last executing test programs: 9.843073253s ago: executing program 0 (id=391): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x3, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) socket(0x200000100000011, 0x3, 0x0) 9.593780536s ago: executing program 0 (id=400): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="009b5cdd1b00000000002000000000000000a696"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 9.54899307s ago: executing program 0 (id=401): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 9.230959189s ago: executing program 0 (id=402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x80, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x8000) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xc000) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) 8.894459031s ago: executing program 0 (id=413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100008000000000050000009500"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) 8.687471419s ago: executing program 0 (id=428): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x8, 0x8, 0x80b, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) close(r1) 6.40184122s ago: executing program 4 (id=445): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_triestat\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 5.594592055s ago: executing program 1 (id=446): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) socket$kcm(0x21, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) unshare(0x22020600) 5.589191245s ago: executing program 2 (id=447): pipe2(0x0, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) mq_unlink(&(0x7f0000000340)='eth0\x00') 5.588699575s ago: executing program 3 (id=448): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@local, 0x1a, r2}) 4.679150499s ago: executing program 1 (id=449): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000240)=""/203, 0xcb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc04c5349, &(0x7f0000000400)) open(0x0, 0x0, 0x0) tkill(r0, 0x7) fstat(0xffffffffffffffff, 0x0) 4.678698649s ago: executing program 2 (id=450): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010001000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x94, 0x0, 0x0, 0xffffffff}]}) 4.678406909s ago: executing program 3 (id=451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000640)=ANY=[], 0xffdd) 4.677912889s ago: executing program 4 (id=452): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3004000, &(0x7f0000000340), 0x2, 0x7ad, &(0x7f0000000380)="$eJzs3c9rHFUcAPDvbHaT9GdSUbCKGvDQgpgmseAPFFLwKCKoJy8NybaUbn/QRLAhQovYk8eC4EUEwYs3xYsgpSdFvPQi/Q+kUiQIrdJDZCaTzTbdTTfNbiZxPx+YzZt5s/ve7PKdNz9e5gXQs0bSl1LEwYi4lEQM5cuTiKhkqXLE5PJ6dxcXpv9ZXJhOYmnp3b+SbJ07iwvT0fCe1J78bYMRceN6Eo/1PVju7MX501O1WvVCPn9k7sz5I7MX5188dWbqZPVk9ezExMSrE0fHXx6b6Ni2fvLMr9/du/L2p5/vv3n1zxs/7E9iMvbmeY3b0SkjMVL/ThqVI+LNThdWkL58e0oNy5LympUGt7hStK3U8Bs+GUPRF6s/3lBc/77QygEAXbGUTgBAj0m0/wDQY1auA9xZXJhemYq9IgFsldvHlu/PpnF/N5+Wc8oxmf0dzPoB7P47icbbuslK34FNSj/j2w8qX6ZTdOk+PNDcpcvZjf8m7X+Sxf9w3nljbfz3ReT7h81Zuw8R/7B1NhP/73SgfPEPAAAAAAAAnXPtWES80uz+X6ne/yea3P8biIixDpT/8Pt/pVsdKAZo4vaxiNfzZ/vc3/+v/kSX4b58bl9EPBGV5MSpWnUs7mW9hw9HJd1NVMebf3y2y3j/yvhPrcpv7P+XTmn5K30B83rcKg/c/56ZqbmpzW43EHH7csRT5Wbxn9Tb/6RF/9/jbZbx48I3z7bKe3j8A92y9FXEoabt/+qT65L1n893JDseWH5tWsb88Tc+blV+W/G/+m9KQAel7f/u9eN/OGl8Xufsxsv47M7YF63yHvX4vz95L3uqaH++7KOpubkL4xH9yVsPLm/6CNGlgY1vCexsK/GwEi9p/B9+vvn5/3rH/5WION9mmV//XPm9Vd5IFqmO/6EIafzPbKj933ji39+ebrmraK/9P5q16YfzJa7/wfraDdCi6wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ1Uioi9kZRG6+lSaXQ0Yk9EPB67S7Vzs3MvnDj34dmZNC9iOCqlE6dq1bGIGFqeT9L58Sy9Oj+xZv6liDgQEVcHdmXzo9PnajNFbzwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5Pa0GP8/9cdAw4qTRdUQAOiKwaIrAABsOe0/APQe7T8A9J4Nt/+/7OtORQCALeP8HwB6j/YfAAAAAAAAAAAAAAAAAAAAAAAAALrqwHPXbiYRcem1XdmU6s/zKoXWDOi2UtEVAArTV3QFgMKU21kpSernBMD/h3N8IHlIfushQlxBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgdxw62O74/22NFArsIEbvg95l/H/oXY7qoXcZ/x/o1vj/ux6xPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsB3NXpw/PVWrVS9IdDpR3h7V2A6JgYjobhGDsT22tMBE+iXHWMc+sOg9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO8F/AQAA///IXxBG") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0xc, 0x10003, '\x00', [{}, {0xffffffff}]}) 3.646503174s ago: executing program 1 (id=453): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 3.646033294s ago: executing program 2 (id=454): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) 3.645357164s ago: executing program 3 (id=455): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001080)={0x54, 0x6, 0x1, {0x8, 0x1}, {0x74, 0x2}, @const={0x47b, {0x7ff, 0x401, 0xfff7, 0xffa6}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) readv(r2, &(0x7f0000000600)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) 3.645006634s ago: executing program 4 (id=456): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) 2.538624526s ago: executing program 1 (id=457): getpid() r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000280)=0x181, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000002c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) 2.538223237s ago: executing program 2 (id=458): socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x2500}]}}}], 0x18}, 0x0) 2.537816486s ago: executing program 3 (id=459): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0xfff7fffc, 0x0, 0xffffffff, 0x0, "fb00"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) r2 = dup3(r1, r0, 0x0) read$rfkill(r2, &(0x7f00000002c0), 0x8) read$watch_queue(r2, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) 2.537462147s ago: executing program 4 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 1.314704979s ago: executing program 1 (id=461): setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x20000000, 0x8, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x15, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 1.314209589s ago: executing program 2 (id=462): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x80, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 1.313653599s ago: executing program 3 (id=463): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001e200", @ANYBLOB="0000000000000000b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) epoll_create1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "ec28a1ba80a20507"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.313312679s ago: executing program 4 (id=464): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x108, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) 2.28386ms ago: executing program 1 (id=465): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f0000000400000004000000070000000000", @ANYRES32], 0x48) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6a8d, 0x0, 0xa, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100000000000000001c"], 0x30}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.70512ms ago: executing program 2 (id=466): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r2, &(0x7f0000001300), 0x8f) close(r2) 1.33092ms ago: executing program 3 (id=467): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='vegas\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) sendto$inet(r0, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x649}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001980)="d7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002080)="83", 0x1}], 0x1}}], 0x3, 0x4008095) 0s ago: executing program 4 (id=468): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) kernel console output (not intermixed with test programs): e=1 [ 18.112898][ T29] audit: type=1400 audit(1726939526.913:80): avc: denied { siginh } for pid=3140 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.370873][ T29] audit: type=1400 audit(1726939529.183:81): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts. [ 25.997148][ T29] audit: type=1400 audit(1726939534.803:82): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.998406][ T3249] cgroup: Unknown subsys name 'net' [ 26.019920][ T29] audit: type=1400 audit(1726939534.813:83): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.047280][ T29] audit: type=1400 audit(1726939534.833:84): avc: denied { unmount } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.188142][ T3249] cgroup: Unknown subsys name 'cpuset' [ 26.194155][ T3249] cgroup: Unknown subsys name 'rlimit' [ 26.282508][ T29] audit: type=1400 audit(1726939535.093:85): avc: denied { setattr } for pid=3249 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.305747][ T29] audit: type=1400 audit(1726939535.093:86): avc: denied { create } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.326223][ T29] audit: type=1400 audit(1726939535.093:87): avc: denied { write } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.346629][ T29] audit: type=1400 audit(1726939535.093:88): avc: denied { read } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.366960][ T29] audit: type=1400 audit(1726939535.093:89): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.374557][ T3254] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.392125][ T29] audit: type=1400 audit(1726939535.093:90): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.424067][ T29] audit: type=1400 audit(1726939535.213:91): avc: denied { relabelto } for pid=3254 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.453878][ T3249] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.160211][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 28.196596][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 28.231198][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 28.239755][ T3270] chnl_net:caif_netlink_parms(): no params data found [ 28.276260][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.283362][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.290849][ T3261] bridge_slave_0: entered allmulticast mode [ 28.297412][ T3261] bridge_slave_0: entered promiscuous mode [ 28.316280][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.323375][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.330587][ T3261] bridge_slave_1: entered allmulticast mode [ 28.337006][ T3261] bridge_slave_1: entered promiscuous mode [ 28.395813][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.409576][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 28.422658][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.429750][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.437036][ T3260] bridge_slave_0: entered allmulticast mode [ 28.443610][ T3260] bridge_slave_0: entered promiscuous mode [ 28.450856][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.460004][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.467112][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.474401][ T3263] bridge_slave_0: entered allmulticast mode [ 28.480908][ T3263] bridge_slave_0: entered promiscuous mode [ 28.490070][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.497127][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.504253][ T3263] bridge_slave_1: entered allmulticast mode [ 28.510686][ T3263] bridge_slave_1: entered promiscuous mode [ 28.521059][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.528200][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.535282][ T3260] bridge_slave_1: entered allmulticast mode [ 28.541842][ T3260] bridge_slave_1: entered promiscuous mode [ 28.567888][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.574941][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.582211][ T3270] bridge_slave_0: entered allmulticast mode [ 28.589175][ T3270] bridge_slave_0: entered promiscuous mode [ 28.609298][ T3261] team0: Port device team_slave_0 added [ 28.628055][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.637184][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.644272][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.651465][ T3270] bridge_slave_1: entered allmulticast mode [ 28.657951][ T3270] bridge_slave_1: entered promiscuous mode [ 28.669754][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.679760][ T3261] team0: Port device team_slave_1 added [ 28.686291][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.698594][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.736238][ T3270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.746440][ T3270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.755791][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.762784][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.788732][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.804821][ T3260] team0: Port device team_slave_0 added [ 28.820448][ T3263] team0: Port device team_slave_0 added [ 28.826150][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.833231][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.840330][ T3265] bridge_slave_0: entered allmulticast mode [ 28.846733][ T3265] bridge_slave_0: entered promiscuous mode [ 28.857677][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.864631][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.890673][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.904588][ T3260] team0: Port device team_slave_1 added [ 28.910977][ T3263] team0: Port device team_slave_1 added [ 28.916641][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.923858][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.931086][ T3265] bridge_slave_1: entered allmulticast mode [ 28.937531][ T3265] bridge_slave_1: entered promiscuous mode [ 28.949210][ T3270] team0: Port device team_slave_0 added [ 28.972823][ T3270] team0: Port device team_slave_1 added [ 28.987307][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.994389][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.020379][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.046824][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.053936][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.079857][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.090768][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.097753][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.123760][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.135576][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.146486][ T3261] hsr_slave_0: entered promiscuous mode [ 29.152684][ T3261] hsr_slave_1: entered promiscuous mode [ 29.158782][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.165794][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.191774][ T3270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.204572][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.211526][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.237430][ T3270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.248554][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.255487][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.281403][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.293048][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.344091][ T3265] team0: Port device team_slave_0 added [ 29.350837][ T3265] team0: Port device team_slave_1 added [ 29.358721][ T3260] hsr_slave_0: entered promiscuous mode [ 29.364705][ T3260] hsr_slave_1: entered promiscuous mode [ 29.370546][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.378169][ T3260] Cannot create hsr debugfs directory [ 29.405893][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.412892][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.438846][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.455607][ T3270] hsr_slave_0: entered promiscuous mode [ 29.461755][ T3270] hsr_slave_1: entered promiscuous mode [ 29.467822][ T3270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.475387][ T3270] Cannot create hsr debugfs directory [ 29.482775][ T3263] hsr_slave_0: entered promiscuous mode [ 29.488772][ T3263] hsr_slave_1: entered promiscuous mode [ 29.494642][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.502228][ T3263] Cannot create hsr debugfs directory [ 29.512535][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.519510][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.545482][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.602494][ T3265] hsr_slave_0: entered promiscuous mode [ 29.608729][ T3265] hsr_slave_1: entered promiscuous mode [ 29.614629][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.622213][ T3265] Cannot create hsr debugfs directory [ 29.751856][ T3261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.761915][ T3261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.777164][ T3261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.793137][ T3261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.814110][ T3270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.828868][ T3270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.838230][ T3270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.851800][ T3270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.873711][ T3260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.882627][ T3260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.900652][ T3260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.909705][ T3260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.928930][ T3263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.937832][ T3263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.953704][ T3263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.962338][ T3263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.984880][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.007758][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.031966][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.045315][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.052374][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.060519][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.071332][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.085129][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.097110][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.104242][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.114071][ T3270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.143174][ T3270] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.161155][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.176332][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.183604][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.198825][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.211382][ T3261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.221895][ T3261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.239670][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.246701][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.260133][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.285940][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.301455][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.308532][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.317380][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.324465][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.333179][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.340257][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.354800][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.361913][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.373252][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.414606][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.429684][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.458847][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.475969][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.483093][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.509300][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.516385][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.541747][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.553360][ T3265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.563873][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.585980][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.599585][ T3270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.649593][ T3261] veth0_vlan: entered promiscuous mode [ 30.657037][ T3261] veth1_vlan: entered promiscuous mode [ 30.714564][ T3260] veth0_vlan: entered promiscuous mode [ 30.736158][ T3261] veth0_macvtap: entered promiscuous mode [ 30.745860][ T3260] veth1_vlan: entered promiscuous mode [ 30.779196][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.786839][ T3261] veth1_macvtap: entered promiscuous mode [ 30.808364][ T3260] veth0_macvtap: entered promiscuous mode [ 30.815289][ T3260] veth1_macvtap: entered promiscuous mode [ 30.829008][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.839460][ T3270] veth0_vlan: entered promiscuous mode [ 30.853180][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.863764][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.874191][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.885615][ T3263] veth0_vlan: entered promiscuous mode [ 30.892854][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.904578][ T3261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.913497][ T3261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.922332][ T3261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.931180][ T3261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.947295][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.957844][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.969257][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.980876][ T3270] veth1_vlan: entered promiscuous mode [ 30.989740][ T3263] veth1_vlan: entered promiscuous mode [ 30.996192][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.004988][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.013803][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.022538][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.045202][ T3263] veth0_macvtap: entered promiscuous mode [ 31.057980][ T3263] veth1_macvtap: entered promiscuous mode [ 31.070783][ T3265] veth0_vlan: entered promiscuous mode [ 31.078791][ T3270] veth0_macvtap: entered promiscuous mode [ 31.086195][ T3270] veth1_macvtap: entered promiscuous mode [ 31.100238][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.110753][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.120609][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.131181][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.141795][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.154676][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.154686][ T29] audit: type=1400 audit(1726939539.963:110): avc: denied { mounton } for pid=3261 comm="syz-executor" path="/root/syzkaller.o7q27E/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.185600][ T29] audit: type=1400 audit(1726939539.963:111): avc: denied { mount } for pid=3261 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.192490][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.207662][ T29] audit: type=1400 audit(1726939539.963:112): avc: denied { mounton } for pid=3261 comm="syz-executor" path="/root/syzkaller.o7q27E/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.207695][ T29] audit: type=1400 audit(1726939539.963:113): avc: denied { mount } for pid=3261 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.218112][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.243328][ T29] audit: type=1400 audit(1726939539.973:114): avc: denied { unmount } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.294974][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.305458][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.315321][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.325920][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.327228][ T29] audit: type=1400 audit(1726939540.123:115): avc: denied { mounton } for pid=3261 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.338761][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.369264][ T3261] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.386589][ T3265] veth1_vlan: entered promiscuous mode [ 31.393841][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.404425][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.414353][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.424783][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.435242][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.443016][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.453512][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.463360][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.473887][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.483721][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.494141][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.505501][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.516383][ T3270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.525255][ T3270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.534017][ T3270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.542937][ T3270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.552899][ T29] audit: type=1400 audit(1726939540.343:116): avc: denied { read write } for pid=3261 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.577078][ T29] audit: type=1400 audit(1726939540.343:117): avc: denied { open } for pid=3261 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.601121][ T29] audit: type=1400 audit(1726939540.343:118): avc: denied { ioctl } for pid=3261 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.617935][ T3403] syz.2.3[3403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.626723][ T29] audit: type=1400 audit(1726939540.353:119): avc: denied { prog_load } for pid=3401 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.635702][ T3403] syz.2.3[3403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.642772][ T3263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.676454][ T3263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.685273][ T3263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.694040][ T3263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.741725][ T3265] veth0_macvtap: entered promiscuous mode [ 31.758898][ T3265] veth1_macvtap: entered promiscuous mode [ 31.785835][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.796415][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.806280][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.816786][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.826610][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.837081][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.846956][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.857435][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.868665][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.885803][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.891161][ T3418] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 31.896388][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.903793][ T3418] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4'. [ 31.922748][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.933233][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.943123][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.953713][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.956401][ T3421] loop3: detected capacity change from 0 to 1024 [ 31.963598][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.980308][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.980647][ T3421] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.991154][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.005994][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.014880][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.023696][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.032552][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.065257][ T3421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.089585][ T3427] loop1: detected capacity change from 0 to 1024 [ 32.111300][ T3427] EXT4-fs: Ignoring removed nobh option [ 32.130998][ T3421] syz.3.8[3421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.131132][ T3421] syz.3.8[3421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.134437][ T3427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.178959][ T3435] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.194772][ T3427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.205196][ T3427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.215970][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.241220][ T3440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.246440][ T3441] loop0: detected capacity change from 0 to 512 [ 32.256028][ T3440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.271852][ T3441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.284947][ T3441] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.378183][ T3450] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.455412][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.498776][ T3457] loop4: detected capacity change from 0 to 128 [ 32.518223][ T3457] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.538853][ T3457] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.613596][ T3263] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.745403][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.752967][ T3483] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 32.778610][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 32.795672][ T3485] loop1: detected capacity change from 0 to 1024 [ 32.805414][ T3485] ======================================================= [ 32.805414][ T3485] WARNING: The mand mount option has been deprecated and [ 32.805414][ T3485] and is ignored by this kernel. Remove the mand [ 32.805414][ T3485] option from the mount to silence this warning. [ 32.805414][ T3485] ======================================================= [ 32.841977][ T3485] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.866844][ T3485] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 32.875051][ T3485] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.885158][ T3493] loop0: detected capacity change from 0 to 256 [ 32.888331][ T3485] EXT4-fs error (device loop1): ext4_map_blocks:705: inode #3: block 3: comm syz.1.29: lblock 3 mapped to illegal pblock 3 (length 1) [ 32.910918][ T3485] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.29: Failed to acquire dquot type 0 [ 32.923413][ T3493] vfat: Unknown parameter '' [ 32.928417][ T3485] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 3: comm syz.1.29: lblock 3 mapped to illegal pblock 3 (length 1) [ 32.942550][ T3485] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.29: Failed to acquire dquot type 0 [ 32.955111][ T3485] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.29: Freeing blocks not in datazone - block = 0, count = 4096 [ 32.972997][ T3485] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 3: comm syz.1.29: lblock 3 mapped to illegal pblock 3 (length 1) [ 32.997242][ T3485] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.29: Failed to acquire dquot type 0 [ 33.008646][ T3485] EXT4-fs (loop1): 1 orphan inode deleted [ 33.016545][ T3485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.021626][ T3508] loop4: detected capacity change from 0 to 128 [ 33.037049][ T3485] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 33.054398][ T3485] syz.1.29 (3485) used greatest stack depth: 10416 bytes left [ 33.062453][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.074656][ T3511] loop3: detected capacity change from 0 to 128 [ 33.081540][ T3508] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.095120][ T3508] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.146238][ T3511] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.180372][ T3511] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.218826][ T3263] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.220623][ T3511] tipc: Started in network mode [ 33.232911][ T3511] tipc: Node identity 7ff, cluster identity 4711 [ 33.239328][ T3511] tipc: Node number set to 2047 [ 33.290443][ T3270] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.294675][ T3528] loop4: detected capacity change from 0 to 512 [ 33.352087][ T3533] random: crng reseeded on system resumption [ 33.392143][ T3535] netlink: 9 bytes leftover after parsing attributes in process `syz.1.48'. [ 33.424015][ T3535] gretap0: entered promiscuous mode [ 33.439730][ T3528] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.43: Failed to acquire dquot type 1 [ 33.451205][ T3542] xt_l2tp: invalid flags combination: 0 [ 33.457440][ T3528] EXT4-fs (loop4): 1 truncate cleaned up [ 33.463607][ T3528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.486231][ T3528] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.559984][ T3546] syzkaller0: entered promiscuous mode [ 33.565543][ T3546] syzkaller0: entered allmulticast mode [ 33.667796][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.795999][ T3560] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 33.804302][ T3560] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 33.960759][ T3568] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.969113][ T3568] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 33.975982][ T3572] loop4: detected capacity change from 0 to 256 [ 33.994186][ T3572] FAT-fs (loop4): Directory bread(block 64) failed [ 34.000867][ T3572] FAT-fs (loop4): Directory bread(block 65) failed [ 34.007570][ T3572] FAT-fs (loop4): Directory bread(block 66) failed [ 34.014351][ T3572] FAT-fs (loop4): Directory bread(block 67) failed [ 34.021433][ T3572] FAT-fs (loop4): Directory bread(block 68) failed [ 34.028480][ T3572] FAT-fs (loop4): Directory bread(block 69) failed [ 34.035154][ T3572] FAT-fs (loop4): Directory bread(block 70) failed [ 34.046068][ T3572] FAT-fs (loop4): Directory bread(block 71) failed [ 34.052723][ T3572] FAT-fs (loop4): Directory bread(block 72) failed [ 34.060528][ T3572] FAT-fs (loop4): Directory bread(block 73) failed [ 34.095664][ T56] kworker/u8:4: attempt to access beyond end of device [ 34.095664][ T56] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 34.216859][ T3583] loop4: detected capacity change from 0 to 512 [ 34.224839][ T3583] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.238124][ T3583] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.250549][ T3583] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.264034][ T3583] EXT4-fs (loop4): 1 truncate cleaned up [ 34.271679][ T3583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.463195][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.566190][ T3595] syz.4.72[3595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.566377][ T3595] syz.4.72[3595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.810101][ T3606] mmap: syz.2.77 (3606) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.840281][ T3606] process 'syz.2.77' launched './file0' with NULL argv: empty string added [ 35.793538][ T3631] loop3: detected capacity change from 0 to 1024 [ 35.815840][ T3634] tipc: Started in network mode [ 35.820822][ T3634] tipc: Node identity aaa75a0b4f08, cluster identity 4711 [ 35.828168][ T3634] tipc: Enabled bearer , priority 21 [ 35.835910][ T3634] €Â: renamed from syzkaller0 [ 35.842923][ T3634] tipc: Disabling bearer [ 35.852121][ T3631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.865491][ T3631] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.878909][ T3631] syz.3.86[3631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.879046][ T3631] syz.3.86[3631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.916356][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.976507][ T3646] loop1: detected capacity change from 0 to 8192 [ 36.019130][ T3658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'. [ 36.034476][ T3658] Zero length message leads to an empty skb [ 36.050401][ T3660] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 48165 - 0 [ 36.059315][ T3660] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 48165 - 0 [ 36.068215][ T3660] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 48165 - 0 [ 36.077124][ T3660] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 48165 - 0 [ 36.081880][ T3654] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 36.093741][ T3660] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 57801 - 0 [ 36.106372][ T3660] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 57801 - 0 [ 36.115628][ T3660] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 57801 - 0 [ 36.124738][ T3660] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 57801 - 0 [ 36.147604][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.148442][ T3660] geneve2: entered promiscuous mode [ 36.155030][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.160182][ T3660] geneve2: entered allmulticast mode [ 36.173085][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.180612][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.188234][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.191564][ T3667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.195666][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.211423][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.219049][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.226544][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.230416][ T29] kauditd_printk_skb: 2591 callbacks suppressed [ 36.230430][ T29] audit: type=1400 audit(1726939545.033:2704): avc: denied { block_suspend } for pid=3672 comm="syz.0.104" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.233957][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.243986][ T29] audit: type=1400 audit(1726939545.053:2705): avc: denied { module_load } for pid=3672 comm="syz.0.104" path="/sys/power/wakeup_count" dev="sysfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 36.261439][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.300864][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.308346][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.315733][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.323317][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.330715][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.338256][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.345635][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.353081][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.360620][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.368016][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.375492][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.382939][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.390366][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.390481][ T3667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.397795][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.412880][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.420309][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.427778][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.435323][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.442765][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.450277][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.457727][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.467048][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 36.495776][ T29] audit: type=1400 audit(1726939545.303:2706): avc: denied { create } for pid=3679 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 36.518869][ T3668] bond1: entered promiscuous mode [ 36.523919][ T3668] bond1: entered allmulticast mode [ 36.529541][ T3668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.541279][ T3668] bond1 (unregistering): Released all slaves [ 36.550531][ T3680] tipc: New replicast peer: 255.255.255.255 [ 36.552729][ T29] audit: type=1400 audit(1726939545.363:2707): avc: denied { ioctl } for pid=3683 comm="syz.0.108" path="socket:[5132]" dev="sockfs" ino=5132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.556548][ T3680] tipc: Enabled bearer , priority 10 [ 36.610715][ T29] audit: type=1400 audit(1726939545.423:2708): avc: denied { bind } for pid=3685 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 36.637024][ T3690] loop4: detected capacity change from 0 to 512 [ 36.639938][ T29] audit: type=1400 audit(1726939545.443:2709): avc: denied { connect } for pid=3685 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 36.662974][ T3690] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.663713][ T29] audit: type=1400 audit(1726939545.473:2710): avc: denied { create } for pid=3686 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.692050][ T29] audit: type=1400 audit(1726939545.503:2711): avc: denied { bind } for pid=3686 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.711496][ T29] audit: type=1400 audit(1726939545.513:2712): avc: denied { listen } for pid=3686 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.731043][ T29] audit: type=1400 audit(1726939545.523:2713): avc: denied { read } for pid=3691 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.732929][ T3690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.763444][ T3690] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.816605][ T3690] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.111: corrupted inode contents [ 36.829314][ T3690] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.111: mark_inode_dirty error [ 36.841056][ T3690] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.111: corrupted inode contents [ 36.853243][ T3690] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3005: inode #19: comm syz.4.111: mark_inode_dirty error [ 36.868229][ T3690] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3008: inode #19: comm syz.4.111: mark inode dirty (error -117) [ 36.883273][ T3701] syzkaller0: entered promiscuous mode [ 36.884054][ T3690] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 36.888760][ T3701] syzkaller0: entered allmulticast mode [ 36.918541][ T3690] syz.4.111 (3690) used greatest stack depth: 10256 bytes left [ 36.927848][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.956129][ T3707] serio: Serial port pts0 [ 36.973717][ T3705] Cannot find set identified by id 0 to match [ 36.997086][ T3709] loop1: detected capacity change from 0 to 512 [ 37.005210][ T3711] netlink: 256 bytes leftover after parsing attributes in process `syz.4.119'. [ 37.018158][ T3709] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.039709][ T3709] EXT4-fs (loop1): 1 truncate cleaned up [ 37.045829][ T3709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.062463][ T35] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.103937][ T3728] loop4: detected capacity change from 0 to 164 [ 37.112129][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.134123][ T3728] syz.4.122: attempt to access beyond end of device [ 37.134123][ T3728] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 37.150990][ T3728] syz.4.122: attempt to access beyond end of device [ 37.150990][ T3728] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.164458][ T3728] syz.4.122: attempt to access beyond end of device [ 37.164458][ T3728] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.178912][ T3728] syz.4.122: attempt to access beyond end of device [ 37.178912][ T3728] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.193207][ T3728] syz.4.122: attempt to access beyond end of device [ 37.193207][ T3728] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.207755][ T3728] syz.4.122: attempt to access beyond end of device [ 37.207755][ T3728] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.221858][ T3728] syz.4.122: attempt to access beyond end of device [ 37.221858][ T3728] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.235745][ T3728] syz.4.122: attempt to access beyond end of device [ 37.235745][ T3728] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.253722][ T3736] syz.1.124[3736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.253893][ T3736] syz.1.124[3736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.257897][ T3728] syz.4.122: attempt to access beyond end of device [ 37.257897][ T3728] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.326386][ T3736] wg2: entered promiscuous mode [ 37.331423][ T3736] wg2: entered allmulticast mode [ 37.667327][ T3338] tipc: Node number set to 3853474315 [ 37.980083][ T3752] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 38.004718][ T3754] loop2: detected capacity change from 0 to 512 [ 38.029746][ T3754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.042852][ T3754] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.059140][ T3754] Process accounting resumed [ 38.065081][ T3760] IPv4: Oversized IP packet from 172.20.20.24 [ 38.065091][ T3754] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 38.065209][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 38.087616][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 38.108869][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.165212][ T3766] loop4: detected capacity change from 0 to 128 [ 38.273255][ T3786] loop4: detected capacity change from 0 to 512 [ 38.279895][ T3786] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.291910][ T3786] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 38.298010][ T3784] syzkaller0: entered promiscuous mode [ 38.305537][ T3784] syzkaller0: entered allmulticast mode [ 38.312892][ T3786] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 38.312988][ T3786] System zones: 1-12 [ 38.313212][ T3786] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.144: corrupted in-inode xattr: e_value size too large [ 38.313454][ T3786] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.144: couldn't read orphan inode 15 (err -117) [ 38.314056][ T3786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.329725][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.398937][ T3796] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 38.490510][ T3811] loop0: detected capacity change from 0 to 512 [ 38.493362][ T3809] loop4: detected capacity change from 0 to 1024 [ 38.503532][ T3809] EXT4-fs: Ignoring removed orlov option [ 38.509232][ T3809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.519144][ T3811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.529523][ T3809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.531944][ T3811] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.576632][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.591991][ T3811] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.155: corrupted inode contents [ 38.603976][ T3811] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #19: comm syz.0.155: mark_inode_dirty error [ 38.616534][ T3811] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.155: corrupted inode contents [ 38.629728][ T3811] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3005: inode #19: comm syz.0.155: mark_inode_dirty error [ 38.641779][ T3811] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3008: inode #19: comm syz.0.155: mark inode dirty (error -117) [ 38.657019][ T3811] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 38.675849][ T3821] loop4: detected capacity change from 0 to 1024 [ 38.683445][ T3821] EXT4-fs: Ignoring removed orlov option [ 38.684047][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.689422][ T3821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.728366][ T3821] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e01c, mo2=0002] [ 38.736523][ T3821] System zones: 0-1, 3-12 [ 38.741365][ T3821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.771004][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.870544][ T3837] netlink: 16390 bytes leftover after parsing attributes in process `syz.4.162'. [ 38.881212][ T3831] netlink: 16390 bytes leftover after parsing attributes in process `syz.4.162'. [ 38.910723][ T3841] loop0: detected capacity change from 0 to 512 [ 38.939168][ T3841] EXT4-fs (loop0): too many log groups per flexible block group [ 38.946932][ T3841] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 38.954799][ T3841] EXT4-fs (loop0): mount failed [ 39.029038][ T3853] loop0: detected capacity change from 0 to 2048 [ 39.054901][ T3857] sit0: entered allmulticast mode [ 39.069675][ T3853] Alternate GPT is invalid, using primary GPT. [ 39.076032][ T3853] loop0: p1 p2 p3 [ 39.089621][ T3859] loop2: detected capacity change from 0 to 512 [ 39.096647][ T3859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.120047][ T3859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.143493][ T3859] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.180599][ T3868] loop4: detected capacity change from 0 to 512 [ 39.187311][ T3868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.192659][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 39.229785][ T3872] syzkaller0: entered allmulticast mode [ 39.232475][ T3868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.236044][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.247933][ T3868] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.277319][ T3872] syzkaller0 (unregistering): left allmulticast mode [ 39.323558][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.395733][ T3888] loop4: detected capacity change from 0 to 1024 [ 39.404748][ T3888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.426450][ T3888] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 39.453934][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.514327][ T3900] loop4: detected capacity change from 0 to 2048 [ 39.539543][ T3900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.564424][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.624233][ T3910] loop2: detected capacity change from 0 to 256 [ 39.632890][ T3910] FAT-fs (loop2): bogus number of FAT sectors [ 39.639100][ T3910] FAT-fs (loop2): Can't find a valid FAT filesystem [ 39.734646][ T3912] Cannot find set identified by id 0 to match [ 39.736289][ T3920] loop2: detected capacity change from 0 to 128 [ 39.747783][ T3920] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 39.817149][ T3922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.827583][ T3922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 48165 - 0 [ 39.838039][ T3922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 57801 - 0 [ 39.901502][ T40] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 39.937144][ T3933] pim6reg1: entered promiscuous mode [ 39.942586][ T3933] pim6reg1: entered allmulticast mode [ 39.952550][ T3922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.962951][ T3922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 48165 - 0 [ 39.973407][ T3922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 57801 - 0 [ 40.017550][ T3938] ip6_vti0: entered promiscuous mode [ 40.022990][ T3938] vlan0: entered promiscuous mode [ 40.029857][ T3938] ip6_vti0: left promiscuous mode [ 40.042729][ T3922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.053150][ T3922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 48165 - 0 [ 40.063584][ T3922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 57801 - 0 [ 40.130050][ T3946] syzkaller0: entered promiscuous mode [ 40.135670][ T3946] syzkaller0: entered allmulticast mode [ 40.147715][ T3922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.158029][ T3922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 48165 - 0 [ 40.168626][ T3922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 57801 - 0 [ 40.216217][ T3922] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 57801 - 0 [ 40.224556][ T3922] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 48165 - 0 [ 40.232914][ T3922] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 40.245352][ T3922] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 57801 - 0 [ 40.253648][ T3922] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 48165 - 0 [ 40.261972][ T3922] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 40.272865][ T3922] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 57801 - 0 [ 40.281187][ T3922] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 48165 - 0 [ 40.289543][ T3922] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 40.304398][ T3922] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 57801 - 0 [ 40.312738][ T3922] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 48165 - 0 [ 40.321131][ T3922] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 40.342835][ T3959] tipc: Enabled bearer , priority 0 [ 40.346278][ T3957] loop0: detected capacity change from 0 to 512 [ 40.351396][ T3959] ªªªªªª: renamed from syzkaller0 [ 40.364994][ T3959] tipc: Disabling bearer [ 40.393833][ T3957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.406368][ T3957] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.454962][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.456124][ T3966] syzkaller0: entered promiscuous mode [ 40.469580][ T3966] syzkaller0: entered allmulticast mode [ 40.525462][ T3973] loop3: detected capacity change from 0 to 128 [ 40.566157][ T3973] bio_check_eod: 18191 callbacks suppressed [ 40.566171][ T3973] syz.3.219: attempt to access beyond end of device [ 40.566171][ T3973] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 40.585606][ T3973] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 40.662973][ T3984] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 40.769074][ T3992] syz.3.227[3992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.769118][ T3992] syz.3.227[3992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.786132][ T3992] loop3: detected capacity change from 0 to 1024 [ 40.804538][ T3992] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.815627][ T3992] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.826240][ T3992] JBD2: no valid journal superblock found [ 40.832168][ T3992] EXT4-fs (loop3): Could not load journal inode [ 40.858828][ T3995] tunl0: entered promiscuous mode [ 40.865503][ T3995] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 40.873167][ T3995] netlink: 9 bytes leftover after parsing attributes in process `syz.4.228'. [ 41.000788][ T4010] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.009255][ T4010] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 41.012394][ T4008] loop3: detected capacity change from 0 to 512 [ 41.024345][ T4008] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 41.036972][ T4008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.045521][ T4008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.099655][ T4014] loop1: detected capacity change from 0 to 512 [ 41.106981][ T4014] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 41.112394][ T4012] tipc: Started in network mode [ 41.118570][ T4014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 41.121532][ T4012] tipc: Node identity e6c780878835, cluster identity 4711 [ 41.130546][ T4014] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.136607][ T4012] tipc: Enabled bearer , priority 21 [ 41.151312][ T4014] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.237: bg 0: block 361: padding at end of block bitmap is not set [ 41.166115][ T4014] EXT4-fs (loop1): Remounting filesystem read-only [ 41.167880][ T4012] €Â: renamed from syzkaller0 [ 41.176246][ T4014] EXT4-fs (loop1): 1 truncate cleaned up [ 41.184325][ T4014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 41.191687][ T4012] tipc: Disabling bearer [ 41.198606][ T4014] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 41.209018][ T4014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 41.226404][ T4019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'. [ 41.236788][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 41.236800][ T29] audit: type=1400 audit(1726939550.053:2856): avc: denied { mount } for pid=4013 comm="syz.1.237" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 41.342222][ T29] audit: type=1326 audit(1726939550.153:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e62bdef9 code=0x7ffc0000 [ 41.365880][ T29] audit: type=1326 audit(1726939550.173:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e62bdef9 code=0x7ffc0000 [ 41.389280][ T29] audit: type=1326 audit(1726939550.173:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45e62bdef9 code=0x7ffc0000 [ 41.412631][ T29] audit: type=1326 audit(1726939550.173:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e62bdef9 code=0x7ffc0000 [ 41.436124][ T29] audit: type=1326 audit(1726939550.173:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45e62bdef9 code=0x7ffc0000 [ 41.459502][ T29] audit: type=1326 audit(1726939550.173:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e62bdef9 code=0x7ffc0000 [ 41.483129][ T29] audit: type=1326 audit(1726939550.173:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e62bdef9 code=0x7ffc0000 [ 41.506476][ T29] audit: type=1326 audit(1726939550.173:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45e62bdef9 code=0x7ffc0000 [ 41.529907][ T29] audit: type=1326 audit(1726939550.173:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e62bdef9 code=0x7ffc0000 [ 41.614641][ T4037] syzkaller0: entered promiscuous mode [ 41.620297][ T4037] syzkaller0: entered allmulticast mode [ 41.748118][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 41.756992][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.764563][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.772150][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.779792][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.227422][ T4051] loop2: detected capacity change from 0 to 512 [ 42.233905][ T4051] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.255721][ T4052] loop0: detected capacity change from 0 to 128 [ 42.262573][ T4052] FAT-fs (loop0): bogus number of reserved sectors [ 42.263509][ T4051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.269129][ T4052] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 42.282821][ T4051] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.290820][ T4052] FAT-fs (loop0): Can't find a valid FAT filesystem [ 42.334538][ T4051] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.252: corrupted inode contents [ 42.346438][ T4051] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #19: comm syz.2.252: mark_inode_dirty error [ 42.358979][ T4051] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.252: corrupted inode contents [ 42.370849][ T4051] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3005: inode #19: comm syz.2.252: mark_inode_dirty error [ 42.382880][ T4051] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3008: inode #19: comm syz.2.252: mark inode dirty (error -117) [ 42.395533][ T4051] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 42.414502][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.543599][ T4065] loop3: detected capacity change from 0 to 128 [ 42.550438][ T4065] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 42.603176][ T4068] netlink: 'syz.1.259': attribute type 3 has an invalid length. [ 42.619112][ T28] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 42.656070][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 42.686856][ T4080] netlink: 256 bytes leftover after parsing attributes in process `syz.3.266'. [ 43.048013][ T4096] loop0: detected capacity change from 0 to 512 [ 43.058729][ T4096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.071378][ T4096] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.104740][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.122357][ T4101] loop0: detected capacity change from 0 to 128 [ 43.129090][ T4101] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 43.194671][ T40] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 43.473805][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 43.498799][ T4117] batadv_slave_0: entered promiscuous mode [ 43.505208][ T4116] batadv_slave_0: left promiscuous mode [ 43.553141][ T4122] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 43.559686][ T4122] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 43.567436][ T4122] vhci_hcd vhci_hcd.0: Device attached [ 43.574990][ T4122] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 43.581563][ T4122] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 43.589099][ T4122] vhci_hcd vhci_hcd.0: Device attached [ 43.601927][ T4123] vhci_hcd: connection closed [ 43.601968][ T4125] vhci_hcd: connection closed [ 43.606912][ T40] vhci_hcd: stop threads [ 43.615943][ T40] vhci_hcd: release socket [ 43.620471][ T40] vhci_hcd: disconnect device [ 43.637397][ T40] vhci_hcd: stop threads [ 43.641654][ T40] vhci_hcd: release socket [ 43.646071][ T40] vhci_hcd: disconnect device [ 43.656690][ T4128] Illegal XDP return value 4294967274 on prog (id 242) dev N/A, expect packet loss! [ 43.715996][ T4134] pim6reg1: entered promiscuous mode [ 43.721600][ T4134] pim6reg1: entered allmulticast mode [ 44.054782][ T4150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.063452][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.070923][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.078387][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.085847][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.093261][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.100661][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.108094][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.115469][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.122875][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.130314][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.137798][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.145268][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.152683][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.160068][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.167481][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.174926][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.182442][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.189866][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.197270][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.204661][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.212147][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.219554][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.226920][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.234431][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.241974][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.249377][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.256818][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.264365][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.271766][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.279172][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.286546][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.293939][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 44.301893][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 44.302140][ T4150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.698092][ T4160] bond_slave_1: mtu less than device minimum [ 44.729005][ T4164] loop1: detected capacity change from 0 to 512 [ 44.735943][ T4164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.757486][ T4164] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 44.772141][ T4164] EXT4-fs (loop1): 1 truncate cleaned up [ 44.778366][ T4164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.024047][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.060885][ T4206] sd 0:0:1:0: device reset [ 45.188411][ T4217] loop2: detected capacity change from 0 to 512 [ 45.196544][ T4217] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.307: corrupted in-inode xattr: invalid ea_ino [ 45.210204][ T4217] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.307: couldn't read orphan inode 15 (err -117) [ 45.224452][ T4217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.240857][ T4217] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.307: invalid indirect mapped block 234881024 (level 0) [ 45.264293][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.296539][ T4229] loop2: detected capacity change from 0 to 128 [ 45.304250][ T4231] loop4: detected capacity change from 0 to 512 [ 45.311396][ T4231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.320732][ T4231] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.327729][ T4231] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.313: bg 0: block 248: padding at end of block bitmap is not set [ 45.342413][ T4231] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.313: Failed to acquire dquot type 1 [ 45.354372][ T4231] EXT4-fs (loop4): 1 truncate cleaned up [ 45.361377][ T4231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.379934][ T4231] syz.4.313 (4231) used greatest stack depth: 9432 bytes left [ 45.397572][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.463194][ T4249] loop2: detected capacity change from 0 to 128 [ 45.471303][ T4249] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.483744][ T4249] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.506555][ T3261] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.774416][ T4255] dccp_close: ABORT with 32 bytes unread [ 45.830067][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.885498][ T4269] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4269 comm=syz.3.329 [ 45.910628][ T4271] netlink: 'syz.3.330': attribute type 33 has an invalid length. [ 45.918613][ T4271] netlink: 152 bytes leftover after parsing attributes in process `syz.3.330'. [ 46.048894][ T4298] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.069815][ T4302] netlink: 169 bytes leftover after parsing attributes in process `syz.3.341'. [ 46.097666][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 46.105634][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.117120][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.128620][ T35] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.323770][ T4316] netlink: 52 bytes leftover after parsing attributes in process `syz.1.347'. [ 46.333048][ T4316] unsupported nlmsg_type 40 [ 46.372481][ T4320] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.382041][ T4322] xt_nat: multiple ranges no longer supported [ 46.564603][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 46.564641][ T29] audit: type=1400 audit(1726939555.373:3025): avc: denied { listen } for pid=4339 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.628251][ T4342] syzkaller0: entered promiscuous mode [ 46.633789][ T4342] syzkaller0: entered allmulticast mode [ 46.751566][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 46.760842][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 46.777656][ T29] audit: type=1400 audit(1726939555.593:3026): avc: denied { read } for pid=4349 comm="syz.1.362" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 46.779786][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 46.801675][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.812026][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 46.816935][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.826062][ T29] audit: type=1400 audit(1726939555.613:3027): avc: denied { open } for pid=4349 comm="syz.1.362" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 46.854656][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 46.860602][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.872651][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.940330][ T4357] loop0: detected capacity change from 0 to 1024 [ 46.947076][ T4357] EXT4-fs: Ignoring removed nobh option [ 46.952753][ T4357] EXT4-fs: Ignoring removed orlov option [ 46.968850][ T4357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.992259][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.034767][ T29] audit: type=1400 audit(1726939555.843:3028): avc: denied { bind } for pid=4366 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.062020][ T4371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4371 comm=syz.1.369 [ 47.080338][ T4369] bond1: entered promiscuous mode [ 47.085431][ T4369] bond1: entered allmulticast mode [ 47.091403][ T4369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.103140][ T4369] bond1 (unregistering): Released all slaves [ 47.166072][ T29] audit: type=1400 audit(1726939555.973:3029): avc: denied { create } for pid=4378 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.185943][ T4380] syz.1.372 uses obsolete (PF_INET,SOCK_PACKET) [ 47.316823][ T29] audit: type=1326 audit(1726939556.123:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.4.375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f629ccedef9 code=0x0 [ 47.990141][ T4396] netlink: 'syz.1.380': attribute type 4 has an invalid length. [ 48.004993][ T4396] netlink: 'syz.1.380': attribute type 4 has an invalid length. [ 49.497267][ T29] audit: type=1400 audit(1726939558.303:3031): avc: denied { map } for pid=4398 comm="syz.3.381" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.209221][ T4422] loop4: detected capacity change from 0 to 1024 [ 53.229024][ T4422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.248534][ T29] audit: type=1400 audit(1726939562.063:3032): avc: denied { create } for pid=4421 comm="syz.4.390" name="cpuacct.usage_percpu_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.279279][ T29] audit: type=1400 audit(1726939562.063:3033): avc: denied { read append open } for pid=4421 comm="syz.4.390" path="/86/file1/cpuacct.usage_percpu_sys" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.306303][ T40] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 53.330229][ T29] audit: type=1400 audit(1726939562.143:3034): avc: denied { accept } for pid=4433 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.344694][ T40] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 53.349752][ T29] audit: type=1400 audit(1726939562.143:3035): avc: denied { read } for pid=4433 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.361935][ T40] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.361935][ T40] [ 53.361949][ T40] EXT4-fs (loop4): Total free blocks count 0 [ 53.361959][ T40] EXT4-fs (loop4): Free/Dirty block details [ 53.361970][ T40] EXT4-fs (loop4): free_blocks=68451041280 [ 53.362024][ T40] EXT4-fs (loop4): dirty_blocks=64 [ 53.381506][ T4424] dccp_close: ABORT with 32 bytes unread [ 53.390909][ T40] EXT4-fs (loop4): Block reservation details [ 53.390922][ T40] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 53.438167][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.462248][ T4442] serio: Serial port pts0 [ 53.467305][ T29] audit: type=1400 audit(1726939562.273:3036): avc: denied { setopt } for pid=4441 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.486614][ T29] audit: type=1400 audit(1726939562.283:3037): avc: denied { sqpoll } for pid=4441 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.508702][ T4443] ------------[ cut here ]------------ [ 53.514183][ T4443] refcount_t: underflow; use-after-free. [ 53.520313][ T4443] WARNING: CPU: 0 PID: 4443 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 53.529731][ T4443] Modules linked in: [ 53.533630][ T4443] CPU: 0 UID: 0 PID: 4443 Comm: syz.3.397 Not tainted 6.11.0-syzkaller-07983-g7856a565416e #0 [ 53.543934][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 53.554036][ T4443] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 53.560279][ T4443] Code: 72 ff ff ff e8 5b 06 72 ff 48 c7 c7 2d ea b2 86 e8 ff 6c 8a ff c6 05 25 b8 f4 04 01 90 48 c7 c7 d9 64 1b 86 e8 db c2 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 2c 06 72 ff 48 c7 c7 2a ea b2 86 e8 [ 53.579933][ T4443] RSP: 0018:ffffc90000ee3cd8 EFLAGS: 00010246 [ 53.586078][ T4443] RAX: e9361918d938b400 RBX: ffff8881160d93e4 RCX: 0000000000040000 [ 53.594135][ T4443] RDX: ffffc90003c98000 RSI: 0000000000001758 RDI: 0000000000001759 [ 53.602130][ T4443] RBP: 0000000000000003 R08: ffffffff8111f657 R09: 0000000000000000 [ 53.610183][ T4443] R10: 0001ffffffffffff R11: ffff888104774200 R12: ffff888115315668 [ 53.618181][ T4443] R13: ffff888115315618 R14: ffff8881160d93e4 R15: 0000000000000000 [ 53.626199][ T4443] FS: 00007f20455a76c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 53.635230][ T4443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.641823][ T4443] CR2: 0000000100000000 CR3: 00000001161a4000 CR4: 00000000003506f0 [ 53.649843][ T4443] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.657851][ T4443] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.665881][ T4443] Call Trace: [ 53.669186][ T4443] [ 53.672116][ T4443] ? __warn+0x141/0x350 [ 53.676344][ T4443] ? report_bug+0x315/0x420 [ 53.680887][ T4443] ? refcount_warn_saturate+0x1c6/0x230 [ 53.682777][ C1] hrtimer: interrupt took 47027 ns [ 53.686445][ T4443] ? handle_bug+0x60/0x90 [ 53.695908][ T4443] ? exc_invalid_op+0x1a/0x50 [ 53.700692][ T4443] ? asm_exc_invalid_op+0x1a/0x20 [ 53.705755][ T4443] ? __warn_printk+0x167/0x1b0 [ 53.710624][ T4443] ? refcount_warn_saturate+0x1c6/0x230 [ 53.716307][ T4443] ? refcount_warn_saturate+0x1c5/0x230 [ 53.721904][ T4443] sk_skb_reason_drop+0xe9/0x290 [ 53.726856][ T4443] j1939_session_put+0x157/0x2a0 [ 53.731941][ T4443] j1939_sk_release+0x278/0x4f0 [ 53.736891][ T4443] ? __pfx_autoremove_wake_function+0x10/0x10 [ 53.743007][ T4443] sock_close+0x68/0x150 [ 53.747334][ T4443] ? __pfx_sock_close+0x10/0x10 [ 53.752214][ T4443] __fput+0x17a/0x6d0 [ 53.756219][ T4443] ____fput+0x1c/0x30 [ 53.760229][ T4443] task_work_run+0x13a/0x1a0 [ 53.764897][ T4443] syscall_exit_to_user_mode+0xbe/0x130 [ 53.770471][ T4443] do_syscall_64+0xd6/0x1c0 [ 53.774984][ T4443] ? clear_bhb_loop+0x55/0xb0 [ 53.779733][ T4443] ? clear_bhb_loop+0x55/0xb0 [ 53.784489][ T4443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.790427][ T4443] RIP: 0033:0x7f204692def9 [ 53.794864][ T4443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.814532][ T4443] RSP: 002b:00007f20455a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 53.823093][ T4443] RAX: 0000000000000000 RBX: 00007f2046ae5f80 RCX: 00007f204692def9 [ 53.831094][ T4443] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 53.839099][ T4443] RBP: 00007f20469a0b76 R08: 0000000000000000 R09: 0000000000000000 [ 53.847093][ T4443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.855099][ T4443] R13: 0000000000000000 R14: 00007f2046ae5f80 R15: 00007ffd974ed9d8 [ 53.863105][ T4443] [ 53.866169][ T4443] ---[ end trace 0000000000000000 ]--- [ 53.873566][ T4458] __nla_validate_parse: 1 callbacks suppressed [ 53.873577][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 53.886702][ T4456] loop0: detected capacity change from 0 to 2048 [ 53.926014][ T4456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.941742][ T29] audit: type=1326 audit(1726939562.753:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629ccedef9 code=0x7ffc0000 [ 53.966830][ T29] audit: type=1326 audit(1726939562.753:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f629ccedef9 code=0x7ffc0000 [ 53.990236][ T29] audit: type=1326 audit(1726939562.753:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629ccedef9 code=0x7ffc0000 [ 54.002572][ T4456] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 54.013578][ T29] audit: type=1326 audit(1726939562.753:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629ccedef9 code=0x7ffc0000 [ 54.045217][ T4456] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.053122][ T4471] loop3: detected capacity change from 0 to 1024 [ 54.061656][ T4456] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 24 with error 28 [ 54.073994][ T4456] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.073994][ T4456] [ 54.083672][ T4456] EXT4-fs (loop0): Total free blocks count 0 [ 54.089702][ T4456] EXT4-fs (loop0): Free/Dirty block details [ 54.095648][ T4456] EXT4-fs (loop0): free_blocks=2415919104 [ 54.101392][ T4456] EXT4-fs (loop0): dirty_blocks=32 [ 54.106522][ T4456] EXT4-fs (loop0): Block reservation details [ 54.112601][ T4456] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 54.147541][ T4471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.167740][ T4471] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.338612][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.272356][ T3289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.319811][ T3289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.400110][ T3289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.450962][ T3289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.518905][ T3289] bridge_slave_1: left allmulticast mode [ 56.524627][ T3289] bridge_slave_1: left promiscuous mode [ 56.530327][ T3289] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.537987][ T3289] bridge_slave_0: left allmulticast mode [ 56.543616][ T3289] bridge_slave_0: left promiscuous mode [ 56.549333][ T3289] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.672702][ T3289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.699373][ T3289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.718584][ T3289] bond0 (unregistering): Released all slaves [ 56.768761][ T3289] tipc: Left network mode [ 56.776170][ T3289] hsr_slave_0: left promiscuous mode [ 56.784274][ T3289] hsr_slave_1: left promiscuous mode [ 56.791884][ T3289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.799333][ T3289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.817054][ T3289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.824559][ T3289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.844044][ T3289] veth1_macvtap: left promiscuous mode [ 56.849638][ T3289] veth0_macvtap: left promiscuous mode [ 56.855143][ T3289] veth1_vlan: left promiscuous mode [ 56.860402][ T3289] veth0_vlan: left promiscuous mode [ 56.964323][ T3289] team0 (unregistering): Port device team_slave_1 removed [ 56.974479][ T3289] team0 (unregistering): Port device team_slave_0 removed [ 58.379716][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 58.379732][ T29] audit: type=1400 audit(1726939567.193:3252): avc: denied { execmem } for pid=4571 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 58.406255][ T29] audit: type=1400 audit(1726939567.193:3253): avc: denied { prog_load } for pid=4573 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.425252][ T29] audit: type=1400 audit(1726939567.193:3254): avc: denied { open } for pid=4572 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 58.444391][ T29] audit: type=1400 audit(1726939567.193:3255): avc: denied { prog_load } for pid=4573 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.463390][ T29] audit: type=1400 audit(1726939567.193:3256): avc: denied { prog_load } for pid=4573 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.482347][ T29] audit: type=1400 audit(1726939567.193:3257): avc: denied { map_create } for pid=4573 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.501421][ T29] audit: type=1400 audit(1726939567.193:3258): avc: denied { prog_load } for pid=4573 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.520491][ T29] audit: type=1400 audit(1726939567.193:3259): avc: denied { prog_load } for pid=4573 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.539759][ T29] audit: type=1400 audit(1726939567.233:3260): avc: denied { read write } for pid=4575 comm="syz.4.452" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.563846][ T29] audit: type=1400 audit(1726939567.233:3261): avc: denied { map_create } for pid=4575 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.596051][ T4578] syzkaller0: entered promiscuous mode [ 58.601704][ T4578] syzkaller0: entered allmulticast mode [ 63.170554][ T4628] ================================================================== [ 63.178661][ T4628] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 63.185095][ T4628] [ 63.187415][ T4628] write to 0xffffc9000129fbd0 of 4 bytes by task 4627 on cpu 1: [ 63.195042][ T4628] pollwake+0xbe/0x110 [ 63.199115][ T4628] __wake_up+0x65/0xb0 [ 63.203199][ T4628] ep_poll_callback+0x499/0x5b0 [ 63.208055][ T4628] __wake_up+0x65/0xb0 [ 63.212136][ T4628] ep_poll_callback+0x499/0x5b0 [ 63.216988][ T4628] __wake_up+0x65/0xb0 [ 63.221075][ T4628] unix_dgram_peer_wake_relay+0xd4/0xf0 [ 63.226630][ T4628] __wake_up_sync_key+0x51/0x80 [ 63.231494][ T4628] __unix_dgram_recvmsg+0x3bc/0x860 [ 63.236690][ T4628] unix_dgram_recvmsg+0x81/0x90 [ 63.241545][ T4628] sock_recvmsg_nosec+0x107/0x140 [ 63.246578][ T4628] ____sys_recvmsg+0x271/0x280 [ 63.251341][ T4628] do_recvmmsg+0x2df/0x710 [ 63.255755][ T4628] __x64_sys_recvmmsg+0xe2/0x170 [ 63.260701][ T4628] x64_sys_call+0x26e3/0x2d60 [ 63.265378][ T4628] do_syscall_64+0xc9/0x1c0 [ 63.269881][ T4628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.275780][ T4628] [ 63.278101][ T4628] read to 0xffffc9000129fbd0 of 4 bytes by task 4628 on cpu 0: [ 63.285658][ T4628] do_sys_poll+0x986/0xc10 [ 63.290085][ T4628] __se_sys_ppoll+0x1af/0x1f0 [ 63.294763][ T4628] __x64_sys_ppoll+0x67/0x80 [ 63.299371][ T4628] x64_sys_call+0xe71/0x2d60 [ 63.303960][ T4628] do_syscall_64+0xc9/0x1c0 [ 63.308457][ T4628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.314356][ T4628] [ 63.316668][ T4628] value changed: 0x00000000 -> 0x00000001 [ 63.322383][ T4628] [ 63.324702][ T4628] Reported by Kernel Concurrency Sanitizer on: [ 63.330848][ T4628] CPU: 0 UID: 0 PID: 4628 Comm: syz.4.468 Tainted: G W 6.11.0-syzkaller-07983-g7856a565416e #0 [ 63.342562][ T4628] Tainted: [W]=WARN [ 63.346354][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 63.356415][ T4628] ================================================================== [ 63.947502][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 63.947529][ T29] audit: type=1400 audit(1726939572.763:3336): avc: denied { read write } for pid=3263 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.464963][ T29] audit: type=1400 audit(1726939573.273:3337): avc: denied { write } for pid=3249 comm="syz-executor" path="pipe:[633]" dev="pipefs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 Sep 21 17:26:13 syzkaller auth.info sshd[3247]: Received disconnect from 10.128.0.163 port 48046:11: disconnected by user Sep 21 17:26:13 syzkaller auth.info sshd[3247]: Disconnected from user root 10.128.0.163 port 48046 [ 64.541825][ T29] audit: type=1400 audit(1726939573.273:3338): avc: denied { write } for pid=3249 comm="syz-executor" path="pipe:[633]" dev="pipefs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 64.564908][ T29] audit: type=1400 audit(1726939573.273:3339): avc: denied { write } for pid=3249 comm="syz-executor" path="pipe:[633]" dev="pipefs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 64.587949][ T29] audit: type=1400 audit(1726939573.303:3340): avc: denied { execmem } for pid=4630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 64.607405][ T29] audit: type=1400 audit(1726939573.323:3341): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 64.629377][ T29] audit: type=1400 audit(1726939573.323:3342): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 64.791401][ T28] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57801 - 0 [ 64.801512][ T28] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 48165 - 0 [ 64.811438][ T28] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 64.868667][ T28] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57801 - 0 [ 64.878555][ T28] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 48165 - 0 [ 64.888442][ T28] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 64.958818][ T28] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57801 - 0 [ 64.968655][ T28] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 48165 - 0 [ 64.978517][ T28] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 65.038689][ T28] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57801 - 0 [ 65.048667][ T28] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 48165 - 0 [ 65.058540][ T28] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 65.129089][ T28] bridge_slave_1: left allmulticast mode [ 65.134741][ T28] bridge_slave_1: left promiscuous mode [ 65.140512][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.148114][ T28] bridge_slave_0: left allmulticast mode [ 65.153798][ T28] bridge_slave_0: left promiscuous mode [ 65.159477][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.340015][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.350084][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.360148][ T28] bond0 (unregistering): Released all slaves [ 65.397956][ T28] tipc: Disabling bearer [ 65.403248][ T28] tipc: Left network mode [ 65.410211][ T28] hsr_slave_0: left promiscuous mode [ 65.415951][ T28] hsr_slave_1: left promiscuous mode [ 65.422839][ T28] veth1_macvtap: left promiscuous mode [ 65.428381][ T28] veth0_macvtap: left promiscuous mode [ 65.433861][ T28] veth1_vlan: left promiscuous mode [ 65.439130][ T28] veth0_vlan: left promiscuous mode [ 65.512434][ T28] team0 (unregistering): Port device team_slave_1 removed [ 65.522591][ T28] team0 (unregistering): Port device team_slave_0 removed [ 65.791259][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.840145][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.900704][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.959767][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.028642][ T28] bridge_slave_1: left allmulticast mode [ 66.034274][ T28] bridge_slave_1: left promiscuous mode [ 66.039988][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.047735][ T28] bridge_slave_0: left allmulticast mode [ 66.053444][ T28] bridge_slave_0: left promiscuous mode [ 66.059153][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.169618][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.179705][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.189442][ T28] bond0 (unregistering): Released all slaves [ 66.240021][ T28] hsr_slave_0: left promiscuous mode [ 66.245602][ T28] hsr_slave_1: left promiscuous mode [ 66.252339][ T28] veth1_macvtap: left promiscuous mode [ 66.257922][ T28] veth0_macvtap: left promiscuous mode [ 66.263394][ T28] veth1_vlan: left promiscuous mode [ 66.268650][ T28] veth0_vlan: left promiscuous mode [ 66.341513][ T28] team0 (unregistering): Port device team_slave_1 removed [ 66.351472][ T28] team0 (unregistering): Port device team_slave_0 removed Sep 21 17:26:19 [ 70.291098][ T29] audit: type=1400 audit(1726939579.103:3343): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon[ 70.314267][ T29] audit: type=1400 audit(1726939579.103:3344): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[4631]: ps_bpf_start_bpf: bpf_open: Invalid argument Sep 21 17:26:19 syzkaller daemon.err dhcpcd[4631]: ps_root_recvmsg: Invalid argument Sep 21 17:26:20 [ 71.489387][ T29] audit: type=1400 audit(1726939580.303:3345): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon[ 71.512495][ T29] audit: type=1400 audit(1726939580.303:3346): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[4632]: ps_bpf_start_bpf: bpf_open: Invalid argument Sep 21 17:26:20 syzkaller daemon.err dhcpcd[4632]: ps_root_recvmsg: Invalid argument Sep 21 17:26:20 [ 72.009832][ T29] audit: type=1400 audit(1726939580.823:3347): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon[ 72.033131][ T29] audit: type=1400 audit(1726939580.823:3348): avc: denied { read } for pid=2945 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[4633]: ps_bpf_start_bpf: bpf_open: Invalid argument Sep 21 17:26:20 syzkaller daemon.err dhcpcd[4633]: ps_root_recvmsg: Invalid argument