last executing test programs: 5.603560148s ago: executing program 0 (id=1599): r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x7e, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000580)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x7, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0x10, 0x2}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="04000000ca4806a130649e3a0635550400000000020000e78f31c82f3f332e7f359be45b8533", @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) close(0x3) close(0x3) 5.11480983s ago: executing program 0 (id=1606): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) 3.483773802s ago: executing program 2 (id=1617): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.187618949s ago: executing program 2 (id=1619): syz_emit_ethernet(0x32, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "11223344000000000000000040000040"}}}}, 0x0) 3.079034982s ago: executing program 2 (id=1623): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="01154e000100445588fb0000892f", 0x1a, 0x804, &(0x7f0000000040)={0x11, 0xf8, r1, 0x0, 0x0, 0x0}, 0x14) 3.067014822s ago: executing program 3 (id=1624): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.027159173s ago: executing program 2 (id=1625): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x500, 0x228, 0x0, 0xffffffff, 0x0, 0x228, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, 0x0, {[{{@ip={@multicast2, @local, 0xff000000, 0xffffff00, 'macsec0\x00', 'wg1\x00', {0xff}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0x0, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e26, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x2}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'nicvf0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "c81f"}}, @common=@ttl={{0x28}, {0x2, 0x6}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @multicast2, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) pidfd_send_signal(r2, 0x8, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) socket(0x400000000010, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r0, 0x0, 0x80, &(0x7f0000000280)={@_ha_fsid={[0x3, 0x80000001]}, {0x1, 0x1, 0x5a, 0x3}}, 0x9, &(0x7f00000003c0), 0x0}) 1.925907581s ago: executing program 1 (id=1628): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1.839492633s ago: executing program 1 (id=1630): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.771008065s ago: executing program 1 (id=1631): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r3, &(0x7f0000000380)=@in={0x2, 0x1122, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r4, &(0x7f00000003c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r4, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "11223344000000000000000082000040"}}}}, 0x0) 1.1957684s ago: executing program 4 (id=1636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}, 0x0) 1.120526902s ago: executing program 4 (id=1637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='10', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.120150262s ago: executing program 4 (id=1638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r1, 0x5) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) accept$phonet_pipe(r1, 0x0, 0x0) 995.917675ms ago: executing program 0 (id=1639): mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 995.701705ms ago: executing program 0 (id=1640): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f07c60000000000000081"], 0x1c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 982.872925ms ago: executing program 0 (id=1641): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/tcp_cubic/parameters/hystart\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='0', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/tcp_cubic/parameters/initial_ssthresh\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='1', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) 924.072346ms ago: executing program 2 (id=1642): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10', 0x2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x5ada985dea50982f) mkdir(&(0x7f00000002c0)='./cgroup.cpu/test/file0\x00', 0x1ff) 903.157707ms ago: executing program 3 (id=1643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) 893.909238ms ago: executing program 1 (id=1644): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 751.650761ms ago: executing program 1 (id=1645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x21}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x179, 0x0, &(0x7f0000000900)="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", 0x0, 0x8, 0x60000000, 0x0, 0x50, &(0x7f0000000000), &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e97985845725e41aafae473c8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec605000000ee64af416c29f65e47110b81f6b4da06db5e1aad1f627a", 0x2, 0x3}, 0x50) 536.964297ms ago: executing program 1 (id=1646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) setns(0xffffffffffffffff, 0x24020000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) inotify_init1(0x800) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) 360.440881ms ago: executing program 3 (id=1647): r0 = socket(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000200)="01154e000100445588fb0000892f", 0x1a, 0x804, &(0x7f0000000040)={0x11, 0xf8, 0x0, 0x0, 0x0, 0x0}, 0x14) 267.830373ms ago: executing program 3 (id=1648): r0 = socket$inet6_udp(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="4800000014", 0x5}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c2c40fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) 255.502014ms ago: executing program 4 (id=1649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='10', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 229.415695ms ago: executing program 3 (id=1650): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r2, r2) write(r0, &(0x7f00000001c0)='tcp 2000', 0x8) 204.726825ms ago: executing program 4 (id=1651): mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 123.892547ms ago: executing program 4 (id=1652): syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed040003010902220001000000000904"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) 123.471197ms ago: executing program 3 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x500, 0x228, 0x0, 0xffffffff, 0x0, 0x228, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, 0x0, {[{{@ip={@multicast2, @local, 0xff000000, 0xffffff00, 'macsec0\x00', 'wg1\x00', {0xff}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0x0, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e26, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x2}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'nicvf0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "c81f"}}, @common=@ttl={{0x28}, {0x2, 0x6}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @multicast2, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) socket(0x840000000002, 0x3, 0xff) socket$unix(0x1, 0x1, 0x0) pidfd_send_signal(r2, 0x8, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) socket(0x400000000010, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r0, 0x0, 0x80, &(0x7f0000000280)={@_ha_fsid={[0x3, 0x80000001]}, {0x1, 0x1, 0x5a, 0x3}}, 0x9, &(0x7f00000003c0), 0x0}) 117.992487ms ago: executing program 0 (id=1654): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 2 (id=1655): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x3c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) kernel console output (not intermixed with test programs): t=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.170845][ T28] audit: type=1400 audit(1785810552.257:99): avc: denied { noatsecure } for pid=3166 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.190978][ T28] audit: type=1400 audit(1785810552.257:100): avc: denied { write } for pid=3166 comm="sh" path="pipe:[2509]" dev="pipefs" ino=2509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.218550][ T28] audit: type=1400 audit(1785810552.257:101): avc: denied { rlimitinh } for pid=3166 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.237784][ T28] audit: type=1400 audit(1785810552.257:102): avc: denied { siginh } for pid=3166 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.278276][ T28] audit: type=1400 audit(1785810555.387:103): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.300528][ T28] audit: type=1400 audit(1785810555.387:104): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.687094][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 25.687112][ T28] audit: type=1400 audit(1785810556.797:120): avc: denied { write } for pid=3234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.721554][ T28] audit: type=1400 audit(1785810556.827:121): avc: denied { write } for pid=3245 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.099714][ T28] audit: type=1400 audit(1785810557.207:122): avc: denied { write } for pid=3248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.129553][ T28] audit: type=1400 audit(1785810557.237:123): avc: denied { write } for pid=3259 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.440937][ T28] audit: type=1400 audit(1785810557.547:124): avc: denied { write } for pid=3262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.470578][ T28] audit: type=1400 audit(1785810557.577:125): avc: denied { write } for pid=3273 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 30.267212][ T28] audit: type=1400 audit(1785810561.377:126): avc: denied { mounton } for pid=3281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.290476][ T28] audit: type=1400 audit(1785810561.397:127): avc: denied { mount } for pid=3281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.292958][ T3281] cgroup: Unknown subsys name 'net' [ 30.318341][ T28] audit: type=1400 audit(1785810561.427:128): avc: denied { unmount } for pid=3281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.452935][ T3281] cgroup: Unknown subsys name 'cpuset' [ 30.459239][ T3281] cgroup: Unknown subsys name 'rlimit' [ 30.590627][ T28] audit: type=1400 audit(1785810561.697:129): avc: denied { setattr } for pid=3281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.665644][ T3286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.721551][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 30.721623][ T28] audit: type=1400 audit(1785810561.827:138): avc: denied { read } for pid=3281 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.722372][ T3281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.728572][ T28] audit: type=1400 audit(1785810561.827:139): avc: denied { open } for pid=3281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.457974][ T28] audit: type=1400 audit(1785810562.567:140): avc: denied { execmem } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.678360][ T28] audit: type=1400 audit(1785810562.787:141): avc: denied { read } for pid=3294 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.729715][ T28] audit: type=1400 audit(1785810562.787:142): avc: denied { open } for pid=3294 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.782973][ T28] audit: type=1400 audit(1785810562.787:143): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 31.838789][ T28] audit: type=1400 audit(1785810562.787:144): avc: denied { module_request } for pid=3294 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 31.875018][ T28] audit: type=1400 audit(1785810562.827:145): avc: denied { sys_module } for pid=3294 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 32.287468][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.294620][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.301747][ T3295] bridge_slave_0: entered allmulticast mode [ 32.308407][ T3295] bridge_slave_0: entered promiscuous mode [ 32.333920][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.341131][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.348484][ T3295] bridge_slave_1: entered allmulticast mode [ 32.355057][ T3295] bridge_slave_1: entered promiscuous mode [ 32.361621][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.368900][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.376071][ T3299] bridge_slave_0: entered allmulticast mode [ 32.382638][ T3299] bridge_slave_0: entered promiscuous mode [ 32.412036][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.419303][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.426578][ T3299] bridge_slave_1: entered allmulticast mode [ 32.433215][ T3299] bridge_slave_1: entered promiscuous mode [ 32.445353][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.452469][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.459636][ T3294] bridge_slave_0: entered allmulticast mode [ 32.466200][ T3294] bridge_slave_0: entered promiscuous mode [ 32.487097][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.494296][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.501412][ T3294] bridge_slave_1: entered allmulticast mode [ 32.508073][ T3294] bridge_slave_1: entered promiscuous mode [ 32.515710][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.543042][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.553407][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.582449][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.591735][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.598913][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.606233][ T3298] bridge_slave_0: entered allmulticast mode [ 32.612804][ T3298] bridge_slave_0: entered promiscuous mode [ 32.625610][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.644390][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.651491][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.658794][ T3298] bridge_slave_1: entered allmulticast mode [ 32.665134][ T3298] bridge_slave_1: entered promiscuous mode [ 32.671625][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.678787][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.686032][ T3296] bridge_slave_0: entered allmulticast mode [ 32.692522][ T3296] bridge_slave_0: entered promiscuous mode [ 32.700231][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.715381][ T3295] team0: Port device team_slave_0 added [ 32.729839][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.737070][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.744372][ T3296] bridge_slave_1: entered allmulticast mode [ 32.750979][ T3296] bridge_slave_1: entered promiscuous mode [ 32.762796][ T3295] team0: Port device team_slave_1 added [ 32.773607][ T3299] team0: Port device team_slave_0 added [ 32.780195][ T3299] team0: Port device team_slave_1 added [ 32.796658][ T3294] team0: Port device team_slave_0 added [ 32.812607][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.827093][ T3294] team0: Port device team_slave_1 added [ 32.837895][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.844920][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.871065][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.887961][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.903318][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.917823][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.924889][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.950905][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.962091][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.969144][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.995397][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.012331][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.021769][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.028890][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.054871][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.068969][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.075999][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.102253][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.113303][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.120426][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.146401][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.158085][ T3298] team0: Port device team_slave_0 added [ 33.179476][ T3296] team0: Port device team_slave_0 added [ 33.189126][ T3296] team0: Port device team_slave_1 added [ 33.198141][ T3298] team0: Port device team_slave_1 added [ 33.215197][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.222220][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.248166][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.281035][ T3295] hsr_slave_0: entered promiscuous mode [ 33.287119][ T3295] hsr_slave_1: entered promiscuous mode [ 33.293430][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.300440][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.326492][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.340908][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.347950][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.374188][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.407396][ T3299] hsr_slave_0: entered promiscuous mode [ 33.413521][ T3299] hsr_slave_1: entered promiscuous mode [ 33.419492][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 33.425349][ T3299] Cannot create hsr debugfs directory [ 33.431162][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.438194][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.464225][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.480912][ T3294] hsr_slave_0: entered promiscuous mode [ 33.487222][ T3294] hsr_slave_1: entered promiscuous mode [ 33.493295][ T3294] debugfs: 'hsr0' already exists in 'hsr' [ 33.499022][ T3294] Cannot create hsr debugfs directory [ 33.517912][ T3298] hsr_slave_0: entered promiscuous mode [ 33.524007][ T3298] hsr_slave_1: entered promiscuous mode [ 33.529793][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 33.535584][ T3298] Cannot create hsr debugfs directory [ 33.607812][ T3296] hsr_slave_0: entered promiscuous mode [ 33.613938][ T3296] hsr_slave_1: entered promiscuous mode [ 33.619919][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 33.625763][ T3296] Cannot create hsr debugfs directory [ 33.806290][ T3295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.815152][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.822983][ T3295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.831605][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.839520][ T3295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.848213][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.856006][ T3295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.864950][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.892808][ T3294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.902063][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.910015][ T3294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.918910][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.926876][ T3294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.935826][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.944094][ T3294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.952950][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.987609][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.996426][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.004764][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.013752][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.027907][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.036757][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.044612][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.053704][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.081373][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.090426][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.098243][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.107210][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.115033][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.123787][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.131854][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.140671][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.176434][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.185337][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.193231][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.201702][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.210944][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.219867][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.227813][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.237185][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.265987][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.285911][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.297187][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.307355][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.314494][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.331554][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.338663][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.350763][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.381689][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.388833][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.409305][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.418057][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.425240][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.469537][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.489035][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.497948][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.508726][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.524436][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.531555][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.542850][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.550129][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.571456][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.578699][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.587661][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.594758][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.606762][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.621101][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.628304][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.638121][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.645224][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.814591][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.935126][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.994494][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.008824][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.020209][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.117180][ T3295] veth0_vlan: entered promiscuous mode [ 35.133876][ T3295] veth1_vlan: entered promiscuous mode [ 35.180726][ T3295] veth0_macvtap: entered promiscuous mode [ 35.195661][ T3295] veth1_macvtap: entered promiscuous mode [ 35.205149][ T3294] veth0_vlan: entered promiscuous mode [ 35.229391][ T3299] veth0_vlan: entered promiscuous mode [ 35.237922][ T3298] veth0_vlan: entered promiscuous mode [ 35.246991][ T3294] veth1_vlan: entered promiscuous mode [ 35.256098][ T3299] veth1_vlan: entered promiscuous mode [ 35.263612][ T3298] veth1_vlan: entered promiscuous mode [ 35.294593][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.306649][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.314768][ T3296] veth0_vlan: entered promiscuous mode [ 35.328075][ T3298] veth0_macvtap: entered promiscuous mode [ 35.341137][ T3294] veth0_macvtap: entered promiscuous mode [ 35.348810][ T3298] veth1_macvtap: entered promiscuous mode [ 35.360544][ T3296] veth1_vlan: entered promiscuous mode [ 35.368108][ T3294] veth1_macvtap: entered promiscuous mode [ 35.384815][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.394440][ T3299] veth0_macvtap: entered promiscuous mode [ 35.402203][ T3299] veth1_macvtap: entered promiscuous mode [ 35.417813][ T28] audit: type=1400 audit(1785810566.527:146): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.PVYqeI/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.425514][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.447781][ T28] audit: type=1400 audit(1785810566.527:147): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.476114][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.497484][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.500574][ T3295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.526816][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.536043][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.572006][ T3296] veth0_macvtap: entered promiscuous mode [ 35.580919][ T3296] veth1_macvtap: entered promiscuous mode [ 35.620158][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.647930][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.673354][ T3505] Zero length message leads to an empty skb [ 35.692922][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.708934][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.724457][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 35.724474][ T28] audit: type=1400 audit(1785810566.837:166): avc: denied { map_create } for pid=3506 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.776921][ T28] audit: type=1400 audit(1785810566.887:167): avc: denied { create } for pid=3509 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.832684][ T174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.851286][ T28] audit: type=1400 audit(1785810566.917:168): avc: denied { create } for pid=3509 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.877946][ T174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.910563][ T28] audit: type=1400 audit(1785810566.917:169): avc: denied { setopt } for pid=3509 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 35.932419][ T361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.963272][ T361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.986279][ T3521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10'. [ 35.989313][ T28] audit: type=1400 audit(1785810566.987:170): avc: denied { write } for pid=3513 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.006043][ T174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.055678][ T174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.063650][ T28] audit: type=1400 audit(1785810567.097:171): avc: denied { setopt } for pid=3519 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.084369][ T3525] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10'. [ 36.094160][ T3521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10'. [ 36.094456][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.132386][ T28] audit: type=1400 audit(1785810567.137:172): avc: denied { create } for pid=3519 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 36.152417][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.187915][ T174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.203746][ T174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.215807][ T28] audit: type=1400 audit(1785810567.147:173): avc: denied { write } for pid=3519 comm="syz.1.11" path="socket:[3985]" dev="sockfs" ino=3985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.280862][ T28] audit: type=1400 audit(1785810567.147:174): avc: denied { map_read map_write } for pid=3523 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.312364][ T3527] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 36.332303][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.344687][ T28] audit: type=1400 audit(1785810567.297:175): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.393942][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.410858][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.592270][ T361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.605507][ T361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.630127][ T361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.673407][ T361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.699594][ T361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.715858][ T3507] syz.0.1 (3507) used greatest stack depth: 11200 bytes left [ 36.755278][ T3535] netlink: 'syz.4.15': attribute type 10 has an invalid length. [ 36.804589][ T3535] team0: Device veth0_vlan failed to register rx_handler [ 36.906707][ T3535] syz.4.15 (3535) used greatest stack depth: 9664 bytes left [ 39.122203][ T3557] netlink: 180 bytes leftover after parsing attributes in process `syz.4.22'. [ 39.137880][ T3553] netlink: 'syz.1.20': attribute type 10 has an invalid length. [ 39.941971][ T3586] random: crng reseeded on system resumption [ 41.201511][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 41.201527][ T28] audit: type=1400 audit(1785810572.307:195): avc: denied { setopt } for pid=3612 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 41.348263][ T3628] random: crng reseeded on system resumption [ 41.390655][ T28] audit: type=1400 audit(1785810572.497:196): avc: denied { read } for pid=3625 comm="syz.2.50" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 42.101823][ T28] audit: type=1400 audit(1785810572.497:197): avc: denied { open } for pid=3625 comm="syz.2.50" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 42.158062][ T28] audit: type=1400 audit(1785810572.607:198): avc: denied { allowed } for pid=3625 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.181047][ T28] audit: type=1400 audit(1785810572.607:199): avc: denied { create } for pid=3625 comm="syz.2.50" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.220475][ T28] audit: type=1400 audit(1785810572.607:200): avc: denied { map } for pid=3625 comm="syz.2.50" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.257665][ T28] audit: type=1400 audit(1785810572.607:201): avc: denied { read write } for pid=3625 comm="syz.2.50" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.285478][ T28] audit: type=1400 audit(1785810573.137:202): avc: denied { create } for pid=3625 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.187501][ T3657] random: crng reseeded on system resumption [ 43.478184][ T28] audit: type=1400 audit(1785810574.587:203): avc: denied { create } for pid=3671 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.533084][ T28] audit: type=1400 audit(1785810574.587:204): avc: denied { write } for pid=3671 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.306390][ T3699] random: crng reseeded on system resumption [ 45.250358][ T3720] netlink: 180 bytes leftover after parsing attributes in process `syz.0.84'. [ 46.281434][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 46.281451][ T28] audit: type=1400 audit(1785810577.387:215): avc: denied { write } for pid=3781 comm="syz.0.109" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.314634][ T28] audit: type=1400 audit(1785810577.387:216): avc: denied { open } for pid=3781 comm="syz.0.109" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.353694][ T28] audit: type=1400 audit(1785810577.417:217): avc: denied { ioctl } for pid=3781 comm="syz.0.109" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.524582][ T3795] netlink: 180 bytes leftover after parsing attributes in process `syz.0.115'. [ 47.346202][ T3808] tipc: Started in network mode [ 47.356773][ T3808] tipc: Node identity 9215a268, cluster identity 4711 [ 47.385898][ T3813] random: crng reseeded on system resumption [ 47.387241][ T3808] tipc: Node number set to 2450891368 [ 48.553258][ T3851] loop2: detected capacity change from 0 to 4096 [ 48.571492][ T3851] ext4: Unknown parameter 'fsname' [ 48.596022][ T28] audit: type=1400 audit(1785810579.304:218): avc: denied { sqpoll } for pid=3849 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.836306][ T3868] can0: slcan on ttyS3. [ 49.422647][ T28] audit: type=1400 audit(1785810580.124:219): avc: denied { write } for pid=3872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.504384][ T28] audit: type=1400 audit(1785810580.214:220): avc: denied { write } for pid=3890 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.662469][ T3849] can0 (unregistered): slcan off ttyS3. [ 49.755237][ T3907] random: crng reseeded on system resumption [ 49.814907][ T28] audit: type=1400 audit(1785810579.697:221): avc: denied { write } for pid=3899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.896225][ T28] audit: type=1400 audit(1785810579.777:222): avc: denied { write } for pid=3920 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.923178][ T3896] syzkaller0: entered promiscuous mode [ 49.939301][ T3896] syzkaller0: entered allmulticast mode [ 50.139458][ T28] audit: type=1400 audit(1785810580.017:223): avc: denied { write } for pid=3924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.206348][ T28] audit: type=1400 audit(1785810580.047:224): avc: denied { create } for pid=3938 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.215554][ T3999] random: crng reseeded on system resumption [ 52.716192][ T4071] netlink: 'syz.0.208': attribute type 29 has an invalid length. [ 52.807138][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 52.807170][ T28] audit: type=1400 audit(1785810582.657:229): avc: denied { bind } for pid=4062 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.021312][ T4073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.042609][ T28] audit: type=1400 audit(1785810582.657:230): avc: denied { write } for pid=4062 comm="syz.1.205" path="socket:[6904]" dev="sockfs" ino=6904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.315518][ T28] audit: type=1400 audit(1785810583.197:231): avc: denied { create } for pid=4079 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.338736][ T28] audit: type=1400 audit(1785810583.217:232): avc: denied { write } for pid=4079 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.358594][ T28] audit: type=1400 audit(1785810583.217:233): avc: denied { create } for pid=4079 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.380345][ T28] audit: type=1400 audit(1785810583.217:234): avc: denied { write } for pid=4079 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.759778][ T4100] random: crng reseeded on system resumption [ 55.239234][ T28] audit: type=1400 audit(1785810585.117:235): avc: denied { audit_read } for pid=4097 comm="syz.1.217" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.452459][ T4129] netlink: 'syz.2.228': attribute type 22 has an invalid length. [ 55.487923][ T4129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 57.280583][ T4172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.647573][ T4204] random: crng reseeded on system resumption [ 59.413644][ T28] audit: type=1400 audit(1785810588.345:236): avc: denied { setopt } for pid=4216 comm="syz.4.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.046160][ T4232] netlink: 'syz.1.262': attribute type 1 has an invalid length. [ 60.065605][ T28] audit: type=1400 audit(1785810588.245:237): avc: denied { name_connect } for pid=4235 comm="syz.3.264" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 60.156910][ T28] audit: type=1400 audit(1785810588.295:238): avc: denied { write } for pid=4235 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.575236][ T4296] netlink: 'syz.0.279': attribute type 1 has an invalid length. [ 67.107217][ T4376] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.315'. [ 67.834780][ T28] audit: type=1400 audit(1785810596.015:239): avc: denied { read } for pid=4394 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.014999][ T4410] netlink: 44 bytes leftover after parsing attributes in process `syz.3.329'. [ 69.072387][ T28] audit: type=1400 audit(1785810597.245:240): avc: denied { ioctl } for pid=4409 comm="syz.3.329" path="socket:[7750]" dev="sockfs" ino=7750 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.211036][ T4422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.240043][ T28] audit: type=1400 audit(1785810597.415:241): avc: denied { bind } for pid=4423 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.415006][ T4459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.792571][ T4488] loop3: detected capacity change from 0 to 1024 [ 71.917270][ T4490] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.357'. [ 72.062630][ T4488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.096635][ T28] audit: type=1400 audit(1785810600.275:242): avc: denied { mount } for pid=4487 comm="syz.3.358" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.401314][ T28] audit: type=1400 audit(1785810600.525:243): avc: denied { write } for pid=4487 comm="syz.3.358" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.436496][ T4509] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.361'. [ 72.485052][ T28] audit: type=1400 audit(1785810600.525:244): avc: denied { add_name } for pid=4487 comm="syz.3.358" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.554826][ T28] audit: type=1400 audit(1785810600.525:245): avc: denied { create } for pid=4487 comm="syz.3.358" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.662248][ T28] audit: type=1400 audit(1785810600.525:246): avc: denied { read write open } for pid=4487 comm="syz.3.358" path="/69/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.889333][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.094679][ T28] audit: type=1400 audit(1785810601.255:247): avc: denied { mount } for pid=4521 comm="syz.4.367" name="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.174848][ T28] audit: type=1400 audit(1785810601.255:248): avc: denied { search } for pid=4521 comm="syz.4.367" name="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.353732][ T28] audit: type=1400 audit(1785810601.255:249): avc: denied { search } for pid=4521 comm="syz.4.367" name="usb_gadget" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.056000][ T28] audit: type=1400 audit(1785810601.255:250): avc: denied { write search } for pid=4521 comm="syz.4.367" name="usb_gadget" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.079566][ T28] audit: type=1400 audit(1785810601.255:251): avc: denied { add_name } for pid=4521 comm="syz.4.367" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.109421][ T28] audit: type=1400 audit(1785810601.255:252): avc: denied { create } for pid=4521 comm="syz.4.367" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 74.167710][ T28] audit: type=1400 audit(1785810601.265:253): avc: denied { search } for pid=4521 comm="syz.4.367" name="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.237478][ T28] audit: type=1400 audit(1785810601.265:254): avc: denied { search } for pid=4521 comm="syz.4.367" name="usb_gadget" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.244057][ T4545] loop0: detected capacity change from 0 to 1024 [ 74.298571][ T28] audit: type=1400 audit(1785810601.265:255): avc: denied { search } for pid=4521 comm="syz.4.367" name="g1" dev="configfs" ino=8407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.343340][ T4545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.366431][ T28] audit: type=1400 audit(1785810601.265:256): avc: denied { search } for pid=4521 comm="syz.4.367" name="functions" dev="configfs" ino=8408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.274809][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.439951][ T4583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.616800][ T4594] random: crng reseeded on system resumption [ 76.790550][ T4625] syzkaller0: entered promiscuous mode [ 76.802005][ T4625] syzkaller0: entered allmulticast mode [ 76.980253][ T4640] random: crng reseeded on system resumption [ 77.047197][ T4644] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.414'. [ 78.211509][ T4671] syzkaller0: entered promiscuous mode [ 78.217245][ T4671] syzkaller0: entered allmulticast mode [ 78.823313][ T4700] random: crng reseeded on system resumption [ 79.572818][ T4715] syzkaller0: entered promiscuous mode [ 79.582902][ T4715] syzkaller0: entered allmulticast mode [ 82.962352][ T4794] random: crng reseeded on system resumption [ 85.006438][ T4834] loop0: detected capacity change from 0 to 1024 [ 85.328916][ T4834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.772886][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 85.772903][ T28] audit: type=1400 audit(1785810611.890:275): avc: denied { write } for pid=4832 comm="syz.0.480" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.139677][ T4848] netlink: 'syz.1.482': attribute type 6 has an invalid length. [ 86.159240][ T4848] netlink: 140 bytes leftover after parsing attributes in process `syz.1.482'. [ 86.263791][ T4851] netlink: 'syz.4.483': attribute type 10 has an invalid length. [ 86.274275][ T4851] veth0_vlan: left promiscuous mode [ 86.291078][ T4851] team0: Device veth0_vlan failed to register rx_handler [ 86.326559][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.754850][ T4875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.681355][ T4887] random: crng reseeded on system resumption [ 87.767181][ T4889] loop4: detected capacity change from 0 to 1024 [ 87.816500][ T4889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.093529][ T28] audit: type=1400 audit(1785810613.181:276): avc: denied { write } for pid=4888 comm="syz.4.497" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.585303][ T28] audit: type=1400 audit(1785810613.671:277): avc: denied { create } for pid=4913 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.737214][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.076769][ T4928] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.509'. [ 89.350180][ T4941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.514'. [ 89.363877][ T4941] veth1_to_bridge: entered allmulticast mode [ 89.563175][ T4950] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 89.641730][ T4952] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 89.682466][ T4964] random: crng reseeded on system resumption [ 90.888649][ T4990] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 91.097083][ T5000] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.532'. [ 91.186879][ T5010] random: crng reseeded on system resumption [ 92.589126][ T5034] random: crng reseeded on system resumption [ 93.238637][ T5061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.652956][ T5098] random: crng reseeded on system resumption [ 94.909280][ T5102] netlink: 'syz.1.571': attribute type 10 has an invalid length. [ 94.943674][ T5102] team0: Device ipvlan0 failed to register rx_handler [ 96.035029][ T5121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.394028][ T28] audit: type=1400 audit(1785810619.908:278): avc: denied { write } for pid=5136 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.631674][ T28] audit: type=1400 audit(1785810620.138:279): avc: denied { write } for pid=5138 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.675664][ T28] audit: type=1400 audit(1785810620.138:280): avc: denied { nlmsg_write } for pid=5138 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.735571][ T5143] random: crng reseeded on system resumption [ 97.259101][ T5151] loop3: detected capacity change from 0 to 4096 [ 97.766361][ T5151] ext4: Unknown parameter 'fsname' [ 98.287261][ T5170] can0: slcan on ttyS3. [ 98.366565][ T28] audit: type=1400 audit(1785810621.878:281): avc: denied { read write } for pid=5166 comm="syz.0.595" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.390816][ T5174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.420588][ T5174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.430603][ T28] audit: type=1400 audit(1785810621.878:282): avc: denied { open } for pid=5166 comm="syz.0.595" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.457064][ T5177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.490939][ T28] audit: type=1400 audit(1785810621.908:283): avc: denied { ioctl } for pid=5166 comm="syz.0.595" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.625611][ T28] audit: type=1400 audit(1785810622.138:284): avc: denied { write } for pid=5178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.686717][ T28] audit: type=1400 audit(1785810622.198:285): avc: denied { write } for pid=5189 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.063646][ T5150] can0 (unregistered): slcan off ttyS3. [ 99.219484][ T5210] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 99.250431][ T28] audit: type=1400 audit(1785810622.668:286): avc: denied { mount } for pid=5205 comm="syz.4.600" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 99.272661][ T28] audit: type=1400 audit(1785810622.678:287): avc: denied { write } for pid=5205 comm="syz.4.600" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.318272][ T5215] random: crng reseeded on system resumption [ 100.253564][ T5167] Set syz1 is full, maxelem 65536 reached [ 100.899030][ T5258] syz_tun: entered promiscuous mode [ 100.905942][ T5258] macvtap1: entered promiscuous mode [ 100.971837][ T5265] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.095033][ T5274] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 101.113153][ T5277] sctp: [Deprecated]: syz.1.617 (pid 5277) Use of int in maxseg socket option. [ 101.113153][ T5277] Use struct sctp_assoc_value instead [ 101.164285][ T5279] loop3: detected capacity change from 0 to 2048 [ 101.190490][ T5279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.210628][ T5279] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.305658][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.964145][ T5313] loop1: detected capacity change from 0 to 1024 [ 102.007921][ T5315] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 102.026932][ T5313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.129749][ T5332] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.184169][ T5336] bridge0: port 3(syz_tun) entered blocking state [ 102.199246][ T5336] bridge0: port 3(syz_tun) entered disabled state [ 102.216855][ T5336] syz_tun: entered allmulticast mode [ 102.222974][ T5336] syz_tun: entered promiscuous mode [ 102.228577][ T5336] bridge0: port 3(syz_tun) entered blocking state [ 102.235081][ T5336] bridge0: port 3(syz_tun) entered forwarding state [ 102.280576][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 102.280624][ T28] audit: type=1400 audit(1785810625.453:297): avc: denied { bind } for pid=5342 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.737197][ T5353] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 102.776601][ T28] audit: type=1400 audit(1785810625.453:298): avc: denied { listen } for pid=5342 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.796698][ T28] audit: type=1400 audit(1785810625.453:299): avc: denied { connect } for pid=5342 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.817078][ T28] audit: type=1400 audit(1785810625.453:300): avc: denied { accept } for pid=5342 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.881614][ T28] audit: type=1400 audit(1785810625.453:301): avc: denied { write } for pid=5342 comm="syz.3.651" path="socket:[11362]" dev="sockfs" ino=11362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.929586][ T28] audit: type=1400 audit(1785810625.473:302): avc: denied { read } for pid=5342 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.949498][ T28] audit: type=1400 audit(1785810625.533:303): avc: denied { write } for pid=5312 comm="syz.1.637" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.037514][ T5367] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 103.157301][ T5375] loop2: detected capacity change from 0 to 2048 [ 103.185186][ T5375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.214264][ T5375] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.231773][ T5381] random: crng reseeded on system resumption [ 103.249515][ T5383] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 103.265702][ T28] audit: type=1400 audit(1785810626.403:304): avc: denied { mount } for pid=5379 comm="syz.4.665" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 103.288398][ T28] audit: type=1400 audit(1785810626.403:305): avc: denied { name_bind } for pid=5379 comm="syz.4.665" src=4386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 103.312609][ T28] audit: type=1400 audit(1785810626.403:306): avc: denied { listen } for pid=5379 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.334504][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.397564][ T5393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.669'. [ 103.408468][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.438910][ T5393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.669'. [ 104.516533][ T5414] loop0: detected capacity change from 0 to 1024 [ 104.638198][ T5414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.724854][ T5418] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 104.827601][ T5427] loop4: detected capacity change from 0 to 2048 [ 105.021356][ T5427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.067942][ T5427] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.325157][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.353982][ T5442] random: crng reseeded on system resumption [ 106.557096][ T3403] IPVS: starting estimator thread 0... [ 106.582838][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.662344][ T5467] IPVS: using max 1824 ests per chain, 91200 per kthread [ 106.709748][ T5480] random: crng reseeded on system resumption [ 106.736403][ T5478] loop1: detected capacity change from 0 to 4096 [ 106.743498][ T5478] ext4: Unknown parameter 'fsname' [ 106.786815][ T5485] loop2: detected capacity change from 0 to 1024 [ 106.885241][ T5485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.021713][ T5495] can0: slcan on ttyS3. [ 107.322723][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 107.322741][ T28] audit: type=1400 audit(1785810630.463:327): avc: denied { write } for pid=5483 comm="syz.2.705" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.423066][ T5499] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 107.782241][ T5477] can0 (unregistered): slcan off ttyS3. [ 107.942033][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.013454][ T3382] IPVS: starting estimator thread 0... [ 108.026085][ T28] audit: type=1400 audit(1785810631.203:328): avc: denied { write } for pid=5506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.102266][ T5531] IPVS: using max 1632 ests per chain, 81600 per kthread [ 108.114306][ T28] audit: type=1400 audit(1785810631.293:329): avc: denied { write } for pid=5539 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.248911][ T28] audit: type=1400 audit(1785810631.423:330): avc: denied { write } for pid=5548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.321165][ T28] audit: type=1400 audit(1785810631.463:331): avc: denied { write } for pid=5563 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.377052][ T5568] loop4: detected capacity change from 0 to 1024 [ 108.409816][ T5568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.499200][ T5582] loop0: detected capacity change from 0 to 512 [ 108.507560][ T5582] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 108.527393][ T5582] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 108.543468][ T5582] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 108.551623][ T5582] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.558283][ T5582] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 4: comm syz.0.726: lblock 0 mapped to illegal pblock 4 (length 1) [ 108.581845][ T5582] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 108.582121][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 108.597693][ C0] EXT4-fs (loop0): initial error at time 1785810631: ext4_map_blocks:791: inode 2: block 4 [ 108.607862][ C0] EXT4-fs (loop0): last error at time 1785810631: ext4_map_blocks:791: inode 2: block 4 [ 108.620986][ T5582] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 108.643338][ T5582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.693543][ T28] audit: type=1400 audit(1785810631.863:332): avc: denied { write } for pid=5567 comm="syz.4.723" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.168108][ T5595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.177123][ T5595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.335010][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.359395][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.618187][ T28] audit: type=1400 audit(1785810632.793:333): avc: denied { ioctl } for pid=5625 comm="syz.0.747" path="socket:[10904]" dev="sockfs" ino=10904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.703694][ T3363] IPVS: starting estimator thread 0... [ 109.713623][ T5634] loop4: detected capacity change from 0 to 512 [ 109.725838][ T5634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.743932][ T5634] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.757410][ T28] audit: type=1400 audit(1785810632.943:334): avc: denied { write } for pid=5633 comm="syz.4.751" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.811811][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.820990][ T5635] IPVS: using max 1680 ests per chain, 84000 per kthread [ 109.839955][ T5646] random: crng reseeded on system resumption [ 110.897003][ T5655] loop0: detected capacity change from 0 to 2048 [ 110.985536][ T5655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.998455][ T5655] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.047302][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.164289][ T5674] loop1: detected capacity change from 0 to 1024 [ 111.306872][ T5674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.119295][ T28] audit: type=1400 audit(1785810634.923:335): avc: denied { write } for pid=5673 comm="syz.1.767" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.206089][ T5696] loop0: detected capacity change from 0 to 2048 [ 112.231339][ T5696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.321318][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.362279][ T5696] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.466131][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.529322][ T28] audit: type=1400 audit(1785810635.703:336): avc: denied { create } for pid=5710 comm="syz.3.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.574152][ T5715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 112.618347][ T5721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.636852][ T5725] cgroup: Unknown subsys name 'cpuset' [ 112.782580][ T5721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.880345][ T5729] Cannot find del_set index 2 as target [ 113.208241][ T28] audit: type=1400 audit(1785810636.383:337): avc: denied { mount } for pid=5730 comm="syz.2.789" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.878351][ T5735] loop0: detected capacity change from 0 to 256 [ 113.894530][ T5735] FAT-fs (loop0): bogus logical sector size 0 [ 113.911765][ T5735] FAT-fs (loop0): Can't find a valid FAT filesystem [ 113.961532][ T28] audit: type=1400 audit(1785810637.033:338): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 114.693164][ T28] audit: type=1400 audit(1785810637.443:339): avc: denied { getopt } for pid=5734 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.822436][ T5742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.847268][ T5742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.599820][ T5758] loop0: detected capacity change from 0 to 1024 [ 116.643593][ T5758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.707407][ T5765] cgroup: Unknown subsys name 'cpuset' [ 117.157051][ T28] audit: type=1400 audit(1785810640.203:340): avc: denied { write } for pid=5757 comm="syz.0.797" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.541228][ T5783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.805'. [ 117.651316][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.087653][ T5804] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 118.570977][ T5806] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.814'. [ 118.802838][ T5828] loop2: detected capacity change from 0 to 4096 [ 118.817038][ T5828] ext4: Unknown parameter 'fsname' [ 119.074759][ T5838] can0: slcan on ttyS3. [ 119.472595][ T5844] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.830'. [ 119.628636][ T5858] netlink: 'syz.4.829': attribute type 1 has an invalid length. [ 119.680112][ T5864] random: crng reseeded on system resumption [ 119.912232][ T5827] can0 (unregistered): slcan off ttyS3. [ 120.008896][ T28] audit: type=1400 audit(1785810643.183:341): avc: denied { write } for pid=5851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.443275][ T28] audit: type=1400 audit(1785810643.623:342): avc: denied { write } for pid=5887 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.629923][ T5892] syzkaller0: entered promiscuous mode [ 120.643944][ T5892] syzkaller0: entered allmulticast mode [ 120.713138][ T28] audit: type=1400 audit(1785810643.883:343): avc: denied { write } for pid=5894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.805315][ T28] audit: type=1400 audit(1785810643.973:344): avc: denied { write } for pid=5914 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.034487][ T5934] random: crng reseeded on system resumption [ 121.680990][ T5950] syzkaller0: entered promiscuous mode [ 121.698925][ T5950] syzkaller0: entered allmulticast mode [ 121.931448][ T5973] random: crng reseeded on system resumption [ 122.242942][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.251782][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.419352][ T6001] random: crng reseeded on system resumption [ 123.461972][ T6003] syzkaller0: entered promiscuous mode [ 123.467577][ T6003] syzkaller0: entered allmulticast mode [ 124.785732][ T6040] syzkaller0: entered promiscuous mode [ 124.791312][ T6040] syzkaller0: entered allmulticast mode [ 124.837783][ T6045] Cannot find del_set index 2 as target [ 124.866100][ T6046] random: crng reseeded on system resumption [ 127.210942][ T6087] Cannot find del_set index 2 as target [ 127.983324][ T6097] syzkaller0: entered promiscuous mode [ 128.006496][ T6097] syzkaller0: entered allmulticast mode [ 130.130568][ T6137] Cannot find del_set index 2 as target [ 130.603927][ T6151] syzkaller0: entered promiscuous mode [ 130.624940][ T6151] syzkaller0: entered allmulticast mode [ 130.638746][ T6160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.074533][ T6192] loop4: detected capacity change from 0 to 1024 [ 132.108601][ T6192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.685611][ T28] audit: type=1400 audit(1785810655.307:345): avc: denied { write } for pid=6191 comm="syz.4.949" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.919702][ T6206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.047890][ T6212] syzkaller0: entered promiscuous mode [ 133.055666][ T6212] syzkaller0: entered allmulticast mode [ 133.955957][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.167602][ T6245] loop3: detected capacity change from 0 to 1024 [ 134.218307][ T6245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.562169][ T28] audit: type=1400 audit(1785810657.097:346): avc: denied { write } for pid=6244 comm="syz.3.968" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.164469][ T6267] syzkaller0: entered promiscuous mode [ 135.170090][ T6267] syzkaller0: entered allmulticast mode [ 135.247187][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.284262][ T6278] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.367445][ T6312] syzkaller0: entered promiscuous mode [ 136.381149][ T6312] syzkaller0: entered allmulticast mode [ 137.509943][ T6383] random: crng reseeded on system resumption [ 137.542352][ T6374] syzkaller0: entered promiscuous mode [ 137.551006][ T6374] syzkaller0: entered allmulticast mode [ 139.055207][ T6446] random: crng reseeded on system resumption [ 139.063961][ T6437] syzkaller0: entered promiscuous mode [ 139.071059][ T6437] syzkaller0: entered allmulticast mode [ 139.079806][ T6448] Cannot find del_set index 2 as target [ 141.183828][ T6499] random: crng reseeded on system resumption [ 141.242992][ T6493] syzkaller0: entered promiscuous mode [ 141.249045][ T6493] syzkaller0: entered allmulticast mode [ 141.334677][ T6505] Cannot find del_set index 2 as target [ 143.478845][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1069'. [ 143.842846][ T6535] macsec1: entered promiscuous mode [ 143.917874][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.926634][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.574187][ T6546] random: crng reseeded on system resumption [ 145.048894][ T6561] loop0: detected capacity change from 0 to 1024 [ 145.125018][ T6561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.485075][ T28] audit: type=1400 audit(1785810668.067:347): avc: denied { write } for pid=6560 comm="syz.0.1086" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.804816][ T6575] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.430954][ T6586] loop4: detected capacity change from 0 to 4096 [ 146.437950][ T6586] ext4: Unknown parameter 'fsname' [ 146.591884][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.668610][ T6594] can0: slcan on ttyS3. [ 147.059912][ T6608] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.215743][ T6616] loop2: detected capacity change from 0 to 1024 [ 147.269008][ T6616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.480020][ T28] audit: type=1400 audit(1785810670.097:348): avc: denied { write } for pid=6621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.592312][ T6585] can0 (unregistered): slcan off ttyS3. [ 147.982865][ T28] audit: type=1400 audit(1785810670.577:349): avc: denied { write } for pid=6642 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.142871][ T6665] macsec1: entered promiscuous mode [ 148.154451][ T28] audit: type=1400 audit(1785810670.777:350): avc: denied { write } for pid=6649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.194842][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.203483][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.216814][ T28] audit: type=1400 audit(1785810670.837:351): avc: denied { write } for pid=6668 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.982804][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.155670][ T6725] loop0: detected capacity change from 0 to 1024 [ 150.314565][ T6725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.549876][ T6764] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.762652][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.803906][ T6775] macsec1: entered promiscuous mode [ 151.851659][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.860860][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.960329][ T6807] Cannot find del_set index 2 as target [ 154.969791][ T6826] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.029503][ T6847] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.186158][ T6859] macsec1: entered promiscuous mode [ 156.215623][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.224149][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.672285][ T6880] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.974874][ T6944] loop4: detected capacity change from 0 to 256 [ 159.012435][ T6944] FAT-fs (loop4): bogus logical sector size 0 [ 159.057313][ T6944] FAT-fs (loop4): Can't find a valid FAT filesystem [ 159.276384][ T6950] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 159.953051][ T6957] bridge0: port 3(syz_tun) entered disabled state [ 159.978110][ T6957] syz_tun (unregistering): left allmulticast mode [ 159.985261][ T6957] syz_tun (unregistering): left promiscuous mode [ 159.991753][ T6957] bridge0: port 3(syz_tun) entered disabled state [ 161.233426][ T6985] syzkaller0: entered promiscuous mode [ 161.247511][ T6985] syzkaller0: entered allmulticast mode [ 162.080067][ T7016] random: crng reseeded on system resumption [ 162.802433][ T7026] syzkaller0: entered promiscuous mode [ 162.813728][ T7026] syzkaller0: entered allmulticast mode [ 162.978002][ T7046] loop3: detected capacity change from 0 to 4096 [ 162.992989][ T7046] ext4: Unknown parameter 'fsname' [ 163.319967][ T7058] can0: slcan on ttyS3. [ 163.645693][ T7066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.724162][ T7072] random: crng reseeded on system resumption [ 163.920148][ T28] audit: type=1400 audit(1785810686.537:352): avc: denied { write } for pid=7069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.742313][ T7045] can0 (unregistered): slcan off ttyS3. [ 165.300802][ T28] audit: type=1400 audit(1785810687.477:353): avc: denied { write } for pid=7096 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.331109][ T28] audit: type=1400 audit(1785810687.817:354): avc: denied { write } for pid=7103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.354401][ T28] audit: type=1400 audit(1785810687.887:355): avc: denied { write } for pid=7132 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.605551][ T7138] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.715101][ T7144] loop1: detected capacity change from 0 to 4096 [ 165.728944][ T7144] ext4: Unknown parameter 'fsname' [ 166.308264][ T7159] can0: slcan on ttyS3. [ 166.552288][ T7143] can0 (unregistered): slcan off ttyS3. [ 166.992898][ T28] audit: type=1400 audit(1785810689.607:356): avc: denied { write } for pid=7169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.059415][ T28] audit: type=1400 audit(1785810689.677:357): avc: denied { write } for pid=7186 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.094140][ T7183] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 167.258520][ T28] audit: type=1400 audit(1785810689.877:358): avc: denied { write } for pid=7189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.336577][ T28] audit: type=1400 audit(1785810689.927:359): avc: denied { write } for pid=7201 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.990514][ T7212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.190229][ T7226] loop0: detected capacity change from 0 to 4096 [ 168.218354][ T7226] ext4: Unknown parameter 'fsname' [ 168.796166][ T7236] can0: slcan on ttyS3. [ 168.818881][ T28] audit: type=1400 audit(1785810691.037:360): avc: denied { audit_read } for pid=7231 comm="syz.1.1318" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.052229][ T7225] can0 (unregistered): slcan off ttyS3. [ 169.074763][ T7243] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.291124][ T28] audit: type=1400 audit(1785810691.907:361): avc: denied { write } for pid=7245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.382596][ T28] audit: type=1400 audit(1785810691.997:362): avc: denied { write } for pid=7270 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.577250][ T28] audit: type=1400 audit(1785810692.197:363): avc: denied { write } for pid=7276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.628072][ T28] audit: type=1400 audit(1785810692.247:364): avc: denied { write } for pid=7289 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.471897][ T7303] loop4: detected capacity change from 0 to 4096 [ 170.533597][ T7303] ext4: Unknown parameter 'fsname' [ 171.157723][ T7311] can0: slcan on ttyS3. [ 171.442428][ T7302] can0 (unregistered): slcan off ttyS3. [ 171.637776][ T28] audit: type=1400 audit(1785810694.257:365): avc: denied { write } for pid=7319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.730621][ T28] audit: type=1400 audit(1785810694.347:366): avc: denied { write } for pid=7349 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.778173][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.787809][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.875057][ T28] audit: type=1400 audit(1785810694.497:367): avc: denied { write } for pid=7356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.923675][ T28] audit: type=1400 audit(1785810694.547:368): avc: denied { write } for pid=7367 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.327385][ T7370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.078648][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.213285][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.277766][ T7400] Cannot find del_set index 2 as target [ 173.778716][ T7396] Set syz1 is full, maxelem 65536 reached [ 173.986838][ T7427] Illegal XDP return value 268435456 on prog (id 431) dev syz_tun, expect packet loss! [ 174.236240][ T7436] loop2: detected capacity change from 0 to 4096 [ 174.274323][ T7436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.288341][ T28] audit: type=1400 audit(1785810696.907:369): avc: denied { write } for pid=7435 comm="syz.2.1373" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.348361][ T28] audit: type=1400 audit(1785810696.927:370): avc: denied { read write } for pid=7435 comm="syz.2.1373" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.371175][ T28] audit: type=1400 audit(1785810696.927:371): avc: denied { open } for pid=7435 comm="syz.2.1373" path="/278/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.451039][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.823628][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.833842][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.973294][ T28] audit: type=1400 audit(1785810697.537:372): avc: denied { module_request } for pid=7478 comm="syz.0.1391" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 175.102932][ T7491] Cannot find del_set index 2 as target [ 176.734499][ T7495] netlink: 'syz.0.1396': attribute type 2 has an invalid length. [ 176.743490][ T28] audit: type=1400 audit(1785810699.367:373): avc: denied { bind } for pid=7494 comm="syz.0.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 176.817122][ T28] audit: type=1400 audit(1785810699.387:374): avc: denied { listen } for pid=7494 comm="syz.0.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 176.839059][ T28] audit: type=1400 audit(1785810699.387:375): avc: denied { connect } for pid=7494 comm="syz.0.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 176.859811][ T28] audit: type=1400 audit(1785810699.437:376): avc: denied { accept } for pid=7494 comm="syz.0.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.800610][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.823810][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.888141][ T7556] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.955308][ T7538] Set syz1 is full, maxelem 65536 reached [ 178.034496][ T7569] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1425'. [ 178.135896][ T7579] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.226027][ T7591] bridge0: port 3(syz_tun) entered blocking state [ 178.234029][ T7591] bridge0: port 3(syz_tun) entered disabled state [ 178.345556][ T7591] syz_tun: entered allmulticast mode [ 178.359513][ T7591] syz_tun: entered promiscuous mode [ 178.396106][ T7591] bridge0: port 3(syz_tun) entered blocking state [ 178.402761][ T7591] bridge0: port 3(syz_tun) entered forwarding state [ 178.412492][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1440'. [ 178.772883][ T7611] bridge0: port 3(syz_tun) entered disabled state [ 178.783236][ T7611] syz_tun (unregistering): left allmulticast mode [ 178.790121][ T7611] syz_tun (unregistering): left promiscuous mode [ 178.799851][ T7611] bridge0: port 3(syz_tun) entered disabled state [ 178.844739][ T7614] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.969304][ T7628] random: crng reseeded on system resumption [ 179.661577][ T7648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.693266][ T7650] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1461'. [ 179.769397][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 180.044984][ T7675] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1473'. [ 180.102019][ T7681] batman_adv: batadv0: Adding interface: dummy0 [ 180.131200][ T7681] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.156858][ T7685] random: crng reseeded on system resumption [ 180.165166][ T28] audit: type=1400 audit(1785810702.777:377): avc: denied { create } for pid=7680 comm="syz.2.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.189119][ T28] audit: type=1400 audit(1785810702.777:378): avc: denied { ioctl } for pid=7680 comm="syz.2.1475" path="socket:[18006]" dev="sockfs" ino=18006 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.223945][ T7691] netlink: 'syz.2.1475': attribute type 10 has an invalid length. [ 180.233316][ T7681] batman_adv: batadv0: Interface activated: dummy0 [ 180.251722][ T7687] batadv0: mtu less than device minimum [ 180.265522][ T7687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.276709][ T7687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.287627][ T7687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.298667][ T7687] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 180.395882][ T7691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.419417][ T7691] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 180.468986][ T7681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.492733][ T7681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.523223][ T7681] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 180.547355][ T7681] bond0 (unregistering): Released all slaves [ 180.764945][ T7707] loop1: detected capacity change from 0 to 512 [ 180.796132][ T7707] ======================================================= [ 180.796132][ T7707] WARNING: The mand mount option has been deprecated and [ 180.796132][ T7707] and is ignored by this kernel. Remove the mand [ 180.796132][ T7707] option from the mount to silence this warning. [ 180.796132][ T7707] ======================================================= [ 180.867203][ T7707] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 180.880932][ T7707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.914881][ T7707] EXT4-fs (loop1): 1 truncate cleaned up [ 180.921843][ T7707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.939513][ T28] audit: type=1400 audit(1785810703.557:379): avc: denied { write } for pid=7706 comm="syz.1.1484" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.003261][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.049145][ T7717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1488'. [ 181.085207][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'. [ 181.293302][ T28] audit: type=1400 audit(1785810703.917:380): avc: denied { create } for pid=7735 comm="syz.2.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.532554][ T28] audit: type=1400 audit(1785810703.917:381): avc: denied { ioctl } for pid=7735 comm="syz.2.1497" path="socket:[18446]" dev="sockfs" ino=18446 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.669172][ T7744] loop2: detected capacity change from 0 to 128 [ 181.729994][ T7744] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.785156][ T7744] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.851091][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1501'. [ 181.890518][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 181.898591][ T28] audit: type=1400 audit(1785810704.507:382): avc: denied { write } for pid=7743 comm="syz.2.1500" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.936998][ T3296] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.961217][ T28] audit: type=1400 audit(1785810704.547:383): avc: denied { ioctl } for pid=7743 comm="syz.2.1500" path="/310/bus/file1" dev="loop2" ino=12 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 183.050189][ T7772] netlink: 'syz.2.1512': attribute type 2 has an invalid length. [ 183.808444][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1525'. [ 183.835363][ T7805] loop2: detected capacity change from 0 to 128 [ 183.846256][ T7805] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.858787][ T7805] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.886837][ T3296] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.905261][ T7811] netlink: 'syz.2.1528': attribute type 2 has an invalid length. [ 184.070571][ T7829] random: crng reseeded on system resumption [ 184.288212][ T28] audit: type=1400 audit(1785810706.827:384): avc: denied { connect } for pid=7836 comm="syz.4.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 184.626247][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.664479][ T7850] netlink: 'syz.3.1544': attribute type 2 has an invalid length. [ 184.707355][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.801167][ T7854] loop0: detected capacity change from 0 to 128 [ 184.817065][ T28] audit: type=1400 audit(1785810707.437:385): avc: denied { checkpoint_restore } for pid=7855 comm="syz.3.1547" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.828694][ T7854] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.872561][ T7854] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.934107][ T7861] loop1: detected capacity change from 0 to 4096 [ 184.954154][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.973609][ T7861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.011284][ T28] audit: type=1400 audit(1785810707.627:386): avc: denied { write } for pid=7860 comm="syz.1.1548" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.086052][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.169372][ T7875] loop3: detected capacity change from 0 to 128 [ 185.178632][ T7875] EXT4-fs: test_dummy_encryption option not supported [ 185.295850][ T7847] net_ratelimit: 16 callbacks suppressed [ 185.295870][ T7847] Set syz1 is full, maxelem 65536 reached [ 185.349682][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 185.378776][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1563'. [ 186.745247][ T7950] syzkaller0: entered promiscuous mode [ 186.755724][ T7950] syzkaller0: entered allmulticast mode [ 186.821509][ T7962] loop4: detected capacity change from 0 to 128 [ 186.842943][ T7962] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.094877][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.123779][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.250242][ T7962] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.308818][ T28] audit: type=1400 audit(1785810709.927:387): avc: denied { write } for pid=7961 comm="syz.4.1593" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.379175][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.442704][ T7977] random: crng reseeded on system resumption [ 188.079836][ T28] audit: type=1400 audit(1785810710.697:388): avc: denied { name_bind } for pid=7991 comm="syz.2.1602" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 188.174609][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1605'. [ 188.192280][ T28] audit: type=1400 audit(1785810710.807:389): avc: denied { name_bind } for pid=8002 comm="syz.0.1606" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 188.219146][ T28] audit: type=1400 audit(1785810710.837:390): avc: denied { ioctl } for pid=7995 comm="syz.3.1604" path="socket:[19035]" dev="sockfs" ino=19035 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.273795][ T28] audit: type=1400 audit(1785810710.887:391): avc: denied { bind } for pid=7995 comm="syz.3.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.302194][ T28] audit: type=1400 audit(1785810710.887:392): avc: denied { node_bind } for pid=7995 comm="syz.3.1604" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 188.417968][ T28] audit: type=1400 audit(1785810710.887:393): avc: denied { connect } for pid=7995 comm="syz.3.1604" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.866210][ T28] audit: type=1400 audit(1785810711.487:394): avc: denied { write } for pid=8019 comm="syz.4.1611" name="functions" dev="configfs" ino=8408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.892700][ T8020] UDC core: g1: couldn't find an available UDC or it's busy [ 188.965376][ T28] audit: type=1400 audit(1785810711.507:395): avc: denied { write } for pid=8019 comm="syz.4.1611" name="c.1" dev="configfs" ino=7975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.995739][ T28] audit: type=1400 audit(1785810711.507:396): avc: denied { write } for pid=8019 comm="syz.4.1611" name="c.1" dev="configfs" ino=7975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.024735][ T8024] syzkaller0: entered promiscuous mode [ 189.030373][ T8024] syzkaller0: entered allmulticast mode [ 190.040318][ T8036] loop1: detected capacity change from 0 to 128 [ 190.050021][ T8036] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 190.079878][ T8036] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 190.491427][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.507855][ T8056] Cannot find del_set index 2 as target [ 191.634471][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.641789][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.737434][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.755309][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.812852][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.823239][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.846940][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.876421][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.182236][ T8086] netlink: 'syz.4.1638': attribute type 2 has an invalid length. [ 192.407276][ T8095] syz.2.1642 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 192.419411][ T28] audit: type=1400 audit(1785810715.037:397): avc: denied { read } for pid=8096 comm="syz.3.1643" name="g1" dev="configfs" ino=8407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.441637][ T8095] CPU: 1 UID: 0 PID: 8095 Comm: syz.2.1642 Not tainted syzkaller #0 PREEMPT(lazy) [ 192.441666][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.441687][ T8095] Call Trace: [ 192.441695][ T8095] [ 192.441705][ T8095] __dump_stack+0x1d/0x30 [ 192.441801][ T8095] dump_stack_lvl+0x95/0xd0 [ 192.441878][ T8095] dump_stack+0x15/0x1b [ 192.441904][ T8095] dump_header+0x80/0x240 [ 192.442013][ T8095] out_of_memory+0x9c9/0xbc0 [ 192.442089][ T8095] try_charge_memcg+0x621/0xa00 [ 192.442123][ T8095] __obj_cgroup_charge+0x105/0x230 [ 192.442192][ T8095] __memcg_slab_post_alloc_hook+0x492/0x860 [ 192.442237][ T8095] ? should_fail_ex+0x30/0x270 [ 192.442319][ T8095] ? mem_cgroup_css_alloc+0x473/0xe60 [ 192.442417][ T8095] __kmalloc_cache_noprof+0x1f9/0x3d0 [ 192.442472][ T8095] ? mem_cgroup_css_alloc+0x473/0xe60 [ 192.442547][ T8095] mem_cgroup_css_alloc+0x473/0xe60 [ 192.442617][ T8095] ? css_populate_dir+0x1e8/0x230 [ 192.442739][ T8095] cgroup_apply_control_enable+0x213/0x9c0 [ 192.442789][ T8095] cgroup_mkdir+0xbfd/0xcb0 [ 192.442859][ T8095] ? __pfx_cgroup_mkdir+0x10/0x10 [ 192.442898][ T8095] kernfs_iop_mkdir+0x11e/0x1c0 [ 192.442930][ T8095] vfs_mkdir+0x28a/0x3e0 [ 192.443030][ T8095] filename_mkdirat+0x138/0x300 [ 192.443062][ T8095] __se_sys_mkdir+0x31/0xf0 [ 192.443089][ T8095] __x64_sys_mkdir+0x31/0x40 [ 192.443156][ T8095] x64_sys_call+0x2eab/0x3020 [ 192.443190][ T8095] do_syscall_64+0x136/0x3c0 [ 192.443248][ T8095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.443276][ T8095] RIP: 0033:0x7f1f60e8e019 [ 192.443303][ T8095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.443327][ T8095] RSP: 002b:00007f1f5f8e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 192.443348][ T8095] RAX: ffffffffffffffda RBX: 00007f1f61115fa0 RCX: 00007f1f60e8e019 [ 192.443402][ T8095] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00002000000002c0 [ 192.443486][ T8095] RBP: 00007f1f60f2500c R08: 0000000000000000 R09: 0000000000000000 [ 192.443582][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.443599][ T8095] R13: 00007f1f61116038 R14: 00007f1f61115fa0 R15: 00007ffd9fc06af8 [ 192.443625][ T8095] [ 192.490351][ T28] audit: type=1400 audit(1785810715.037:398): avc: denied { read open } for pid=8096 comm="syz.3.1643" path="/304/my_configfs/usb_gadget/g1" dev="configfs" ino=8407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.493050][ T8095] memory: usage 0kB, limit 0kB, failcnt 62 [ 192.561455][ T28] audit: type=1400 audit(1785810715.037:399): avc: denied { write } for pid=8096 comm="syz.3.1643" name="functions" dev="configfs" ino=8408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.578795][ T8095] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 192.619731][ T28] audit: type=1400 audit(1785810715.057:400): avc: denied { write } for pid=8096 comm="syz.3.1643" name="header" dev="configfs" ino=19660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.635589][ T8095] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 192.645707][ T8097] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 192.649963][ T8095] Memory cgroup stats for [ 192.699781][ T28] audit: type=1400 audit(1785810715.057:401): avc: denied { write } for pid=8096 comm="syz.3.1643" name="hs" dev="configfs" ino=19668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.731086][ T8095] /syz2/test [ 192.767399][ T28] audit: type=1400 audit(1785810715.057:402): avc: denied { write } for pid=8096 comm="syz.3.1643" name="hs" dev="configfs" ino=19668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.781366][ T8095] : [ 192.795204][ T28] audit: type=1400 audit(1785810715.057:403): avc: denied { write } for pid=8096 comm="syz.3.1643" name="c.1" dev="configfs" ino=7975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.843499][ T8095] cache 0 [ 192.847386][ T8097] udc usbip-vudc.0: failed to start g1: -19 [ 192.853333][ T8095] rss 0 [ 192.853345][ T8095] shmem 0 [ 192.853354][ T8095] mapped_file 0 [ 192.853363][ T8095] dirty 0 [ 192.853371][ T8095] writeback 0 [ 192.857204][ T8097] UDC core: g1: couldn't find an available UDC or it's busy [ 192.862619][ T8095] workingset_refault_anon 0 [ 192.862630][ T8095] workingset_refault_file 0 [ 192.862696][ T8095] swap 0 [ 192.869683][ T28] audit: type=1400 audit(1785810715.057:404): avc: denied { write } for pid=8096 comm="syz.3.1643" name="c.1" dev="configfs" ino=7975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.890288][ T8095] swapcached 0 [ 192.924529][ T8095] pgpgin 0 [ 192.928096][ T8095] pgpgout 0 [ 192.931431][ T8095] pgfault 0 [ 192.935136][ T8095] pgmajfault 0 [ 192.938622][ T8095] inactive_anon 0 [ 192.942563][ T8095] active_anon 0 [ 192.946154][ T8095] inactive_file 0 [ 192.949861][ T8095] active_file 0 [ 192.956750][ T8095] unevictable 0 [ 192.969778][ T8095] hierarchical_memory_limit 0 [ 192.976795][ T8095] hierarchical_memsw_limit 9223372036854771712 [ 192.983205][ T8095] total_cache 0 [ 192.986841][ T8095] total_rss 0 [ 192.990190][ T8095] total_shmem 0 [ 192.993808][ T8095] total_mapped_file 0 [ 192.997978][ T8095] total_dirty 0 [ 193.001497][ T8095] total_writeback 0 [ 193.005440][ T8095] total_workingset_refault_anon 0 [ 193.011878][ T8095] total_workingset_refault_file 0 [ 193.025019][ T8108] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.044116][ T8095] total_swap 0 [ 193.058195][ T8095] total_swapcached 0 [ 193.067922][ T8095] total_pgpgin 0 [ 193.081677][ T8095] total_pgpgout 0 [ 193.130654][ T8095] total_pgfault 0 [ 193.142469][ T8095] total_pgmajfault 0 [ 193.145998][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.152986][ T8095] total_inactive_anon 0 [ 193.182526][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.194803][ T8095] total_active_anon 0 [ 193.203357][ T8095] total_inactive_file 0 [ 193.211962][ T8095] total_active_file 0 [ 193.224677][ T8095] total_unevictable 0 [ 193.235187][ T8095] Out of memory and no killable processes... [ 193.297631][ T2981] ================================================================== [ 193.305792][ T2981] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 193.313756][ T2981] [ 193.316105][ T2981] write to 0xffff8881076ac180 of 4 bytes by task 3288 on cpu 0: [ 193.323759][ T2981] d_make_discardable+0x4f/0x90 [ 193.328649][ T2981] simple_unlink+0x68/0x80 [ 193.333086][ T2981] shmem_unlink+0x12d/0x140 [ 193.337620][ T2981] vfs_unlink+0x1c3/0x490 [ 193.341983][ T2981] filename_unlinkat+0x1dc/0x410 [ 193.346949][ T2981] __se_sys_unlink+0x2b/0xe0 [ 193.351560][ T2981] __x64_sys_unlink+0x1f/0x30 [ 193.356264][ T2981] x64_sys_call+0x2eb6/0x3020 [ 193.360974][ T2981] do_syscall_64+0x136/0x3c0 [ 193.365594][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.371543][ T2981] [ 193.373902][ T2981] read to 0xffff8881076ac180 of 4 bytes by task 2981 on cpu 1: [ 193.381458][ T2981] step_into_slowpath+0x139/0x4c0 [ 193.386532][ T2981] path_lookupat+0x2eb/0x4c0 [ 193.391168][ T2981] filename_lookup+0x18f/0x390 [ 193.395960][ T2981] do_readlinkat+0x74/0x2f0 [ 193.400521][ T2981] __x64_sys_readlink+0x47/0x60 [ 193.405401][ T2981] x64_sys_call+0x2b51/0x3020 [ 193.410121][ T2981] do_syscall_64+0x136/0x3c0 [ 193.414738][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.420669][ T2981] [ 193.423010][ T2981] value changed: 0x08300080 -> 0x00004080 [ 193.428745][ T2981] [ 193.431086][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 193.437254][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 193.446129][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.456211][ T2981] ================================================================== [ 193.517353][ T8127] Cannot find del_set index 2 as target