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000a80)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, 0x14, 0x119, 0x0, 0x4, {0x28, 0x37}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "a49d1f954ea86e257695787013"}]}, 0x28}}, 0x0) 380.743738ms ago: executing program 5 (id=912): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) syz_read_part_table(0x5dc, &(0x7f0000000000)="$eJzs2z9o1GcYB/DnoteADi5OTuogpbgojh5F5e5UFMJpliJFQRHxphOEkx6k6KA3GHJDSLcsaeCW/JlyuSFTQgKZQ8iQEsiQpSVZAlly5dK3Q6FDr00KpZ8PBw/ve8/7ft8X3vUX/Kf1xS+dTicTEZ3+iFM9rh5s5gv3Lg7cKj2OyMSTiPj2hy9/7P6TSR3dXbsup/FmGk+Mn2l/2rubbW482r/ydLHe9/uWQ0e/ODvZGjyG63HCpnJL595/qBQ/V3Ov1ou17Y9rqw+nd/Ol1oN6Y+Z+9s7z1Lec6ulU30Q13sXreBbl+D5eROWY8seaW9cOLxSbcy9vHhTawwvXj7p6fde95R892Ijo5r+9NPJNo3b76uz50RvV+ZXSToou95/YEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEbZWDr3/kOl+Lmae7VerG1/XFt9OL2bL7Ue1Bsz97N3nqe+5VRPp/omqvEuXsezKEc5XkTlb+ZP5f6YP9bcunZ4odice3nzoNAeXrie+gb+4T3/Qn6nm//20sjXjdrtq7PnR29U51dKO6d+6yv3/9nqL07oVAAAAAAAAAAAAAAAAAAAAPzf5Av3Lg7cKj2OyMSTiPjq5+/6uvOd9L17JvVdTnUzzU+Mn2l/2rubbW482r/ydLH+U5ofikwMRcTZydbgv34ZevZrAAAA///YkpIV") 247.705409ms ago: executing program 4 (id=913): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x4008001) sendto$inet6(r0, &(0x7f0000000280)="ff", 0x1, 0x20000050, &(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d0e}, 0x1c) 247.184999ms ago: executing program 0 (id=914): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close(r1) close(r0) 246.393459ms ago: executing program 1 (id=925): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000040000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 228.316699ms ago: executing program 0 (id=915): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 228.256459ms ago: executing program 3 (id=916): r0 = open(&(0x7f0000000180)='./bus\x00', 0x1492fe, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000840)=0x4) 221.699719ms ago: executing program 4 (id=917): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) 198.116549ms ago: executing program 4 (id=918): r0 = syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0x1}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) epoll_pwait2(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) 165.828379ms ago: executing program 3 (id=919): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 115.975799ms ago: executing program 4 (id=921): creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x101482, 0x0) fallocate(r0, 0x10, 0x0, 0x2000) 115.461499ms ago: executing program 5 (id=932): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 115.105519ms ago: executing program 3 (id=922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 114.739599ms ago: executing program 0 (id=933): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) syz_read_part_table(0x5dc, &(0x7f0000000000)="$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") 110.477529ms ago: executing program 1 (id=934): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r1, 0x5608, 0x0) 83.935159ms ago: executing program 3 (id=923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r1}, 0x9) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]}) 83.346029ms ago: executing program 5 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003b00090000000000cd00000001000000180003"], 0x2c}}, 0x0) 76.400839ms ago: executing program 4 (id=924): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000a80)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, 0x14, 0x119, 0x0, 0x4, {0x28, 0x37}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "a49d1f954ea86e257695787013"}]}, 0x28}}, 0x0) 41.34574ms ago: executing program 4 (id=926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/9) 40.74916ms ago: executing program 3 (id=940): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "3cae78117e75c2375b0290fa828d974126c1a70b22f77a37a37b7154cc0c406c", "d27bd50a2942aa283aeb9677e3ef551e", {"e72158200581e0854e6657fe05a72fce", "98d47eff9de7a9dad98d6fde327bb9c3"}}}}}}}, 0x0) 11.660399ms ago: executing program 5 (id=927): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write(r0, &(0x7f0000000080)='\t', 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 11.56325ms ago: executing program 1 (id=928): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ee, @host}, 0x10) 0s ago: executing program 5 (id=929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf, 0xb}, {0xffe0, 0x7}, {0x11, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x32880ee92d98d1d0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.545019][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 17.545045][ T29] audit: type=1400 audit(1731320065.422:76): avc: denied { transition } for pid=3194 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.549190][ T29] audit: type=1400 audit(1731320065.422:77): avc: denied { noatsecure } for pid=3194 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.551869][ T29] audit: type=1400 audit(1731320065.422:78): avc: denied { write } for pid=3194 comm="sh" path="pipe:[1587]" dev="pipefs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.555128][ T29] audit: type=1400 audit(1731320065.422:79): avc: denied { rlimitinh } for pid=3194 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.557750][ T29] audit: type=1400 audit(1731320065.422:80): avc: denied { siginh } for pid=3194 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.400959][ T29] audit: type=1400 audit(1731320068.282:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 25.640132][ T29] audit: type=1400 audit(1731320073.512:82): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.641382][ T3303] cgroup: Unknown subsys name 'net' [ 25.662843][ T29] audit: type=1400 audit(1731320073.512:83): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.690244][ T29] audit: type=1400 audit(1731320073.552:84): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.885165][ T3303] cgroup: Unknown subsys name 'cpuset' [ 25.891292][ T3303] cgroup: Unknown subsys name 'rlimit' [ 25.979753][ T29] audit: type=1400 audit(1731320073.852:85): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.005191][ T29] audit: type=1400 audit(1731320073.852:86): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.025824][ T29] audit: type=1400 audit(1731320073.852:87): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.034161][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.046197][ T29] audit: type=1400 audit(1731320073.852:88): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.075055][ T29] audit: type=1400 audit(1731320073.862:89): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.099922][ T29] audit: type=1400 audit(1731320073.862:90): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.123355][ T29] audit: type=1400 audit(1731320073.932:91): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.152985][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.257058][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.300438][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.361448][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.368582][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.375818][ T3314] bridge_slave_0: entered allmulticast mode [ 27.382256][ T3314] bridge_slave_0: entered promiscuous mode [ 27.388885][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.395990][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.403133][ T3314] bridge_slave_1: entered allmulticast mode [ 27.409385][ T3314] bridge_slave_1: entered promiscuous mode [ 27.427906][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 27.442258][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.463371][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.484587][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.500576][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 27.530042][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.537204][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.544345][ T3315] bridge_slave_0: entered allmulticast mode [ 27.550730][ T3315] bridge_slave_0: entered promiscuous mode [ 27.557394][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.564498][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.571663][ T3315] bridge_slave_1: entered allmulticast mode [ 27.578158][ T3315] bridge_slave_1: entered promiscuous mode [ 27.600975][ T3314] team0: Port device team_slave_0 added [ 27.632506][ T3314] team0: Port device team_slave_1 added [ 27.643410][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.668849][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.696162][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.703200][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.710571][ T3321] bridge_slave_0: entered allmulticast mode [ 27.716984][ T3321] bridge_slave_0: entered promiscuous mode [ 27.727293][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.734392][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.741608][ T3319] bridge_slave_0: entered allmulticast mode [ 27.747959][ T3319] bridge_slave_0: entered promiscuous mode [ 27.759125][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.766296][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.773491][ T3318] bridge_slave_0: entered allmulticast mode [ 27.779991][ T3318] bridge_slave_0: entered promiscuous mode [ 27.786560][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.793507][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.819466][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.830374][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.837536][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.844833][ T3321] bridge_slave_1: entered allmulticast mode [ 27.851107][ T3321] bridge_slave_1: entered promiscuous mode [ 27.860966][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.868109][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.875217][ T3319] bridge_slave_1: entered allmulticast mode [ 27.881677][ T3319] bridge_slave_1: entered promiscuous mode [ 27.887733][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.894832][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.902153][ T3318] bridge_slave_1: entered allmulticast mode [ 27.908533][ T3318] bridge_slave_1: entered promiscuous mode [ 27.919312][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.926286][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.952250][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.967806][ T3315] team0: Port device team_slave_0 added [ 27.990431][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.000475][ T3315] team0: Port device team_slave_1 added [ 28.011576][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.026653][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.036898][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.060624][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.070019][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.077012][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.102972][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.114701][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.129757][ T3318] team0: Port device team_slave_0 added [ 28.139768][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.146869][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.172827][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.195373][ T3318] team0: Port device team_slave_1 added [ 28.202834][ T3314] hsr_slave_0: entered promiscuous mode [ 28.209167][ T3314] hsr_slave_1: entered promiscuous mode [ 28.220478][ T3321] team0: Port device team_slave_0 added [ 28.240915][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.247976][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.273972][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.285403][ T3321] team0: Port device team_slave_1 added [ 28.296653][ T3319] team0: Port device team_slave_0 added [ 28.319182][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.326244][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.352179][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.372419][ T3319] team0: Port device team_slave_1 added [ 28.378335][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.385323][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.411370][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.422708][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.429727][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.455670][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.483203][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.490232][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.516154][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.529069][ T3315] hsr_slave_0: entered promiscuous mode [ 28.536075][ T3315] hsr_slave_1: entered promiscuous mode [ 28.541967][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.549541][ T3315] Cannot create hsr debugfs directory [ 28.572575][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.579553][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.605454][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.636568][ T3318] hsr_slave_0: entered promiscuous mode [ 28.642629][ T3318] hsr_slave_1: entered promiscuous mode [ 28.648686][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.656291][ T3318] Cannot create hsr debugfs directory [ 28.687501][ T3321] hsr_slave_0: entered promiscuous mode [ 28.693531][ T3321] hsr_slave_1: entered promiscuous mode [ 28.699809][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.707385][ T3321] Cannot create hsr debugfs directory [ 28.751228][ T3319] hsr_slave_0: entered promiscuous mode [ 28.757407][ T3319] hsr_slave_1: entered promiscuous mode [ 28.763328][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.770919][ T3319] Cannot create hsr debugfs directory [ 28.862278][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.881045][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.902695][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.918717][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.942593][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.954123][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.965967][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.979415][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.992444][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.003282][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.016294][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.027659][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.060669][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.070176][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.089436][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.097889][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.129709][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.138897][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.149317][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.158391][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.183603][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.223248][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.235904][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.244449][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.261535][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.277624][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.288539][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.295679][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.308116][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.315253][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.335938][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.343913][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.350982][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.359645][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.366725][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.392278][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.403012][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.410067][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.426025][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.441785][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.448949][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.473573][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.484019][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.505972][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.513036][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.529060][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.536260][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.548003][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.593100][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.603724][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.619909][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.630344][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.646128][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.653255][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.666422][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.673487][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.685686][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.704884][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.720087][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.804165][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.892234][ T3314] veth0_vlan: entered promiscuous mode [ 29.900237][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.909918][ T3318] veth0_vlan: entered promiscuous mode [ 29.918535][ T3314] veth1_vlan: entered promiscuous mode [ 29.929905][ T3318] veth1_vlan: entered promiscuous mode [ 29.953946][ T3321] veth0_vlan: entered promiscuous mode [ 29.965424][ T3318] veth0_macvtap: entered promiscuous mode [ 29.982470][ T3321] veth1_vlan: entered promiscuous mode [ 29.989775][ T3318] veth1_macvtap: entered promiscuous mode [ 29.998490][ T3314] veth0_macvtap: entered promiscuous mode [ 30.018628][ T3314] veth1_macvtap: entered promiscuous mode [ 30.035518][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.043383][ T3315] veth0_vlan: entered promiscuous mode [ 30.053158][ T3315] veth1_vlan: entered promiscuous mode [ 30.062426][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.079608][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.090215][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.100831][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.109053][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.119516][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.130474][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.138230][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.147119][ T3318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.155928][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.164698][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.183523][ T3319] veth0_vlan: entered promiscuous mode [ 30.201114][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.209939][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.218824][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.227579][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.241040][ T3321] veth0_macvtap: entered promiscuous mode [ 30.250050][ T3315] veth0_macvtap: entered promiscuous mode [ 30.257211][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.265096][ T3319] veth1_vlan: entered promiscuous mode [ 30.280560][ T3321] veth1_macvtap: entered promiscuous mode [ 30.288146][ T3315] veth1_macvtap: entered promiscuous mode [ 30.315898][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.326405][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.336359][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.346813][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.357480][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.365732][ T3319] veth0_macvtap: entered promiscuous mode [ 30.372183][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.382649][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.392636][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.403150][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.413910][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.441403][ T3321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.450278][ T3321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.457469][ T3457] loop3: detected capacity change from 0 to 1024 [ 30.459012][ T3321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.473984][ T3321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.488926][ T3457] EXT4-fs: Ignoring removed orlov option [ 30.495039][ T3457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.510507][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.521104][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.530992][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.541637][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.551475][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.561915][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.572711][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.581008][ T3319] veth1_macvtap: entered promiscuous mode [ 30.598093][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.608651][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.618546][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.627063][ T3457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.629069][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.650933][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.656927][ T3465] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 30.661389][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.661400][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.674566][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 30.674582][ T29] audit: type=1400 audit(1731320078.552:127): avc: denied { mount } for pid=3456 comm="syz.3.6" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.681531][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.724289][ T29] audit: type=1400 audit(1731320078.572:128): avc: denied { mounton } for pid=3456 comm="syz.3.6" path="/1/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.731735][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.764174][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.770511][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.774779][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.793528][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.803976][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.813912][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.824419][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.844510][ T29] audit: type=1400 audit(1731320078.722:129): avc: denied { open } for pid=3468 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.878272][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.888670][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.899264][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.909095][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.916657][ T29] audit: type=1400 audit(1731320078.722:130): avc: denied { kernel } for pid=3468 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.919526][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.919537][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.958855][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.968682][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.979179][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.989119][ T29] audit: type=1326 audit(1731320078.822:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 30.996501][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.012320][ T29] audit: type=1326 audit(1731320078.822:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 31.042493][ T29] audit: type=1326 audit(1731320078.822:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 31.065486][ T29] audit: type=1326 audit(1731320078.822:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 31.088697][ T29] audit: type=1326 audit(1731320078.822:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 31.111784][ T29] audit: type=1326 audit(1731320078.822:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 31.138290][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.147047][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.155788][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.164655][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.188832][ T3319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.197671][ T3319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.206435][ T3319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.215276][ T3319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.290174][ T3483] syz.3.15[3483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.290247][ T3483] syz.3.15[3483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.302000][ T3483] syz.3.15[3483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.379318][ T3496] loop0: detected capacity change from 0 to 128 [ 31.448880][ T3502] Invalid ELF header magic: != ELF [ 31.470324][ T3481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.479419][ T3481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.513387][ T3510] capability: warning: `syz.2.24' uses 32-bit capabilities (legacy support in use) [ 31.613529][ T3524] syz.0.30 (3524) used greatest stack depth: 10464 bytes left [ 31.689769][ T3540] program syz.2.36 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 31.837042][ T3552] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 31.871393][ T3555] loop0: detected capacity change from 0 to 512 [ 31.877986][ T3555] ======================================================= [ 31.877986][ T3555] WARNING: The mand mount option has been deprecated and [ 31.877986][ T3555] and is ignored by this kernel. Remove the mand [ 31.877986][ T3555] option from the mount to silence this warning. [ 31.877986][ T3555] ======================================================= [ 31.923673][ T3555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.948737][ T3555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.963890][ T3555] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.966815][ T3559] tmpfs: Unknown parameter 'mpo' [ 31.989950][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.008264][ T3561] team0: entered promiscuous mode [ 32.013335][ T3561] team_slave_0: entered promiscuous mode [ 32.019190][ T3561] team_slave_1: entered promiscuous mode [ 32.028903][ T3560] team0: left promiscuous mode [ 32.033718][ T3560] team_slave_0: left promiscuous mode [ 32.039290][ T3560] team_slave_1: left promiscuous mode [ 32.167837][ T3579] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 32.183933][ T3579] SELinux: failed to load policy [ 32.229701][ T3589] loop1: detected capacity change from 0 to 764 [ 32.253536][ T3589] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 32.315872][ T3593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.60'. [ 32.483943][ T3623] loop2: detected capacity change from 0 to 256 [ 32.578542][ T3636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 32.616284][ T3636] team0 (unregistering): Port device team_slave_0 removed [ 32.625716][ T3644] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 32.627652][ T3636] team0 (unregistering): Port device team_slave_1 removed [ 32.767423][ T3658] loop3: detected capacity change from 0 to 512 [ 32.778289][ T3658] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.93: casefold flag without casefold feature [ 32.794061][ T3658] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.93: couldn't read orphan inode 15 (err -117) [ 32.807404][ T3658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.842319][ T3665] SELinux: Context system_u:object_r:sshd_var_run_t:s0 is not valid (left unmapped). [ 32.877870][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.908947][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 32.918035][ T3674] bridge_slave_1: left allmulticast mode [ 32.923731][ T3674] bridge_slave_1: left promiscuous mode [ 32.929461][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.944036][ T3674] bridge_slave_0: left allmulticast mode [ 32.949733][ T3674] bridge_slave_0: left promiscuous mode [ 32.955493][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.969406][ T3672] loop2: detected capacity change from 0 to 1024 [ 32.989937][ T3672] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.99: Failed to acquire dquot type 0 [ 32.999205][ T3683] loop1: detected capacity change from 0 to 1024 [ 33.009885][ T3672] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 33.024484][ T3672] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #13: comm syz.2.99: corrupted inode contents [ 33.036942][ T3672] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #13: comm syz.2.99: mark_inode_dirty error [ 33.048853][ T3672] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #13: comm syz.2.99: corrupted inode contents [ 33.061510][ T3672] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.99: mark_inode_dirty error [ 33.062138][ T3683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.080722][ T3672] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #13: comm syz.2.99: corrupted inode contents [ 33.099600][ T3690] SELinux: policydb version 0 does not match my version range 15-33 [ 33.100610][ T3672] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 33.108328][ T3690] SELinux: failed to load policy [ 33.117448][ T3672] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #13: comm syz.2.99: corrupted inode contents [ 33.130200][ T3683] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.102: missing EA_INODE flag [ 33.133177][ T3672] EXT4-fs error (device loop2): ext4_truncate:4208: inode #13: comm syz.2.99: mark_inode_dirty error [ 33.156693][ T3683] EXT4-fs (loop1): Remounting filesystem read-only [ 33.156942][ T3672] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 33.163229][ T3683] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.186181][ T3672] EXT4-fs (loop2): 1 truncate cleaned up [ 33.192273][ T3672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.207100][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.252896][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.299037][ T3697] loop1: detected capacity change from 0 to 512 [ 33.347617][ T3697] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.104: Failed to acquire dquot type 1 [ 33.359570][ T3697] EXT4-fs (loop1): 1 truncate cleaned up [ 33.366943][ T3697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.384979][ T3697] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.401663][ T3706] Invalid ELF header magic: != ELF [ 33.424231][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.512514][ T3723] loop1: detected capacity change from 0 to 512 [ 33.523468][ T3723] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.550490][ T3723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.579255][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.643335][ T3740] loop1: detected capacity change from 0 to 512 [ 33.650025][ T3740] EXT4-fs: Ignoring removed i_version option [ 33.656098][ T3740] EXT4-fs: inline encryption not supported [ 33.717084][ T3740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 33.730177][ T3740] ext4 filesystem being mounted at /23/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.749384][ T3756] loop2: detected capacity change from 0 to 128 [ 33.773973][ T3756] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.787483][ T3756] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.803186][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.826064][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.852454][ T3762] 9pnet_fd: Insufficient options for proto=fd [ 33.872600][ T3764] loop1: detected capacity change from 0 to 512 [ 33.934628][ T3764] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.137: corrupted in-inode xattr: invalid ea_ino [ 33.953359][ T3775] 9pnet: Could not find request transport: f [ 33.959363][ T3764] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.137: couldn't read orphan inode 15 (err -117) [ 34.000080][ T3764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.065229][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.076745][ T3796] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 34.083179][ T3789] block device autoloading is deprecated and will be removed. [ 34.084472][ T3796] netlink: 'syz.3.152': attribute type 2 has an invalid length. [ 34.097264][ T3792] loop0: detected capacity change from 0 to 2048 [ 34.109628][ T3789] syz.2.144: attempt to access beyond end of device [ 34.109628][ T3789] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 34.188118][ T3792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.245988][ T3016] udevd[3016]: worker [3306] terminated by signal 33 (Unknown signal 33) [ 34.255452][ T3819] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.268886][ T3016] udevd[3016]: worker [3306] failed while handling '/devices/virtual/block/loop4' [ 34.276277][ T3792] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.151: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 34.305539][ T3821] hsr0: VLAN not yet supported [ 34.319658][ T3823] netlink: 'syz.4.163': attribute type 6 has an invalid length. [ 34.332136][ T3823] netlink: 'syz.4.163': attribute type 8 has an invalid length. [ 34.394819][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.697558][ T3874] geneve0: entered allmulticast mode [ 34.743011][ T3878] loop0: detected capacity change from 0 to 1024 [ 34.776130][ T3885] xt_hashlimit: max too large, truncated to 1048576 [ 34.819789][ T3878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.864942][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.973983][ T3919] loop4: detected capacity change from 0 to 512 [ 34.999505][ T3922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.209'. [ 35.008604][ T3922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.209'. [ 35.015950][ T3919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.032561][ T3919] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.094475][ T3934] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 35.102254][ T3934] netlink: 'syz.0.215': attribute type 2 has an invalid length. [ 35.132581][ T3938] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 35.153003][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.207511][ T3946] mmap: syz.4.219 (3946) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.313066][ T3952] loop3: detected capacity change from 0 to 8192 [ 35.326885][ T3960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 35.343453][ T3963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 35.392116][ T3952] loop3: p2 p3 p4 [ 35.399691][ T3952] loop3: p2 start 14935 is beyond EOD, truncated [ 35.406162][ T3952] loop3: p3 size 196608 extends beyond EOD, truncated [ 35.425391][ T3952] loop3: p4 start 4026530307 is beyond EOD, truncated [ 35.439834][ T3016] loop3: p2 p3 p4 [ 35.445243][ T3016] loop3: p2 start 14935 is beyond EOD, truncated [ 35.451632][ T3016] loop3: p3 size 196608 extends beyond EOD, truncated [ 35.472992][ T3016] loop3: p4 start 4026530307 is beyond EOD, truncated [ 35.481217][ T3975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.234'. [ 35.500067][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.568014][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.587217][ T3985] Cannot find del_set index 0 as target [ 35.690230][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 35.690246][ T29] audit: type=1400 audit(1731320083.562:467): avc: denied { create } for pid=3992 comm="syz.4.243" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.756542][ T29] audit: type=1400 audit(1731320083.582:468): avc: denied { ioctl } for pid=4000 comm="syz.3.246" path="socket:[6424]" dev="sockfs" ino=6424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.782183][ T29] audit: type=1326 audit(1731320083.602:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3014be719 code=0x7ffc0000 [ 35.796037][ T3999] loop1: detected capacity change from 0 to 8192 [ 35.805601][ T29] audit: type=1326 audit(1731320083.602:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3014be719 code=0x7ffc0000 [ 35.835189][ T29] audit: type=1326 audit(1731320083.602:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fa3014be719 code=0x7ffc0000 [ 35.844975][ T3999] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.858334][ T29] audit: type=1326 audit(1731320083.602:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4001 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3014be719 code=0x7ffc0000 [ 35.858367][ T29] audit: type=1400 audit(1731320083.602:473): avc: denied { mounton } for pid=3992 comm="syz.4.243" path="/55/file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.858395][ T29] audit: type=1400 audit(1731320083.602:474): avc: denied { mount } for pid=3992 comm="syz.4.243" name="/" dev="ramfs" ino=5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 35.858421][ T29] audit: type=1400 audit(1731320083.622:475): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.889545][ T29] audit: type=1400 audit(1731320083.712:476): avc: denied { mounton } for pid=3996 comm="syz.1.245" path="/34/file2" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.062434][ T4018] loop3: detected capacity change from 0 to 164 [ 36.075443][ T4022] syz.4.255[4022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.075644][ T4022] syz.4.255[4022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.077047][ T4021] netlink: 128 bytes leftover after parsing attributes in process `syz.2.257'. [ 36.097799][ T4022] syz.4.255[4022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.117283][ T4021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 36.185225][ T4029] loop1: detected capacity change from 0 to 512 [ 36.242059][ T4029] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.259: Failed to acquire dquot type 1 [ 36.309073][ T4029] EXT4-fs (loop1): 1 truncate cleaned up [ 36.320978][ T4029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.334032][ T4029] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.347338][ T4046] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 36.362417][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.442921][ T4046] loop3: detected capacity change from 0 to 512 [ 36.480924][ T4046] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.494027][ T4046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.534661][ T4046] EXT4-fs (loop3): 1 truncate cleaned up [ 36.545216][ T4046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.577304][ T4055] netlink: 'syz.0.271': attribute type 1 has an invalid length. [ 36.585343][ T4055] netlink: 'syz.0.271': attribute type 2 has an invalid length. [ 36.629417][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.656976][ T4066] sg_write: process 115 (syz.3.273) changed security contexts after opening file descriptor, this is not allowed. [ 36.669423][ T4066] program syz.3.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.902509][ T4098] atomic_op ffff8881054dcd28 conn xmit_atomic 0000000000000000 [ 37.056216][ T4115] loop1: detected capacity change from 0 to 256 [ 37.177469][ T4123] loop1: detected capacity change from 0 to 2048 [ 37.271706][ T4140] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 37.453269][ T4171] netlink: 'syz.4.322': attribute type 2 has an invalid length. [ 37.489711][ T4144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.505924][ T4180] TCP: tcp_parse_options: Illegal window scaling value 247 > 14 received [ 37.518863][ T4144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.602268][ T4191] loop4: detected capacity change from 0 to 512 [ 37.612445][ T4191] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 37.756801][ T4217] syz.2.344[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.756902][ T4217] syz.2.344[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.778889][ T4217] syz.2.344[4217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.819693][ T4225] syz.4.347 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.853253][ T4227] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 37.889401][ T4231] __nla_validate_parse: 1 callbacks suppressed [ 37.889497][ T4231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 37.937117][ T4239] loop0: detected capacity change from 0 to 512 [ 38.046227][ T4235] infiniband syz1: set active [ 38.051053][ T4235] infiniband syz1: added bond0 [ 38.127165][ T4235] RDS/IB: syz1: added [ 38.131221][ T4235] smc: adding ib device syz1 with port count 1 [ 38.137475][ T4235] smc: ib device syz1 port 1 has pnetid [ 38.236607][ T4272] loop4: detected capacity change from 0 to 512 [ 38.290534][ T4272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.319150][ T4272] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.372025][ T4272] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #12: comm syz.4.371: Directory hole found for htree leaf block 0 [ 38.485079][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.572215][ T4304] loop2: detected capacity change from 0 to 512 [ 38.582377][ T4306] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 38.590823][ T4304] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.609193][ T4304] EXT4-fs (loop2): 1 truncate cleaned up [ 38.620142][ T4304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.665078][ T4315] loop3: detected capacity change from 0 to 512 [ 38.673762][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.775591][ T4330] program syz.1.395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.790706][ T4308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.804885][ T4332] rdma_rxe: rxe_newlink: failed to add bond0 [ 38.814439][ T4308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.856071][ T4340] loop0: detected capacity change from 0 to 512 [ 38.871214][ T4338] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 38.884688][ T4340] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.908599][ T4340] EXT4-fs (loop0): 1 truncate cleaned up [ 38.922255][ T4340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.936086][ T4345] atomic_op ffff888113ff0528 conn xmit_atomic 0000000000000000 [ 38.973848][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.057030][ T4357] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 39.228918][ T4363] loop2: detected capacity change from 0 to 2048 [ 39.246868][ T4363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.262190][ T4363] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.411: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 39.288701][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.365590][ T4369] 9pnet: Could not find request transport: f [ 39.385093][ T4372] loop4: detected capacity change from 0 to 512 [ 39.415643][ T4372] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.416: corrupted in-inode xattr: invalid ea_ino [ 39.438544][ T4372] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.416: couldn't read orphan inode 15 (err -117) [ 39.474129][ T4372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.543470][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.691068][ T4394] loop2: detected capacity change from 0 to 512 [ 39.700495][ T4394] EXT4-fs: Ignoring removed i_version option [ 39.706627][ T4394] EXT4-fs: inline encryption not supported [ 39.717473][ T4396] Invalid ELF header magic: != ELF [ 39.734103][ T4393] loop1: detected capacity change from 0 to 2048 [ 39.746424][ T4394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.764427][ T4394] ext4 filesystem being mounted at /106/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.861664][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.877701][ T4393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.899375][ T4393] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.424: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 39.940829][ T4416] loop2: detected capacity change from 0 to 512 [ 39.988989][ T4416] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.996215][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.002440][ T4421] loop4: detected capacity change from 0 to 1024 [ 40.026747][ T4421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.057933][ T4429] Invalid ELF header magic: != ELF [ 40.063255][ T4416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.083898][ T4419] loop0: detected capacity change from 0 to 512 [ 40.098621][ T4434] loop3: detected capacity change from 0 to 512 [ 40.105968][ T4432] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 40.106131][ T4421] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: inode #11: comm syz.4.437: missing EA_INODE flag [ 40.120008][ T4434] EXT4-fs: Ignoring removed i_version option [ 40.132637][ T4421] EXT4-fs (loop4): Remounting filesystem read-only [ 40.134318][ T4434] EXT4-fs: inline encryption not supported [ 40.150032][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.176131][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.184856][ T4419] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.436: Failed to acquire dquot type 1 [ 40.187795][ T4434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.197527][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 40.217900][ T4434] ext4 filesystem being mounted at /92/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.220639][ T4419] EXT4-fs (loop0): 1 truncate cleaned up [ 40.242634][ T4419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.255669][ T4419] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.268502][ T4436] team0 (unregistering): Port device team_slave_0 removed [ 40.278230][ T4436] team0 (unregistering): Port device team_slave_1 removed [ 40.327114][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.337998][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.359027][ T4448] loop4: detected capacity change from 0 to 128 [ 40.379174][ T4448] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.393614][ T4448] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.451545][ T4464] loop3: detected capacity change from 0 to 1024 [ 40.457091][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.469256][ T4464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.486022][ T4469] loop4: detected capacity change from 0 to 512 [ 40.486628][ T4464] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.454: missing EA_INODE flag [ 40.492580][ T4469] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.508932][ T4464] EXT4-fs (loop3): Remounting filesystem read-only [ 40.521369][ T4469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.555140][ T4472] loop1: detected capacity change from 0 to 1024 [ 40.562921][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.564006][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.581161][ T4472] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.455: Failed to acquire dquot type 0 [ 40.581754][ T4472] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 40.607578][ T4472] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #13: comm syz.1.455: corrupted inode contents [ 40.620818][ T4472] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #13: comm syz.1.455: mark_inode_dirty error [ 40.627898][ T4454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.634625][ T4472] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #13: comm syz.1.455: corrupted inode contents [ 40.652458][ T4472] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.455: mark_inode_dirty error [ 40.664154][ T4472] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #13: comm syz.1.455: corrupted inode contents [ 40.676262][ T4472] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 40.684050][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 40.685964][ T4472] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #13: comm syz.1.455: corrupted inode contents [ 40.695719][ T4454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.705512][ T4476] bridge_slave_1: left allmulticast mode [ 40.718881][ T4476] bridge_slave_1: left promiscuous mode [ 40.720225][ T4472] EXT4-fs error (device loop1): ext4_truncate:4208: inode #13: comm syz.1.455: mark_inode_dirty error [ 40.724572][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.743443][ T4476] bridge_slave_0: left allmulticast mode [ 40.749158][ T4476] bridge_slave_0: left promiscuous mode [ 40.754924][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.756774][ T4477] loop3: detected capacity change from 0 to 512 [ 40.762826][ T4472] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 40.780712][ T4472] EXT4-fs (loop1): 1 truncate cleaned up [ 40.787078][ T4472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.805610][ T4477] __quota_error: 167 callbacks suppressed [ 40.805626][ T4477] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 40.821581][ T4477] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.831626][ T4477] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.456: Failed to acquire dquot type 1 [ 40.843692][ T4477] EXT4-fs (loop3): 1 truncate cleaned up [ 40.849803][ T4477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.863328][ T4477] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.864823][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.896294][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.931036][ T4482] loop3: detected capacity change from 0 to 512 [ 40.931460][ T4483] loop4: detected capacity change from 0 to 512 [ 40.937715][ T4482] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.953371][ T4483] EXT4-fs: Ignoring removed i_version option [ 40.959514][ T4483] EXT4-fs: inline encryption not supported [ 40.979130][ T4482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.989750][ T4483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.003800][ T4483] ext4 filesystem being mounted at /96/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.021409][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.059668][ T29] audit: type=1400 audit(1731320088.932:638): avc: denied { create } for pid=4487 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 41.079073][ T29] audit: type=1400 audit(1731320088.932:639): avc: denied { write } for pid=4487 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 41.098627][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.121904][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 41.137135][ T4493] team0 (unregistering): Port device team_slave_0 removed [ 41.146255][ T4496] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 41.159298][ T4493] team0 (unregistering): Port device team_slave_1 removed [ 41.176437][ T4498] netlink: 132 bytes leftover after parsing attributes in process `syz.4.462'. [ 41.237277][ T4502] loop4: detected capacity change from 0 to 764 [ 41.244230][ T4502] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.317743][ T29] audit: type=1326 audit(1731320089.182:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 41.341068][ T29] audit: type=1326 audit(1731320089.182:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 41.364692][ T29] audit: type=1326 audit(1731320089.192:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 41.365374][ T4510] loop0: detected capacity change from 0 to 1024 [ 41.387971][ T29] audit: type=1326 audit(1731320089.242:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 41.417545][ T29] audit: type=1326 audit(1731320089.242:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 41.425985][ T4517] tmpfs: Unknown parameter 'mpo' [ 41.447304][ T29] audit: type=1326 audit(1731320089.272:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa9e8aae719 code=0x7ffc0000 [ 41.480051][ T4510] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.469: Failed to acquire dquot type 0 [ 41.506384][ T4510] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 41.521451][ T4510] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.469: corrupted inode contents [ 41.533503][ T4510] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #13: comm syz.0.469: mark_inode_dirty error [ 41.545112][ T4510] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.469: corrupted inode contents [ 41.557251][ T4510] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.469: mark_inode_dirty error [ 41.568744][ T4510] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.469: corrupted inode contents [ 41.581217][ T4510] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 41.589995][ T4510] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.469: corrupted inode contents [ 41.601917][ T4510] EXT4-fs error (device loop0): ext4_truncate:4208: inode #13: comm syz.0.469: mark_inode_dirty error [ 41.613255][ T4510] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 41.622478][ T4510] EXT4-fs (loop0): 1 truncate cleaned up [ 41.628554][ T4510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.658875][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.669862][ T4527] netlink: 268 bytes leftover after parsing attributes in process `syz.2.484'. [ 41.678906][ T4527] unsupported nla_type 65024 [ 41.720784][ T4533] loop0: detected capacity change from 0 to 512 [ 41.731005][ T4533] EXT4-fs: Ignoring removed i_version option [ 41.733646][ T4536] loop2: detected capacity change from 0 to 512 [ 41.737047][ T4533] EXT4-fs: inline encryption not supported [ 41.741879][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 41.760288][ T4536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.776135][ T4534] team0 (unregistering): Port device team_slave_0 removed [ 41.776865][ T4533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.795608][ T4536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.796104][ T4533] ext4 filesystem being mounted at /90/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.808377][ T4536] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.837825][ T4534] team0 (unregistering): Port device team_slave_1 removed [ 41.849337][ T4537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.476'. [ 41.898543][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.935013][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.005829][ T4560] tmpfs: Unknown parameter 'mpo' [ 42.049954][ T4563] netlink: 268 bytes leftover after parsing attributes in process `syz.4.491'. [ 42.078928][ T4570] loop1: detected capacity change from 0 to 512 [ 42.100192][ T4570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.128565][ T4573] loop4: detected capacity change from 0 to 512 [ 42.139537][ T4573] EXT4-fs: Ignoring removed i_version option [ 42.145586][ T4573] EXT4-fs: inline encryption not supported [ 42.174042][ T4570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.187199][ T4570] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.219678][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.270129][ T4573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.283785][ T4573] ext4 filesystem being mounted at /106/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.318258][ T4586] netlink: 268 bytes leftover after parsing attributes in process `syz.1.507'. [ 42.407241][ T4581] team0 (unregistering): Port device team_slave_0 removed [ 42.419022][ T4581] team0 (unregistering): Port device team_slave_1 removed [ 42.419579][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.577545][ T4620] loop0: detected capacity change from 0 to 512 [ 42.596507][ T4620] EXT4-fs: Ignoring removed i_version option [ 42.602558][ T4620] EXT4-fs: inline encryption not supported [ 42.619498][ T4620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.639249][ T4620] ext4 filesystem being mounted at /94/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.721129][ T4609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.743189][ T4609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.762077][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.054607][ T4691] loop4: detected capacity change from 0 to 512 [ 43.071930][ T4691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.194304][ T4691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.209198][ T4691] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.243020][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.348961][ T4733] __nla_validate_parse: 2 callbacks suppressed [ 43.348975][ T4733] netlink: 52 bytes leftover after parsing attributes in process `syz.0.564'. [ 43.376291][ T4737] loop1: detected capacity change from 0 to 512 [ 43.434955][ T4737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.448793][ T4737] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.468298][ T4737] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.566: corrupted inode contents [ 43.495414][ T4737] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.566: mark_inode_dirty error [ 43.533303][ T4737] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.566: corrupted inode contents [ 43.567786][ T4737] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.566: mark_inode_dirty error [ 43.603841][ T4737] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #18: comm syz.1.566: directory missing '.' [ 43.640358][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.895316][ T4781] SELinux: failed to load policy [ 44.122231][ T4796] loop0: detected capacity change from 0 to 512 [ 44.198356][ T4796] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 44.211063][ T4816] SELinux: failed to load policy [ 44.222585][ T4796] System zones: 0-2, 18-18, 34-34 [ 44.238985][ T4796] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.591: bg 0: block 248: padding at end of block bitmap is not set [ 44.253513][ T4796] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.591: Failed to acquire dquot type 1 [ 44.282891][ T35] kernel write not supported for file /snd/seq (pid: 35 comm: kworker/1:1) [ 44.322247][ T4796] EXT4-fs (loop0): 1 truncate cleaned up [ 44.328584][ T4796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.342005][ T4796] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.379099][ T4826] loop3: detected capacity change from 0 to 512 [ 44.390925][ T4796] syz.0.591 (4796) used greatest stack depth: 9600 bytes left [ 44.406494][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.465216][ T4838] validate_nla: 1 callbacks suppressed [ 44.465231][ T4838] netlink: 'syz.2.610': attribute type 10 has an invalid length. [ 44.481855][ T4837] loop1: detected capacity change from 0 to 2048 [ 44.494934][ T4838] bond0: (slave bond_slave_0): Releasing backup interface [ 44.539323][ T4826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.553037][ T4826] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.564508][ T4837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.570605][ T4826] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.604: corrupted inode contents [ 44.588562][ T4826] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.604: mark_inode_dirty error [ 44.601444][ T4826] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.604: corrupted inode contents [ 44.607660][ T4837] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.628255][ T4837] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 44.640641][ T4837] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.640641][ T4837] [ 44.650415][ T4837] EXT4-fs (loop1): Total free blocks count 0 [ 44.656438][ T4837] EXT4-fs (loop1): Free/Dirty block details [ 44.656645][ T4826] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.604: mark_inode_dirty error [ 44.662380][ T4837] EXT4-fs (loop1): free_blocks=2415919104 [ 44.679185][ T4837] EXT4-fs (loop1): dirty_blocks=48 [ 44.684371][ T4837] EXT4-fs (loop1): Block reservation details [ 44.690355][ T4837] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 44.695872][ T4850] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #18: comm syz.3.604: directory missing '.' [ 44.709048][ T4852] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 44.762026][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.791951][ T4859] loop3: detected capacity change from 0 to 512 [ 44.808068][ T4859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.838806][ T4859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.855587][ T4859] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.916143][ T4872] loop4: detected capacity change from 0 to 512 [ 44.927303][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.940351][ T4867] SELinux: failed to load policy [ 45.111038][ T4898] loop3: detected capacity change from 0 to 128 [ 45.347989][ T4918] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.647'. [ 45.364531][ T4920] SELinux: failed to load policy [ 45.398394][ T3372] kernel write not supported for file /snd/seq (pid: 3372 comm: kworker/0:2) [ 45.420741][ T4924] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 45.420741][ T4924] program syz.0.639 not setting count and/or reply_len properly [ 45.585444][ T4944] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 45.602202][ T4940] 9pnet_fd: Insufficient options for proto=fd [ 45.609347][ T4944] bond0: (slave bond_slave_0): Releasing backup interface [ 45.654406][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 45.687586][ T4954] loop2: detected capacity change from 0 to 128 [ 45.735582][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 45.836829][ T4969] loop4: detected capacity change from 0 to 512 [ 45.866751][ T4969] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.887685][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 45.887704][ T29] audit: type=1400 audit(1731320093.762:1016): avc: denied { create } for pid=4975 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.896969][ T4973] 9pnet_fd: Insufficient options for proto=fd [ 45.937413][ T4969] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 45.938506][ T4980] loop0: detected capacity change from 0 to 128 [ 45.947762][ T4969] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.003739][ T4983] netlink: 'syz.1.664': attribute type 10 has an invalid length. [ 46.034845][ T3321] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 46.044065][ T4983] bond0: (slave bond_slave_0): Releasing backup interface [ 46.054443][ T4987] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 46.054443][ T4987] program syz.3.668 not setting count and/or reply_len properly [ 46.125026][ T4992] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.669'. [ 46.163709][ T29] audit: type=1400 audit(1731320094.032:1017): avc: denied { setopt } for pid=4998 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.204785][ T29] audit: type=1400 audit(1731320094.072:1018): avc: denied { create } for pid=5004 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.205137][ T5007] 9pnet_fd: Insufficient options for proto=fd [ 46.225328][ T29] audit: type=1400 audit(1731320094.072:1019): avc: denied { write } for pid=5004 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.251793][ T29] audit: type=1400 audit(1731320094.082:1020): avc: denied { read } for pid=5004 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.289649][ T29] audit: type=1400 audit(1731320094.102:1021): avc: denied { ioctl } for pid=5004 comm="syz.1.677" path="socket:[9268]" dev="sockfs" ino=9268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.341677][ T5015] loop1: detected capacity change from 0 to 512 [ 46.361308][ T5015] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.385235][ T5022] netlink: 'syz.4.684': attribute type 10 has an invalid length. [ 46.417008][ T5022] bond0: (slave bond_slave_0): Releasing backup interface [ 46.421228][ T29] audit: type=1400 audit(1731320094.292:1022): avc: denied { write } for pid=5010 comm="syz.3.689" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.463050][ T5015] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 46.475255][ T5015] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.531965][ T3314] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 46.589892][ T29] audit: type=1400 audit(1731320094.462:1023): avc: denied { create } for pid=5046 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 46.709310][ T5066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.703'. [ 46.723008][ T5068] loop4: detected capacity change from 0 to 2048 [ 46.751000][ T5068] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.765999][ T5068] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 46.778424][ T5068] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.778424][ T5068] [ 46.788110][ T5068] EXT4-fs (loop4): Total free blocks count 0 [ 46.794178][ T5068] EXT4-fs (loop4): Free/Dirty block details [ 46.800113][ T5068] EXT4-fs (loop4): free_blocks=2415919104 [ 46.805907][ T5068] EXT4-fs (loop4): dirty_blocks=48 [ 46.811022][ T5068] EXT4-fs (loop4): Block reservation details [ 46.817102][ T5068] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 46.825986][ T5079] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 46.838403][ T5079] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.838403][ T5079] [ 47.791029][ T5137] loop4: detected capacity change from 0 to 256 [ 47.806421][ T5137] vfat: Unknown parameter '' [ 47.820989][ T5137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.734'. [ 47.925592][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 47.938006][ T5147] vxcan1: tx address claim with dest, not broadcast [ 47.995110][ T5105] syz.1.719 (5105) used greatest stack depth: 7384 bytes left [ 48.073504][ T5162] nfs4: Bad value for 'source' [ 48.124973][ T5174] loop4: detected capacity change from 0 to 2048 [ 48.185858][ T5174] loop4: p3 < > p4 < > [ 48.190046][ T5174] loop4: partition table partially beyond EOD, truncated [ 48.206527][ T5174] loop4: p3 start 4284289 is beyond EOD, truncated [ 48.543936][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 48.608155][ T5212] nfs4: Bad value for 'source' [ 48.724984][ T5228] vxcan1: tx address claim with dest, not broadcast [ 48.780291][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 48.854449][ T5248] nfs4: Bad value for 'source' [ 49.026097][ T5269] netlink: 2872 bytes leftover after parsing attributes in process `syz.2.795'. [ 49.150888][ T5283] loop4: detected capacity change from 0 to 128 [ 49.163801][ T5283] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 49.271230][ T5296] binfmt_misc: register: failed to install interpreter file ./file0 [ 49.283800][ T5293] loop1: detected capacity change from 0 to 2048 [ 49.290716][ T5188] syz.0.759 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 49.301748][ T5188] CPU: 0 UID: 0 PID: 5188 Comm: syz.0.759 Not tainted 6.12.0-rc7-syzkaller #0 [ 49.310613][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.320686][ T5188] Call Trace: [ 49.323974][ T5188] [ 49.326946][ T5188] dump_stack_lvl+0xf2/0x150 [ 49.331557][ T5188] dump_stack+0x15/0x20 [ 49.335811][ T5188] dump_header+0x83/0x2d0 [ 49.340201][ T5188] oom_kill_process+0x341/0x4c0 [ 49.345137][ T5188] out_of_memory+0x9af/0xbe0 [ 49.349783][ T5188] ? css_next_descendant_pre+0x11c/0x140 [ 49.355476][ T5188] mem_cgroup_out_of_memory+0x13e/0x190 [ 49.361111][ T5188] try_charge_memcg+0x51b/0x810 [ 49.366044][ T5188] charge_memcg+0x50/0xc0 [ 49.370520][ T5188] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 49.376516][ T5188] __read_swap_cache_async+0x236/0x480 [ 49.382029][ T5188] swap_cluster_readahead+0x37e/0x3f0 [ 49.387419][ T5188] swapin_readahead+0xe4/0x6f0 [ 49.392299][ T5188] ? __filemap_get_folio+0x420/0x5b0 [ 49.397591][ T5188] ? swap_cache_get_folio+0x77/0x210 [ 49.402971][ T5188] do_swap_page+0x31e/0x2550 [ 49.407567][ T5188] ? cgroup_rstat_updated+0x99/0x550 [ 49.412909][ T5188] ? balance_dirty_pages_ratelimited_flags+0x520/0x840 [ 49.419764][ T5188] ? __rcu_read_lock+0x36/0x50 [ 49.424564][ T5188] ? __pfx_default_wake_function+0x10/0x10 [ 49.430379][ T5188] handle_mm_fault+0x8c5/0x2aa0 [ 49.435337][ T5188] exc_page_fault+0x3b9/0x650 [ 49.440136][ T5188] asm_exc_page_fault+0x26/0x30 [ 49.445037][ T5188] RIP: 0033:0x7ff5f2acd49f [ 49.449463][ T5188] Code: 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 48 89 6a f8 45 39 e6 0f 83 7d 00 00 00 48 8b 3c 24 49 8b 6d 30 4a 03 2c f7 <48> 83 7b 50 07 77 08 48 c7 43 50 08 00 00 00 41 89 c7 49 f7 df 4c [ 49.469148][ T5188] RSP: 002b:00007ffd5435fb20 EFLAGS: 00010282 [ 49.475301][ T5188] RAX: 0000000000008008 RBX: 00007ff5f38d5720 RCX: 0000000000000000 [ 49.483346][ T5188] RDX: 0000001b32f18000 RSI: 0000000000000008 RDI: 00007ff5f246f008 [ 49.491317][ T5188] RBP: ffffffff815162f7 R08: 00007ff5f246f080 R09: 00007ff5f2d92000 [ 49.499311][ T5188] R10: 000000008529f23b R11: 0000000000000001 R12: 0000000000000849 [ 49.507290][ T5188] R13: 00007ff5f2da6018 R14: 00000000000000db R15: ffffffffffff8000 [ 49.515326][ T5188] ? __remove_mapping+0xc7/0x470 [ 49.520278][ T5188] [ 49.523436][ T5188] memory: usage 307200kB, limit 307200kB, failcnt 264 [ 49.530211][ T5188] memory+swap: usage 307488kB, limit 9007199254740988kB, failcnt 0 [ 49.538201][ T5188] kmem: usage 307112kB, limit 9007199254740988kB, failcnt 0 [ 49.545539][ T5188] Memory cgroup stats for /syz0: [ 49.545926][ T5188] cache 90112 [ 49.554189][ T5188] rss 0 [ 49.557005][ T5188] shmem 0 [ 49.560037][ T5188] mapped_file 90112 [ 49.563885][ T5188] dirty 90112 [ 49.564989][ T5293] loop1: p3 < > p4 < > [ 49.567186][ T5188] writeback 0 [ 49.571319][ T5293] loop1: partition table partially beyond EOD, [ 49.574601][ T5188] workingset_refault_anon 45 [ 49.574612][ T5188] workingset_refault_file 79 [ 49.574630][ T5188] swap 294912 [ 49.574638][ T5188] swapcached 0 [ 49.574645][ T5188] pgpgin 15721 [ 49.574653][ T5188] pgpgout 15699 [ 49.580869][ T5293] truncated [ 49.582722][ T5293] loop1: p3 start 4284289 is beyond EOD, [ 49.585456][ T5188] pgfault 24404 [ 49.585467][ T5188] pgmajfault 25 [ 49.585475][ T5188] inactive_anon 0 [ 49.585483][ T5188] active_anon 0 [ 49.585495][ T5188] inactive_file 0 [ 49.590069][ T5293] truncated [ 49.596599][ T5300] loop2: detected capacity change from 0 to 512 [ 49.596736][ T5188] active_file 90112 [ 49.632971][ T5304] netlink: 36 bytes leftover after parsing attributes in process `syz.4.812'. [ 49.633463][ T5188] unevictable 0 [ 49.633474][ T5188] hierarchical_memory_limit 314572800 [ 49.633484][ T5188] hierarchical_memsw_limit 9223372036854771712 [ 49.667552][ T5188] total_cache 90112 [ 49.671469][ T5188] total_rss 0 [ 49.674793][ T5188] total_shmem 0 [ 49.678250][ T5188] total_mapped_file 90112 [ 49.682601][ T5188] total_dirty 90112 [ 49.686449][ T5188] total_writeback 0 [ 49.690262][ T5188] total_workingset_refault_anon 45 [ 49.695407][ T5188] total_workingset_refault_file 79 [ 49.700526][ T5188] total_swap 294912 [ 49.704367][ T5188] total_swapcached 0 [ 49.708276][ T5188] total_pgpgin 15721 [ 49.712229][ T5188] total_pgpgout 15699 [ 49.716248][ T5188] total_pgfault 24404 [ 49.720241][ T5188] total_pgmajfault 25 [ 49.724232][ T5188] total_inactive_anon 0 [ 49.728464][ T5188] total_active_anon 0 [ 49.732449][ T5188] total_inactive_file 0 [ 49.736669][ T5188] total_active_file 90112 [ 49.741003][ T5188] total_unevictable 0 [ 49.745011][ T5188] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.759,pid=5188,uid=0 [ 49.759601][ T5188] Memory cgroup out of memory: Killed process 5188 (syz.0.759) total-vm:89300kB, anon-rss:740kB, file-rss:16036kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 49.854798][ T5300] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.934507][ T5315] loop1: detected capacity change from 0 to 128 [ 49.941474][ T5315] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 49.976190][ T5320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5320 comm=syz.2.818 [ 50.045043][ T5330] binfmt_misc: register: failed to install interpreter file ./file0 [ 50.116309][ T5336] loop2: detected capacity change from 0 to 2048 [ 50.154839][ T5336] loop2: p3 < > p4 < > [ 50.159031][ T5336] loop2: partition table partially beyond EOD, truncated [ 50.166384][ T5336] loop2: p3 start 4284289 is beyond EOD, truncated [ 50.255876][ T5348] vhci_hcd: invalid port number 61 [ 50.514168][ T5382] loop0: detected capacity change from 0 to 2048 [ 50.564976][ T5382] loop0: p3 < > p4 < > [ 50.569159][ T5382] loop0: partition table partially beyond EOD, truncated [ 50.577905][ T5382] loop0: p3 start 4284289 is beyond EOD, truncated [ 50.633058][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.691306][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.767655][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.837131][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.853752][ T5416] loop1: detected capacity change from 0 to 512 [ 50.890984][ T5416] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.003204][ T28] bridge_slave_1: left allmulticast mode [ 51.009040][ T28] bridge_slave_1: left promiscuous mode [ 51.014750][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.035695][ T28] bridge_slave_0: left allmulticast mode [ 51.041384][ T28] bridge_slave_0: left promiscuous mode [ 51.047214][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.082193][ T5358] syz.3.838 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 51.096381][ T5358] CPU: 1 UID: 0 PID: 5358 Comm: syz.3.838 Not tainted 6.12.0-rc7-syzkaller #0 [ 51.105259][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.115318][ T5358] Call Trace: [ 51.118600][ T5358] [ 51.121534][ T5358] dump_stack_lvl+0xf2/0x150 [ 51.126140][ T5358] dump_stack+0x15/0x20 [ 51.130340][ T5358] dump_header+0x83/0x2d0 [ 51.134706][ T5358] oom_kill_process+0x341/0x4c0 [ 51.139575][ T5358] out_of_memory+0x9af/0xbe0 [ 51.144284][ T5358] ? css_next_descendant_pre+0x11c/0x140 [ 51.149967][ T5358] mem_cgroup_out_of_memory+0x13e/0x190 [ 51.155527][ T5358] try_charge_memcg+0x51b/0x810 [ 51.160481][ T5358] obj_cgroup_charge_pages+0xbd/0x1a0 [ 51.165947][ T5358] __memcg_kmem_charge_page+0x9d/0x170 [ 51.171425][ T5358] __alloc_pages_noprof+0x1bc/0x340 [ 51.176638][ T5358] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 51.182051][ T5358] alloc_pages_noprof+0xe1/0x100 [ 51.187084][ T5358] __vmalloc_node_range_noprof+0x72e/0xec0 [ 51.192968][ T5358] __kvmalloc_node_noprof+0x121/0x170 [ 51.198388][ T5358] ? ip_set_alloc+0x1f/0x30 [ 51.202896][ T5358] ip_set_alloc+0x1f/0x30 [ 51.207452][ T5358] hash_netiface_create+0x273/0x730 [ 51.212662][ T5358] ? __nla_parse+0x40/0x60 [ 51.217146][ T5358] ? __pfx_hash_netiface_create+0x10/0x10 [ 51.222932][ T5358] ip_set_create+0x359/0x8a0 [ 51.227600][ T5358] ? strnstr+0xf1/0x100 [ 51.231846][ T5358] ? __nla_parse+0x40/0x60 [ 51.236290][ T5358] nfnetlink_rcv_msg+0x4a9/0x570 [ 51.241281][ T5358] netlink_rcv_skb+0x12c/0x230 [ 51.246117][ T5358] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 51.251591][ T5358] nfnetlink_rcv+0x16c/0x15c0 [ 51.256280][ T5358] ? kmem_cache_free+0xdc/0x2d0 [ 51.261205][ T5358] ? nlmon_xmit+0x51/0x60 [ 51.265592][ T5358] ? __kfree_skb+0x102/0x150 [ 51.270253][ T5358] ? consume_skb+0x49/0x160 [ 51.274862][ T5358] ? nlmon_xmit+0x51/0x60 [ 51.279195][ T5358] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 51.284541][ T5358] ? __dev_queue_xmit+0xb4c/0x2040 [ 51.289741][ T5358] ? ref_tracker_free+0x3a5/0x410 [ 51.294914][ T5358] ? __dev_queue_xmit+0x161/0x2040 [ 51.300082][ T5358] ? ref_tracker_alloc+0x1f5/0x2f0 [ 51.305286][ T5358] ? __netlink_deliver_tap+0x495/0x4c0 [ 51.310809][ T5358] netlink_unicast+0x599/0x670 [ 51.315598][ T5358] netlink_sendmsg+0x5cc/0x6e0 [ 51.320389][ T5358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.325777][ T5358] __sock_sendmsg+0x140/0x180 [ 51.330466][ T5358] ____sys_sendmsg+0x312/0x410 [ 51.335237][ T5358] __sys_sendmsg+0x1d9/0x270 [ 51.339876][ T5358] __x64_sys_sendmsg+0x46/0x50 [ 51.344716][ T5358] x64_sys_call+0x2689/0x2d60 [ 51.349512][ T5358] do_syscall_64+0xc9/0x1c0 [ 51.354026][ T5358] ? clear_bhb_loop+0x55/0xb0 [ 51.358709][ T5358] ? clear_bhb_loop+0x55/0xb0 [ 51.363462][ T5358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.369403][ T5358] RIP: 0033:0x7fa9e8aae719 [ 51.373879][ T5358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.393492][ T5358] RSP: 002b:00007fa9e7727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.401977][ T5358] RAX: ffffffffffffffda RBX: 00007fa9e8c65f80 RCX: 00007fa9e8aae719 [ 51.410320][ T5358] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 51.418389][ T5358] RBP: 00007fa9e8b2139e R08: 0000000000000000 R09: 0000000000000000 [ 51.426358][ T5358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.434396][ T5358] R13: 0000000000000000 R14: 00007fa9e8c65f80 R15: 00007fff6c885c08 [ 51.442457][ T5358] [ 51.445583][ T5358] memory: usage 307200kB, limit 307200kB, failcnt 171 [ 51.452354][ T5358] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 51.460602][ T5358] kmem: usage 307104kB, limit 9007199254740988kB, failcnt 0 [ 51.467943][ T5358] Memory cgroup stats for /syz3: [ 51.468930][ T5358] cache 90112 [ 51.477219][ T5358] rss 0 [ 51.480009][ T5358] shmem 0 [ 51.482998][ T5358] mapped_file 90112 [ 51.486822][ T5358] dirty 90112 [ 51.490201][ T5358] writeback 0 [ 51.493523][ T5358] workingset_refault_anon 90 [ 51.498218][ T5358] workingset_refault_file 15 [ 51.502824][ T5358] swap 303104 [ 51.506486][ T5358] swapcached 8192 [ 51.510129][ T5358] pgpgin 20027 [ 51.513509][ T5358] pgpgout 20003 [ 51.517067][ T5358] pgfault 29846 [ 51.520536][ T5358] pgmajfault 40 [ 51.524111][ T5358] inactive_anon 0 [ 51.527794][ T5358] active_anon 8192 [ 51.528800][ T28] infiniband syz1: set down [ 51.531520][ T5358] inactive_file 0 [ 51.539720][ T5358] active_file 90112 [ 51.543585][ T5358] unevictable 0 [ 51.547098][ T5358] hierarchical_memory_limit 314572800 [ 51.552479][ T5358] hierarchical_memsw_limit 9223372036854771712 [ 51.558683][ T5358] total_cache 90112 [ 51.562528][ T5358] total_rss 0 [ 51.565849][ T5358] total_shmem 0 [ 51.569383][ T5358] total_mapped_file 90112 [ 51.573947][ T5358] total_dirty 90112 [ 51.574297][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 51.574380][ T29] audit: type=1326 audit(1731320099.452:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f177dba56e7 code=0x7ffc0000 [ 51.577858][ T5358] total_writeback 0 [ 51.583996][ T29] audit: type=1326 audit(1731320099.452:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f177db4a099 code=0x7ffc0000 [ 51.607276][ T5358] total_workingset_refault_anon 90 [ 51.610974][ T29] audit: type=1326 audit(1731320099.452:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177dbae719 code=0x7ffc0000 [ 51.634154][ T5358] total_workingset_refault_file 15 [ 51.634180][ T5358] total_swap 303104 [ 51.639315][ T29] audit: type=1326 audit(1731320099.452:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f177dba56e7 code=0x7ffc0000 [ 51.639342][ T29] audit: type=1326 audit(1731320099.452:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f177db4a099 code=0x7ffc0000 [ 51.662602][ T5358] total_swapcached 8192 [ 51.667723][ T29] audit: type=1326 audit(1731320099.452:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f177dba56e7 code=0x7ffc0000 [ 51.671502][ T5358] total_pgpgin 20027 [ 51.694666][ T29] audit: type=1326 audit(1731320099.452:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f177db4a099 code=0x7ffc0000 [ 51.694699][ T29] audit: type=1326 audit(1731320099.452:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f177dba56e7 code=0x7ffc0000 [ 51.717854][ T5358] total_pgpgout 20003 [ 51.717862][ T5358] total_pgfault 29846 [ 51.717869][ T5358] total_pgmajfault 40 [ 51.717877][ T5358] total_inactive_anon 0 [ 51.717886][ T5358] total_active_anon 8192 [ 51.717893][ T5358] total_inactive_file 0 [ 51.717900][ T5358] total_active_file 90112 [ 51.717906][ T5358] total_unevictable 0 [ 51.722056][ T29] audit: type=1326 audit(1731320099.452:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f177db4a099 code=0x7ffc0000 [ 51.745221][ T5358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 51.749101][ T29] audit: type=1326 audit(1731320099.452:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f177dbae719 code=0x7ffc0000 [ 51.772314][ T5358] ,cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.838,pid=5357,uid=0 [ 51.892331][ T5358] Memory cgroup out of memory: Killed process 5357 (syz.3.838) total-vm:89168kB, anon-rss:740kB, file-rss:15904kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 51.969547][ T5439] process 'syz.1.882' launched './file0' with NULL argv: empty string added [ 52.027238][ T57] smc: removing ib device syz1 [ 52.032242][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.050545][ T28] bond0 (unregistering): Released all slaves [ 52.098952][ T5396] chnl_net:caif_netlink_parms(): no params data found [ 52.114191][ T5449] loop0: detected capacity change from 0 to 512 [ 52.136239][ T5358] syz.3.838 (5358) used greatest stack depth: 6408 bytes left [ 52.162782][ T5449] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.188150][ T5456] Process accounting resumed [ 52.192800][ T5456] kernel write not supported for file /asound/timers (pid: 5456 comm: syz.3.878) [ 52.225029][ T5449] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.877: corrupted inode contents [ 52.247793][ T5449] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.877: mark_inode_dirty error [ 52.261231][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.268622][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.287921][ T5468] loop3: detected capacity change from 0 to 2048 [ 52.294558][ T5396] bridge_slave_0: entered allmulticast mode [ 52.301397][ T5396] bridge_slave_0: entered promiscuous mode [ 52.307597][ T5449] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.877: corrupted inode contents [ 52.320382][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.325730][ T5449] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.877: mark_inode_dirty error [ 52.327498][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.347453][ T5396] bridge_slave_1: entered allmulticast mode [ 52.360400][ T5396] bridge_slave_1: entered promiscuous mode [ 52.402248][ T28] hsr_slave_0: left promiscuous mode [ 52.408502][ T28] hsr_slave_1: left promiscuous mode [ 52.417223][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.424801][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.435802][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.443209][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.453138][ T28] veth1_macvtap: left promiscuous mode [ 52.458768][ T28] veth0_macvtap: left promiscuous mode [ 52.464492][ T28] veth1_vlan: left promiscuous mode [ 52.469880][ T28] veth0_vlan: left promiscuous mode [ 52.483139][ T5468] loop3: unable to read partition table [ 52.488848][ T5468] loop3: partition table beyond EOD, truncated [ 52.495247][ T5468] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 52.624882][ T5396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.635752][ T5396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.654485][ T5396] team0: Port device team_slave_0 added [ 52.661010][ T5396] team0: Port device team_slave_1 added [ 52.675172][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.682140][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.708072][ T5396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.719411][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.726411][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.752429][ T5396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.779474][ T5396] hsr_slave_0: entered promiscuous mode [ 52.785947][ T5396] hsr_slave_1: entered promiscuous mode [ 52.794756][ T5396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.802329][ T5396] Cannot create hsr debugfs directory [ 52.882599][ T5396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.891423][ T5396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.916110][ T5396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.925318][ T5396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.945248][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.952430][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.959909][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.967079][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.997702][ T5396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.010902][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.019848][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.034632][ T5396] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.046424][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.053482][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.074621][ T5396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.085090][ T5396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.099857][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.106949][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.164602][ T5396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.292669][ T5396] veth0_vlan: entered promiscuous mode [ 53.301473][ T5396] veth1_vlan: entered promiscuous mode [ 53.318117][ T5396] veth0_macvtap: entered promiscuous mode [ 53.328158][ T5396] veth1_macvtap: entered promiscuous mode [ 53.338694][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.349173][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.359040][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.369566][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.379399][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.389906][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.399734][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.410187][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.421813][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.432615][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.443218][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.453164][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.463679][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.473504][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.483969][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.493789][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.504255][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.515132][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.525794][ T5396] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.534585][ T5396] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.543362][ T5396] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.552108][ T5396] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.619398][ T3321] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 53.630451][ T3321] CPU: 1 UID: 0 PID: 3321 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller #0 [ 53.639590][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.649656][ T3321] Call Trace: [ 53.652933][ T3321] [ 53.655894][ T3321] dump_stack_lvl+0xf2/0x150 [ 53.660561][ T3321] dump_stack+0x15/0x20 [ 53.664794][ T3321] dump_header+0x83/0x2d0 [ 53.669159][ T3321] oom_kill_process+0x341/0x4c0 [ 53.674029][ T3321] out_of_memory+0x9af/0xbe0 [ 53.678642][ T3321] ? css_next_descendant_pre+0x11c/0x140 [ 53.684311][ T3321] mem_cgroup_out_of_memory+0x13e/0x190 [ 53.689915][ T3321] try_charge_memcg+0x51b/0x810 [ 53.694860][ T3321] charge_memcg+0x50/0xc0 [ 53.699242][ T3321] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 53.705382][ T3321] __read_swap_cache_async+0x236/0x480 [ 53.710890][ T3321] swap_cluster_readahead+0x276/0x3f0 [ 53.716304][ T3321] swapin_readahead+0xe4/0x6f0 [ 53.721110][ T3321] ? __filemap_get_folio+0x420/0x5b0 [ 53.726460][ T3321] ? update_load_avg+0x1f7/0x7c0 [ 53.731572][ T3321] ? swap_cache_get_folio+0x77/0x210 [ 53.736944][ T3321] do_swap_page+0x31e/0x2550 [ 53.741570][ T3321] ? hrtimer_start_range_ns+0x53d/0x580 [ 53.747187][ T3321] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 53.752665][ T3321] ? __rcu_read_lock+0x36/0x50 [ 53.757493][ T3321] ? __pfx_default_wake_function+0x10/0x10 [ 53.763350][ T3321] handle_mm_fault+0x8c5/0x2aa0 [ 53.768278][ T3321] exc_page_fault+0x3b9/0x650 [ 53.773038][ T3321] asm_exc_page_fault+0x26/0x30 [ 53.777941][ T3321] RIP: 0033:0x7f3ccb5007c5 [ 53.782412][ T3321] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 7e cd 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 53.802020][ T3321] RSP: 002b:00007ffceddab568 EFLAGS: 00010246 [ 53.808133][ T3321] RAX: 0000000000000000 RBX: 0000000000000186 RCX: 00007f3ccb5007c3 [ 53.816108][ T3321] RDX: 00007ffceddab580 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.824128][ T3321] RBP: 00007ffceddab5dc R08: 000000001eef1145 R09: 7fffffffffffffff [ 53.832102][ T3321] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 53.840083][ T3321] R13: 000000000000cf09 R14: 000000000000ce06 R15: 00007ffceddab630 [ 53.848061][ T3321] [ 53.851266][ T3321] memory: usage 307200kB, limit 307200kB, failcnt 266 [ 53.858458][ T3321] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 53.866521][ T3321] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 53.874016][ T3321] Memory cgroup stats for /syz4: [ 53.886581][ T3321] cache 94208 [ 53.894939][ T3321] rss 0 [ 53.897708][ T3321] shmem 0 [ 53.900656][ T3321] mapped_file 94208 [ 53.904514][ T3321] dirty 94208 [ 53.907836][ T3321] writeback 0 [ 53.911345][ T3321] workingset_refault_anon 47 [ 53.915974][ T3321] workingset_refault_file 15 [ 53.920571][ T3321] swap 241664 [ 53.924069][ T3321] swapcached 8192 [ 53.927753][ T3321] pgpgin 26258 [ 53.931175][ T3321] pgpgout 26233 [ 53.932817][ T5533] loop3: detected capacity change from 0 to 512 [ 53.934721][ T3321] pgfault 40213 [ 53.944459][ T3321] pgmajfault 20 [ 53.947976][ T3321] inactive_anon 0 [ 53.951724][ T3321] active_anon 8192 [ 53.955588][ T3321] inactive_file 0 [ 53.959227][ T3321] active_file 94208 [ 53.963029][ T3321] unevictable 0 [ 53.966512][ T3321] hierarchical_memory_limit 314572800 [ 53.971883][ T3321] hierarchical_memsw_limit 9223372036854771712 [ 53.976021][ T5533] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.978162][ T3321] total_cache 94208 [ 53.992120][ T3321] total_rss 0 [ 53.995547][ T3321] total_shmem 0 [ 53.999083][ T3321] total_mapped_file 94208 [ 54.003404][ T3321] total_dirty 94208 [ 54.007297][ T3321] total_writeback 0 [ 54.011342][ T3321] total_workingset_refault_anon 47 [ 54.016544][ T3321] total_workingset_refault_file 15 [ 54.018316][ T5533] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.899: corrupted inode contents [ 54.021655][ T3321] total_swap 241664 [ 54.021665][ T3321] total_swapcached 8192 [ 54.021673][ T3321] total_pgpgin 26258 [ 54.021681][ T3321] total_pgpgout 26233 [ 54.041707][ T5533] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.899: mark_inode_dirty error [ 54.045221][ T3321] total_pgfault 40213 [ 54.045231][ T3321] total_pgmajfault 20 [ 54.049728][ T5533] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.899: corrupted inode contents [ 54.060353][ T3321] total_inactive_anon 0 [ 54.064993][ T5533] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.899: mark_inode_dirty error [ 54.068371][ T3321] total_active_anon 8192 [ 54.068382][ T3321] total_inactive_file 0 [ 54.103735][ T3321] total_active_file 94208 [ 54.108096][ T3321] total_unevictable 0 [ 54.112143][ T3321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.892,pid=5484,uid=0 [ 54.126731][ T3321] Memory cgroup out of memory: Killed process 5484 (syz.4.892) total-vm:89168kB, anon-rss:740kB, file-rss:15904kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 54.223340][ T5548] loop1: detected capacity change from 0 to 512 [ 54.237132][ T5548] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.273143][ T5548] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.920: corrupted inode contents [ 54.286242][ T5548] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.920: mark_inode_dirty error [ 54.297819][ T5548] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.920: corrupted inode contents [ 54.310776][ T5548] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.920: mark_inode_dirty error [ 54.376224][ T5559] loop5: detected capacity change from 0 to 2048 [ 54.450288][ T5559] loop5: unable to read partition table [ 54.457040][ T5559] loop5: partition table beyond EOD, truncated [ 54.463402][ T5559] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 54.556230][ T5583] loop0: detected capacity change from 0 to 2048 [ 54.617632][ T5583] loop0: unable to read partition table [ 54.623458][ T5583] loop0: partition table beyond EOD, truncated [ 54.629699][ T5583] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 93.024526][ T0] ================================================================== [ 93.032641][ T0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_update_events [ 93.040800][ T0] [ 93.043114][ T0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: [ 93.050474][ T0] __tmigr_cpu_activate+0x55/0x200 [ 93.055585][ T0] tmigr_cpu_activate+0x8a/0xc0 [ 93.060476][ T0] timer_clear_idle+0x28/0x100 [ 93.065252][ T0] tick_nohz_restart_sched_tick+0x22/0x110 [ 93.071075][ T0] tick_nohz_idle_exit+0xfe/0x1d0 [ 93.076121][ T0] do_idle+0x1ee/0x230 [ 93.080216][ T0] cpu_startup_entry+0x25/0x30 [ 93.085009][ T0] start_secondary+0x96/0xa0 [ 93.089606][ T0] common_startup_64+0x12c/0x137 [ 93.094571][ T0] [ 93.096886][ T0] read to 0xffff888237d205dc of 1 bytes by task 0 on cpu 0: [ 93.104177][ T0] tmigr_update_events+0x41d/0x5d0 [ 93.109308][ T0] __tmigr_cpu_deactivate+0x2b1/0x410 [ 93.114679][ T0] tmigr_cpu_deactivate+0x66/0x180 [ 93.119785][ T0] __get_next_timer_interrupt+0x137/0x530 [ 93.125606][ T0] timer_base_try_to_set_idle+0x54/0x60 [ 93.131166][ T0] tick_nohz_idle_stop_tick+0x15b/0x650 [ 93.136713][ T0] do_idle+0x178/0x230 [ 93.140782][ T0] cpu_startup_entry+0x25/0x30 [ 93.145569][ T0] rest_init+0xef/0xf0 [ 93.149637][ T0] start_kernel+0x586/0x5e0 [ 93.154156][ T0] x86_64_start_reservations+0x2a/0x30 [ 93.159613][ T0] x86_64_start_kernel+0x9a/0xa0 [ 93.164549][ T0] common_startup_64+0x12c/0x137 [ 93.169488][ T0] [ 93.171799][ T0] value changed: 0x00 -> 0x01 [ 93.176471][ T0] [ 93.178786][ T0] Reported by Kernel Concurrency Sanitizer on: [ 93.184949][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc7-syzkaller #0 [ 93.193540][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.203592][ T0] ================================================================== [ 93.215036][ T29] kauditd_printk_skb: 43 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 93.215055][ T29] audit: type=1400 audit(1731320141.092:1241): avc: denied { write } for pid=3303 comm="syz-executor" path="pipe:[2374]" dev="pipefs" ino=2374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 93.492362][ T3686] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.547245][ T3686] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.597241][ T3686] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.647350][ T3686] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.773063][ T3686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.783398][ T3686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.793604][ T3686] bond0 (unregistering): Released all slaves [ 93.847488][ T3686] hsr_slave_0: left promiscuous mode [ 93.853043][ T3686] hsr_slave_1: left promiscuous mode [ 93.858632][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.866065][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.873514][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.880947][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.889883][ T3686] veth1_macvtap: left promiscuous mode [ 93.895381][ T3686] veth0_macvtap: left promiscuous mode [ 93.900955][ T3686] veth1_vlan: left promiscuous mode [ 93.906390][ T3686] veth0_vlan: left promiscuous mode [ 94.309952][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.367857][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.437265][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.497127][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.548167][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.586718][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.657139][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.697280][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.759846][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.807260][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.877157][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.927211][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.008173][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.057233][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.107751][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.157049][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.227561][ T11] bridge_slave_1: left allmulticast mode [ 95.233245][ T11] bridge_slave_1: left promiscuous mode [ 95.238880][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.246522][ T11] bridge_slave_0: left allmulticast mode [ 95.252167][ T11] bridge_slave_0: left promiscuous mode [ 95.257872][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.265877][ T11] bridge_slave_1: left allmulticast mode [ 95.271622][ T11] bridge_slave_1: left promiscuous mode [ 95.277269][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.285041][ T11] bridge_slave_0: left allmulticast mode [ 95.290732][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.298741][ T11] bridge_slave_1: left allmulticast mode [ 95.304567][ T11] bridge_slave_1: left promiscuous mode [ 95.310330][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.320045][ T11] bridge_slave_0: left allmulticast mode [ 95.325769][ T11] bridge_slave_0: left promiscuous mode [ 95.331417][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.676161][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.686049][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.696203][ T11] bond0 (unregistering): Released all slaves [ 95.704920][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.714800][ T11] bond0 (unregistering): Released all slaves [ 95.723953][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.733885][ T11] bond0 (unregistering): Released all slaves [ 95.742716][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.752827][ T11] bond0 (unregistering): Released all slaves [ 95.791228][ T11] hsr_slave_0: left promiscuous mode [ 95.796912][ T11] hsr_slave_1: left promiscuous mode [ 95.802608][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.809994][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.817752][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.825243][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.834146][ T11] hsr_slave_0: left promiscuous mode [ 95.840321][ T11] hsr_slave_1: left promiscuous mode [ 95.845993][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.853356][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.860819][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.868287][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.877293][ T11] hsr_slave_0: left promiscuous mode [ 95.882975][ T11] hsr_slave_1: left promiscuous mode [ 95.888663][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.896074][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.903525][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.910918][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.919650][ T11] hsr_slave_0: left promiscuous mode [ 95.925245][ T11] hsr_slave_1: left promiscuous mode [ 95.930989][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.938517][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.946017][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.953464][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.965917][ T11] veth1_macvtap: left promiscuous mode [ 95.971481][ T11] veth0_macvtap: left promiscuous mode [ 95.976978][ T11] veth1_vlan: left promiscuous mode [ 95.982222][ T11] veth0_vlan: left promiscuous mode [ 95.987823][ T11] veth1_macvtap: left promiscuous mode [ 95.993343][ T11] veth0_macvtap: left promiscuous mode [ 95.998869][ T11] veth1_vlan: left promiscuous mode [ 96.004140][ T11] veth0_vlan: left promiscuous mode [ 96.009757][ T11] veth1_macvtap: left promiscuous mode [ 96.015244][ T11] veth0_macvtap: left promiscuous mode [ 96.020727][ T11] veth1_vlan: left promiscuous mode [ 96.026016][ T11] veth0_vlan: left promiscuous mode [ 96.031736][ T11] veth1_macvtap: left promiscuous mode [ 96.037229][ T11] veth0_macvtap: left promiscuous mode [ 96.042770][ T11] veth1_vlan: left promiscuous mode [ 96.048105][ T11] veth0_vlan: left promiscuous mode [ 96.229195][ T11] team0 (unregistering): Port device team_slave_1 removed [ 96.239101][ T11] team0 (unregistering): Port device team_slave_0 removed