last executing test programs: 9.077768313s ago: executing program 2 (id=563): openat$vcsu(0xffffffffffffff9c, 0x0, 0x50000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 8.056756631s ago: executing program 2 (id=572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b24040402090401"], 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4000000) close(r5) close(r4) 5.342937831s ago: executing program 4 (id=593): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 5.009102923s ago: executing program 2 (id=596): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r2, 0x0, 0x8004) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0xba8}], 0x1, 0x112, 0x0) 4.803950245s ago: executing program 4 (id=597): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00'], 0x70}}], 0x1, 0x2000c044) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x714f, 0x0) 4.231604449s ago: executing program 0 (id=599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x20004ffd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b03", 0x3b, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) 4.10998211s ago: executing program 2 (id=601): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r1, 0x2007ffb) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) timer_settime(0x0, 0x1, 0x0, 0x0) 4.07692608s ago: executing program 1 (id=603): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844) 3.893434171s ago: executing program 4 (id=604): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x2, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@private=0xa010102, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x40000000000000, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2, 0x1}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004041) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r7, 0x0, 0x0) 3.330585975s ago: executing program 3 (id=605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900)=r0, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) r6 = io_uring_setup(0xd87, &(0x7f0000000380)={0x0, 0xeed0, 0x40, 0x3, 0x29d}) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x40000) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.329695806s ago: executing program 0 (id=615): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x20004ffd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b03", 0x3b, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) 3.229500867s ago: executing program 2 (id=606): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1fe) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file1'}, 0xb) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x27, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) 3.178126037s ago: executing program 1 (id=607): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 2.950758758s ago: executing program 4 (id=608): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x801, 0xfffffffc, 0xfffffffc, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @multicast2}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.66394909s ago: executing program 1 (id=609): timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) 2.65632879s ago: executing program 2 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000949000/0x1000)=nil, 0x1000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 2.511003682s ago: executing program 1 (id=611): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 2.417480132s ago: executing program 0 (id=612): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345}) sendfile(r1, r0, 0x0, 0x7ffff000) 2.415359702s ago: executing program 3 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x7005, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 2.343834303s ago: executing program 3 (id=614): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x714f, 0x0) 2.057678605s ago: executing program 3 (id=616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 1.994009845s ago: executing program 4 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x24020400) fchown(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) 1.43469415s ago: executing program 3 (id=618): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r1, 0x2007ffb) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) timer_settime(0x0, 0x1, 0x0, 0x0) 1.40425954s ago: executing program 0 (id=619): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800420, &(0x7f0000000b40)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffffffffffffffff}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@norecovery}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x8a}}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400000000000000", @ANYBLOB="915875388ad80a16110012800b0001"], 0x54}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000002c0), 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfbffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r6, 0x5608, 0x2) 981.480903ms ago: executing program 4 (id=620): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket$inet6(0xa, 0x80002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) 645.859305ms ago: executing program 1 (id=621): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) 501.234786ms ago: executing program 0 (id=622): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1fe) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file1'}, 0xb) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x27, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) 480.535907ms ago: executing program 3 (id=623): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 266.271578ms ago: executing program 1 (id=624): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x20004ffd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b03", 0x3b, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) 0s ago: executing program 0 (id=625): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 33.752217][ T30] audit: type=1400 audit(1741732238.370:81): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.753238][ T3291] cgroup: Unknown subsys name 'net' [ 33.774993][ T30] audit: type=1400 audit(1741732238.370:82): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.802376][ T30] audit: type=1400 audit(1741732238.400:83): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.822428][ T30] audit: type=1400 audit(1741732238.400:84): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.998826][ T3291] cgroup: Unknown subsys name 'cpuset' [ 34.005458][ T3291] cgroup: Unknown subsys name 'rlimit' [ 34.135854][ T30] audit: type=1400 audit(1741732238.750:85): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.159232][ T30] audit: type=1400 audit(1741732238.750:86): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.180441][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.180908][ T30] audit: type=1400 audit(1741732238.750:87): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.210859][ T30] audit: type=1400 audit(1741732238.750:88): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.231221][ T30] audit: type=1400 audit(1741732238.770:89): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.237164][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.256020][ T30] audit: type=1400 audit(1741732238.770:90): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.138597][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 36.150756][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 36.205226][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 36.215379][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 36.285690][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.292881][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.300065][ T3300] bridge_slave_0: entered allmulticast mode [ 36.306593][ T3300] bridge_slave_0: entered promiscuous mode [ 36.315538][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.322640][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.329970][ T3300] bridge_slave_1: entered allmulticast mode [ 36.336410][ T3300] bridge_slave_1: entered promiscuous mode [ 36.350041][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.357101][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.364289][ T3306] bridge_slave_0: entered allmulticast mode [ 36.370757][ T3306] bridge_slave_0: entered promiscuous mode [ 36.380100][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 36.397709][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.404816][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.412049][ T3306] bridge_slave_1: entered allmulticast mode [ 36.418469][ T3306] bridge_slave_1: entered promiscuous mode [ 36.455555][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.465814][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.499627][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.506750][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.513942][ T3304] bridge_slave_0: entered allmulticast mode [ 36.520345][ T3304] bridge_slave_0: entered promiscuous mode [ 36.528337][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.537472][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.544562][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.551782][ T3304] bridge_slave_1: entered allmulticast mode [ 36.558252][ T3304] bridge_slave_1: entered promiscuous mode [ 36.564492][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.571572][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.578713][ T3302] bridge_slave_0: entered allmulticast mode [ 36.585183][ T3302] bridge_slave_0: entered promiscuous mode [ 36.593628][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.600726][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.607912][ T3302] bridge_slave_1: entered allmulticast mode [ 36.614380][ T3302] bridge_slave_1: entered promiscuous mode [ 36.621139][ T3300] team0: Port device team_slave_0 added [ 36.632363][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.653113][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.662808][ T3300] team0: Port device team_slave_1 added [ 36.688432][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.702157][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.709207][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.735225][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.747087][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.775439][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.782420][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.808347][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.822380][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.832184][ T3306] team0: Port device team_slave_0 added [ 36.837915][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.845024][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.852239][ T3307] bridge_slave_0: entered allmulticast mode [ 36.858724][ T3307] bridge_slave_0: entered promiscuous mode [ 36.865768][ T3304] team0: Port device team_slave_0 added [ 36.877898][ T3306] team0: Port device team_slave_1 added [ 36.888075][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.895269][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.902643][ T3307] bridge_slave_1: entered allmulticast mode [ 36.909364][ T3307] bridge_slave_1: entered promiscuous mode [ 36.916158][ T3304] team0: Port device team_slave_1 added [ 36.955219][ T3302] team0: Port device team_slave_0 added [ 36.961823][ T3302] team0: Port device team_slave_1 added [ 36.968185][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.975177][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.001208][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.016961][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.024053][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.049984][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.062568][ T3300] hsr_slave_0: entered promiscuous mode [ 37.068866][ T3300] hsr_slave_1: entered promiscuous mode [ 37.080280][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.087235][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.113260][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.125006][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.136618][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.143650][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.170015][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.195001][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.222439][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.229486][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.255602][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.288169][ T3306] hsr_slave_0: entered promiscuous mode [ 37.294247][ T3306] hsr_slave_1: entered promiscuous mode [ 37.300090][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.307643][ T3306] Cannot create hsr debugfs directory [ 37.313767][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.320931][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.346989][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.358651][ T3307] team0: Port device team_slave_0 added [ 37.373487][ T3304] hsr_slave_0: entered promiscuous mode [ 37.379679][ T3304] hsr_slave_1: entered promiscuous mode [ 37.385442][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.393083][ T3304] Cannot create hsr debugfs directory [ 37.407114][ T3307] team0: Port device team_slave_1 added [ 37.435155][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.442157][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.468164][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.500606][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.507574][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.533611][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.551486][ T3302] hsr_slave_0: entered promiscuous mode [ 37.557498][ T3302] hsr_slave_1: entered promiscuous mode [ 37.563461][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.571107][ T3302] Cannot create hsr debugfs directory [ 37.631210][ T3307] hsr_slave_0: entered promiscuous mode [ 37.637239][ T3307] hsr_slave_1: entered promiscuous mode [ 37.643288][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.650864][ T3307] Cannot create hsr debugfs directory [ 37.743239][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.756236][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.771178][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.787488][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.811269][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.820543][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.834619][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.849855][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.874102][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.889293][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.904384][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.915226][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.923797][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.932836][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.943252][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.958822][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.992444][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.001306][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.013864][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.029531][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.054287][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.085066][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.097733][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.119250][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.126302][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.135170][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.142253][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.158643][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.179822][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.186908][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.207327][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.214404][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.245055][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.261747][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.292647][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.304933][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.315371][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.335635][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.342848][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.352308][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.359512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.372705][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.379859][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.389794][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.396841][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.407919][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.431257][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.438342][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.448214][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.455265][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.474188][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.499161][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.509770][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.520248][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.549696][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.657986][ T3300] veth0_vlan: entered promiscuous mode [ 38.666848][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.686244][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.697519][ T3306] veth0_vlan: entered promiscuous mode [ 38.707806][ T3300] veth1_vlan: entered promiscuous mode [ 38.720487][ T3306] veth1_vlan: entered promiscuous mode [ 38.736781][ T3300] veth0_macvtap: entered promiscuous mode [ 38.744500][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.758488][ T3300] veth1_macvtap: entered promiscuous mode [ 38.781627][ T3306] veth0_macvtap: entered promiscuous mode [ 38.790622][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.811464][ T3306] veth1_macvtap: entered promiscuous mode [ 38.819448][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.847673][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.856478][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.865299][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.874060][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.895872][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.906497][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.923755][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.932116][ T3304] veth0_vlan: entered promiscuous mode [ 38.947943][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.949614][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 38.949632][ T30] audit: type=1400 audit(1741732243.560:107): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.27r4N5/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.958589][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.964650][ T30] audit: type=1400 audit(1741732243.560:108): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.992958][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.998698][ T30] audit: type=1400 audit(1741732243.560:109): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.27r4N5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.998733][ T30] audit: type=1400 audit(1741732243.560:110): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.998763][ T30] audit: type=1400 audit(1741732243.560:111): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.27r4N5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.998800][ T30] audit: type=1400 audit(1741732243.560:112): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.27r4N5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.026266][ T3307] veth0_vlan: entered promiscuous mode [ 39.038216][ T30] audit: type=1400 audit(1741732243.650:113): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.057340][ T3304] veth1_vlan: entered promiscuous mode [ 39.087453][ T30] audit: type=1400 audit(1741732243.700:114): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.124726][ T3304] veth0_macvtap: entered promiscuous mode [ 39.129226][ T30] audit: type=1400 audit(1741732243.700:115): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=4240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.136804][ T3304] veth1_macvtap: entered promiscuous mode [ 39.222016][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.230885][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.239705][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.248482][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.250402][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.275145][ T3307] veth1_vlan: entered promiscuous mode [ 39.283898][ T3302] veth0_vlan: entered promiscuous mode [ 39.303512][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.314144][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.324043][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.334514][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.344643][ T30] audit: type=1400 audit(1741732243.900:116): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.371072][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.379160][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.389644][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.399627][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.410144][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.420890][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.434456][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.443211][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.452024][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.460782][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.480112][ T3440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.480558][ T3302] veth1_vlan: entered promiscuous mode [ 39.514427][ T3307] veth0_macvtap: entered promiscuous mode [ 39.529222][ T3307] veth1_macvtap: entered promiscuous mode [ 39.543096][ T3302] veth0_macvtap: entered promiscuous mode [ 39.557377][ T3302] veth1_macvtap: entered promiscuous mode [ 39.569715][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.580300][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.590247][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.600782][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.610710][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.621242][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.632926][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.641554][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.652043][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.661951][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.672448][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.682293][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.692758][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.703373][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.717565][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.728250][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.738181][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.748655][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.758540][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.769060][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.778947][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.789427][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.807008][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.815981][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.824925][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.833732][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.842623][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.868951][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.879527][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.889399][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.899872][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.909693][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.920139][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.929970][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.940399][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.952912][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.966036][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.974895][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.983626][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.992350][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.625466][ T3489] loop1: detected capacity change from 0 to 512 [ 40.632380][ T3489] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.659493][ T3488] process 'syz.3.15' launched './file1' with NULL argv: empty string added [ 40.684121][ T3489] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 40.702121][ T3489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 40.710161][ T3489] System zones: 1-12 [ 40.822516][ T3489] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.19: corrupted in-inode xattr: e_value size too large [ 40.889208][ T3489] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.19: couldn't read orphan inode 15 (err -117) [ 40.918475][ T3489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.022861][ T3498] loop2: detected capacity change from 0 to 128 [ 41.293644][ T3498] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.309411][ T3498] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.624447][ T3512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.654297][ T3512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.378427][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.922073][ T3527] loop3: detected capacity change from 0 to 512 [ 43.929020][ T3527] ======================================================= [ 43.929020][ T3527] WARNING: The mand mount option has been deprecated and [ 43.929020][ T3527] and is ignored by this kernel. Remove the mand [ 43.929020][ T3527] option from the mount to silence this warning. [ 43.929020][ T3527] ======================================================= [ 44.176233][ T3526] loop1: detected capacity change from 0 to 512 [ 44.398329][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 44.398346][ T30] audit: type=1326 audit(1741732248.240:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f3612a7d169 code=0x7ffc0000 [ 44.427733][ T30] audit: type=1326 audit(1741732248.240:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3612a7d169 code=0x7ffc0000 [ 44.451915][ T30] audit: type=1326 audit(1741732248.240:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3612a7d169 code=0x7ffc0000 [ 44.475132][ T30] audit: type=1326 audit(1741732248.340:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3612a7d169 code=0x7ffc0000 [ 44.498404][ T30] audit: type=1326 audit(1741732248.340:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3612a7d169 code=0x7ffc0000 [ 44.522096][ T30] audit: type=1326 audit(1741732248.340:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3612a7d169 code=0x7ffc0000 [ 44.545269][ T30] audit: type=1326 audit(1741732248.540:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3612a7d169 code=0x7ffc0000 [ 44.568429][ T30] audit: type=1326 audit(1741732248.540:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3612a7d1a3 code=0x7ffc0000 [ 44.591485][ T30] audit: type=1326 audit(1741732248.540:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3612a7bc1f code=0x7ffc0000 [ 44.615053][ T30] audit: type=1326 audit(1741732248.540:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3520 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3612a7d1f7 code=0x7ffc0000 [ 44.855018][ T3526] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 44.913839][ T3527] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 45.642968][ T3527] loop3: detected capacity change from 0 to 1024 [ 45.650099][ T3527] EXT4-fs: Ignoring removed oldalloc option [ 45.658456][ T3527] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 45.681921][ T3527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.456716][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.640508][ T3547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.649141][ T3547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.711149][ T3549] loop3: detected capacity change from 0 to 128 [ 46.717708][ T3549] EXT4-fs: test_dummy_encryption option not supported [ 47.474070][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.803712][ T3570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.813407][ T3570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.824173][ T3570] syz.0.41 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.684948][ T3597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.695861][ T3597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.756732][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 49.756747][ T30] audit: type=1400 audit(1741732254.370:271): avc: denied { create } for pid=3616 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.798876][ T30] audit: type=1400 audit(1741732254.370:272): avc: denied { bind } for pid=3616 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.817890][ T30] audit: type=1400 audit(1741732254.370:273): avc: denied { setopt } for pid=3616 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.898854][ T30] audit: type=1400 audit(1741732254.520:274): avc: denied { read } for pid=3625 comm="syz.2.62" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.921816][ T30] audit: type=1400 audit(1741732254.520:275): avc: denied { open } for pid=3625 comm="syz.2.62" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.980373][ T30] audit: type=1400 audit(1741732254.560:276): avc: denied { create } for pid=3625 comm="syz.2.62" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.002170][ T30] audit: type=1400 audit(1741732254.560:277): avc: denied { map } for pid=3625 comm="syz.2.62" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.026039][ T30] audit: type=1400 audit(1741732254.560:278): avc: denied { read write } for pid=3625 comm="syz.2.62" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.605746][ T30] audit: type=1400 audit(1741732255.220:279): avc: denied { read } for pid=3633 comm="syz.0.64" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.628552][ T30] audit: type=1400 audit(1741732255.220:280): avc: denied { open } for pid=3633 comm="syz.0.64" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.893804][ T3648] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.910966][ T3650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 51.136920][ T3654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.145510][ T3654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.823293][ T3657] loop2: detected capacity change from 0 to 128 [ 51.829932][ T3657] EXT4-fs: test_dummy_encryption option not supported [ 51.852562][ T3640] syz.1.66 (3640) used greatest stack depth: 10920 bytes left [ 52.155402][ T3664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.175224][ T3664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.269653][ T3666] loop1: detected capacity change from 0 to 1024 [ 52.283516][ T3666] EXT4-fs: Ignoring removed orlov option [ 52.311354][ T3666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.153065][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.186505][ T3681] loop1: detected capacity change from 0 to 1024 [ 53.197899][ T3681] netlink: 52 bytes leftover after parsing attributes in process `syz.1.78'. [ 54.204667][ T3695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.266866][ T3695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.976006][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 55.034865][ T3709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 55.397470][ T3719] loop3: detected capacity change from 0 to 1024 [ 55.438354][ T3719] netlink: 52 bytes leftover after parsing attributes in process `syz.3.92'. [ 55.705569][ T3724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.714118][ T3724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.377879][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 56.377896][ T30] audit: type=1400 audit(1741732260.990:308): avc: denied { create } for pid=3737 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.457683][ T30] audit: type=1400 audit(1741732261.040:309): avc: denied { write } for pid=3737 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.514181][ T3742] loop3: detected capacity change from 0 to 1024 [ 56.538234][ T3742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.100'. [ 56.555319][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 57.178693][ T30] audit: type=1400 audit(1741732261.800:310): avc: denied { create } for pid=3757 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.260344][ T3760] loop2: detected capacity change from 0 to 512 [ 57.269943][ T3760] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 57.330438][ T30] audit: type=1400 audit(1741732261.910:311): avc: denied { bind } for pid=3757 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.349800][ T30] audit: type=1400 audit(1741732261.910:312): avc: denied { name_bind } for pid=3757 comm="syz.4.107" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 57.370608][ T30] audit: type=1400 audit(1741732261.910:313): avc: denied { node_bind } for pid=3757 comm="syz.4.107" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 57.391337][ T30] audit: type=1400 audit(1741732261.930:314): avc: denied { listen } for pid=3757 comm="syz.4.107" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.411938][ T30] audit: type=1400 audit(1741732261.930:315): avc: denied { connect } for pid=3757 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.431368][ T30] audit: type=1400 audit(1741732261.930:316): avc: denied { name_connect } for pid=3757 comm="syz.4.107" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 57.452462][ T30] audit: type=1400 audit(1741732261.940:317): avc: denied { accept } for pid=3757 comm="syz.4.107" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 59.254362][ T3788] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.446578][ T3802] syz.2.118 uses obsolete (PF_INET,SOCK_PACKET) [ 59.716161][ T3814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.724734][ T3814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.756772][ T3819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.765783][ T3819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.785881][ T3820] loop2: detected capacity change from 0 to 128 [ 59.792472][ T3820] EXT4-fs: test_dummy_encryption option not supported [ 59.930055][ T3832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.938715][ T3832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.970191][ T3830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.978727][ T3830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.465227][ T3839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.474479][ T3839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.791897][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 60.821717][ T3850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 60.947435][ T3849] syz.3.136 (3849) used greatest stack depth: 10872 bytes left [ 61.272574][ T3862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.296364][ T3862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.370475][ T3863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.392158][ T3863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.559362][ T3883] syz.3.148 (3883) used greatest stack depth: 10072 bytes left [ 62.619706][ T3886] loop3: detected capacity change from 0 to 1024 [ 62.626431][ T3886] EXT4-fs: Ignoring removed orlov option [ 62.644251][ T3886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.799557][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 62.812103][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 62.835736][ T3902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.855930][ T3902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.955318][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 62.955333][ T30] audit: type=1400 audit(1741732267.510:325): avc: denied { ioctl } for pid=3901 comm="syz.2.155" path="socket:[4947]" dev="sockfs" ino=4947 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.387411][ T3923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.439740][ T3923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.522218][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.552397][ T30] audit: type=1400 audit(1741732268.170:326): avc: denied { ioctl } for pid=3929 comm="syz.3.163" path="socket:[4975]" dev="sockfs" ino=4975 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.588462][ T30] audit: type=1400 audit(1741732268.200:327): avc: denied { setopt } for pid=3933 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.656024][ T3940] loop3: detected capacity change from 0 to 1024 [ 63.661540][ T3941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'. [ 63.699862][ T3941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 63.741196][ T3940] netlink: 52 bytes leftover after parsing attributes in process `syz.3.167'. [ 63.861111][ T3938] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.871863][ T30] audit: type=1400 audit(1741732268.480:328): avc: denied { load_policy } for pid=3901 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 64.087487][ T3938] SELinux: failed to load policy [ 64.356999][ T3947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.434296][ T3947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.548084][ T30] audit: type=1400 audit(1741732269.150:329): avc: denied { name_bind } for pid=3948 comm="syz.3.169" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 64.857687][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 64.869194][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 64.932936][ T3963] loop1: detected capacity change from 0 to 1024 [ 64.978113][ T3963] netlink: 52 bytes leftover after parsing attributes in process `syz.1.174'. [ 65.422407][ T3971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.485612][ T3971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.877314][ T3977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.898837][ T3977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.663809][ T3997] loop4: detected capacity change from 0 to 1024 [ 66.676170][ T3997] EXT4-fs: Ignoring removed orlov option [ 66.685251][ T3999] loop1: detected capacity change from 0 to 1024 [ 66.700941][ T3999] netlink: 52 bytes leftover after parsing attributes in process `syz.1.189'. [ 66.706107][ T3997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.737595][ T30] audit: type=1400 audit(1741732272.350:330): avc: denied { ioctl } for pid=4015 comm="syz.3.193" path="socket:[5838]" dev="sockfs" ino=5838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.738838][ T4014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.770836][ T4016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 67.784530][ T4014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.803185][ T4018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.812521][ T4018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.844876][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.980427][ T4028] loop3: detected capacity change from 0 to 512 [ 67.995093][ T4028] EXT4-fs: inline encryption not supported [ 68.009813][ T4028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.018335][ T4028] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.031396][ T4028] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.040458][ T4028] EXT4-fs (loop3): blocks per group (39) and clusters per group (32768) inconsistent [ 68.160355][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 68.170073][ T4032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 70.483962][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 70.493656][ T4056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.207'. [ 71.007098][ T30] audit: type=1400 audit(1741732275.620:331): avc: denied { read } for pid=4059 comm="syz.1.209" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.224010][ T30] audit: type=1400 audit(1741732275.670:332): avc: denied { open } for pid=4059 comm="syz.1.209" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.761729][ T4066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.818188][ T4066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.953136][ T4070] loop2: detected capacity change from 0 to 1024 [ 71.991674][ T4070] netlink: 52 bytes leftover after parsing attributes in process `syz.2.213'. [ 72.849703][ T4082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4082 comm=syz.0.218 [ 72.949083][ T4090] loop3: detected capacity change from 0 to 128 [ 72.997813][ T30] audit: type=1400 audit(1741732277.610:333): avc: denied { mount } for pid=4089 comm="syz.3.220" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 73.037112][ T30] audit: type=1400 audit(1741732277.650:334): avc: denied { setopt } for pid=4091 comm="syz.2.222" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.092811][ T4102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.135201][ T4102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.159985][ T30] audit: type=1326 audit(1741732277.780:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.0.225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f249c58d169 code=0x0 [ 73.373172][ T4108] loop1: detected capacity change from 0 to 1024 [ 73.409088][ T4108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.228'. [ 73.657117][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 73.712332][ T4114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 74.065020][ T30] audit: type=1400 audit(1741732278.680:336): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 74.097021][ T4123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4123 comm=syz.3.232 [ 74.244167][ T30] audit: type=1400 audit(1741732278.850:337): avc: denied { setopt } for pid=4129 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.264348][ T30] audit: type=1400 audit(1741732278.850:338): avc: denied { execute } for pid=4129 comm="syz.3.234" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 74.345757][ T4135] tipc: Enabling of bearer rejected, media not registered [ 74.660613][ T4147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.679297][ T4147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.692722][ T4147] random: crng reseeded on system resumption [ 74.699194][ T30] audit: type=1400 audit(1741732279.310:339): avc: denied { write } for pid=4146 comm="syz.1.242" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.722169][ T30] audit: type=1400 audit(1741732279.310:340): avc: denied { open } for pid=4146 comm="syz.1.242" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.029794][ T4152] loop4: detected capacity change from 0 to 128 [ 75.811217][ T4175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.821835][ T4175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.972713][ T4183] loop2: detected capacity change from 0 to 1024 [ 76.019662][ T4183] netlink: 52 bytes leftover after parsing attributes in process `syz.2.256'. [ 76.209165][ T4192] Zero length message leads to an empty skb [ 76.220903][ T30] audit: type=1400 audit(1741732280.820:341): avc: denied { create } for pid=4190 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.240337][ T30] audit: type=1400 audit(1741732280.820:342): avc: denied { setopt } for pid=4190 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.769605][ T30] audit: type=1400 audit(1741732281.390:343): avc: denied { search } for pid=3040 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.835511][ T30] audit: type=1400 audit(1741732281.390:344): avc: denied { read } for pid=3040 comm="dhcpcd" name="n25" dev="tmpfs" ino=1543 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.857202][ T30] audit: type=1400 audit(1741732281.390:345): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1543 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.880191][ T30] audit: type=1400 audit(1741732281.390:346): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1543 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.955490][ T30] audit: type=1400 audit(1741732281.570:347): avc: denied { read } for pid=4207 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.988328][ T30] audit: type=1400 audit(1741732281.600:348): avc: denied { open } for pid=4207 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.013480][ T30] audit: type=1400 audit(1741732281.600:349): avc: denied { getattr } for pid=4207 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.065034][ T4214] loop3: detected capacity change from 0 to 128 [ 77.105645][ T30] audit: type=1400 audit(1741732281.720:350): avc: denied { write } for pid=4206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.317349][ T4244] netlink: 83 bytes leftover after parsing attributes in process `syz.0.272'. [ 77.660394][ T4271] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 77.671907][ T4271] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.431134][ T4287] netlink: 83 bytes leftover after parsing attributes in process `syz.0.286'. [ 78.798710][ T4297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.807302][ T4297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.433528][ T4320] loop3: detected capacity change from 0 to 1024 [ 80.551263][ T4320] netlink: 52 bytes leftover after parsing attributes in process `syz.3.295'. [ 80.871058][ T4332] netlink: 83 bytes leftover after parsing attributes in process `syz.1.299'. [ 80.888155][ T4334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.922255][ T4334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.373503][ T4348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.417880][ T4348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.803719][ T4376] loop4: detected capacity change from 0 to 1024 [ 81.840986][ T4376] netlink: 52 bytes leftover after parsing attributes in process `syz.4.312'. [ 82.552779][ T4390] loop2: detected capacity change from 0 to 1024 [ 82.603232][ T4390] netlink: 52 bytes leftover after parsing attributes in process `syz.2.317'. [ 83.401188][ T4403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.409733][ T4403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.466310][ T4407] loop2: detected capacity change from 0 to 1024 [ 83.542417][ T4407] netlink: 52 bytes leftover after parsing attributes in process `syz.2.323'. [ 84.054840][ T4426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 84.109303][ T4428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 85.074908][ T4440] loop1: detected capacity change from 0 to 512 [ 85.114750][ T4440] EXT4-fs: inline encryption not supported [ 85.181089][ T4440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.189629][ T4440] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.198709][ T4440] EXT4-fs (loop1): blocks per group (39) and clusters per group (32768) inconsistent [ 85.339107][ T4444] loop3: detected capacity change from 0 to 512 [ 85.346746][ T4444] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 86.479364][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 86.479382][ T30] audit: type=1400 audit(1741732291.100:363): avc: denied { name_bind } for pid=4451 comm="syz.0.338" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.606377][ T30] audit: type=1400 audit(1741732291.220:364): avc: denied { write } for pid=4454 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 86.699945][ T30] audit: type=1400 audit(1741732291.220:365): avc: denied { nlmsg_read } for pid=4454 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 86.839521][ T4462] netlink: 83 bytes leftover after parsing attributes in process `syz.0.342'. [ 87.125269][ T4474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.133756][ T4474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.195586][ T4477] loop3: detected capacity change from 0 to 128 [ 87.202149][ T4477] EXT4-fs: test_dummy_encryption option not supported [ 88.047062][ T4498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.356'. [ 88.266356][ T4505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.552853][ T4517] loop1: detected capacity change from 0 to 1024 [ 88.560679][ T4517] EXT4-fs: Ignoring removed orlov option [ 88.571542][ T4517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.017768][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 90.046399][ T4534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 90.212882][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.428957][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 90.438449][ T4550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.368'. [ 91.533823][ T4563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.377'. [ 91.609363][ T4561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.061742][ T4571] loop3: detected capacity change from 0 to 1024 [ 92.076746][ T4571] EXT4-fs: Ignoring removed orlov option [ 92.250328][ T4573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.258945][ T4573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.276523][ T4571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.676536][ T4591] loop1: detected capacity change from 0 to 512 [ 92.809698][ T4591] EXT4-fs: inline encryption not supported [ 92.962969][ T4591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.971560][ T4591] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.980662][ T4591] EXT4-fs (loop1): blocks per group (39) and clusters per group (32768) inconsistent [ 92.995772][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.012973][ T4595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.388'. [ 93.377315][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 93.413751][ T4605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.392'. [ 93.805154][ T4608] loop3: detected capacity change from 0 to 1024 [ 94.049777][ T4608] netlink: 52 bytes leftover after parsing attributes in process `syz.3.393'. [ 95.199039][ T4634] loop3: detected capacity change from 0 to 128 [ 95.204105][ T4636] netlink: 52 bytes leftover after parsing attributes in process `syz.0.405'. [ 95.245640][ T4638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.257636][ T4638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.558266][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 95.568391][ T4655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.409'. [ 96.454334][ T4668] loop3: detected capacity change from 0 to 1024 [ 96.462240][ T4668] netlink: 52 bytes leftover after parsing attributes in process `syz.3.418'. [ 96.485344][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.493878][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.814024][ T4684] loop6: detected capacity change from 0 to 5367 [ 96.864702][ T4689] loop6: detected capacity change from 5367 to 7735 [ 96.885990][ T3292] Buffer I/O error on dev loop6, logical block 966, async page read [ 96.965614][ T4693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 97.016225][ T4695] loop4: detected capacity change from 0 to 1024 [ 97.091479][ T4695] netlink: 52 bytes leftover after parsing attributes in process `syz.4.429'. [ 97.461673][ T4711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.435'. [ 97.935567][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 97.945207][ T4724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 98.209395][ T4730] loop4: detected capacity change from 0 to 1024 [ 98.349982][ T4730] netlink: 52 bytes leftover after parsing attributes in process `syz.4.442'. [ 98.661577][ T30] audit: type=1400 audit(1741732303.280:366): avc: denied { read } for pid=4731 comm="syz.3.443" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.706953][ T30] audit: type=1400 audit(1741732303.310:367): avc: denied { open } for pid=4731 comm="syz.3.443" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 99.503112][ T30] audit: type=1400 audit(1741732304.120:368): avc: denied { create } for pid=4768 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 99.617139][ T4775] loop3: detected capacity change from 0 to 1024 [ 99.651661][ T30] audit: type=1400 audit(1741732304.260:369): avc: denied { remount } for pid=4774 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.033539][ T4795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.042006][ T4795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.279467][ T4801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.345832][ T30] audit: type=1400 audit(1741732305.960:370): avc: denied { mount } for pid=4806 comm="syz.0.471" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.273425][ T4814] tmpfs: Unknown parameter '/dev/snd/seq' [ 103.497045][ T4828] loop1: detected capacity change from 0 to 128 [ 103.503632][ T4828] EXT4-fs: Ignoring removed nobh option [ 103.514107][ T4828] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.532426][ T4828] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.532558][ T4830] __nla_validate_parse: 4 callbacks suppressed [ 103.532575][ T4830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.478'. [ 103.586780][ T30] audit: type=1400 audit(1741732308.170:371): avc: denied { ioctl } for pid=4827 comm="syz.1.477" path="/87/mnt/mnt" dev="loop1" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.062374][ T4851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.485967][ T30] audit: type=1400 audit(1741732309.100:372): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.852293][ T30] audit: type=1400 audit(1741732309.470:373): avc: denied { connect } for pid=4860 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.848794][ T4887] xt_connbytes: Forcing CT accounting to be enabled [ 105.855579][ T4887] --map-set only usable from mangle table [ 106.162440][ T4891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.456207][ T30] audit: type=1400 audit(1741732311.070:374): avc: denied { create } for pid=4896 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.654161][ T4901] tmpfs: Unknown parameter 'usrquota' [ 106.816821][ T4908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 106.825692][ T4908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.505'. [ 107.008785][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 107.017789][ T4911] netlink: 32 bytes leftover after parsing attributes in process `syz.4.505'. [ 107.179490][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.427461][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.436046][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.342984][ T4949] loop1: detected capacity change from 0 to 128 [ 108.358238][ T4949] EXT4-fs: Ignoring removed nobh option [ 108.492507][ T4949] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.504939][ T4949] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.771764][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 108.780885][ T4960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.521'. [ 108.800091][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 108.808985][ T4960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.521'. [ 109.400895][ T30] audit: type=1400 audit(1741732314.020:375): avc: denied { bind } for pid=4973 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.422671][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.434034][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.244303][ T30] audit: type=1400 audit(1741732314.860:376): avc: denied { getopt } for pid=4984 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 110.563029][ T4996] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 111.449373][ T5002] loop4: detected capacity change from 0 to 1024 [ 111.537081][ T30] audit: type=1400 audit(1741732316.150:377): avc: denied { create } for pid=5003 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.628313][ T30] audit: type=1400 audit(1741732316.230:378): avc: denied { setopt } for pid=5003 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.647667][ T30] audit: type=1400 audit(1741732316.230:379): avc: denied { create } for pid=5003 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 111.703760][ T30] audit: type=1400 audit(1741732316.290:380): avc: denied { connect } for pid=5003 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.790076][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.939538][ T30] audit: type=1326 audit(1741732316.560:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249c58d169 code=0x7ffc0000 [ 111.962830][ T30] audit: type=1326 audit(1741732316.560:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249c58d169 code=0x7ffc0000 [ 111.986668][ T5025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.006173][ T30] audit: type=1326 audit(1741732316.580:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f249c58d169 code=0x7ffc0000 [ 112.029542][ T30] audit: type=1326 audit(1741732316.580:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249c58d169 code=0x7ffc0000 [ 112.052821][ T30] audit: type=1326 audit(1741732316.580:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5026 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f249c58d169 code=0x7ffc0000 [ 112.212996][ T5033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.222201][ T5033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.987118][ T5111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.995687][ T5111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.069531][ T5116] loop1: detected capacity change from 0 to 1024 [ 115.089787][ T5116] EXT4-fs: Ignoring removed orlov option [ 115.111407][ T5116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.365394][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 115.365414][ T30] audit: type=1400 audit(1741732319.870:422): avc: denied { getopt } for pid=5117 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.997346][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.568239][ T5159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 117.016289][ T5165] loop3: detected capacity change from 0 to 1024 [ 117.090302][ T5165] netlink: 52 bytes leftover after parsing attributes in process `syz.3.589'. [ 117.117872][ T5167] loop1: detected capacity change from 0 to 1024 [ 117.129899][ T5167] EXT4-fs: Ignoring removed orlov option [ 117.200140][ T5167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.942920][ T5172] syz.1.590 (5172) used greatest stack depth: 9480 bytes left [ 118.018337][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.115009][ T5187] loop1: detected capacity change from 0 to 512 [ 118.135863][ T5187] EXT4-fs: inline encryption not supported [ 118.159534][ T5187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.168175][ T5187] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.177225][ T5187] EXT4-fs (loop1): blocks per group (39) and clusters per group (32768) inconsistent [ 119.940878][ T5225] netlink: 'syz.3.605': attribute type 10 has an invalid length. [ 119.952908][ T5225] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 120.669349][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 120.711896][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'. [ 121.670217][ T5259] netlink: 52 bytes leftover after parsing attributes in process `syz.0.619'. [ 122.244858][ T5265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.328196][ T5265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.574814][ T5271] loop3: detected capacity change from 0 to 1024 [ 122.598436][ T5271] EXT4-fs: Ignoring removed orlov option [ 122.618592][ T5271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.030742][ T5275] ================================================================== [ 123.038889][ T5275] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 123.046059][ T5275] [ 123.048390][ T5275] write to 0xffff88810656a224 of 4 bytes by task 5271 on cpu 1: [ 123.056465][ T5275] xas_set_mark+0x131/0x150 [ 123.060998][ T5275] __folio_start_writeback+0x1e8/0x430 [ 123.066480][ T5275] ext4_bio_write_folio+0x591/0x9d0 [ 123.071701][ T5275] mpage_process_page_bufs+0x486/0x5d0 [ 123.077176][ T5275] mpage_prepare_extent_to_map+0x788/0xb80 [ 123.083091][ T5275] ext4_do_writepages+0xa20/0x2130 [ 123.088229][ T5275] ext4_writepages+0x159/0x2e0 [ 123.093015][ T5275] do_writepages+0x1d8/0x480 [ 123.097678][ T5275] file_write_and_wait_range+0x168/0x2f0 [ 123.103346][ T5275] generic_buffers_fsync_noflush+0x46/0x120 [ 123.109273][ T5275] ext4_sync_file+0x1ff/0x6c0 [ 123.113984][ T5275] vfs_fsync_range+0x116/0x130 [ 123.118771][ T5275] ext4_buffered_write_iter+0x358/0x3c0 [ 123.124353][ T5275] ext4_file_write_iter+0x383/0xf20 [ 123.129593][ T5275] iter_file_splice_write+0x5f1/0x980 [ 123.135002][ T5275] direct_splice_actor+0x160/0x2c0 [ 123.140132][ T5275] splice_direct_to_actor+0x302/0x670 [ 123.145523][ T5275] do_splice_direct+0xd7/0x150 [ 123.150310][ T5275] do_sendfile+0x398/0x660 [ 123.154736][ T5275] __x64_sys_sendfile64+0x110/0x150 [ 123.159958][ T5275] x64_sys_call+0xfbd/0x2dc0 [ 123.164564][ T5275] do_syscall_64+0xc9/0x1c0 [ 123.169172][ T5275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.175084][ T5275] [ 123.177412][ T5275] read to 0xffff88810656a224 of 4 bytes by task 5275 on cpu 0: [ 123.184974][ T5275] xas_find_marked+0x608/0x650 [ 123.189778][ T5275] find_get_entry+0x54/0x390 [ 123.194383][ T5275] filemap_get_folios_tag+0x9e/0x210 [ 123.199715][ T5275] filemap_fdatawait_range+0x89/0x1f0 [ 123.205109][ T5275] __writeback_single_inode+0xe8/0x850 [ 123.210586][ T5275] writeback_single_inode+0x16c/0x3f0 [ 123.215966][ T5275] sync_inode_metadata+0x5c/0x90 [ 123.220909][ T5275] generic_buffers_fsync_noflush+0xd8/0x120 [ 123.226822][ T5275] ext4_sync_file+0x1ff/0x6c0 [ 123.231525][ T5275] vfs_fsync_range+0x116/0x130 [ 123.236306][ T5275] ext4_buffered_write_iter+0x358/0x3c0 [ 123.242133][ T5275] ext4_file_write_iter+0x383/0xf20 [ 123.247386][ T5275] iter_file_splice_write+0x5f1/0x980 [ 123.252772][ T5275] direct_splice_actor+0x160/0x2c0 [ 123.257901][ T5275] splice_direct_to_actor+0x302/0x670 [ 123.263285][ T5275] do_splice_direct+0xd7/0x150 [ 123.268066][ T5275] do_sendfile+0x398/0x660 [ 123.272579][ T5275] __x64_sys_sendfile64+0x110/0x150 [ 123.277801][ T5275] x64_sys_call+0xfbd/0x2dc0 [ 123.282408][ T5275] do_syscall_64+0xc9/0x1c0 [ 123.286930][ T5275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.292840][ T5275] [ 123.295165][ T5275] value changed: 0x0a000021 -> 0x04000021 [ 123.300890][ T5275] [ 123.303215][ T5275] Reported by Kernel Concurrency Sanitizer on: [ 123.309379][ T5275] CPU: 0 UID: 0 PID: 5275 Comm: syz.3.623 Not tainted 6.14.0-rc6-syzkaller-00007-g0b46b049d6ec #0 [ 123.319976][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.330047][ T5275] ================================================================== [ 123.462928][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.