last executing test programs: 1.012622546s ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 917.950046ms ago: executing program 2 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 612.270748ms ago: executing program 2 (id=7): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) fcntl$lock(r1, 0x7, &(0x7f00000006c0)) fcntl$lock(r0, 0x25, &(0x7f0000000180)) 597.754058ms ago: executing program 0 (id=1): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) kcmp(r2, r3, 0x0, r1, r1) 590.513288ms ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 473.991718ms ago: executing program 1 (id=8): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 473.806548ms ago: executing program 3 (id=4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_connect$hid(0x0, 0x51, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) 471.732978ms ago: executing program 0 (id=16): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001500)=""/136, 0x88}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) 199.43739ms ago: executing program 1 (id=9): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 171.9102ms ago: executing program 4 (id=5): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2202351f, 0x0, 0x0, 0x0, 0x0, 0x0) 18.67439ms ago: executing program 4 (id=10): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) 17.12431ms ago: executing program 2 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000009, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@delalloc}, {@nodioread_nolock}, {@init_itable}]}, 0x1, 0x52e, &(0x7f0000000640)="$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") 0s ago: executing program 1 (id=11): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000300)=""/246, 0xf6, 0x0) kernel console output (not intermixed with test programs): [ 19.580612][ T29] audit: type=1400 audit(1731449077.045:81): avc: denied { read } for pid=2997 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 23.017958][ T29] audit: type=1400 audit(1731449080.485:82): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.018997][ T3301] cgroup: Unknown subsys name 'net' [ 23.040797][ T29] audit: type=1400 audit(1731449080.485:83): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.068242][ T29] audit: type=1400 audit(1731449080.515:84): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.287956][ T3301] cgroup: Unknown subsys name 'cpuset' [ 23.294254][ T3301] cgroup: Unknown subsys name 'rlimit' [ 23.441442][ T29] audit: type=1400 audit(1731449080.905:85): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.464793][ T29] audit: type=1400 audit(1731449080.905:86): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.486013][ T29] audit: type=1400 audit(1731449080.905:87): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.506864][ T29] audit: type=1400 audit(1731449080.905:88): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.514673][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.527218][ T29] audit: type=1400 audit(1731449080.905:89): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.560820][ T29] audit: type=1400 audit(1731449080.905:90): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.585082][ T29] audit: type=1400 audit(1731449081.005:91): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.621555][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.228641][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 25.238203][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.314553][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 25.344650][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.351773][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.359078][ T3320] bridge_slave_0: entered allmulticast mode [ 25.365403][ T3320] bridge_slave_0: entered promiscuous mode [ 25.376075][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.383230][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.390625][ T3313] bridge_slave_0: entered allmulticast mode [ 25.396993][ T3313] bridge_slave_0: entered promiscuous mode [ 25.407862][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.414961][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.422425][ T3320] bridge_slave_1: entered allmulticast mode [ 25.429142][ T3320] bridge_slave_1: entered promiscuous mode [ 25.446920][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.454084][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.461410][ T3313] bridge_slave_1: entered allmulticast mode [ 25.468626][ T3313] bridge_slave_1: entered promiscuous mode [ 25.487833][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 25.506690][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.530878][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.541009][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.555503][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.565839][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.591076][ T3320] team0: Port device team_slave_0 added [ 25.603675][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.610814][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.618475][ T3317] bridge_slave_0: entered allmulticast mode [ 25.624868][ T3317] bridge_slave_0: entered promiscuous mode [ 25.631766][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.638953][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.646226][ T3317] bridge_slave_1: entered allmulticast mode [ 25.652870][ T3317] bridge_slave_1: entered promiscuous mode [ 25.663771][ T3320] team0: Port device team_slave_1 added [ 25.696704][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.703774][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.729706][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.740773][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.747729][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.773682][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.785011][ T3313] team0: Port device team_slave_0 added [ 25.795350][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.802590][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.809736][ T3316] bridge_slave_0: entered allmulticast mode [ 25.816149][ T3316] bridge_slave_0: entered promiscuous mode [ 25.829396][ T3313] team0: Port device team_slave_1 added [ 25.840868][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.851028][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.860297][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.867391][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.874496][ T3316] bridge_slave_1: entered allmulticast mode [ 25.880839][ T3316] bridge_slave_1: entered promiscuous mode [ 25.914557][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.921659][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.947603][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.967799][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.977026][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.984119][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.991462][ T3312] bridge_slave_0: entered allmulticast mode [ 25.997935][ T3312] bridge_slave_0: entered promiscuous mode [ 26.004366][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.011348][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.037374][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.050689][ T3317] team0: Port device team_slave_0 added [ 26.061526][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.072963][ T3320] hsr_slave_0: entered promiscuous mode [ 26.079044][ T3320] hsr_slave_1: entered promiscuous mode [ 26.085204][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.092335][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.099541][ T3312] bridge_slave_1: entered allmulticast mode [ 26.105768][ T3312] bridge_slave_1: entered promiscuous mode [ 26.116907][ T3317] team0: Port device team_slave_1 added [ 26.153711][ T3316] team0: Port device team_slave_0 added [ 26.160354][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.174709][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.181701][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.207633][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.220052][ T3313] hsr_slave_0: entered promiscuous mode [ 26.226093][ T3313] hsr_slave_1: entered promiscuous mode [ 26.231954][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.239510][ T3313] Cannot create hsr debugfs directory [ 26.245703][ T3316] team0: Port device team_slave_1 added [ 26.256576][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.272106][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.279137][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.305073][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.333246][ T3312] team0: Port device team_slave_0 added [ 26.344396][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.351376][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.377844][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.397744][ T3312] team0: Port device team_slave_1 added [ 26.407955][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.414920][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.440892][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.466167][ T3317] hsr_slave_0: entered promiscuous mode [ 26.472478][ T3317] hsr_slave_1: entered promiscuous mode [ 26.478459][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.486140][ T3317] Cannot create hsr debugfs directory [ 26.505651][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.512682][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.539310][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.564167][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.571180][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.597213][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.618014][ T3316] hsr_slave_0: entered promiscuous mode [ 26.624129][ T3316] hsr_slave_1: entered promiscuous mode [ 26.630141][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.637796][ T3316] Cannot create hsr debugfs directory [ 26.691231][ T3312] hsr_slave_0: entered promiscuous mode [ 26.697447][ T3312] hsr_slave_1: entered promiscuous mode [ 26.703331][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.711092][ T3312] Cannot create hsr debugfs directory [ 26.813062][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.824839][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.842519][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.852846][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.865303][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.873778][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.882638][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.893133][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.919009][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.927658][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.936244][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.946754][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.985365][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.999106][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.010169][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.019838][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.043426][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.058154][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.076255][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.086200][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.105377][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.122175][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.141921][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.153777][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.160874][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.177366][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.184442][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.209350][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.221623][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.239708][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.246928][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.255821][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.268544][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.275617][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.292504][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.303714][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.310945][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.319955][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.327052][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.345556][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.357046][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.375077][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.390794][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.397895][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.407971][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.415189][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.434919][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.445619][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.458827][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.465895][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.474609][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.481727][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.530653][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.549839][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.612039][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.656722][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.673773][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.704366][ T3320] veth0_vlan: entered promiscuous mode [ 27.713402][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.730356][ T3320] veth1_vlan: entered promiscuous mode [ 27.790705][ T3320] veth0_macvtap: entered promiscuous mode [ 27.818290][ T3320] veth1_macvtap: entered promiscuous mode [ 27.840539][ T3316] veth0_vlan: entered promiscuous mode [ 27.850186][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.874068][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.883048][ T3316] veth1_vlan: entered promiscuous mode [ 27.890545][ T3313] veth0_vlan: entered promiscuous mode [ 27.898177][ T3320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.907073][ T3320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.915848][ T3320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.924849][ T3320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.942988][ T3313] veth1_vlan: entered promiscuous mode [ 27.953072][ T3312] veth0_vlan: entered promiscuous mode [ 27.965776][ T3316] veth0_macvtap: entered promiscuous mode [ 27.980790][ T3316] veth1_macvtap: entered promiscuous mode [ 27.988585][ T3313] veth0_macvtap: entered promiscuous mode [ 27.997920][ T3312] veth1_vlan: entered promiscuous mode [ 28.018674][ T3313] veth1_macvtap: entered promiscuous mode [ 28.026616][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.037274][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.049284][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.061604][ T3312] veth0_macvtap: entered promiscuous mode [ 28.071365][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.071488][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 28.071499][ T29] audit: type=1400 audit(1731449085.535:110): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.ZhhoiP/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.081869][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.083060][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.122124][ T29] audit: type=1400 audit(1731449085.585:111): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.128288][ T3317] veth0_vlan: entered promiscuous mode [ 28.130140][ T29] audit: type=1400 audit(1731449085.585:112): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.ZhhoiP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.155203][ T3312] veth1_macvtap: entered promiscuous mode [ 28.157684][ T29] audit: type=1400 audit(1731449085.585:113): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.195929][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.210648][ T29] audit: type=1400 audit(1731449085.585:114): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.ZhhoiP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.221127][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.221144][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.247962][ T29] audit: type=1400 audit(1731449085.585:115): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.ZhhoiP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.257788][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.263446][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.268415][ T29] audit: type=1400 audit(1731449085.585:116): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.299022][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.347709][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.357585][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.368080][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.372250][ T29] audit: type=1400 audit(1731449085.835:117): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.377964][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.411410][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.423550][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.423659][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.458305][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.466768][ T29] audit: type=1400 audit(1731449085.925:118): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.467286][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.491328][ T29] audit: type=1400 audit(1731449085.925:119): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.500313][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.533938][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.546032][ T3317] veth1_vlan: entered promiscuous mode [ 28.558647][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.562295][ T3456] syz.2.6[3456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.570051][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.570614][ T3456] syz.2.6[3456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.581153][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.581171][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.583231][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.591843][ T3456] syz.2.6[3456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.604547][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.653310][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.663212][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.674401][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.684250][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.696608][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.708912][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.720771][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.730292][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.741345][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.750901][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.764948][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.773972][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.782791][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.791505][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.844460][ T3317] veth0_macvtap: entered promiscuous mode [ 28.866781][ T3317] veth1_macvtap: entered promiscuous mode [ 28.890781][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.901398][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.911511][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.922972][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.933019][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.943667][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.953880][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.964474][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.975414][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.993259][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.003868][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.005738][ T3471] syz.1.8[3471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.013853][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.036774][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.045658][ T3471] syz.1.8[3471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.046747][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.046778][ T3471] syz.1.8[3471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.068529][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.089533][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.100170][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.111179][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.114620][ T3470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.120358][ T3317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.135974][ T3317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.144878][ T3317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.153765][ T3317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.162243][ T3470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.188701][ T3471] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 29.200284][ T3471] team0: Device hsr_slave_0 failed to register rx_handler [ 29.245074][ T3471] syz.1.8 (3471) used greatest stack depth: 10560 bytes left [ 29.294613][ T3479] loop1: detected capacity change from 0 to 512 [ 29.315400][ T3479] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 29.329930][ T3479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 29.335691][ C0] hrtimer: interrupt took 36545 ns [ 29.346022][ T3479] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.9: corrupted in-inode xattr: e_value size too large [ 29.377044][ T3479] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.9: couldn't read orphan inode 15 (err -117) [ 29.394243][ T3479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.471936][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.482557][ T3487] loop2: detected capacity change from 0 to 512 [ 29.490043][ T3488] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10'. [ 29.518422][ T3487] EXT4-fs (loop2): orphan cleanup on readonly fs [ 29.525101][ T3487] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.21: Failed to acquire dquot type 1 [ 29.549298][ T3487] EXT4-fs (loop2): 1 truncate cleaned up [ 29.555748][ T3487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.577904][ T3487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.377373][ T0] ================================================================== [ 51.386616][ T0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_update_events [ 51.394955][ T0] [ 51.397264][ T0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: [ 51.404712][ T0] __tmigr_cpu_activate+0x55/0x200 [ 51.409914][ T0] tmigr_cpu_activate+0x8a/0xc0 [ 51.414846][ T0] timer_clear_idle+0x28/0x100 [ 51.420134][ T0] tick_nohz_restart_sched_tick+0x22/0x110 [ 51.427640][ T0] tick_nohz_idle_exit+0xfe/0x1d0 [ 51.433625][ T0] do_idle+0x1ee/0x230 [ 51.438343][ T0] cpu_startup_entry+0x25/0x30 [ 51.444322][ T0] start_secondary+0x96/0xa0 [ 51.450189][ T0] common_startup_64+0x12c/0x137 [ 51.456028][ T0] [ 51.458339][ T0] read to 0xffff888237d205dc of 1 bytes by task 0 on cpu 0: [ 51.466165][ T0] tmigr_update_events+0x41d/0x5d0 [ 51.471811][ T0] __tmigr_cpu_deactivate+0x2b1/0x410 [ 51.477200][ T0] tmigr_cpu_deactivate+0x66/0x180 [ 51.482480][ T0] __get_next_timer_interrupt+0x137/0x530 [ 51.489153][ T0] timer_base_try_to_set_idle+0x54/0x60 [ 51.495045][ T0] tick_nohz_idle_stop_tick+0x15b/0x650 [ 51.501769][ T0] do_idle+0x178/0x230 [ 51.505840][ T0] cpu_startup_entry+0x25/0x30 [ 51.510640][ T0] rest_init+0xef/0xf0 [ 51.514960][ T0] start_kernel+0x586/0x5e0 [ 51.519801][ T0] x86_64_start_reservations+0x2a/0x30 [ 51.525580][ T0] x86_64_start_kernel+0x9a/0xa0 [ 51.530714][ T0] common_startup_64+0x12c/0x137 [ 51.536043][ T0] [ 51.538358][ T0] value changed: 0x00 -> 0x01 [ 51.543234][ T0] [ 51.545821][ T0] Reported by Kernel Concurrency Sanitizer on: [ 51.552756][ T0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 51.565000][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.575660][ T0] ==================================================================